$ rpki-client -vvf rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.mft File: CqcW6oHMxdteS6chFMNCmhnW2V8.mft (raw, json) Hash identifier: sYCZF3LRehgCCemH1p6dXzPqsG/8oYjr6bCok3THOwI= Subject key identifier: F1:3D:AB:E0:15:06:51:6C:39:8D:07:1B:74:AD:28:A1:51:C6:9D:58 Authority key identifier: 0A:A7:16:EA:81:CC:C5:DB:5E:4B:A7:21:14:C3:42:9A:19:D6:D9:5F Certificate issuer: /CN=A91CED30/serialNumber=0AA716EA81CCC5DB5E4BA72114C3429A19D6D95F Certificate serial: F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqcW6oHMxdteS6chFMNCmhnW2V8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.mft Manifest number: F5 Signing time: Sun 27 Apr 2025 04:06:54 +0000 Manifest this update: Sun 27 Apr 2025 04:06:53 +0000 Manifest next update: Sun 04 May 2025 04:06:53 +0000 Files and hashes: 1: CqcW6oHMxdteS6chFMNCmhnW2V8.crl (hash: PXgLbbu0ZalSo43cOacO8rCbSiagG87S9SCL7QVkfkc=) 2: E188F6AEAE1F11EE9E818D16C4F9AE02.roa (hash: pJb5BTsbuqpgQP5Gvhc/gW9a2gX+v1FlOBgvzyj/io0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.crl rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqcW6oHMxdteS6chFMNCmhnW2V8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 247 (0xf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CED30, serialNumber=0AA716EA81CCC5DB5E4BA72114C3429A19D6D95F Validity Not Before: Apr 27 04:06:53 2025 GMT Not After : May 4 04:06:53 2025 GMT Subject: CN=680dad5e-8a91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2e:76:52:1e:1b:78:6d:6f:d3:d7:90:97:ce: 73:83:94:81:04:f7:ae:de:c3:1e:ff:d7:68:79:e6: 5e:74:89:28:24:19:4b:c8:47:45:2e:69:1d:b7:27: 29:a0:da:d3:95:7e:98:e4:ee:db:bf:a8:77:bb:b1: 8d:fc:18:00:14:d0:29:cd:1d:9b:0a:e0:30:c4:b6: 92:42:fc:f8:c8:3e:53:70:9e:99:a5:9a:be:e5:2b: 53:bf:50:de:8e:85:93:40:65:7c:95:92:e0:6b:c6: cd:16:91:7c:29:3c:4c:1c:d0:98:e5:4c:7b:58:b5: c5:fc:3b:0e:f2:d5:b4:90:68:bc:69:f8:e0:35:12: 85:62:c3:7a:25:01:e8:8e:2e:4d:1b:9b:58:b9:63: 21:53:80:a5:35:99:30:3e:d1:f0:1d:0c:00:7f:ca: d7:89:ab:1f:3b:31:02:58:3e:ea:a2:4e:81:80:81: 20:80:2f:b7:e2:44:00:60:88:7d:53:b6:12:16:96: f5:22:c4:01:b3:8e:ff:88:6a:bc:87:56:51:54:50: 5e:50:d3:15:bc:c2:d3:77:6d:df:b5:81:e5:c9:6e: 56:91:e7:d4:32:5b:39:d3:b1:6f:bd:8d:71:fe:ff: 51:c0:5a:f1:25:15:86:62:93:be:61:c7:c3:fd:6d: 6a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:3D:AB:E0:15:06:51:6C:39:8D:07:1B:74:AD:28:A1:51:C6:9D:58 X509v3 Authority Key Identifier: keyid:0A:A7:16:EA:81:CC:C5:DB:5E:4B:A7:21:14:C3:42:9A:19:D6:D9:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqcW6oHMxdteS6chFMNCmhnW2V8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:32:06:90:36:b1:64:62:b1:bb:b5:8c:b5:3b:41:0c:df:91: bc:5b:75:88:d0:32:eb:3a:a4:01:84:d9:a5:c9:54:44:af:ff: dd:2e:18:ae:95:2d:a6:55:b3:75:21:12:9a:58:c1:86:a7:14: 00:5a:6d:00:49:07:1e:27:d8:d7:4b:f9:35:df:81:0f:51:73: f5:7d:29:7a:c2:e5:b1:c8:63:36:72:7c:12:10:ed:b5:4b:20: 7a:30:33:13:f7:bb:a1:80:66:36:8c:e4:20:88:e9:59:74:49: b7:4b:b3:5a:bb:ef:f0:b6:06:c3:7e:99:a3:ef:73:5e:37:ac: e9:60:1f:e2:b6:3d:49:90:34:bc:e1:70:50:f6:7a:c1:fe:ed: ac:65:51:c6:dd:3e:74:97:29:d3:83:9c:53:8a:8a:86:fc:4e: 0c:ce:a6:d2:63:cd:e2:bb:13:71:48:26:25:d6:d2:55:75:07: 43:9f:04:70:96:e7:ec:44:69:5d:58:26:0d:52:8c:f2:f0:5a: b5:e4:b0:3e:1c:3d:0f:d9:91:44:b6:64:ef:d7:f8:2a:96:2e: 68:fe:3a:5f:29:55:95:ab:71:a7:61:ac:2f:18:ed:0a:21:b6: 6e:32:2c:e5:be:2e:f0:2e:b8:c1:05:2d:4d:40:f1:1c:52:5e: c5:7a:eb:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VEMzAxMTAvBgNVBAUTKDBBQTcxNkVBODFDQ0M1REI1RTRCQTcyMTE0QzM0MjlB MTlENkQ5NUYwHhcNMjUwNDI3MDQwNjUzWhcNMjUwNTA0MDQwNjUzWjAYMRYwFAYD VQQDEw02ODBkYWQ1ZS04YTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvC52Uh4beG1v09eQl85zg5SBBPeu3sMe/9doeeZedIkoJBlLyEdFLmkdtycp oNrTlX6Y5O7bv6h3u7GN/BgAFNApzR2bCuAwxLaSQvz4yD5TcJ6ZpZq+5StTv1De joWTQGV8lZLga8bNFpF8KTxMHNCY5Ux7WLXF/DsO8tW0kGi8afjgNRKFYsN6JQHo ji5NG5tYuWMhU4ClNZkwPtHwHQwAf8rXiasfOzECWD7qok6BgIEggC+34kQAYIh9 U7YSFpb1IsQBs47/iGq8h1ZRVFBeUNMVvMLTd23ftYHlyW5WkefUMls507FvvY1x /v9RwFrxJRWGYpO+YcfD/W1qCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPE9q+AV BlFsOY0HG3StKKFRxp1YMB8GA1UdIwQYMBaAFAqnFuqBzMXbXkunIRTDQpoZ1tlf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUQzMC9DNzc0NTVDMEFF MUUxMUVFQTdFQTBBNzdDNEY5QUUwMi9DcWNXNm9ITXhkdGVTNmNoRk1OQ21oblcy VjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NxY1c2b0hNeGR0ZVM2Y2hGTU5DbWhuVzJWOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUQzMC9DNzc0NTVDMEFFMUUxMUVFQTdFQTBBNzdDNEY5QUUwMi9DcWNXNm9ITXhk dGVTNmNoRk1OQ21oblcyVjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaMgaQNrFkYrG7tYy1O0EM35G8W3WI0DLrOqQBhNmlyVREr//dLhiu lS2mVbN1IRKaWMGGpxQAWm0ASQceJ9jXS/k134EPUXP1fSl6wuWxyGM2cnwSEO21 SyB6MDMT97uhgGY2jOQgiOlZdEm3S7Nau+/wtgbDfpmj73NeN6zpYB/itj1JkDS8 4XBQ9nrB/u2sZVHG3T50lynTg5xTioqG/E4MzqbSY83iuxNxSCYl1tJVdQdDnwRw lufsRGldWCYNUozy8Fq15LA+HD0P2ZFEtmTv1/gqli5o/jpfKVWVq3GnYawvGO0K IbZuMizlvi7wLrjBBS1NQPEcUl7Feusx -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:56 2025 by rpki-client on console.sobornost.net