$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.mft File: g4L2GIxKbdZpVNVxij2cz5uL-JU.mft (raw, json) Hash identifier: aceTrv4uRpmBIN40TscCSdAqv2sOHRWUGMvOXVbIQuU= Subject key identifier: 59:7D:27:CC:79:77:A9:B0:64:AA:AF:FE:9A:8D:2A:C2:B0:90:D7:A0 Authority key identifier: 83:82:F6:18:8C:4A:6D:D6:69:54:D5:71:8A:3D:9C:CF:9B:8B:F8:95 Certificate issuer: /CN=A91CB8BA/serialNumber=8382F6188C4A6DD66954D5718A3D9CCF9B8BF895 Certificate serial: 07D0 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/g4L2GIxKbdZpVNVxij2cz5uL-JU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.mft Manifest number: 07CA Signing time: Sat 26 Apr 2025 20:19:48 +0000 Manifest this update: Sat 26 Apr 2025 20:19:48 +0000 Manifest next update: Sat 03 May 2025 20:19:48 +0000 Files and hashes: 1: g4L2GIxKbdZpVNVxij2cz5uL-JU.crl (hash: vQO2Yxl8XvBT/k+x/JoWKAaEWaDX05mUN5XcobMqBtw=) 2: 21B96F2E7BC911EBABCF472DC4F9AE02.roa (hash: jfAjvDFneg9TxfVOqlYPDujvfvVSOSgnFYEvXUOG5OY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.crl rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/g4L2GIxKbdZpVNVxij2cz5uL-JU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:13:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2000 (0x7d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB8BA, serialNumber=8382F6188C4A6DD66954D5718A3D9CCF9B8BF895 Validity Not Before: Apr 26 20:19:48 2025 GMT Not After : May 3 20:19:48 2025 GMT Subject: CN=680d3fe4-500c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b3:4d:47:cc:ae:33:e8:22:72:77:da:ac:8e: 73:89:32:2c:83:12:22:c4:14:c9:92:65:53:e7:15: 86:e3:6a:05:28:4b:a2:a4:db:34:e6:88:d5:39:5c: 37:81:ab:cb:6d:6f:e6:78:06:c1:4b:e5:03:dd:f9: 03:ba:06:58:c9:7b:47:15:26:49:bc:24:80:a6:cd: 25:88:6d:c9:c7:d3:3d:be:f9:dc:ae:08:2e:fe:fa: 98:6a:16:ce:03:0a:0c:a0:25:7a:62:76:83:e1:7e: 94:19:22:ae:9b:2b:af:a5:39:eb:a0:a7:54:4a:16: b1:1b:4b:ec:3e:9f:33:87:ff:93:cb:cb:e2:00:f9: 67:a0:c2:99:e4:3f:89:4c:48:90:6d:68:4f:7e:56: 98:bb:4d:b3:ff:69:aa:11:e4:3a:54:f3:9c:28:00: a7:2d:74:00:8c:3c:4b:6b:2c:97:90:68:89:89:c3: 14:62:b7:43:5a:3b:b6:7b:ad:29:54:67:47:1d:4a: 62:ba:cb:0d:81:a9:b9:bd:3c:ea:1a:77:d9:12:d7: f7:73:52:8c:64:a3:a2:cc:2a:70:f0:2a:c1:42:07: 7d:ee:da:27:e0:f0:2a:3a:5d:5b:42:d6:82:dd:d5: db:dc:dc:7a:16:fc:b8:ae:53:8d:fc:00:c1:c5:7a: a6:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:7D:27:CC:79:77:A9:B0:64:AA:AF:FE:9A:8D:2A:C2:B0:90:D7:A0 X509v3 Authority Key Identifier: keyid:83:82:F6:18:8C:4A:6D:D6:69:54:D5:71:8A:3D:9C:CF:9B:8B:F8:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/g4L2GIxKbdZpVNVxij2cz5uL-JU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:16:ea:ff:e9:d0:91:db:3a:73:39:2b:ce:58:a7:32:09:35: 04:f7:01:ad:3d:d2:31:d0:3d:4e:c6:79:85:fd:15:7e:23:22: ec:48:03:5d:ef:76:0d:00:4b:b7:86:4c:77:b2:3a:e4:a5:1b: 7a:3e:62:34:6a:23:d1:cb:f6:6e:d9:19:c2:43:27:ef:8e:7a: e3:6f:63:f5:b0:65:70:fd:56:9d:d2:29:f9:fe:15:e6:24:5c: 81:dd:c1:b2:9d:58:9f:e7:25:5f:c2:02:7c:e8:8e:1d:be:18: c1:ef:67:86:b1:5e:c6:d2:2a:19:ed:e0:2b:57:df:fb:ac:00: 60:fb:10:f6:ee:86:b8:40:ef:07:f7:bf:93:88:e2:38:b4:b6: d8:78:ab:ee:5c:9f:5b:a5:8b:f0:d0:08:cd:da:8f:41:7a:b4: bd:a8:b4:74:74:3b:f7:71:e4:ec:04:f4:dc:d6:5e:a1:c8:61: 79:45:52:38:87:1d:bb:cf:b2:00:ec:32:32:cd:43:9b:3f:ad: 42:a7:ad:13:6e:03:78:80:53:a3:0e:c9:e8:43:fb:9b:2f:ef: 43:15:48:73:2d:cd:98:30:6a:05:14:82:99:47:57:89:b4:56: 90:b6:b2:cd:ea:d9:77:ea:15:4a:00:9d:e5:6b:8e:24:dc:17: ae:06:e2:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I4QkExMTAvBgNVBAUTKDgzODJGNjE4OEM0QTZERDY2OTU0RDU3MThBM0Q5Q0NG OUI4QkY4OTUwHhcNMjUwNDI2MjAxOTQ4WhcNMjUwNTAzMjAxOTQ4WjAYMRYwFAYD VQQDEw02ODBkM2ZlNC01MDBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0LNNR8yuM+gicnfarI5ziTIsgxIixBTJkmVT5xWG42oFKEuipNs05ojVOVw3 gavLbW/meAbBS+UD3fkDugZYyXtHFSZJvCSAps0liG3Jx9M9vvncrggu/vqYahbO AwoMoCV6YnaD4X6UGSKumyuvpTnroKdUShaxG0vsPp8zh/+Ty8viAPlnoMKZ5D+J TEiQbWhPflaYu02z/2mqEeQ6VPOcKACnLXQAjDxLayyXkGiJicMUYrdDWju2e60p VGdHHUpiussNgam5vTzqGnfZEtf3c1KMZKOizCpw8CrBQgd97ton4PAqOl1bQtaC 3dXb3Nx6Fvy4rlON/ADBxXqm2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFl9J8x5 d6mwZKqv/pqNKsKwkNegMB8GA1UdIwQYMBaAFIOC9hiMSm3WaVTVcYo9nM+bi/iV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjhCQS8yNTEwQjRFNkYw RkMxMUVBQjk4NUZBNUZDNEY5QUUwMi9nNEwyR0l4S2JkWnBWTlZ4aWoyY3o1dUwt SlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2c0TDJHSXhLYmRacFZOVnhpajJjejV1TC1KVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjhCQS8yNTEwQjRFNkYwRkMxMUVBQjk4NUZBNUZDNEY5QUUwMi9nNEwyR0l4S2Jk WnBWTlZ4aWoyY3o1dUwtSlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGFur/6dCR2zpzOSvOWKcyCTUE9wGtPdIx0D1OxnmF/RV+IyLsSANd 73YNAEu3hkx3sjrkpRt6PmI0aiPRy/Zu2RnCQyfvjnrjb2P1sGVw/Vad0in5/hXm JFyB3cGynVif5yVfwgJ86I4dvhjB72eGsV7G0ioZ7eArV9/7rABg+xD27oa4QO8H 97+TiOI4tLbYeKvuXJ9bpYvw0AjN2o9BerS9qLR0dDv3ceTsBPTc1l6hyGF5RVI4 hx27z7IA7DIyzUObP61Cp60TbgN4gFOjDsnoQ/ubL+9DFUhzLc2YMGoFFIKZR1eJ tFaQtrLN6tl36hVKAJ3la44k3BeuBuKi -----END CERTIFICATE-----Generated at Sun Apr 27 00:14:10 2025 by rpki-client on console.sobornost.net