$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.mft File: dOSCYGNYsugSWKrw2-THyWPYfhw.mft (raw, json) Hash identifier: SOFpdh6vN/X6E3fpyhmKLyNAGBv6zOgqkv3La0vacFU= Subject key identifier: 25:AC:ED:9C:24:A3:0D:62:57:69:AF:6B:8C:47:94:C9:13:22:36:92 Authority key identifier: 74:E4:82:60:63:58:B2:E8:12:58:AA:F0:DB:E4:C7:C9:63:D8:7E:1C Certificate issuer: /CN=A91D3633/serialNumber=74E482606358B2E81258AAF0DBE4C7C963D87E1C Certificate serial: 1DAA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOSCYGNYsugSWKrw2-THyWPYfhw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.mft Manifest number: 1D91 Signing time: Mon 28 Apr 2025 16:13:59 +0000 Manifest this update: Mon 28 Apr 2025 16:13:59 +0000 Manifest next update: Mon 05 May 2025 16:13:59 +0000 Files and hashes: 1: dOSCYGNYsugSWKrw2-THyWPYfhw.crl (hash: Dp9z6s9ZqN1Ludf5tAyhxzkolp4bzGWTCjoBwUhZcxA=) 2: 79AE82F8171711EBB12F2574C4F9AE02.roa (hash: xgRdkx3HlYgErdgIoQ9HlNBZBIlpv/AqB1G+fVzRXiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.crl rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOSCYGNYsugSWKrw2-THyWPYfhw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 16:13:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7594 (0x1daa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3633, serialNumber=74E482606358B2E81258AAF0DBE4C7C963D87E1C Validity Not Before: Apr 28 16:13:59 2025 GMT Not After : May 5 16:13:59 2025 GMT Subject: CN=680fa947-5c4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:fd:3a:0f:41:b5:b1:55:85:af:55:53:db:c8: f6:ab:2c:57:33:2d:66:6b:df:b0:93:5d:19:1d:47: 63:84:36:b8:c8:6e:f2:ce:fc:84:89:5d:b6:fb:04: b5:67:55:11:c6:ba:d0:60:81:e4:6a:06:14:4e:8b: f8:9e:9b:61:8f:d2:1b:4f:37:da:83:4e:70:ea:25: 6e:f7:a4:9c:ac:f8:47:f7:b8:e4:85:1f:a3:b5:6d: fd:21:b8:62:76:ae:39:6d:0e:88:61:b7:7c:ce:68: df:5d:6f:20:85:d4:1e:b5:fb:20:7c:46:30:a7:45: 37:f6:b1:95:ad:9b:89:b8:bf:b3:e4:68:df:d7:3f: f5:0a:63:76:29:47:e2:88:b8:57:4e:d8:d9:a6:01: 18:b7:a4:99:6e:d6:ea:47:d9:81:c1:14:a3:90:6b: 95:c4:53:55:62:ad:ac:6a:d4:15:46:84:15:30:2a: 20:5f:7e:cb:79:70:94:96:d7:3c:16:6e:5b:a3:a2: 81:ef:0a:68:8a:a8:25:c7:5a:06:c9:0f:65:88:b5: 3a:eb:27:8b:0b:a7:13:d6:80:5c:d3:fc:8a:ab:e6: 7c:b6:69:45:21:ed:73:ae:ee:24:ea:b3:c3:ec:74: 34:39:be:d4:ef:ad:06:4f:af:e0:0b:bc:58:51:56: a0:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:AC:ED:9C:24:A3:0D:62:57:69:AF:6B:8C:47:94:C9:13:22:36:92 X509v3 Authority Key Identifier: