$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/RITQfaaNUwUM3PaxPAwFReZFfOU.mft File: RITQfaaNUwUM3PaxPAwFReZFfOU.mft (raw, json) Hash identifier: NZ7FjTrFqQY0cYw3W2yj0n6QsGdLx7UXIqbuvrEZw34= Subject key identifier: 01:45:F7:3D:4C:B8:79:AC:F8:F9:AD:65:B4:48:22:39:43:A4:EF:92 Authority key identifier: 44:84:D0:7D:A6:8D:53:05:0C:DC:F6:B1:3C:0C:05:45:E6:45:7C:E5 Certificate issuer: /CN=A91B5CEA/serialNumber=4484D07DA68D53050CDCF6B13C0C0545E6457CE5 Certificate serial: 01CF Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RITQfaaNUwUM3PaxPAwFReZFfOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/RITQfaaNUwUM3PaxPAwFReZFfOU.mft Manifest number: 01CC Signing time: Sun 27 Apr 2025 01:55:21 +0000 Manifest this update: Sun 27 Apr 2025 01:55:20 +0000 Manifest next update: Sun 04 May 2025 01:55:20 +0000 Files and hashes: 1: RITQfaaNUwUM3PaxPAwFReZFfOU.crl (hash: EJElyjU0yOv8vFb8jpe8PqPgnCHYIAD6MY+qqO+Ordc=) 2: B3795CBC64F211ED9AEC046FC4F9AE02.roa (hash: EdWi73Mh5xQLy3TivA4ubB2nlEznz8QrqPnUKcwGaiM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/RITQfaaNUwUM3PaxPAwFReZFfOU.crl rsync://rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/RITQfaaNUwUM3PaxPAwFReZFfOU.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RITQfaaNUwUM3PaxPAwFReZFfOU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 01:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 463 (0x1cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5CEA, serialNumber=4484D07DA68D53050CDCF6B13C0C0545E6457CE5 Validity Not Before: Apr 27 01:55:20 2025 GMT Not After : May 4 01:55:20 2025 GMT Subject: CN=680d8e89-3b9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d2:49:63:5a:34:c3:4c:f8:1b:4e:3c:c8:68: 35:fb:06:a1:e2:be:ca:10:38:31:ea:40:39:56:e1: 69:ee:7f:54:2d:04:1b:11:33:72:62:8f:4c:e7:f3: dd:45:d1:2c:a9:58:62:00:48:b4:c2:1b:d9:ca:4d: ab:3d:82:5f:66:02:58:6f:89:1d:a2:59:ae:9b:d4: df:42:71:a4:94:11:2c:bb:d3:30:f1:2e:e9:ee:8c: 74:60:79:57:03:4b:a1:30:16:34:b6:1f:50:a6:cc: 91:f2:69:ad:f1:70:0c:0e:c4:fe:ca:34:1e:b5:70: ab:09:ef:7e:28:f4:1c:33:0a:6c:a0:7b:46:fd:34: 71:13:24:d0:e0:00:4d:e5:fc:44:ea:6b:36:21:3c: ef:05:86:9d:38:44:74:a4:70:29:57:63:71:f1:02: d9:d5:ee:74:9f:64:42:3a:86:7b:dd:88:f0:ce:ce: 18:c4:c0:a2:a5:8d:15:99:28:8c:34:e2:b4:36:27: 41:1c:64:55:2b:05:3e:58:c1:43:f4:11:50:61:fd: 3b:6f:ef:63:b8:59:aa:fb:21:79:53:b8:69:d5:a8: 41:bc:9e:de:d9:fc:5e:3f:1e:6f:58:a2:02:96:e3: 78:2c:51:1b:6e:22:88:b9:be:72:fd:40:c5:1b:da: 9a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:45:F7:3D:4C:B8:79:AC:F8:F9:AD:65:B4:48:22:39:43:A4:EF:92 X509v3 Authority Key Identifier: keyid:44:84:D0:7D:A6:8D:53:05:0C:DC:F6:B1:3C:0C:05:45:E6:45:7C:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/RITQfaaNUwUM3PaxPAwFReZFfOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RITQfaaNUwUM3PaxPAwFReZFfOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/RITQfaaNUwUM3PaxPAwFReZFfOU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:ba:59:11:8f:35:b7:1c:a2:61:8b:f7:81:96:b7:19:83:df: 24:4c:e7:16:a7:6b:16:68:d7:2b:f5:76:d2:23:95:f1:3f:a7: 53:55:42:c3:84:36:15:21:3b:6e:8e:c2:46:9d:27:f3:ec:c8: 51:35:70:bf:81:1b:fb:ad:f0:46:6f:af:a2:78:e7:f8:79:10: 74:61:36:fa:89:59:ef:7c:dd:53:b1:74:86:39:68:85:16:ff: b6:51:77:c3:76:94:4b:23:42:a7:a8:21:d8:9e:13:1d:63:33: c5:55:75:27:81:a1:64:98:56:6e:78:36:d3:ea:b6:d4:7d:02: 4b:17:ef:64:e6:96:37:b0:0b:1c:65:ba:03:2e:17:7d:ac:bd: ba:4f:58:83:29:18:05:c5:81:04:91:f9:bb:9c:10:b2:68:58: 22:bb:9b:5c:56:b4:bb:b0:11:d0:3c:78:f4:d8:be:55:5e:57: 27:79:be:fe:ba:3d:db:89:58:7c:dc:64:1a:ff:71:3c:8b:59: 05:06:fd:74:f9:9a:70:87:17:d8:0f:30:72:46:a8:3f:ed:4d: f6:b7:c3:cc:30:a5:56:7a:5c:d0:4a:15:61:dc:36:32:47:1f: 89:9e:52:bc:08:18:cd:c6:66:ad:64:14:f0:88:a4:be:ca:76: 70:62:1d:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVDRUExMTAvBgNVBAUTKDQ0ODREMDdEQTY4RDUzMDUwQ0RDRjZCMTNDMEMwNTQ1 RTY0NTdDRTUwHhcNMjUwNDI3MDE1NTIwWhcNMjUwNTA0MDE1NTIwWjAYMRYwFAYD VQQDEw02ODBkOGU4OS0zYjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuNJJY1o0w0z4G048yGg1+wah4r7KEDgx6kA5VuFp7n9ULQQbETNyYo9M5/Pd RdEsqVhiAEi0whvZyk2rPYJfZgJYb4kdolmum9TfQnGklBEsu9Mw8S7p7ox0YHlX A0uhMBY0th9QpsyR8mmt8XAMDsT+yjQetXCrCe9+KPQcMwpsoHtG/TRxEyTQ4ABN 5fxE6ms2ITzvBYadOER0pHApV2Nx8QLZ1e50n2RCOoZ73Yjwzs4YxMCipY0VmSiM NOK0NidBHGRVKwU+WMFD9BFQYf07b+9juFmq+yF5U7hp1ahBvJ7e2fxePx5vWKIC luN4LFEbbiKIub5y/UDFG9qa6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAFF9z1M uHms+PmtZbRIIjlDpO+SMB8GA1UdIwQYMBaAFESE0H2mjVMFDNz2sTwMBUXmRXzl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUNFQS8xRjYzQTU2ODY0 RUUxMUVEQTRBMzQ1MTNDNEY5QUUwMi9SSVRRZmFhTlV3VU0zUGF4UEF3RlJlWkZm T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1JJVFFmYWFOVXdVTTNQYXhQQXdGUmVaRmZPVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUNFQS8xRjYzQTU2ODY0RUUxMUVEQTRBMzQ1MTNDNEY5QUUwMi9SSVRRZmFhTlV3 VU0zUGF4UEF3RlJlWkZmT1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1ulkRjzW3HKJhi/eBlrcZg98kTOcWp2sWaNcr9XbSI5XxP6dTVULD hDYVITtujsJGnSfz7MhRNXC/gRv7rfBGb6+ieOf4eRB0YTb6iVnvfN1TsXSGOWiF Fv+2UXfDdpRLI0KnqCHYnhMdYzPFVXUngaFkmFZueDbT6rbUfQJLF+9k5pY3sAsc ZboDLhd9rL26T1iDKRgFxYEEkfm7nBCyaFgiu5tcVrS7sBHQPHj02L5VXlcneb7+ uj3biVh83GQa/3E8i1kFBv10+ZpwhxfYDzByRqg/7U32t8PMMKVWelzQShVh3DYy Rx+JnlK8CBjNxmatZBTwiKS+ynZwYh2R -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:08 2025 by rpki-client on console.sobornost.net