$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft File: -c1w52K-aV9LpJAqoguUD3cKBjg.mft (raw, json) Hash identifier: qXvvDRkMKYNWVvIk7in34XqZD3hYf9d2mtTRB0DShGw= Subject key identifier: CE:D0:DD:33:04:9F:9C:AC:27:DA:AF:1F:F8:71:C0:79:EF:EE:02:F7 Authority key identifier: F9:CD:70:E7:62:BE:69:5F:4B:A4:90:2A:A2:0B:94:0F:77:0A:06:38 Certificate issuer: /CN=A91B9AB9/serialNumber=F9CD70E762BE695F4BA4902AA20B940F770A0638 Certificate serial: 78 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft Manifest number: 77 Signing time: Sun 27 Apr 2025 05:35:35 +0000 Manifest this update: Sun 27 Apr 2025 05:35:35 +0000 Manifest next update: Sun 04 May 2025 05:35:35 +0000 Files and hashes: 1: -c1w52K-aV9LpJAqoguUD3cKBjg.crl (hash: e6ZOg/5qgX/ofENXByYI+g1PDDCFLZKELjtIKWWj3JE=) 2: 723EACFE6E8511EF83048D43C4F9AE02.roa (hash: SORlAdQ9FssMHlMIfPwfvKAJ6kXMG+aUvNMZPsDTNq4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.crl rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9AB9, serialNumber=F9CD70E762BE695F4BA4902AA20B940F770A0638 Validity Not Before: Apr 27 05:35:35 2025 GMT Not After : May 4 05:35:35 2025 GMT Subject: CN=680dc227-dbf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:77:8d:f6:66:fc:fa:a4:4d:2b:f9:21:f5:cd: c6:5f:b3:ed:ab:b1:29:f2:ca:b0:26:cf:ab:43:44: 16:da:84:77:d0:1d:e2:7d:08:d1:eb:f5:5b:eb:dd: 07:2d:a6:74:8b:1f:59:2d:49:11:29:75:92:2f:bb: ee:ec:76:6d:63:6c:d6:85:f1:c3:0f:ba:91:f9:d0: df:75:6f:6f:cc:61:67:1b:46:5d:3a:40:78:c1:45: a8:d1:d3:65:06:ab:8d:57:58:29:78:48:e3:b2:1c: b4:6e:c7:ac:1b:e2:06:e4:0d:d2:ac:cf:07:b4:f5: 5d:24:19:42:84:90:35:a2:10:a5:e2:20:a3:d8:18: 54:be:b4:0f:02:7e:13:6f:7c:b7:8c:59:8c:a2:f1: c8:e5:f1:ac:77:ab:4a:c3:36:a3:0b:2c:95:89:19: bb:b1:95:28:0e:32:8a:7e:fa:57:c6:c4:92:28:4d: 6e:c5:66:51:7a:7f:2b:6a:86:59:91:fb:a1:85:99: 48:32:98:5a:cf:7b:7b:34:07:b0:35:af:91:3d:15: e1:d4:4b:77:b3:ee:a4:50:e5:f1:ec:ac:45:e1:17: de:86:ed:67:6c:78:94:64:13:5d:0f:97:7c:31:ab: af:57:7b:4f:a6:b8:2a:8a:e0:95:8f:f1:f4:d1:f2: 7d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:D0:DD:33:04:9F:9C:AC:27:DA:AF:1F:F8:71:C0:79:EF:EE:02:F7 X509v3 Authority Key Identifier: keyid:F9:CD:70:E7:62:BE:69:5F:4B:A4:90:2A:A2:0B:94:0F:77:0A:06:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:a1:34:9a:61:2d:d9:37:03:12:94:e9:59:a1:58:45:9a:2f: b7:f5:89:a9:ce:38:ed:aa:96:ae:2b:dc:54:fa:74:37:8b:78: a5:1a:78:b3:14:14:b0:f2:3b:1b:3e:be:6c:c5:21:bd:dc:b7: c2:14:3c:28:de:a6:3b:f5:ee:17:0e:04:a9:ee:52:d9:b5:b4: e0:25:5e:ce:63:23:4b:a1:75:65:2c:95:33:8f:3d:3f:0a:17: 8f:d2:6a:55:90:50:66:fc:2d:b5:29:2d:f0:5b:db:2c:2b:40: 67:f6:a0:96:38:96:9e:6a:5b:48:2d:a8:10:92:08:9f:db:cb: 33:eb:89:cb:99:90:bb:64:46:4a:90:0e:59:d0:39:65:6c:3a: f1:11:5b:99:21:cc:7d:ab:ed:47:b7:07:32:f3:d5:84:19:18: c9:d0:c9:8b:e3:61:4e:f4:8a:c0:5a:58:22:60:59:54:84:9a: 8b:55:2a:d9:75:71:07:02:f3:ad:81:f8:4f:90:07:b7:e6:95: 57:2b:37:c8:6f:c3:e0:cd:94:4a:b4:05:3f:4d:2d:59:79:6b: 2d:38:ff:16:63:92:42:d4:25:46:33:7e:98:bf:dc:ce:65:9b: 4a:12:75:9e:33:e0:8f:ce:43:22:9a:28:1e:d3:8d:e5:a5:6c: 8f:69:0d:4b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC OUFCOTExMC8GA1UEBRMoRjlDRDcwRTc2MkJFNjk1RjRCQTQ5MDJBQTIwQjk0MEY3 NzBBMDYzODAeFw0yNTA0MjcwNTM1MzVaFw0yNTA1MDQwNTM1MzVaMBgxFjAUBgNV BAMTDTY4MGRjMjI3LWRiZjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYd432Zvz6pE0r+SH1zcZfs+2rsSnyyrAmz6tDRBbahHfQHeJ9CNHr9Vvr3Qct pnSLH1ktSREpdZIvu+7sdm1jbNaF8cMPupH50N91b2/MYWcbRl06QHjBRajR02UG q41XWCl4SOOyHLRux6wb4gbkDdKszwe09V0kGUKEkDWiEKXiIKPYGFS+tA8CfhNv fLeMWYyi8cjl8ax3q0rDNqMLLJWJGbuxlSgOMop++lfGxJIoTW7FZlF6fytqhlmR +6GFmUgymFrPe3s0B7A1r5E9FeHUS3ez7qRQ5fHsrEXhF96G7WdseJRkE10Pl3wx q69Xe0+muCqK4JWP8fTR8n09AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUztDdMwSf nKwn2q8f+HHAee/uAvcwHwYDVR0jBBgwFoAU+c1w52K+aV9LpJAqoguUD3cKBjgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI5QUI5L0M3NkY5MkMwNkU4 NDExRUZBM0NEOTgzRkM0RjlBRTAyLy1jMXc1MkstYVY5THBKQXFvZ3VVRDNjS0Jq Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvLWMxdzUySy1hVjlMcEpBcW9ndVVEM2NLQmpnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI5 QUI5L0M3NkY5MkMwNkU4NDExRUZBM0NEOTgzRkM0RjlBRTAyLy1jMXc1MkstYVY5 THBKQXFvZ3VVRDNjS0JqZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEmhNJphLdk3AxKU6VmhWEWaL7f1ianOOO2qlq4r3FT6dDeLeKUaeLMU FLDyOxs+vmzFIb3ct8IUPCjepjv17hcOBKnuUtm1tOAlXs5jI0uhdWUslTOPPT8K F4/SalWQUGb8LbUpLfBb2ywrQGf2oJY4lp5qW0gtqBCSCJ/byzPricuZkLtkRkqQ DlnQOWVsOvERW5khzH2r7Ue3BzLz1YQZGMnQyYvjYU70isBaWCJgWVSEmotVKtl1 cQcC862B+E+QB7fmlVcrN8hvw+DNlEq0BT9NLVl5ay04/xZjkkLUJUYzfpi/3M5l m0oSdZ4z4I/OQyKaKB7TjeWlbI9pDUs= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:54 2025 by rpki-client on console.sobornost.net