$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBBC4/3C4B01321F9C11EC9094F05DC4F9AE02/UNqjonFb7c_nFOVthUH381hubvc.mft File: UNqjonFb7c_nFOVthUH381hubvc.mft (raw, json) Hash identifier: lHM5CTXPldWxzEYrig6nWr9yWZAgmQWaqfsIEFQ5Gs4= Subject key identifier: 85:34:AE:8B:93:3A:6F:D2:80:67:57:02:31:48:B9:64:DA:71:7C:F9 Authority key identifier: 50:DA:A3:A2:71:5B:ED:CF:E7:14:E5:6D:85:41:F7:F3:58:6E:6E:F7 Certificate issuer: /CN=A91CBBC4/serialNumber=50DAA3A2715BEDCFE714E56D8541F7F3586E6EF7 Certificate serial: 04CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UNqjonFb7c_nFOVthUH381hubvc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBBC4/3C4B01321F9C11EC9094F05DC4F9AE02/UNqjonFb7c_nFOVthUH381hubvc.mft Manifest number: 04C4 Signing time: Sat 26 Apr 2025 23:29:23 +0000 Manifest this update: Sat 26 Apr 2025 23:29:23 +0000 Manifest next update: Sat 03 May 2025 23:29:23 +0000 Files and hashes: 1: UNqjonFb7c_nFOVthUH381hubvc.crl (hash: vwZllioOATRFmBDjy2yadAexZdbVZiv5c4KcgXSZQh0=) 2: 8E8A375A1FA211EC8159E249C4F9AE02.roa (hash: UmJY1BD67VDnKp5rZ226vLsxoH0ZrDVh7W0eseZRq3E=) 3: 2B6A29201FA011ECB867890CC4F9AE02.roa (hash: 4+mLuZV5Nt0cl9Ubgj32YK1pqSi8VCWk8bD6pptyrXU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBBC4/3C4B01321F9C11EC9094F05DC4F9AE02/UNqjonFb7c_nFOVthUH381hubvc.crl rsync://rpki.apnic.net/member_repository/A91CBBC4/3C4B01321F9C11EC9094F05DC4F9AE02/UNqjonFb7c_nFOVthUH381hubvc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UNqjonFb7c_nFOVthUH381hubvc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 23:29:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1228 (0x4cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBBC4, serialNumber=50DAA3A2715BEDCFE714E56D8541F7F3586E6EF7 Validity Not Before: Apr 26 23:29:23 2025 GMT Not After : May 3 23:29:23 2025 GMT Subject: CN=680d6c53-e9f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5e:c8:da:0b:8d:3f:fd:dc:4d:c8:7f:d0:f1: 7e:de:30:c9:7b:5d:2e:43:e5:21:1e:91:89:3d:b1: d1:2b:28:b5:90:77:01:ac:4e:21:c6:b4:68:e0:f0: 5f:62:4d:b5:d1:6a:21:be:49:bc:6d:44:bd:a7:df: aa:43:af:6d:91:33:32:eb:a3:d5:7d:6e:8c:2e:82: d0:95:ec:49:61:fd:76:39:7c:dc:4c:73:d3:91:ed: 24:6c:93:7e:f0:b4:50:a1:c4:01:d5:89:b3:9a:96: a1:4b:39:4e:87:83:c6:2e:f2:15:b6:36:a2:6c:5f: d3:fb:85:ff:6a:e5:b1:be:46:7d:ed:b9:33:18:d0: 42:ac:9f:45:01:82:e1:c1:d9:d2:cd:26:27:83:0c: 75:4d:7d:60:d9:f4:c5:b3:31:8c:b0:05:8b:33:76: 65:0e:09:85:5d:1b:e7:11:4e:d0:eb:57:d4:01:c9: b3:9d:0a:08:2c:8c:55:60:a8:4c:67:ca:7d:6c:c0: 08:c9:9e:8e:35:25:3d:8d:5d:74:56:dd:31:68:8f: a3:9b:16:83:92:6f:8b:c9:7f:9c:ba:ed:47:e2:38: da:17:83:de:b0:b9:ac:d8:8e:de:46:cf:0c:bd:e3: de:f3:f5:6e:cc:14:9f:8e:d7:e3:c2:c4:3b:6c:8e: c4:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:34:AE:8B:93:3A:6F:D2:80:67:57:02:31:48:B9:64:DA:71:7C:F9 X509v3 Authority Key Identifier: keyid:50:DA:A3:A2:71:5B:ED:CF:E7:14:E5:6D:85:41:F7:F3:58:6E:6E:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBBC4/3C4B01321F9C11EC9094F05DC4F9AE02/UNqjonFb7c_nFOVthUH381hubvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UNqjonFb7c_nFOVthUH381hubvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBBC4/3C4B01321F9C11EC9094F05DC4F9AE02/UNqjonFb7c_nFOVthUH381hubvc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption da:ac:1d:69:19:af:4b:4e:28:1d:4a:8f:2f:6e:47:98:85:c9: 31:bb:32:db:0b:2c:30:94:82:ba:c0:d4:12:47:50:f9:74:20: 47:95:ca:bd:b4:11:0d:09:c5:bc:bf:79:90:70:59:07:1c:8c: b7:e5:50:f0:3f:e8:40:b8:23:18:2d:83:51:bb:05:51:cb:b5: 57:ce:67:08:3c:e1:c0:6d:95:25:4c:aa:a9:bd:1d:47:63:8b: ce:21:04:7d:63:5d:f1:64:b5:8c:82:3d:b2:ec:c9:8a:df:7c: ce:7c:92:f8:83:45:37:a2:68:ab:ce:ff:06:8a:da:d9:82:bf: a0:58:1e:60:81:2d:ae:c1:ba:d6:2d:76:18:0d:59:23:2b:e7: 2f:4f:d3:da:8c:1a:3e:31:b9:a3:2d:7f:1c:36:3f:63:50:43: 74:32:6b:97:d6:f6:4a:28:a5:b4:58:45:10:90:1b:8b:2f:10: c6:3f:08:34:e8:60:28:6a:f4:67:dd:fb:4a:cb:29:89:11:5e: 58:2d:0b:75:4e:e5:a2:d3:39:a6:0c:3a:db:02:07:b2:34:a3: 94:57:e4:81:08:69:4c:94:a3:42:bf:3b:22:36:f1:91:24:0f: 65:5f:e1:2a:f3:10:d5:48:3d:19:db:56:d9:9e:ce:95:d2:70: 9d:33:45:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JCQzQxMTAvBgNVBAUTKDUwREFBM0EyNzE1QkVEQ0ZFNzE0RTU2RDg1NDFGN0Yz NTg2RTZFRjcwHhcNMjUwNDI2MjMyOTIzWhcNMjUwNTAzMjMyOTIzWjAYMRYwFAYD VQQDEw02ODBkNmM1My1lOWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv17I2guNP/3cTch/0PF+3jDJe10uQ+UhHpGJPbHRKyi1kHcBrE4hxrRo4PBf Yk210Wohvkm8bUS9p9+qQ69tkTMy66PVfW6MLoLQlexJYf12OXzcTHPTke0kbJN+ 8LRQocQB1YmzmpahSzlOh4PGLvIVtjaibF/T+4X/auWxvkZ97bkzGNBCrJ9FAYLh wdnSzSYngwx1TX1g2fTFszGMsAWLM3ZlDgmFXRvnEU7Q61fUAcmznQoILIxVYKhM Z8p9bMAIyZ6ONSU9jV10Vt0xaI+jmxaDkm+LyX+cuu1H4jjaF4PesLms2I7eRs8M vePe8/VuzBSfjtfjwsQ7bI7EmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIU0rouT Om/SgGdXAjFIuWTacXz5MB8GA1UdIwQYMBaAFFDao6JxW+3P5xTlbYVB9/NYbm73 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkJDNC8zQzRCMDEzMjFG OUMxMUVDOTA5NEYwNURDNEY5QUUwMi9VTnFqb25GYjdjX25GT1Z0aFVIMzgxaHVi dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VOcWpvbkZiN2NfbkZPVnRoVUgzODFodWJ2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkJDNC8zQzRCMDEzMjFGOUMxMUVDOTA5NEYwNURDNEY5QUUwMi9VTnFqb25GYjdj X25GT1Z0aFVIMzgxaHVidmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDarB1pGa9LTigdSo8vbkeYhckxuzLbCywwlIK6wNQSR1D5dCBHlcq9 tBENCcW8v3mQcFkHHIy35VDwP+hAuCMYLYNRuwVRy7VXzmcIPOHAbZUlTKqpvR1H Y4vOIQR9Y13xZLWMgj2y7MmK33zOfJL4g0U3omirzv8GitrZgr+gWB5ggS2uwbrW LXYYDVkjK+cvT9PajBo+MbmjLX8cNj9jUEN0MmuX1vZKKKW0WEUQkBuLLxDGPwg0 6GAoavRn3ftKyymJEV5YLQt1TuWi0zmmDDrbAgeyNKOUV+SBCGlMlKNCvzsiNvGR JA9lX+Eq8xDVSD0Z21bZns6V0nCdM0Um -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:11 2025 by rpki-client on console.sobornost.net