$ rpki-client -vvf rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft File: Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft (raw, json) Hash identifier: 5JBREdvPWs++rLq/6LYWuzogBN9vq//EhsrxFS634dg= Subject key identifier: 4E:77:23:E4:90:61:A1:7E:35:43:30:37:12:A7:4C:4B:25:B5:0B:DF Authority key identifier: 15:CF:50:DB:52:B0:F1:2F:1A:6E:3B:39:63:3D:48:2E:09:CF:E3:5C Certificate issuer: /CN=A91B673B/serialNumber=15CF50DB52B0F12F1A6E3B39633D482E09CFE35C Certificate serial: 84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft Manifest number: 83 Signing time: Sun 27 Apr 2025 05:26:50 +0000 Manifest this update: Sun 27 Apr 2025 05:26:49 +0000 Manifest next update: Sun 04 May 2025 05:26:49 +0000 Files and hashes: 1: Fc9Q21Kw8S8abjs5Yz1ILgnP41w.crl (hash: jmcfQfPyYVjwGdmceWmFv+ELJI20c4MFYPCSIXr/1/E=) 2: A242BED45E1511EFBBFB911EC4F9AE02.roa (hash: LeRLBY5GVV/98SK5vi8TCaYTzwu/LK8xBT06nPBMuiY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.crl rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 132 (0x84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B673B, serialNumber=15CF50DB52B0F12F1A6E3B39633D482E09CFE35C Validity Not Before: Apr 27 05:26:49 2025 GMT Not After : May 4 05:26:49 2025 GMT Subject: CN=680dc01a-d2c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:14:45:e1:bb:33:44:98:dc:b5:56:bb:2f:4d: 5d:59:81:f4:93:a7:37:6d:22:c8:d2:72:04:00:f0: a2:f1:ec:be:21:85:16:56:61:4a:66:8f:87:b8:05: 8c:d6:6d:f8:6d:df:ac:02:f8:3c:77:09:a3:d7:77: 2d:90:c9:5d:6f:ab:19:e8:7a:89:e7:39:54:28:9b: 12:00:fe:c1:ac:11:a2:84:0f:20:ec:f9:24:54:d8: 83:19:43:e4:da:fb:79:1c:3b:e8:94:30:42:9e:97: 31:14:63:89:b2:d2:68:cc:f5:91:9f:b5:fe:48:9b: d5:42:c6:27:9b:44:34:d0:f2:6b:46:fe:e0:e5:b2: 11:b3:73:ba:99:df:0c:20:1a:11:b3:65:07:0a:e2: ca:15:4e:a1:57:b4:13:76:c7:ca:56:16:42:0a:e9: a0:22:57:8a:9a:1c:74:38:76:05:1c:75:78:57:d4: 29:9e:d1:f7:e9:e2:32:e5:dd:68:f9:ec:e0:b1:a9: d0:3f:52:8b:71:d9:ac:d9:0f:79:0e:ff:17:18:d9: 66:c5:6d:db:f7:4e:01:3c:d6:90:47:a1:0c:a3:c0: 1a:07:87:f4:c7:5c:84:1b:1a:b3:ef:35:69:d1:53: 65:aa:9d:ef:ff:68:fa:22:1b:2d:79:5a:32:f2:a0: ef:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:77:23:E4:90:61:A1:7E:35:43:30:37:12:A7:4C:4B:25:B5:0B:DF X509v3 Authority Key Identifier: keyid:15:CF:50:DB:52:B0:F1:2F:1A:6E:3B:39:63:3D:48:2E:09:CF:E3:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:65:00:3f:01:02:91:4f:be:d3:f8:60:86:f9:78:1d:63:5b: 