keyid:74:E4:82:60:63:58:B2:E8:12:58:AA:F0:DB:E4:C7:C9:63:D8:7E:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOSCYGNYsugSWKrw2-THyWPYfhw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:74:1e:27:ac:99:1c:fa:c8:43:a4:2a:a0:21:7a:d2:98:9b: 23:0b:45:ec:9a:98:3c:77:fe:3d:db:a9:f7:d4:a9:86:97:ba: 5b:e7:d5:2c:f5:52:26:67:98:56:15:52:f4:08:0a:20:3e:0b: d4:6b:e0:0c:d7:3d:5a:2f:4b:09:ee:16:2d:37:13:49:58:fe: 65:88:97:d3:89:84:d1:bb:1b:62:06:81:bd:3f:7d:06:55:31: 72:96:08:b7:a2:6e:8b:fb:bb:99:88:1a:4b:fd:ce:a2:79:6b: fe:1f:37:e3:86:3e:e2:7c:0b:da:26:fc:5a:3a:33:b0:73:f3: 06:2e:e1:08:17:58:72:ca:a4:54:41:b2:a2:b8:78:06:4b:b0: 85:e0:11:31:5b:55:21:92:84:ba:c1:5a:cd:39:e9:67:0a:98: ff:c7:13:f3:76:ea:00:65:97:b6:f9:e5:d7:ae:36:25:3b:ac: 45:11:7a:83:c5:7b:35:be:89:c4:04:e4:04:bc:0a:64:82:df: 80:4d:c1:61:ef:d3:25:ee:57:37:23:fa:08:d9:07:62:58:d6: 2e:44:0b:69:95:30:2e:d4:c6:76:bd:ce:02:35:73:50:86:a4: bc:ff:58:85:d9:67:c1:fa:68:fb:f5:94:19:cd:22:81:dc:36: 81:d8:13:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM2MzMxMTAvBgNVBAUTKDc0RTQ4MjYwNjM1OEIyRTgxMjU4QUFGMERCRTRDN0M5 NjNEODdFMUMwHhcNMjUwNDI4MTYxMzU5WhcNMjUwNTA1MTYxMzU5WjAYMRYwFAYD VQQDEw02ODBmYTk0Ny01YzRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3/06D0G1sVWFr1VT28j2qyxXMy1ma9+wk10ZHUdjhDa4yG7yzvyEiV22+wS1 Z1URxrrQYIHkagYUTov4npthj9IbTzfag05w6iVu96ScrPhH97jkhR+jtW39Ibhi dq45bQ6IYbd8zmjfXW8ghdQetfsgfEYwp0U39rGVrZuJuL+z5Gjf1z/1CmN2KUfi iLhXTtjZpgEYt6SZbtbqR9mBwRSjkGuVxFNVYq2satQVRoQVMCogX37LeXCUltc8 Fm5bo6KB7wpoiqglx1oGyQ9liLU66yeLC6cT1oBc0/yKq+Z8tmlFIe1zru4k6rPD 7HQ0Ob7U760GT6/gC7xYUVagzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCWs7Zwk ow1iV2mva4xHlMkTIjaSMB8GA1UdIwQYMBaAFHTkgmBjWLLoEliq8Nvkx8lj2H4c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzYzMy82MjkwOUYzOEEy NDExMUU2QkNBOEQwNzhDNEY5QUUwMi9kT1NDWUdOWXN1Z1NXS3J3Mi1USHlXUFlm aHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RPU0NZR05Zc3VnU1dLcncyLVRIeVdQWWZody5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzYzMy82MjkwOUYzOEEyNDExMUU2QkNBOEQwNzhDNEY5QUUwMi9kT1NDWUdOWXN1 Z1NXS3J3Mi1USHlXUFlmaHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsdB4nrJkc+shDpCqgIXrSmJsjC0Xsmpg8d/4926n31KmGl7pb59Us 9VImZ5hWFVL0CAogPgvUa+AM1z1aL0sJ7hYtNxNJWP5liJfTiYTRuxtiBoG9P30G VTFylgi3om6L+7uZiBpL/c6ieWv+Hzfjhj7ifAvaJvxaOjOwc/MGLuEIF1hyyqRU QbKiuHgGS7CF4BExW1UhkoS6wVrNOelnCpj/xxPzduoAZZe2+eXXrjYlO6xFEXqD xXs1vonEBOQEvApkgt+ATcFh79Ml7lc3I/oI2QdiWNYuRAtplTAu1MZ2vc4CNXNQ hqS8/1iF2WfB+mj79ZQZzSKB3DaB2BNZ -----END CERTIFICATE-----Generated at Mon Apr 28 20:11:00 2025 by rpki-client on console.sobornost.net