$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.mft File: yOujNL19pukuZ8QIvQN4e66uDK0.mft (raw, json) Hash identifier: oe4jgT8lRiHVhtzGvmb5OnKjBBp/ge15uWbAxcaoxIc= Subject key identifier: AC:9F:31:1A:53:4F:5D:3F:DD:BF:BA:1C:D5:08:DF:AC:D2:59:34:C0 Authority key identifier: C8:EB:A3:34:BD:7D:A6:E9:2E:67:C4:08:BD:03:78:7B:AE:AE:0C:AD Certificate issuer: /CN=A91CFE07/serialNumber=C8EBA334BD7DA6E92E67C408BD03787BAEAE0CAD Certificate serial: 0D56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOujNL19pukuZ8QIvQN4e66uDK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.mft Manifest number: 0D41 Signing time: Mon 28 Apr 2025 18:13:36 +0000 Manifest this update: Mon 28 Apr 2025 18:13:36 +0000 Manifest next update: Mon 05 May 2025 18:13:36 +0000 Files and hashes: 1: yOujNL19pukuZ8QIvQN4e66uDK0.crl (hash: /2qJ/nQfZdqICtEN/3lSsxOou50oIZf+/AGYWZoVKEQ=) 2: A95EC0B2C9FA11EBB7F2E749C4F9AE02.roa (hash: h9Ek+uVHJkd43jpvXLhIeId4TZWOhn+0W2MAspUZuOw=) 3: A82C70A4C9FA11EBB7F2E749C4F9AE02.roa (hash: +QLq15+GCrbTMv3T/U18UwN/WHFJnfWgXMxuf5yq0ts=) 4: 226B7BC2AAC611EE9F22785DC4F9AE02.roa (hash: sy4Su4ASjc+OqwWE5jPxA/U7NJeDsxDapY34Q7SzDAE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.crl rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOujNL19pukuZ8QIvQN4e66uDK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 18:13:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3414 (0xd56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFE07, serialNumber=C8EBA334BD7DA6E92E67C408BD03787BAEAE0CAD Validity Not Before: Apr 28 18:13:36 2025 GMT Not After : May 5 18:13:36 2025 GMT Subject: CN=680fc550-9c82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:31:61:09:17:9d:f6:2e:cd:70:63:9d:45:c8: bb:1b:7f:94:49:56:cc:e3:f9:dc:eb:4a:92:d8:39: 41:bb:c1:30:32:bc:99:dc:f6:b2:09:a4:5c:c4:df: d8:e3:e2:62:5d:ee:d1:f3:24:28:ae:e5:26:16:db: b0:c0:0d:d6:03:a2:41:ad:63:45:c2:80:17:5d:c3: d5:a6:4d:74:eb:e1:eb:fa:5e:f2:89:96:e6:c9:7d: 26:84:4c:f3:47:24:c8:08:20:16:a8:7c:83:31:d5: 5e:96:fe:d9:12:77:99:f5:62:c7:ca:9c:15:c8:5b: de:93:52:6c:7f:32:e5:25:94:c6:db:0f:08:60:b3: e1:76:05:5f:ab:ad:9d:7e:5a:08:c9:d3:e2:9a:45: 37:99:46:6d:a6:66:89:dc:60:ef:55:a2:22:09:6b: 0e:dc:08:67:de:72:f8:ee:86:d3:72:f4:db:b8:45: f2:0b:a0:88:f5:48:bd:b1:05:81:c6:da:73:9a:ee: be:4e:48:59:b3:22:54:87:75:70:d1:e2:52:78:1a: 9d:80:4d:c8:ff:fe:8d:5f:98:7b:52:ac:35:c2:92: 78:fe:b5:e4:b2:e6:5b:71:ac:ce:1b:8f:04:0a:b3: c3:8b:fb:40:52:18:d9:20:e5:65:9e:20:86:fe:3f: 56:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:9F:31:1A:53:4F:5D:3F:DD:BF:BA:1C:D5:08:DF:AC:D2:59:34:C0 X509v3 Authority