$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8307/3432F60CBECD11EF98C74132C4F9AE02/PdCVvno70d2CniomSfx-gafv40w.mft File: PdCVvno70d2CniomSfx-gafv40w.mft (raw, json) Hash identifier: FejHSXNlgJejnyecosUeCBH7u1we3tysxII3Y4hUlFE= Subject key identifier: 36:2D:46:A1:D5:65:20:FA:32:57:15:09:A3:09:F7:78:E2:2C:4F:18 Authority key identifier: 3D:D0:95:BE:7A:3B:D1:DD:82:9E:2A:26:49:FC:7E:81:A7:EF:E3:4C Certificate issuer: /CN=A91C8307/serialNumber=3DD095BE7A3BD1DD829E2A2649FC7E81A7EFE34C Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdCVvno70d2CniomSfx-gafv40w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8307/3432F60CBECD11EF98C74132C4F9AE02/PdCVvno70d2CniomSfx-gafv40w.mft Manifest number: 44 Signing time: Sun 27 Apr 2025 06:15:22 +0000 Manifest this update: Sun 27 Apr 2025 06:15:21 +0000 Manifest next update: Sun 04 May 2025 06:15:21 +0000 Files and hashes: 1: PdCVvno70d2CniomSfx-gafv40w.crl (hash: C3uKK5Xb838GJPgk7skp+UymlqhQC2nhw3JRgFOJYcQ=) 2: DEDB3932BED411EF835BB47AC4F9AE02.roa (hash: O2sa7pTiQKdOhkw1Yh9cM+13JLJmRbo0IeSALJBybOk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8307/3432F60CBECD11EF98C74132C4F9AE02/PdCVvno70d2CniomSfx-gafv40w.crl rsync://rpki.apnic.net/member_repository/A91C8307/3432F60CBECD11EF98C74132C4F9AE02/PdCVvno70d2CniomSfx-gafv40w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdCVvno70d2CniomSfx-gafv40w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8307, serialNumber=3DD095BE7A3BD1DD829E2A2649FC7E81A7EFE34C Validity Not Before: Apr 27 06:15:21 2025 GMT Not After : May 4 06:15:21 2025 GMT Subject: CN=680dcb7a-947a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a4:08:1a:2a:23:f8:19:c3:32:12:60:4b:f2: 97:76:e3:06:88:6a:55:cb:07:e0:85:5c:5a:cd:6a: 35:8f:6f:07:2c:e7:ad:75:fc:e4:7f:a0:b1:2a:c3: 7f:de:6b:fc:48:98:91:58:ea:10:2a:c3:af:a5:0b: 98:ef:c3:eb:70:9b:a5:d1:73:98:d1:5b:80:7f:35: f5:0b:2b:a3:2c:3d:4e:5e:72:c4:d0:cf:27:d1:40: 21:6f:7a:e2:72:9a:f2:dc:a7:15:8a:35:da:49:df: e2:1a:ca:d9:a4:c4:0c:71:89:66:23:ef:8e:61:5a: 61:ae:2c:1e:80:e7:03:63:31:00:61:ad:16:5f:0a: a5:70:39:73:44:88:29:f7:96:23:85:74:bd:5b:77: 6b:69:ce:a8:a7:6e:15:45:77:14:d7:6f:e7:d7:58: 6c:da:3c:b3:d8:f1:de:e9:f5:e4:1e:00:70:b4:08: ce:1c:f2:b8:14:c8:b8:8e:9f:11:7d:18:12:06:7e: 22:2f:55:b6:21:d3:48:db:93:01:78:52:11:3a:cf: d2:4e:0f:5b:0c:23:e5:45:b5:54:e2:b7:32:e7:1b: 0f:8b:9b:ac:69:d8:36:89:13:dc:df:fd:7b:6a:56: b0:90:d8:9a:03:f3:b5:f7:46:93:85:36:ef:db:78: 2d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:2D:46:A1:D5:65:20:FA:32:57:15:09:A3:09:F7:78:E2:2C:4F:18 X509v3 Authority Key Identifier: