$ rpki-client -vvf rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/cwYbqQQBgewK602PbgA_g4_JxI8.mft File: cwYbqQQBgewK602PbgA_g4_JxI8.mft (raw, json) Hash identifier: IbpwJVN4ZDKwh9ISn7Pgxhw6Ne89udfyp9G+KGIklbM= Subject key identifier: C7:AC:50:53:47:B1:92:EB:2C:C3:4A:32:11:56:CF:22:22:4B:69:EE Authority key identifier: 73:06:1B:A9:04:01:81:EC:0A:EB:4D:8F:6E:00:3F:83:8F:C9:C4:8F Certificate issuer: /CN=A91B65AC/serialNumber=73061BA9040181EC0AEB4D8F6E003F838FC9C48F Certificate serial: D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwYbqQQBgewK602PbgA_g4_JxI8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/cwYbqQQBgewK602PbgA_g4_JxI8.mft Manifest number: D3 Signing time: Sun 27 Apr 2025 04:30:59 +0000 Manifest this update: Sun 27 Apr 2025 04:30:58 +0000 Manifest next update: Sun 04 May 2025 04:30:58 +0000 Files and hashes: 1: cwYbqQQBgewK602PbgA_g4_JxI8.crl (hash: qHHiLwKYXMV6Ym2H7yB1N1mU5tXmB4DGyVOlL9mT/Cc=) 2: 7D2E766CE5AF11EE9A0A642FC4F9AE02.roa (hash: Fb0vXPsGENJ9HpaLetk+Rjo+o9pYvcloVY8N7cgyCIk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/cwYbqQQBgewK602PbgA_g4_JxI8.crl rsync://rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/cwYbqQQBgewK602PbgA_g4_JxI8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwYbqQQBgewK602PbgA_g4_JxI8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B65AC, serialNumber=73061BA9040181EC0AEB4D8F6E003F838FC9C48F Validity Not Before: Apr 27 04:30:58 2025 GMT Not After : May 4 04:30:58 2025 GMT Subject: CN=680db302-4ad8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:04:74:73:db:f9:f6:57:2a:72:d8:47:b5:ae: b6:24:3b:f6:07:d7:f1:20:97:3d:dc:bf:d5:3e:58: 3e:32:ee:5a:17:1e:e6:64:f1:cc:16:3b:31:f9:4d: 9b:62:b5:41:22:d8:22:c7:1c:a4:a6:74:47:fa:4b: d9:e3:ce:c9:26:2e:3b:b3:f3:eb:27:88:a7:94:46: 10:0c:07:eb:1e:02:0b:41:85:3b:3f:b3:2b:b6:27: 51:c0:76:3c:46:62:87:db:a0:dc:2f:e1:b6:e0:f8: b8:7e:92:31:ad:df:05:0b:7b:49:22:65:9a:48:03: 1e:20:81:50:84:c5:5c:20:6a:ec:fe:4d:71:09:b7: 0c:c3:34:68:ae:2a:d0:db:69:8f:4f:1c:a6:ba:17: 92:3c:b7:58:1a:db:4c:66:01:e3:8e:4b:66:c1:05: ab:5b:26:a3:d5:03:05:2e:9f:90:82:17:d6:13:80: 0a:8c:74:86:f5:39:76:ff:73:22:d6:2d:b4:ce:6d: 9d:dd:2f:54:d2:9f:3f:27:72:fd:82:71:fb:8d:b9: ae:58:70:5d:3c:6d:8a:17:6f:08:69:06:ae:1f:11: a1:23:f4:10:17:41:0a:2e:dd:6f:6d:90:e6:b9:20: 0f:08:b6:20:87:4f:ae:c2:f4:12:e8:5d:bc:6b:ca: 53:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:AC:50:53:47:B1:92:EB:2C:C3:4A:32:11:56:CF:22:22:4B:69:EE X509v3 Authority Key Identifier: keyid:73:06:1B:A9:04:01:81:EC:0A:EB:4D:8F:6E:00:3F:83:8F:C9:C4:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/cwYbqQQBgewK602PbgA_g4_JxI8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwYbqQQBgewK602PbgA_g4_JxI8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/cwYbqQQBgewK602PbgA_g4_JxI8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:94:b7:3c:53:d4:27:97:d8:d8:f3:2f:a2:b2:d5:87:6c:be: b9:44:47:f6:a1:f5:40:67:b6:3a:69:ee:8e:b5:2c:b2:5d:b5: 8a:11:6f:f3:14:e7:05:18:b3:fe:b1:5b:df:0c:f7:d1:35:cd: 60:76:3e:8d:47:27:03:48:dd:45:71:61:d2:9a:46:d9:2a:82: d5:86:6c:c6:9d:12:62:d8:ed:a0:be:d9:9d:51:56:23:c7:58: ce:5b:6d:0c:24:a7:5e:46:6d:22:dd:7b:31:f3:02:2f:95:e2: 9b:de:7a:f0:83:bc:f3:02:6c:43:42:25:45:14:8d:30:de:d8: c2:7d:98:02:c5:21:88:e6:52:46:53:e6:b3:10:12:71:da:c8: b7:d1:3c:94:51:a6:a8:83:e9:9d:d6:cd:a9:87:9b:75:f0:8f: c0:96:d6:5a:f0:a0:d3:07:50:87:3e:d7:39:64:3b:28:3e:11: 00:bb:59:bc:f1:3e:90:f5:49:2c:82:e5:94:c4:05:9d:21:77: 4a:f8:fb:17:76:a6:e5:c7:98:90:84:f8:5b:64:15:32:51:36: f7:09:97:11:c1:ea:ae:51:2a:22:fb:41:84:7d:09:7d:29:f9: 02:17:77:f6:7f:6c:77:d6:11:fa:be:5c:00:ca:71:b3:b6:f5: 2d:4f:8e:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY1QUMxMTAvBgNVBAUTKDczMDYxQkE5MDQwMTgxRUMwQUVCNEQ4RjZFMDAzRjgz OEZDOUM0OEYwHhcNMjUwNDI3MDQzMDU4WhcNMjUwNTA0MDQzMDU4WjAYMRYwFAYD VQQDEw02ODBkYjMwMi00YWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuQR0c9v59lcqcthHta62JDv2B9fxIJc93L/VPlg+Mu5aFx7mZPHMFjsx+U2b YrVBItgixxykpnRH+kvZ487JJi47s/PrJ4inlEYQDAfrHgILQYU7P7MrtidRwHY8 RmKH26DcL+G24Pi4fpIxrd8FC3tJImWaSAMeIIFQhMVcIGrs/k1xCbcMwzRorirQ 22mPTxymuheSPLdYGttMZgHjjktmwQWrWyaj1QMFLp+QghfWE4AKjHSG9Tl2/3Mi 1i20zm2d3S9U0p8/J3L9gnH7jbmuWHBdPG2KF28IaQauHxGhI/QQF0EKLt1vbZDm uSAPCLYgh0+uwvQS6F28a8pTQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMesUFNH sZLrLMNKMhFWzyIiS2nuMB8GA1UdIwQYMBaAFHMGG6kEAYHsCutNj24AP4OPycSP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjVBQy9ENEYzREI5RUUx RTAxMUVFQUY2RTFFNjhDNEY5QUUwMi9jd1licVFRQmdld0s2MDJQYmdBX2c0X0p4 STguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N3WWJxUVFCZ2V3SzYwMlBiZ0FfZzRfSnhJOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjVBQy9ENEYzREI5RUUxRTAxMUVFQUY2RTFFNjhDNEY5QUUwMi9jd1licVFRQmdl d0s2MDJQYmdBX2c0X0p4STgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCklLc8U9Qnl9jY8y+istWHbL65REf2ofVAZ7Y6ae6OtSyyXbWKEW/z FOcFGLP+sVvfDPfRNc1gdj6NRycDSN1FcWHSmkbZKoLVhmzGnRJi2O2gvtmdUVYj x1jOW20MJKdeRm0i3Xsx8wIvleKb3nrwg7zzAmxDQiVFFI0w3tjCfZgCxSGI5lJG U+azEBJx2si30TyUUaaog+md1s2ph5t18I/AltZa8KDTB1CHPtc5ZDsoPhEAu1m8 8T6Q9UksguWUxAWdIXdK+PsXdqblx5iQhPhbZBUyUTb3CZcRwequUSoi+0GEfQl9 KfkCF3f2f2x31hH6vlwAynGztvUtT45j -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:54 2025 by rpki-client on console.sobornost.net