Key Identifier: keyid:C8:EB:A3:34:BD:7D:A6:E9:2E:67:C4:08:BD:03:78:7B:AE:AE:0C:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOujNL19pukuZ8QIvQN4e66uDK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:83:5c:a2:8d:59:6e:25:29:e3:29:c4:10:7d:62:97:f3:37: 1d:5a:6e:39:9a:05:8a:cd:c7:63:13:26:10:59:ee:33:90:29: bf:62:9e:b5:c9:8e:33:0c:b1:f5:17:d0:78:49:6e:99:46:23: ad:a1:22:b5:05:ed:5e:a2:0e:2b:3e:b4:04:af:f6:df:c3:e0: 0d:79:b4:f0:fb:8b:a0:66:25:93:c9:62:23:93:5d:7f:35:01: 95:54:0e:38:bd:8b:09:98:bd:f1:d8:46:65:19:66:9d:c2:ae: 33:d5:c9:71:cf:8e:c9:6d:35:8d:d4:15:e9:0e:1b:e7:ba:fc: c3:f6:a3:33:57:a4:7a:04:2e:24:f5:10:12:06:90:73:9a:bd: 2a:a7:9d:34:44:af:a4:8f:0b:c2:f2:cb:8a:38:4a:37:6b:8a: 69:40:9d:bb:e8:e8:23:32:4b:7a:56:aa:31:28:78:41:8f:98: f9:5c:d4:07:36:b6:45:29:cf:cc:3a:26:a3:35:ad:36:0d:f4: 53:37:8f:0e:66:51:6a:ff:77:5d:e9:fd:cb:6e:0d:29:f8:68: e8:c1:60:82:d3:c5:67:5f:a9:82:7f:fb:40:13:6f:71:43:2d: 26:14:bc:32:fe:ff:43:a3:d3:fb:5f:05:e0:24:43:d7:af:98: 4b:56:3b:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZFMDcxMTAvBgNVBAUTKEM4RUJBMzM0QkQ3REE2RTkyRTY3QzQwOEJEMDM3ODdC QUVBRTBDQUQwHhcNMjUwNDI4MTgxMzM2WhcNMjUwNTA1MTgxMzM2WjAYMRYwFAYD VQQDEw02ODBmYzU1MC05YzgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsjFhCRed9i7NcGOdRci7G3+USVbM4/nc60qS2DlBu8EwMryZ3PayCaRcxN/Y 4+JiXe7R8yQoruUmFtuwwA3WA6JBrWNFwoAXXcPVpk106+Hr+l7yiZbmyX0mhEzz RyTICCAWqHyDMdVelv7ZEneZ9WLHypwVyFvek1JsfzLlJZTG2w8IYLPhdgVfq62d floIydPimkU3mUZtpmaJ3GDvVaIiCWsO3Ahn3nL47obTcvTbuEXyC6CI9Ui9sQWB xtpzmu6+TkhZsyJUh3Vw0eJSeBqdgE3I//6NX5h7Uqw1wpJ4/rXksuZbcazOG48E CrPDi/tAUhjZIOVlniCG/j9W8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKyfMRpT T10/3b+6HNUI36zSWTTAMB8GA1UdIwQYMBaAFMjrozS9fabpLmfECL0DeHuurgyt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkUwNy85NjJDNEI3RUQy QkYxMUU5QTg0RDY2MjJDNEY5QUUwMi95T3VqTkwxOXB1a3VaOFFJdlFONGU2NnVE SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lPdWpOTDE5cHVrdVo4UUl2UU40ZTY2dURLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkUwNy85NjJDNEI3RUQyQkYxMUU5QTg0RDY2MjJDNEY5QUUwMi95T3VqTkwxOXB1 a3VaOFFJdlFONGU2NnVESzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZg1yijVluJSnjKcQQfWKX8zcdWm45mgWKzcdjEyYQWe4zkCm/Yp61 yY4zDLH1F9B4SW6ZRiOtoSK1Be1eog4rPrQEr/bfw+ANebTw+4ugZiWTyWIjk11/ NQGVVA44vYsJmL3x2EZlGWadwq4z1clxz47JbTWN1BXpDhvnuvzD9qMzV6R6BC4k 9RASBpBzmr0qp500RK+kjwvC8suKOEo3a4ppQJ276OgjMkt6VqoxKHhBj5j5XNQH NrZFKc/MOiajNa02DfRTN48OZlFq/3dd6f3Lbg0p+GjowWCC08VnX6mCf/tAE29x Qy0mFLwy/v9Do9P7XwXgJEPXr5hLVjuS -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:59 2025 by rpki-client on console.sobornost.net