31:db:92:c0:06:19:28:5c:4a:dc:34:c0:69:aa:7c:c9:02:d3: e4:72:2d:09:9e:d8:a6:2d:17:d0:e0:c9:0a:1b:e5:1f:6f:c8: 4e:44:e2:f8:08:62:c5:80:d9:99:e2:50:97:9e:4e:80:5e:15: 21:af:9c:4f:21:eb:b9:80:b2:bd:7c:d7:7b:6c:96:90:da:44: 9e:12:b1:db:e4:2b:5e:63:a8:07:0c:a9:93:ee:e3:db:7c:8c: 4a:1e:55:ff:cc:82:ae:02:b8:e3:00:c4:91:f5:07:b9:20:f5: 98:c6:e0:5f:43:df:86:db:e4:cd:78:50:28:57:80:a4:a6:33: a7:77:42:55:e8:86:07:38:e0:97:eb:16:cd:fd:87:4e:25:6b: 7a:51:9d:a5:43:46:33:a3:74:75:6b:6e:61:86:74:86:9d:b2: 98:49:7d:5f:98:75:ce:91:92:15:72:94:68:6c:63:54:0b:fc: b4:37:a4:fc:5a:51:82:a0:e6:6c:ff:be:af:3b:02:63:7f:13: ad:a6:67:af:eb:2f:f4:16:82:8a:65:04:e4:60:d4:cc:4f:8d: b6:d7:e4:8e:93:32:09:0d:db:cf:11:7f:cf:fc:7d:db:50:f8: 75:ff:41:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY3M0IxMTAvBgNVBAUTKDE1Q0Y1MERCNTJCMEYxMkYxQTZFM0IzOTYzM0Q0ODJF MDlDRkUzNUMwHhcNMjUwNDI3MDUyNjQ5WhcNMjUwNTA0MDUyNjQ5WjAYMRYwFAYD VQQDEw02ODBkYzAxYS1kMmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8hRF4bszRJjctVa7L01dWYH0k6c3bSLI0nIEAPCi8ey+IYUWVmFKZo+HuAWM 1m34bd+sAvg8dwmj13ctkMldb6sZ6HqJ5zlUKJsSAP7BrBGihA8g7PkkVNiDGUPk 2vt5HDvolDBCnpcxFGOJstJozPWRn7X+SJvVQsYnm0Q00PJrRv7g5bIRs3O6md8M IBoRs2UHCuLKFU6hV7QTdsfKVhZCCumgIleKmhx0OHYFHHV4V9QpntH36eIy5d1o +ezgsanQP1KLcdms2Q95Dv8XGNlmxW3b904BPNaQR6EMo8AaB4f0x1yEGxqz7zVp 0VNlqp3v/2j6IhsteVoy8qDvbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE53I+SQ YaF+NUMwNxKnTEsltQvfMB8GA1UdIwQYMBaAFBXPUNtSsPEvGm47OWM9SC4Jz+Nc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjczQi84MTJGMjEzNjVE RkUxMUVGOEM3RTgxN0JDNEY5QUUwMi9GYzlRMjFLdzhTOGFianM1WXoxSUxnblA0 MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZjOVEyMUt3OFM4YWJqczVZejFJTGduUDQxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjczQi84MTJGMjEzNjVERkUxMUVGOEM3RTgxN0JDNEY5QUUwMi9GYzlRMjFLdzhT OGFianM1WXoxSUxnblA0MXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTZQA/AQKRT77T+GCG+XgdY1sx25LABhkoXErcNMBpqnzJAtPkci0J ntimLRfQ4MkKG+Ufb8hOROL4CGLFgNmZ4lCXnk6AXhUhr5xPIeu5gLK9fNd7bJaQ 2kSeErHb5CteY6gHDKmT7uPbfIxKHlX/zIKuArjjAMSR9Qe5IPWYxuBfQ9+G2+TN eFAoV4CkpjOnd0JV6IYHOOCX6xbN/YdOJWt6UZ2lQ0Yzo3R1a25hhnSGnbKYSX1f mHXOkZIVcpRobGNUC/y0N6T8WlGCoOZs/76vOwJjfxOtpmev6y/0FoKKZQTkYNTM T4221+SOkzIJDdvPEX/P/H3bUPh1/0G1 -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:54 2025 by rpki-client on console.sobornost.net