$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.mft File: UjNwqBpuUUYYrnypeV_dEQs1Djc.mft (raw, json) Hash identifier: h5ytSWKZDZEOfbly61zXm3MHWnnxHk4xWaO69I/vjxo= Subject key identifier: EE:D8:61:83:19:41:D1:9B:69:6D:22:46:E7:A5:E8:95:F3:25:89:04 Authority key identifier: 52:33:70:A8:1A:6E:51:46:18:AE:7C:A9:79:5F:DD:11:0B:35:0E:37 Certificate issuer: /CN=A91C6CB6/serialNumber=523370A81A6E514618AE7CA9795FDD110B350E37 Certificate serial: 0C7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UjNwqBpuUUYYrnypeV_dEQs1Djc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.mft Manifest number: 0C65 Signing time: Mon 28 Apr 2025 18:33:46 +0000 Manifest this update: Mon 28 Apr 2025 18:33:45 +0000 Manifest next update: Mon 05 May 2025 18:33:45 +0000 Files and hashes: 1: UjNwqBpuUUYYrnypeV_dEQs1Djc.crl (hash: o3/k+hjwB2B6pjnQrKJWUYJRcA0urTthfBxx3mK4iCk=) 2: 04E274DA27CB11EE8FA6F46CC4F9AE02.roa (hash: QC+kAoIXXpY6brDwehpJKK1cCBvEWnBsopkp3/fuZEY=) 3: E683FA78277E11EE9D54C13AC4F9AE02.roa (hash: w0i/ARt9lCVRkjFZbSD4igkj3UoeypjyUlDGFiTsJMI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.crl rsync://rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UjNwqBpuUUYYrnypeV_dEQs1Djc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 18:27:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3195 (0xc7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6CB6, serialNumber=523370A81A6E514618AE7CA9795FDD110B350E37 Validity Not Before: Apr 28 18:33:45 2025 GMT Not After : May 5 18:33:45 2025 GMT Subject: CN=680fca09-f55a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:39:2a:42:62:ba:c3:29:53:b9:0f:54:f0:b5: 88:d0:40:2c:59:89:d3:ab:6f:df:55:fd:9a:f3:1e: 97:a6:52:56:7c:b0:81:56:55:8d:f8:64:e7:2c:42: 6d:83:6f:32:21:25:12:b0:e9:7d:f7:68:59:90:9c: fb:d6:2f:87:36:b4:a7:5e:e3:66:fe:a4:e3:1f:f1: 6e:69:79:0b:6f:4b:f0:93:de:e9:17:3b:14:ba:b5: f4:d8:f1:4d:30:b3:24:12:f9:ac:fb:6f:99:b4:85: ac:54:45:e3:6a:a0:63:dc:56:70:d0:8b:ab:2c:08: 96:98:f8:1f:0b:d0:91:61:ff:66:e0:08:2f:5e:46: 45:a5:2f:58:54:34:08:1c:de:39:2c:47:68:db:d4: 1d:86:5e:ba:9e:ad:1b:d1:d1:71:fd:89:5b:0b:20: b2:34:f8:71:cf:82:29:e2:59:a2:22:9b:dc:24:34: 77:9d:ce:b1:7a:ca:79:d9:9f:db:a9:38:76:3d:62: 80:58:34:98:e1:f5:9b:96:91:d5:6d:47:10:ed:e7: 1e:2f:09:70:36:16:52:6f:70:b5:78:71:2e:8e:ae: 20:3b:30:22:90:02:ac:87:42:44:3e:03:57:d8:56: d1:17:b8:65:b5:e6:31:ed:04:de:4d:a6:4b:8f:fb: ad:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:D8:61:83:19:41:D1:9B:69:6D:22:46:E7:A5:E8:95:F3:25:89:04 X509v3 Authority Key Identifier: keyid:52:33:70:A8:1A:6E:51:46:18:AE:7C:A9:79:5F:DD:11:0B:35:0E:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UjNwqBpuUUYYrnypeV_dEQs1Djc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:20:73:f9:6e:cd:3c:3b:94:fd:55:f7:19:7c:cd:f2:c4:90: e1:35:6f:43:95:4d:fa:59:d8:c5:b2:02:62:35:68:72:26:d1: af:2f:10:5a:c8:f6:39:ce:f9:a3:61:e8:86:64:af:02:2b:c3: 41:af:7a:37:14:e0:83:ab:ad:36:06:51:01:15:af:81:3c:bc: 75:9b:87:d6:ca:7d:39:fe:35:3e:0b:8c:02:0a:4c:f5:d2:d8: b7:d7:6c:da:f3:03:3b:52:f0:ba:20:9a:44:27:0b:7b:29:94: 70:20:bd:8d:68:64:2e:d2:b0:be:9b:e2:58:4c:1e:0f:09:83: 8b:b1:6b:15:d2:81:a7:18:73:ae:63:ff:7f:b9:34:60:fe:5f: 37:c4:5d:81:a9:49:17:37:b9:88:98:b2:74:26:57:14:d6:46: 68:4b:a5:8d:f3:68:26:11:03:20:7f:c4:60:c7:cf:ff:29:a8: f3:e9:a5:cd:92:8c:79:89:20:4d:c7:24:ad:8e:88:d2:82:1b: 42:d5:58:bb:e7:94:fc:7a:a3:91:bb:be:9d:17:56:d1:9a:3a: ca:af:d2:54:d3:c7:7d:43:5c:1a:9a:29:f1:38:98:1c:b8:be: f6:06:83:bf:15:de:33:7b:07:2e:2f:d0:2d:9a:67:86:f2:42: 75:aa:f4:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZDQjYxMTAvBgNVBAUTKDUyMzM3MEE4MUE2RTUxNDYxOEFFN0NBOTc5NUZERDEx MEIzNTBFMzcwHhcNMjUwNDI4MTgzMzQ1WhcNMjUwNTA1MTgzMzQ1WjAYMRYwFAYD VQQDEw02ODBmY2EwOS1mNTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvTkqQmK6wylTuQ9U8LWI0EAsWYnTq2/fVf2a8x6XplJWfLCBVlWN+GTnLEJt g28yISUSsOl992hZkJz71i+HNrSnXuNm/qTjH/FuaXkLb0vwk97pFzsUurX02PFN MLMkEvms+2+ZtIWsVEXjaqBj3FZw0IurLAiWmPgfC9CRYf9m4AgvXkZFpS9YVDQI HN45LEdo29Qdhl66nq0b0dFx/YlbCyCyNPhxz4Ip4lmiIpvcJDR3nc6xesp52Z/b qTh2PWKAWDSY4fWblpHVbUcQ7eceLwlwNhZSb3C1eHEujq4gOzAikAKsh0JEPgNX 2FbRF7hlteYx7QTeTaZLj/utkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO7YYYMZ QdGbaW0iRuel6JXzJYkEMB8GA1UdIwQYMBaAFFIzcKgablFGGK58qXlf3RELNQ43 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkNCNi8yQTRGNTc1RUZF MTQxMUU5ODFDMjY1NTlDNEY5QUUwMi9Vak53cUJwdVVVWVlybnlwZVZfZEVRczFE amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VqTndxQnB1VVVZWXJueXBlVl9kRVFzMURqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkNCNi8yQTRGNTc1RUZFMTQxMUU5ODFDMjY1NTlDNEY5QUUwMi9Vak53cUJwdVVV WVlybnlwZVZfZEVRczFEamMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQIHP5bs08O5T9VfcZfM3yxJDhNW9DlU36WdjFsgJiNWhyJtGvLxBa yPY5zvmjYeiGZK8CK8NBr3o3FOCDq602BlEBFa+BPLx1m4fWyn05/jU+C4wCCkz1 0ti312za8wM7UvC6IJpEJwt7KZRwIL2NaGQu0rC+m+JYTB4PCYOLsWsV0oGnGHOu Y/9/uTRg/l83xF2BqUkXN7mImLJ0JlcU1kZoS6WN82gmEQMgf8Rgx8//Kajz6aXN kox5iSBNxyStjojSghtC1Vi755T8eqORu76dF1bRmjrKr9JU08d9Q1waminxOJgc uL72BoO/Fd4zewcuL9AtmmeG8kJ1qvQ7 -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:58 2025 by rpki-client on console.sobornost.net