$ rpki-client -vvf rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft File: 7DQrlR3sel8OPnf5LMsf-yHhmlg.mft (raw, json) Hash identifier: jG/YO81kBZHPBFRf5JZIJ9RJieJ8XCKKWLrZ8GKKkMY= Subject key identifier: 44:F5:0F:A8:D3:BC:6D:BA:D3:8E:7D:0C:0F:2B:4C:B7:B8:CF:D3:EC Authority key identifier: EC:34:2B:95:1D:EC:7A:5F:0E:3E:77:F9:2C:CB:1F:FB:21:E1:9A:58 Certificate issuer: /CN=A91D40A4/serialNumber=EC342B951DEC7A5F0E3E77F92CCB1FFB21E19A58 Certificate serial: 03BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft Manifest number: 03B5 Signing time: Sun 27 Apr 2025 00:20:36 +0000 Manifest this update: Sun 27 Apr 2025 00:20:36 +0000 Manifest next update: Sun 04 May 2025 00:20:36 +0000 Files and hashes: 1: 7DQrlR3sel8OPnf5LMsf-yHhmlg.crl (hash: UDwvFShlk8MHg5NO1Si6S4h9h6rUWfT1puWR7puE/+w=) 2: 873831CC8A7E11EC8FD93687C4F9AE02.roa (hash: cu8wLYBxbGfRWUV9Ye7bg1eRpOLSnTYKjsEY2WUidXM=) 3: 867F3CF88A7E11EC8FD93687C4F9AE02.roa (hash: EDOt0WGEdnT9+FI7T0IrxIQR/uJ+FjweoW8YpKMKOQA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.crl rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 00:20:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 957 (0x3bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D40A4, serialNumber=EC342B951DEC7A5F0E3E77F92CCB1FFB21E19A58 Validity Not Before: Apr 27 00:20:36 2025 GMT Not After : May 4 00:20:36 2025 GMT Subject: CN=680d7854-a094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:40:c1:f0:59:fd:45:43:23:c0:3a:ad:75:52: 9d:66:73:96:0c:26:91:57:c4:28:27:f5:fb:1d:aa: 50:c2:60:70:b1:c8:db:05:e4:58:51:df:ce:7c:53: f2:90:5f:f6:04:df:cc:ba:6b:ac:38:57:26:a8:e4: 06:cb:6f:b7:d5:7f:23:54:f2:9c:c9:25:ca:93:47: 09:8c:39:1a:8d:18:2d:6b:47:78:0f:7a:43:a2:01: 3d:bb:4a:29:39:25:70:30:ec:6c:d9:18:58:ab:a4: f3:89:2f:cd:da:54:ee:a8:e8:fa:db:27:dc:2f:9d: 4f:38:cf:be:4d:d1:e5:42:e0:f6:44:bd:0a:20:8f: 2b:c5:45:db:85:8c:9c:71:50:5e:cc:5d:be:95:ca: 10:c1:e3:67:f1:20:0e:c6:bc:3f:c1:c0:ec:42:22: 64:04:35:c5:87:24:f5:39:f7:6d:53:65:19:64:ef: ba:12:b5:8d:1c:bb:6b:c4:16:f8:c9:fa:41:d1:49: 97:bd:63:c4:7a:7c:b4:1d:8f:16:f7:6a:0c:73:01: c8:c5:7a:60:8a:43:f8:81:69:89:54:db:55:64:ad: bf:3c:a4:35:97:62:f1:31:9a:a3:c0:4b:5e:50:dd: 28:a3:11:5d:fd:ef:26:ca:81:71:3d:ec:17:53:26: 4b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:F5:0F:A8:D3:BC:6D:BA:D3:8E:7D:0C:0F:2B:4C:B7:B8:CF:D3:EC X509v3 Authority Key Identifier: keyid:EC:34:2B:95:1D:EC:7A:5F:0E:3E:77:F9:2C:CB:1F:FB:21:E1:9A:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:03:97:d7:42:df:cd:99:46:f3:88:4b:2a:80:bc:09:23:11: 