$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/hXm-LYNFaC8nrucGK71O92ZOVxs.mft File: hXm-LYNFaC8nrucGK71O92ZOVxs.mft (raw, json) Hash identifier: Ay+yVvVekw04O34ZAbfacc9diayHx2ct1Ca/nsgXTzM= Subject key identifier: C2:59:DB:F5:C8:5F:48:F8:E7:57:47:C6:D0:CC:9C:D4:EE:5C:20:4A Authority key identifier: 85:79:BE:2D:83:45:68:2F:27:AE:E7:06:2B:BD:4E:F7:66:4E:57:1B Certificate issuer: /CN=A91D0B6B/serialNumber=8579BE2D8345682F27AEE7062BBD4EF7664E571B Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXm-LYNFaC8nrucGK71O92ZOVxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/hXm-LYNFaC8nrucGK71O92ZOVxs.mft Manifest number: 1A Signing time: Sun 27 Apr 2025 06:45:48 +0000 Manifest this update: Sun 27 Apr 2025 06:45:48 +0000 Manifest next update: Sun 04 May 2025 06:45:48 +0000 Files and hashes: 1: hXm-LYNFaC8nrucGK71O92ZOVxs.crl (hash: V1HnS+vUE1/7KWccjV8Jj0hBMfeKLXnYHSKYETUI7Gk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/hXm-LYNFaC8nrucGK71O92ZOVxs.crl rsync://rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/hXm-LYNFaC8nrucGK71O92ZOVxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXm-LYNFaC8nrucGK71O92ZOVxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0B6B, serialNumber=8579BE2D8345682F27AEE7062BBD4EF7664E571B Validity Not Before: Apr 27 06:45:48 2025 GMT Not After : May 4 06:45:48 2025 GMT Subject: CN=680dd29c-d2fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:39:bd:eb:51:b0:42:08:e3:e8:3a:a3:ff:fb: 01:4c:86:2e:e0:c0:db:36:48:03:02:0a:a7:73:32: 57:71:eb:5d:4d:3a:97:f4:c5:49:f1:cb:dc:7d:2c: 7d:5e:30:83:82:7e:1c:41:56:39:fd:e4:2c:7b:ce: 7b:2e:db:de:67:bb:24:d6:e7:3b:ba:4b:fd:4b:c5: 7b:c3:7c:4f:e2:f7:97:b3:c0:6a:45:58:ba:0e:fc: 48:50:a8:c7:0e:66:6b:3d:4b:06:0c:e4:86:6b:c3: 16:a4:37:21:98:56:56:44:d0:aa:8d:2d:59:d9:65: 33:51:a9:38:6a:d3:7c:f6:2b:8e:15:a7:20:7c:bc: 5a:99:d2:d5:4e:0e:3c:d1:1b:9a:92:9e:73:96:5d: 20:74:91:55:cd:57:16:10:52:41:68:15:78:21:4a: 22:47:b5:ea:6c:fc:e8:a6:e9:06:40:2c:61:12:34: d3:12:df:90:d4:68:05:74:f7:c6:3a:1e:c6:09:df: 97:31:aa:56:62:e9:71:9b:78:f4:6f:47:cd:96:c5: fa:f3:75:fa:73:04:9b:b9:87:2f:70:2d:40:f6:89: c7:67:ee:00:c3:87:46:ad:cd:d2:ce:d2:54:d8:e0: 30:c6:1a:71:3b:38:3c:c6:ba:a8:b1:2e:78:39:0d: 83:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:59:DB:F5:C8:5F:48:F8:E7:57:47:C6:D0:CC:9C:D4:EE:5C:20:4A X509v3 Authority Key Identifier: keyid:85:79:BE:2D:83:45:68:2F:27:AE:E7:06:2B:BD:4E:F7:66:4E:57:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/hXm-LYNFaC8nrucGK71O92ZOVxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXm-LYNFaC8nrucGK71O92ZOVxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/hXm-LYNFaC8nrucGK71O92ZOVxs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:38:fa:69:5a:e0:7b:ad:84:73:a5:cb:23:ee:8e:1a:73:46: 0e:db:b8:bc:a6:ac:27:69:33:da:88:74:b6:4f:f2:23:55:91: 6d:65:37:c9:6c:bc:fb:81:c7:e1:93:3f:3a:c0:39:d4:13:ff: fa:4d:29:b7:21:67:8a:1e:66:ed:aa:b2:0f:5b:14:4b:e2:c8: 7b:73:14:fb:f6:72:f7:bf:72:91:c1:c4:99:a1:63:23:34:3d: 70:5e:a0:17:39:a9:85:2b:a1:8d:75:49:20:d4:9c:26:e0:2f: 5e:08:bd:a2:7d:de:27:c2:81:c3:cb:a5:6c:b8:1d:ad:b9:6f: 6f:a4:f1:c1:4e:8e:fd:2d:8e:54:df:cf:5c:aa:d1:f0:f7:9d: 7c:0a:e5:f4:98:2e:b2:9d:84:11:08:45:7f:20:71:35:87:5f: 8d:7d:66:5f:83:87:34:bd:91:d5:8d:a3:85:89:a4:23:3d:89: 59:4b:30:9b:d3:fd:06:a9:41:df:96:e5:27:3a:98:da:40:8a: 6a:49:8c:86:79:b8:d5:9c:9a:41:88:b1:80:2d:d4:dc:cd:21: 24:bc:66:45:4b:16:fe:4a:22:23:0a:dc:e3:fc:28:04:6a:e4: 40:01:46:5f:20:b4:f5:88:e2:09:e5:c0:e2:3a:3d:02:c8:ea: 55:0c:b8:6a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MEI2QjExMC8GA1UEBRMoODU3OUJFMkQ4MzQ1NjgyRjI3QUVFNzA2MkJCRDRFRjc2 NjRFNTcxQjAeFw0yNTA0MjcwNjQ1NDhaFw0yNTA1MDQwNjQ1NDhaMBgxFjAUBgNV BAMTDTY4MGRkMjljLWQyZmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSOb3rUbBCCOPoOqP/+wFMhi7gwNs2SAMCCqdzMldx611NOpf0xUnxy9x9LH1e MIOCfhxBVjn95Cx7znsu295nuyTW5zu6S/1LxXvDfE/i95ezwGpFWLoO/EhQqMcO Zms9SwYM5IZrwxakNyGYVlZE0KqNLVnZZTNRqThq03z2K44VpyB8vFqZ0tVODjzR G5qSnnOWXSB0kVXNVxYQUkFoFXghSiJHteps/Oim6QZALGESNNMS35DUaAV098Y6 HsYJ35cxqlZi6XGbePRvR82WxfrzdfpzBJu5hy9wLUD2icdn7gDDh0atzdLO0lTY 4DDGGnE7ODzGuqixLng5DYOrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwlnb9chf SPjnV0fG0Myc1O5cIEowHwYDVR0jBBgwFoAUhXm+LYNFaC8nrucGK71O92ZOVxsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQwQjZCLzdFQzAwNzZDRkUz RjExRUY4RkEyNzc1MkM0RjlBRTAyL2hYbS1MWU5GYUM4bnJ1Y0dLNzFPOTJaT1Z4 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaFhtLUxZTkZhQzhucnVjR0s3MU85MlpPVnhzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQw QjZCLzdFQzAwNzZDRkUzRjExRUY4RkEyNzc1MkM0RjlBRTAyL2hYbS1MWU5GYUM4 bnJ1Y0dLNzFPOTJaT1Z4cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKo4+mla4HuthHOlyyPujhpzRg7buLymrCdpM9qIdLZP8iNVkW1lN8ls vPuBx+GTPzrAOdQT//pNKbchZ4oeZu2qsg9bFEviyHtzFPv2cve/cpHBxJmhYyM0 PXBeoBc5qYUroY11SSDUnCbgL14IvaJ93ifCgcPLpWy4Ha25b2+k8cFOjv0tjlTf z1yq0fD3nXwK5fSYLrKdhBEIRX8gcTWHX419Zl+DhzS9kdWNo4WJpCM9iVlLMJvT /QapQd+W5Sc6mNpAimpJjIZ5uNWcmkGIsYAt1NzNISS8ZkVLFv5KIiMK3OP8KARq 5EABRl8gtPWI4gnlwOI6PQLI6lUMuGo= -----END CERTIFICATE-----Generated at Sun Apr 27 10:27:19 2025 by rpki-client on console.sobornost.net