keyid:3D:D0:95:BE:7A:3B:D1:DD:82:9E:2A:26:49:FC:7E:81:A7:EF:E3:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8307/3432F60CBECD11EF98C74132C4F9AE02/PdCVvno70d2CniomSfx-gafv40w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdCVvno70d2CniomSfx-gafv40w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8307/3432F60CBECD11EF98C74132C4F9AE02/PdCVvno70d2CniomSfx-gafv40w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:f9:35:11:d4:7b:42:df:02:92:3a:ba:da:de:a3:45:b8:25: fd:67:b6:27:4a:36:0b:33:de:87:21:55:49:07:03:af:9b:e5: 90:99:86:d0:74:f4:73:25:74:8f:4b:65:a3:34:2f:f0:9e:cb: 57:79:c0:f8:17:e8:63:77:92:2d:eb:9d:98:6b:d7:e1:b5:42: 4d:3e:ae:a3:e5:2a:2e:66:bf:57:73:c7:15:da:f4:72:e8:d2: e6:4f:26:75:3d:39:9d:46:4a:5f:19:e1:dd:ff:42:b4:7e:62: 78:14:04:5d:e8:f9:e8:a8:50:b2:88:6e:e6:e8:57:ef:ce:11: 38:db:1e:75:93:66:1b:36:d2:18:60:ea:d6:e7:43:0b:d1:c5: f9:33:c0:d7:db:d5:7a:45:46:56:5d:e4:1e:a5:ea:ca:49:d7: db:8c:62:21:5a:01:0d:de:12:01:b5:74:09:b9:7e:d4:c3:60: e5:1e:24:c7:a7:76:fd:32:a2:72:d3:0c:fb:77:f7:e6:a5:73: 48:87:4e:da:27:aa:f6:34:56:7b:e2:9a:d2:2a:6c:9c:c8:1a: d2:80:5f:1c:d6:4a:b4:7e:c7:a6:91:40:bf:8b:c1:57:03:b4: 28:12:01:6a:85:99:1f:f9:a3:b8:11:7b:96:33:95:9f:cf:e9: 42:9b:6f:4c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD ODMwNzExMC8GA1UEBRMoM0REMDk1QkU3QTNCRDFERDgyOUUyQTI2NDlGQzdFODFB N0VGRTM0QzAeFw0yNTA0MjcwNjE1MjFaFw0yNTA1MDQwNjE1MjFaMBgxFjAUBgNV BAMTDTY4MGRjYjdhLTk0N2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCpAgaKiP4GcMyEmBL8pd24waIalXLB+CFXFrNajWPbwcs5611/OR/oLEqw3/e a/xImJFY6hAqw6+lC5jvw+twm6XRc5jRW4B/NfULK6MsPU5ecsTQzyfRQCFveuJy mvLcpxWKNdpJ3+IaytmkxAxxiWYj745hWmGuLB6A5wNjMQBhrRZfCqVwOXNEiCn3 liOFdL1bd2tpzqinbhVFdxTXb+fXWGzaPLPY8d7p9eQeAHC0CM4c8rgUyLiOnxF9 GBIGfiIvVbYh00jbkwF4UhE6z9JOD1sMI+VFtVTitzLnGw+Lm6xp2DaJE9zf/Xtq VrCQ2JoD87X3RpOFNu/beC3JAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNi1GodVl IPoyVxUJown3eOIsTxgwHwYDVR0jBBgwFoAUPdCVvno70d2CniomSfx+gafv40ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4MzA3LzM0MzJGNjBDQkVD RDExRUY5OEM3NDEzMkM0RjlBRTAyL1BkQ1Z2bm83MGQyQ25pb21TZngtZ2FmdjQw dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUGRDVnZubzcwZDJDbmlvbVNmeC1nYWZ2NDB3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4 MzA3LzM0MzJGNjBDQkVDRDExRUY5OEM3NDEzMkM0RjlBRTAyL1BkQ1Z2bm83MGQy Q25pb21TZngtZ2FmdjQwdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAz5NRHUe0LfApI6utreo0W4Jf1ntidKNgsz3ochVUkHA6+b5ZCZhtB0 9HMldI9LZaM0L/Cey1d5wPgX6GN3ki3rnZhr1+G1Qk0+rqPlKi5mv1dzxxXa9HLo 0uZPJnU9OZ1GSl8Z4d3/QrR+YngUBF3o+eioULKIbuboV+/OETjbHnWTZhs20hhg 6tbnQwvRxfkzwNfb1XpFRlZd5B6l6spJ19uMYiFaAQ3eEgG1dAm5ftTDYOUeJMen dv0yonLTDPt39+alc0iHTtonqvY0VnvimtIqbJzIGtKAXxzWSrR+x6aRQL+LwVcD tCgSAWqFmR/5o7gRe5YzlZ/P6UKbb0w= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:55 2025 by rpki-client on console.sobornost.net