$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft File: uokBTrxJS2f9iz-C6LOO9vbFck0.mft (raw, json) Hash identifier: MFnGQqPdx6ngOGBmxzpcjY1OWl5+rmBvHa05WeCXr68= Subject key identifier: 18:A2:FB:FA:98:40:A5:6F:02:D5:4C:31:23:D8:76:25:4C:6A:F5:E2 Authority key identifier: BA:89:01:4E:BC:49:4B:67:FD:8B:3F:82:E8:B3:8E:F6:F6:C5:72:4D Certificate issuer: /CN=A91C4EC7/serialNumber=BA89014EBC494B67FD8B3F82E8B38EF6F6C5724D Certificate serial: F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uokBTrxJS2f9iz-C6LOO9vbFck0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft Manifest number: F1 Signing time: Fri 25 Apr 2025 04:27:44 +0000 Manifest this update: Fri 25 Apr 2025 04:27:43 +0000 Manifest next update: Fri 02 May 2025 04:27:43 +0000 Files and hashes: 1: uokBTrxJS2f9iz-C6LOO9vbFck0.crl (hash: Dqtw8Hham/WgagiIt39vbtH3FGK0QQgHTbe+SLuMRMo=) 2: ED352AAEBFE511EEBB3B4D25C4F9AE02.roa (hash: Cg10Lh1/jWjaqO5EBHv5C6vMK3khuwZ/+iMJMpvh7AE=) 3: 7FC61EDC2E1D11EF933E9981C4F9AE02.roa (hash: lJjM0vXxFGkR8fpKRXKFywWPgH/0gbH+qkVNiWKRaAw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.crl rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uokBTrxJS2f9iz-C6LOO9vbFck0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 247 (0xf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4EC7, serialNumber=BA89014EBC494B67FD8B3F82E8B38EF6F6C5724D Validity Not Before: Apr 25 04:27:43 2025 GMT Not After : May 2 04:27:43 2025 GMT Subject: CN=680b0f40-a528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e6:68:48:f1:3d:43:c6:06:13:c0:3e:cb:27: 85:06:d1:0f:b9:ec:0e:0a:52:a6:ce:4c:b5:a6:2d: 92:94:f6:39:34:49:7e:60:2c:fe:e5:5b:5f:c1:8e: f4:d7:46:ad:b1:4b:f0:a2:15:4b:e3:51:a5:6e:11: a1:11:c0:9c:ca:41:bc:1a:a5:ce:12:76:94:ed:14: 7c:e2:d1:cf:29:d8:f3:ac:c6:b7:c8:ad:24:46:41: bc:a5:cd:88:26:11:92:62:b7:d6:1d:26:86:40:80: 8d:f2:4f:7e:c1:ef:bc:3c:7b:ad:a5:a6:70:d8:fa: 6d:47:99:9b:2a:68:ad:17:35:4f:b0:51:5d:22:a4: f6:6e:de:7d:1f:4d:9e:70:a6:b5:2d:5a:0f:b3:43: c0:0e:ed:28:ff:95:a3:68:39:48:05:c3:e0:cc:89: cc:83:ef:1b:6b:64:9c:8c:b1:31:5e:e2:61:81:5a: b1:ab:3b:ad:79:b6:fc:2a:38:ee:72:82:9a:7e:db: 0b:fe:b8:b1:3f:cd:a3:66:a0:c9:b2:b8:b2:55:d1: 05:8c:c6:61:2c:5f:6d:06:4d:03:40:d9:89:05:c2: fa:cb:32:1d:91:20:73:47:6d:02:c5:4e:58:85:07: bc:30:38:62:33:51:3a:25:b4:a5:45:33:8e:92:7e: a1:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:A2:FB:FA:98:40:A5:6F:02:D5:4C:31:23:D8:76:25:4C:6A:F5:E2 X509v3 Authority Key Identifier: keyid:BA:89:01:4E:BC:49:4B:67:FD:8B:3F:82:E8:B3:8E:F6:F6:C5:72:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uokBTrxJS2f9iz-C6LOO9vbFck0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:d5:a2:ac:e4:cd:c3:82:3b:29:12:e3:e7:00:fe:52:a0:39: 6b:75:cc:87:3c:1c:77:da:8e:3d:aa:ae:e8:e3:d5:89:dd:bd: 78:d8:3a:65:39:e9:17:77:87:e5:ae:b7:7a:f0:6a:a9:4f:f8: da:bc:35:7a:25:06:d6:08:13:e5:f8:69:53:02:eb:3b:da:76: b2:5d:e0:a3:a6:23:5f:e4:ee:ef:a8:d1:7f:f1:87:4f:99:c2: 43:8f:0e:88:dd:4d:00:e7:29:ef:df:fc:7d:93:29:de:86:d2: cc:a1:1b:53:65:35:7a:02:e1:7f:37:bf:48:33:09:62:c3:5d: f9:c9:12:3a:c2:dc:4a:b2:f0:5a:5d:c7:c8:26:00:b9:6b:f7: 14:36:13:ae:09:7f:e1:78:a9:3d:23:58:f6:f1:29:10:59:36: 58:fb:6a:d5:98:2e:7e:65:85:23:48:51:f0:51:b7:71:2a:63: 69:ed:a8:6b:ea:b8:19:dd:3f:04:db:19:8d:c4:26:82:26:f8: 05:c7:85:9d:26:73:4c:29:a2:bc:b0:b3:bc:d0:c8:8e:22:0c: ba:7d:95:73:ae:61:2e:68:81:4e:89:4f:ae:60:25:42:2d:42: 47:c3:71:bd:3b:30:c2:1b:c8:ec:e9:1b:fd:33:9b:b0:86:4b: 56:79:28:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRFQzcxMTAvBgNVBAUTKEJBODkwMTRFQkM0OTRCNjdGRDhCM0Y4MkU4QjM4RUY2 RjZDNTcyNEQwHhcNMjUwNDI1MDQyNzQzWhcNMjUwNTAyMDQyNzQzWjAYMRYwFAYD VQQDEw02ODBiMGY0MC1hNTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyuZoSPE9Q8YGE8A+yyeFBtEPuewOClKmzky1pi2SlPY5NEl+YCz+5VtfwY70 10atsUvwohVL41GlbhGhEcCcykG8GqXOEnaU7RR84tHPKdjzrMa3yK0kRkG8pc2I JhGSYrfWHSaGQICN8k9+we+8PHutpaZw2PptR5mbKmitFzVPsFFdIqT2bt59H02e cKa1LVoPs0PADu0o/5WjaDlIBcPgzInMg+8ba2ScjLExXuJhgVqxqzutebb8Kjju coKaftsL/rixP82jZqDJsriyVdEFjMZhLF9tBk0DQNmJBcL6yzIdkSBzR20CxU5Y hQe8MDhiM1E6JbSlRTOOkn6h8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBii+/qY QKVvAtVMMSPYdiVMavXiMB8GA1UdIwQYMBaAFLqJAU68SUtn/Ys/guizjvb2xXJN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEVDNy83NTc1Nzg3MEJG RTUxMUVFQUFDRTQzMTJDNEY5QUUwMi91b2tCVHJ4SlMyZjlpei1DNkxPTzl2YkZj azAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Vva0JUcnhKUzJmOWl6LUM2TE9POXZiRmNrMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEVDNy83NTc1Nzg3MEJGRTUxMUVFQUFDRTQzMTJDNEY5QUUwMi91b2tCVHJ4SlMy Zjlpei1DNkxPTzl2YkZjazAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBt1aKs5M3DgjspEuPnAP5SoDlrdcyHPBx32o49qq7o49WJ3b142Dpl OekXd4flrrd68GqpT/javDV6JQbWCBPl+GlTAus72nayXeCjpiNf5O7vqNF/8YdP mcJDjw6I3U0A5ynv3/x9kynehtLMoRtTZTV6AuF/N79IMwliw135yRI6wtxKsvBa XcfIJgC5a/cUNhOuCX/heKk9I1j28SkQWTZY+2rVmC5+ZYUjSFHwUbdxKmNp7ahr 6rgZ3T8E2xmNxCaCJvgFx4WdJnNMKaK8sLO80MiOIgy6fZVzrmEuaIFOiU+uYCVC LUJHw3G9OzDCG8js6Rv9M5uwhktWeSgA -----END CERTIFICATE-----Generated at Fri Apr 25 08:25:08 2025 by rpki-client on console.sobornost.net