$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft File: tj39aGzgqQB25PX_QoaF9j-wjt0.mft (raw, json) Hash identifier: a1tq4rTBZ70GLD+ZYPY7OS/fYh9E7DS11Wuuvo2TRZE= Subject key identifier: ED:BD:33:83:68:B5:4A:76:61:1A:C3:66:9D:5D:EB:1E:C5:7B:2D:4C Authority key identifier: B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD Certificate issuer: /CN=A91B3B4C/serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD Certificate serial: 73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft Manifest number: 6C Signing time: Fri 25 Apr 2025 06:00:35 +0000 Manifest this update: Fri 25 Apr 2025 06:00:34 +0000 Manifest next update: Fri 02 May 2025 06:00:34 +0000 Files and hashes: 1: tj39aGzgqQB25PX_QoaF9j-wjt0.crl (hash: FYRF6iTqxFScEO/zjyoZ8LUtYPnE4CaFYZvrF6TTGYk=) 2: 5AF61D0CEDD811EF8D4FD882C4F9AE02.roa (hash: Z3slCZDCkUSw/0F4QpW19+Hh7dYabhcL9K/vcPHYUaA=) 3: 1FD9809A92A911EFBE53776BC4F9AE02.roa (hash: cDCnZ6S5cO6eBk1U2D1sq10sR7mDNYW0+AjbicEv2TY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3B4C, serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD Validity Not Before: Apr 25 06:00:34 2025 GMT Not After : May 2 06:00:34 2025 GMT Subject: CN=680b2503-ceaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5e:0b:84:57:76:18:f7:85:9e:06:00:ac:28: b2:34:a5:b1:d6:b8:e4:b2:67:84:7f:a5:3b:08:ad: b1:c9:11:c4:2e:ef:7d:51:c1:f1:64:07:40:6a:64: bf:e1:e0:23:32:19:ae:60:76:69:b9:2b:18:70:f5: 09:37:3c:37:99:31:66:5a:6d:7f:aa:9f:b0:a4:ba: 38:b8:e8:45:c4:e0:57:96:57:63:6c:3a:51:b3:1e: 50:3f:f3:cf:25:27:7d:67:a1:94:76:73:6f:8c:24: 2e:13:ef:b5:c0:96:15:9e:88:34:7e:9b:5c:35:58: da:47:1e:6a:1c:8a:47:7e:c8:b8:4f:43:bb:f8:6f: 0f:89:55:35:66:dd:a4:a1:3d:59:59:a4:3c:b8:e6: c9:b9:73:5a:78:d6:c2:bf:0a:2c:db:72:5b:de:f9: 84:78:d3:48:a8:9b:7a:aa:0f:fb:11:a8:27:87:71: 03:3f:65:33:e0:39:99:60:32:48:68:03:c7:bf:c9: 5a:a0:26:db:db:f7:15:2b:fc:3f:b1:71:a1:07:50: eb:11:49:bb:8f:16:33:66:47:42:14:eb:f0:38:0e: b3:03:f2:e3:db:b7:12:59:da:82:a0:8a:a4:c9:a2: 8e:ac:3d:b7:66:3d:01:df:a2:d0:67:cd:e0:c5:02: d1:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:BD:33:83:68:B5:4A:76:61:1A:C3:66:9D:5D:EB:1E:C5:7B:2D:4C X509v3 Authority Key Identifier: keyid:B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:6c:b6:ab:ea:62:8c:1a:17:8f:bd:d8:eb:b1:39:91:40:b0: d1:96:8d:62:d2:1a:1d:e7:79:7c:a0:5b:4f:8b:6b:79:92:8e: ad:a6:ce:21:d4:6d:e2:b7:9a:93:89:da:c2:55:ba:ac:cf:7e: 3d:4f:01:6b:fa:bb:03:50:0a:49:f7:bf:19:ce:2b:2e:19:3f: 5e:64:7f:1d:3b:e8:0f:24:ac:04:35:28:77:b8:79:20:63:e3: 82:5f:b6:f8:67:97:3a:3a:eb:97:59:ec:fc:aa:5e:89:23:5e: 82:6d:fc:4d:ae:07:d0:8e:d4:46:1f:e4:44:03:79:16:25:43: 8d:16:25:43:29:a7:48:e5:42:e0:9b:d5:b6:63:4c:30:0c:3d: fd:6e:41:35:3c:d7:ae:95:26:dd:16:ab:fd:70:b1:ff:27:c2: 51:2a:cf:de:f7:ea:39:06:cc:9d:33:9a:f2:03:1f:ce:53:5e: 21:02:ee:f9:68:76:f7:e3:ed:78:3c:69:42:19:30:7b:84:08: 1e:78:54:04:ce:9e:30:26:9c:fc:ed:e1:7e:20:2c:b3:ea:6b: bf:c7:4e:ce:58:e2:36:f9:ac:91:71:75:38:2c:43:5b:f9:49: c4:81:81:98:fa:78:b4:85:8f:58:63:55:5b:3e:78:c5:e0:f7: 48:1e:9c:87 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC M0I0QzExMC8GA1UEBRMoQjYzREZENjg2Q0UwQTkwMDc2RTRGNUZGNDI4Njg1RjYz RkIwOEVERDAeFw0yNTA0MjUwNjAwMzRaFw0yNTA1MDIwNjAwMzRaMBgxFjAUBgNV BAMTDTY4MGIyNTAzLWNlYWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMXguEV3YY94WeBgCsKLI0pbHWuOSyZ4R/pTsIrbHJEcQu731RwfFkB0BqZL/h 4CMyGa5gdmm5Kxhw9Qk3PDeZMWZabX+qn7Ckuji46EXE4FeWV2NsOlGzHlA/888l J31noZR2c2+MJC4T77XAlhWeiDR+m1w1WNpHHmocikd+yLhPQ7v4bw+JVTVm3aSh PVlZpDy45sm5c1p41sK/Cizbclve+YR400iom3qqD/sRqCeHcQM/ZTPgOZlgMkho A8e/yVqgJtvb9xUr/D+xcaEHUOsRSbuPFjNmR0IU6/A4DrMD8uPbtxJZ2oKgiqTJ oo6sPbdmPQHfotBnzeDFAtHZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7b0zg2i1 SnZhGsNmnV3rHsV7LUwwHwYDVR0jBBgwFoAUtj39aGzgqQB25PX/QoaF9j+wjt0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzQjRDL0RDOURFMjhFOEM1 MDExRUZBMDY3QzgxNUM0RjlBRTAyL3RqMzlhR3pncVFCMjVQWF9Rb2FGOWotd2p0 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdGozOWFHemdxUUIyNVBYX1FvYUY5ai13anQwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIz QjRDL0RDOURFMjhFOEM1MDExRUZBMDY3QzgxNUM0RjlBRTAyL3RqMzlhR3pncVFC MjVQWF9Rb2FGOWotd2p0MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIhstqvqYowaF4+92OuxOZFAsNGWjWLSGh3neXygW0+La3mSjq2mziHU beK3mpOJ2sJVuqzPfj1PAWv6uwNQCkn3vxnOKy4ZP15kfx076A8krAQ1KHe4eSBj 44Jftvhnlzo665dZ7PyqXokjXoJt/E2uB9CO1EYf5EQDeRYlQ40WJUMpp0jlQuCb 1bZjTDAMPf1uQTU8166VJt0Wq/1wsf8nwlEqz9736jkGzJ0zmvIDH85TXiEC7vlo dvfj7Xg8aUIZMHuECB54VATOnjAmnPzt4X4gLLPqa7/HTs5Y4jb5rJFxdTgsQ1v5 ScSBgZj6eLSFj1hjVVs+eMXg90genIc= -----END CERTIFICATE-----Generated at Fri Apr 25 08:24:59 2025 by rpki-client on console.sobornost.net