41:c7:44:d1:21:aa:80:d7:66:ef:9b:15:ab:e9:4e:c7:95:34: ad:a7:06:14:46:fb:68:3f:52:6c:dc:50:cf:e3:bc:e3:18:05: d9:56:f4:eb:1c:17:92:6e:16:56:f1:62:38:8e:27:69:70:e6: 57:5b:5c:eb:00:ec:ec:80:39:04:10:98:44:f2:b9:fa:b6:d9: 8a:66:e9:7a:a6:6c:5e:8f:f3:3c:16:8c:8f:0b:ef:d3:80:4a: 36:41:b6:43:98:53:77:ac:dc:ee:29:10:d2:34:88:69:2e:1d: 80:96:6e:2f:93:29:0f:c7:c7:4d:9e:21:07:a1:ce:af:c5:7a: 7c:c5:2e:7d:ee:37:ad:00:75:4d:ca:93:29:9b:54:ac:d4:e2: 77:49:ca:95:1d:41:8c:86:90:25:f4:ac:10:7b:55:5d:28:32: cf:eb:c7:f4:93:05:bc:32:da:5a:a1:c6:7e:3a:ac:ea:c1:72: 32:4f:72:ca:63:5f:1d:89:b2:ae:3c:08:b3:ee:b0:aa:d3:af: 9b:6a:e4:df:3d:a9:9a:c8:06:81:a5:3b:f5:39:9c:03:df:9a: 00:0a:6e:44:46:17:e7:86:69:3c:7b:e0:eb:89:9b:6d:ad:f0: 54:b9:3c:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA70wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQwQTQxMTAvBgNVBAUTKEVDMzQyQjk1MURFQzdBNUYwRTNFNzdGOTJDQ0IxRkZC MjFFMTlBNTgwHhcNMjUwNDI3MDAyMDM2WhcNMjUwNTA0MDAyMDM2WjAYMRYwFAYD VQQDEw02ODBkNzg1NC1hMDk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwEDB8Fn9RUMjwDqtdVKdZnOWDCaRV8QoJ/X7HapQwmBwscjbBeRYUd/OfFPy kF/2BN/MumusOFcmqOQGy2+31X8jVPKcySXKk0cJjDkajRgta0d4D3pDogE9u0op OSVwMOxs2RhYq6TziS/N2lTuqOj62yfcL51POM++TdHlQuD2RL0KII8rxUXbhYyc cVBezF2+lcoQweNn8SAOxrw/wcDsQiJkBDXFhyT1OfdtU2UZZO+6ErWNHLtrxBb4 yfpB0UmXvWPEeny0HY8W92oMcwHIxXpgikP4gWmJVNtVZK2/PKQ1l2LxMZqjwEte UN0ooxFd/e8myoFxPewXUyZLFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFET1D6jT vG260459DA8rTLe4z9PsMB8GA1UdIwQYMBaAFOw0K5Ud7HpfDj53+SzLH/sh4ZpY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDBBNC8yOUY0QkFGQzhB N0ExMUVDQjdBRjI0NDVDNEY5QUUwMi83RFFybFIzc2VsOE9QbmY1TE1zZi15SGht bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdEUXJsUjNzZWw4T1BuZjVMTXNmLXlIaG1sZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDBBNC8yOUY0QkFGQzhBN0ExMUVDQjdBRjI0NDVDNEY5QUUwMi83RFFybFIzc2Vs OE9QbmY1TE1zZi15SGhtbGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOA5fXQt/NmUbziEsqgLwJIxFBx0TRIaqA12bvmxWr6U7HlTStpwYU RvtoP1Js3FDP47zjGAXZVvTrHBeSbhZW8WI4jidpcOZXW1zrAOzsgDkEEJhE8rn6 ttmKZul6pmxej/M8FoyPC+/TgEo2QbZDmFN3rNzuKRDSNIhpLh2Alm4vkykPx8dN niEHoc6vxXp8xS597jetAHVNypMpm1Ss1OJ3ScqVHUGMhpAl9KwQe1VdKDLP68f0 kwW8MtpaocZ+OqzqwXIyT3LKY18dibKuPAiz7rCq06+bauTfPamayAaBpTv1OZwD 35oACm5ERhfnhmk8e+DriZttrfBUuTzM -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:12 2025 by rpki-client on console.sobornost.net