$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.mft File: cM0CtmQkeah0RicVcG5qqaidosk.mft (raw, json) Hash identifier: 5XztV55TAQp2tLrRBL3HX8cd1B/J79iXHGXZyX6+jqk= Subject key identifier: F5:AB:38:0C:FB:4B:14:98:77:84:A0:F1:98:9A:30:C7:4D:CF:F0:CA Authority key identifier: 70:CD:02:B6:64:24:79:A8:74:46:27:15:70:6E:6A:A9:A8:9D:A2:C9 Certificate issuer: /CN=A91BE6D7/serialNumber=70CD02B6642479A874462715706E6AA9A89DA2C9 Certificate serial: 010C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0CtmQkeah0RicVcG5qqaidosk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.mft Manifest number: 0101 Signing time: Sun 27 Apr 2025 04:07:41 +0000 Manifest this update: Sun 27 Apr 2025 04:07:40 +0000 Manifest next update: Sun 04 May 2025 04:07:40 +0000 Files and hashes: 1: cM0CtmQkeah0RicVcG5qqaidosk.crl (hash: Rj7dsfe56M7TQKfH3T/6qyiyNb9s0/3OnADRvHZeFU8=) 2: 7251CC7C546211EF85988412C4F9AE02.roa (hash: MXnU/QcuEmDKktg0CnuwolgKiFkbHbMHOSWdEnSOv5c=) 3: 371059F4B8A311EEBDA30041C4F9AE02.roa (hash: S3mbIiQ1nO0L4Bz9sTuCjtwzB96XobjR5ufSof/xnsw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.crl rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0CtmQkeah0RicVcG5qqaidosk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 268 (0x10c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE6D7, serialNumber=70CD02B6642479A874462715706E6AA9A89DA2C9 Validity Not Before: Apr 27 04:07:40 2025 GMT Not After : May 4 04:07:40 2025 GMT Subject: CN=680dad8c-0726 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:90:8c:b1:2e:75:e7:64:a4:c2:8c:b0:fa:54: 5e:27:96:97:ec:64:ec:1f:1f:36:1f:7f:ec:2e:91: f9:48:ad:ec:cf:20:15:c3:3e:a9:f7:35:e4:1b:e1: 60:0c:f2:51:3b:7e:0a:0c:d6:1b:55:1a:bf:bb:22: 72:00:86:74:e7:73:44:6e:e2:da:9e:8f:6a:57:64: c6:1d:3f:d3:3f:c1:ff:55:b0:0e:75:2b:45:80:5a: 9c:d0:d2:41:6a:39:5c:9c:e9:1b:59:82:6d:f6:9d: db:33:58:b3:4f:2b:fd:e5:e3:6b:b1:11:4b:7a:96: 9f:fe:de:12:ac:05:b7:1a:6d:70:70:08:79:50:b2: 72:72:fa:1f:e0:7e:1a:98:73:be:7d:41:aa:f5:76: 52:a5:42:65:ee:a1:9d:5c:d2:bd:17:52:c5:1d:4f: b9:7d:7f:72:da:29:22:ba:21:61:a6:1a:74:63:89: 0e:d0:77:f8:32:46:79:15:fe:3d:57:fc:38:4e:9c: f2:48:1c:4d:ce:14:ac:b4:f1:cb:d6:31:ba:00:86: bf:02:b3:f6:18:b5:09:35:ab:78:ce:fd:6e:13:95: 6c:c8:11:a1:b6:dd:4a:b7:11:e6:0f:4b:75:17:f1: c5:3d:69:4e:dc:9e:fa:0d:9c:a9:be:62:5b:45:0a: 2f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:AB:38:0C:FB:4B:14:98:77:84:A0:F1:98:9A:30:C7:4D:CF:F0:CA X509v3 Authority Key Identifier: keyid:70:CD:02:B6:64:24:79:A8:74:46:27:15:70:6E:6A:A9:A8:9D:A2:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0CtmQkeah0RicVcG5qqaidosk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:15:25:7c:ae:35:cd:ab:fb:4a:d7:e4:62:b6:e0:c6:ef:40: 90:89:a3:a2:9f:52:5a:e3:81:91:3c:5d:ae:11:20:b5:70:8c: 36:80:40:4c:f5:d3:f8:e4:e3:ec:86:ab:2d:73:3e:ed:15:48: 3b:33:29:76:d7:49:d1:70:54:a8:73:d2:fc:95:99:a0:83:e7: a9:60:69:f7:44:02:38:40:87:6a:6a:e1:d9:34:6a:64:7c:ce: f6:3b:7d:3b:a6:d0:0b:d1:2f:9e:3a:8e:f0:ce:3a:6c:ad:d9: d2:a2:f3:85:ac:5c:83:7c:d7:e9:38:17:18:2b:5a:c7:a5:01: 15:f4:85:b3:42:21:15:25:08:b0:51:49:10:40:c9:1d:59:5c: 81:2c:9c:e9:bd:52:cc:a2:c4:11:37:b1:ce:3d:4a:e9:bf:b2: 3b:a6:b7:d1:fc:78:93:5a:92:2f:d0:1e:95:d2:e9:5e:df:e7: db:7c:5c:87:bc:6c:d1:bc:db:c1:c3:63:6d:e0:a2:24:23:fc: e6:46:04:2f:01:33:81:97:7a:ef:23:11:f7:48:e8:4a:e1:2d: ae:bb:50:61:6c:f4:c4:70:4a:87:ae:24:f6:db:53:2d:60:19: 77:b4:42:ff:bf:e0:9b:7f:e6:5c:65:f8:bd:78:4e:4a:90:b8: b5:2f:78:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkU2RDcxMTAvBgNVBAUTKDcwQ0QwMkI2NjQyNDc5QTg3NDQ2MjcxNTcwNkU2QUE5 QTg5REEyQzkwHhcNMjUwNDI3MDQwNzQwWhcNMjUwNTA0MDQwNzQwWjAYMRYwFAYD VQQDEw02ODBkYWQ4Yy0wNzI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm5CMsS5152Skwoyw+lReJ5aX7GTsHx82H3/sLpH5SK3szyAVwz6p9zXkG+Fg DPJRO34KDNYbVRq/uyJyAIZ053NEbuLano9qV2TGHT/TP8H/VbAOdStFgFqc0NJB ajlcnOkbWYJt9p3bM1izTyv95eNrsRFLepaf/t4SrAW3Gm1wcAh5ULJycvof4H4a mHO+fUGq9XZSpUJl7qGdXNK9F1LFHU+5fX9y2ikiuiFhphp0Y4kO0Hf4MkZ5Ff49 V/w4TpzySBxNzhSstPHL1jG6AIa/ArP2GLUJNat4zv1uE5VsyBGhtt1KtxHmD0t1 F/HFPWlO3J76DZypvmJbRQovJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPWrOAz7 SxSYd4Sg8ZiaMMdNz/DKMB8GA1UdIwQYMBaAFHDNArZkJHmodEYnFXBuaqmonaLJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTZENy83MUE1MTU3NEFF RjIxMUVFQjI5M0I0ODBDNEY5QUUwMi9jTTBDdG1Ra2VhaDBSaWNWY0c1cXFhaWRv c2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NNMEN0bVFrZWFoMFJpY1ZjRzVxcWFpZG9zay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTZENy83MUE1MTU3NEFFRjIxMUVFQjI5M0I0ODBDNEY5QUUwMi9jTTBDdG1Ra2Vh aDBSaWNWY0c1cXFhaWRvc2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRFSV8rjXNq/tK1+RituDG70CQiaOin1Ja44GRPF2uESC1cIw2gEBM 9dP45OPshqstcz7tFUg7Myl210nRcFSoc9L8lZmgg+epYGn3RAI4QIdqauHZNGpk fM72O307ptAL0S+eOo7wzjpsrdnSovOFrFyDfNfpOBcYK1rHpQEV9IWzQiEVJQiw UUkQQMkdWVyBLJzpvVLMosQRN7HOPUrpv7I7prfR/HiTWpIv0B6V0ule3+fbfFyH vGzRvNvBw2Nt4KIkI/zmRgQvATOBl3rvIxH3SOhK4S2uu1BhbPTEcEqHriT221Mt YBl3tEL/v+Cbf+ZcZfi9eE5KkLi1L3jg -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:55 2025 by rpki-client on console.sobornost.net