$ rpki-client -vvf rpki.apnic.net/member_repository/A91D44BE/0B2E8B50692211EFBF87BB0EC4F9AE02/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.mft File: wpY_OoVP1tTmEBmeZ0CD2KqhLlA.mft (raw, json) Hash identifier: oFSn1uBJs9lu/pReHchQecIIhj6C5JeGd80nfj7shFA= Subject key identifier: D9:F6:6A:BE:56:6F:8E:E7:DD:AA:4B:1B:32:F6:4F:14:87:60:B5:BA Authority key identifier: C2:96:3F:3A:85:4F:D6:D4:E6:10:19:9E:67:40:83:D8:AA:A1:2E:50 Certificate issuer: /CN=A91D44BE/serialNumber=C2963F3A854FD6D4E610199E674083D8AAA12E50 Certificate serial: 7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D44BE/0B2E8B50692211EFBF87BB0EC4F9AE02/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.mft Manifest number: 7B Signing time: Sun 27 Apr 2025 05:32:54 +0000 Manifest this update: Sun 27 Apr 2025 05:32:54 +0000 Manifest next update: Sun 04 May 2025 05:32:54 +0000 Files and hashes: 1: wpY_OoVP1tTmEBmeZ0CD2KqhLlA.crl (hash: HKsq3zEW8C3sI1dt3AwLAv0nRTRfD+NNuvr18iGQ8BU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D44BE/0B2E8B50692211EFBF87BB0EC4F9AE02/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.crl rsync://rpki.apnic.net/member_repository/A91D44BE/0B2E8B50692211EFBF87BB0EC4F9AE02/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D44BE, serialNumber=C2963F3A854FD6D4E610199E674083D8AAA12E50 Validity Not Before: Apr 27 05:32:54 2025 GMT Not After : May 4 05:32:54 2025 GMT Subject: CN=680dc186-beb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1c:bc:34:92:20:85:92:60:c5:e5:29:41:30: 90:3f:c0:aa:29:81:3e:37:11:97:20:7e:8d:f0:f4: 80:85:a0:d5:b8:4d:20:21:01:37:eb:27:cc:2d:02: d8:d1:8d:b0:a0:4e:2f:1f:b1:de:7a:db:cb:90:2d: b3:6f:88:e6:a2:00:f2:c4:ad:f4:f5:23:6f:34:58: 29:77:be:89:04:b8:a8:7a:7e:b0:2d:74:5a:37:32: 32:3e:44:3a:a7:48:f1:f3:e4:c0:39:d4:e8:6e:e9: 03:7c:1a:95:21:e2:d8:81:e0:c3:23:cb:dd:c9:d1: a2:41:39:0c:9f:32:ec:4a:ea:5f:dd:22:c9:6b:f3: f4:65:97:65:fe:2a:2a:f3:a9:5a:8b:13:b9:44:3f: df:1e:ba:be:cd:9b:d6:b3:07:0a:50:18:ae:f8:ee: 43:74:15:e3:3b:db:24:0f:b7:f6:f3:0b:1a:29:62: 92:1a:51:da:fb:8f:1f:9b:b6:7b:6b:41:a2:4f:e6: cf:9a:43:b8:f2:73:70:eb:e3:d8:1d:53:60:f1:75: cd:95:51:96:49:e7:a3:76:ef:05:1f:f7:4f:a6:c9: 86:ee:5c:11:f4:bd:8b:c6:5a:4c:22:0e:e2:ee:88: 00:1e:1a:91:ef:fb:da:ac:1b:6b:84:70:48:ec:cd: 62:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:F6:6A:BE:56:6F:8E:E7:DD:AA:4B:1B:32:F6:4F:14:87:60:B5:BA X509v3 Authority Key Identifier: keyid:C2:96:3F:3A:85:4F:D6:D4:E6:10:19:9E:67:40:83:D8:AA:A1:2E:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D44BE/0B2E8B50692211EFBF87BB0EC4F9AE02/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D44BE/0B2E8B50692211EFBF87BB0EC4F9AE02/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:6f:79:0a:0b:f2:c6:70:5c:30:e1:b2:97:86:03:74:f7:98: 83:4f:03:58:33:56:1c:4e:8a:f1:ce:48:4c:a2:c9:aa:fd:06: 14:ef:a7:9c:d4:76:4b:07:c7:99:12:33:c4:97:36:81:e1:09: d2:3d:ba:46:d1:8d:a8:c8:64:10:72:93:5d:69:df:86:51:9b: 21:31:fe:5a:34:6b:64:12:db:12:c0:bc:34:fa:96:fd:f3:07: 39:77:81:49:51:74:3c:77:7f:40:dd:61:6d:11:1b:2c:cf:08: 86:84:53:23:b1:fc:8f:8c:b0:0a:f8:66:cd:9e:ab:60:ae:64: 8f:0e:67:49:52:90:be:33:83:c2:b7:65:de:44:cb:f1:62:68: 32:a4:b1:55:a3:e8:38:e3:ff:53:45:c1:89:e7:e0:af:71:f7: ff:73:22:b2:15:6d:5c:f8:04:1e:a1:7a:a8:6e:16:3f:85:9e: 6c:92:34:7a:96:99:56:af:99:a1:51:77:6d:41:6e:04:39:0f: f8:c1:dc:87:7f:99:2b:fb:d6:c8:a9:77:6d:12:92:d6:06:45: e3:5b:a2:50:3d:1b:05:b9:fb:96:90:d5:6e:be:44:88:52:10: 5f:1d:a8:26:19:dc:2c:48:4f:cb:54:39:85:45:03:1c:39:e0: 1f:9e:30:c4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NDRCRTExMC8GA1UEBRMoQzI5NjNGM0E4NTRGRDZENEU2MTAxOTlFNjc0MDgzRDhB QUExMkU1MDAeFw0yNTA0MjcwNTMyNTRaFw0yNTA1MDQwNTMyNTRaMBgxFjAUBgNV BAMTDTY4MGRjMTg2LWJlYjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuHLw0kiCFkmDF5SlBMJA/wKopgT43EZcgfo3w9ICFoNW4TSAhATfrJ8wtAtjR jbCgTi8fsd5628uQLbNviOaiAPLErfT1I280WCl3vokEuKh6frAtdFo3MjI+RDqn SPHz5MA51Ohu6QN8GpUh4tiB4MMjy93J0aJBOQyfMuxK6l/dIslr8/Rll2X+Kirz qVqLE7lEP98eur7Nm9azBwpQGK747kN0FeM72yQPt/bzCxopYpIaUdr7jx+btntr QaJP5s+aQ7jyc3Dr49gdU2Dxdc2VUZZJ56N27wUf90+myYbuXBH0vYvGWkwiDuLu iAAeGpHv+9qsG2uEcEjszWJJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2fZqvlZv jufdqksbMvZPFIdgtbowHwYDVR0jBBgwFoAUwpY/OoVP1tTmEBmeZ0CD2KqhLlAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0NEJFLzBCMkU4QjUwNjky MjExRUZCRjg3QkIwRUM0RjlBRTAyL3dwWV9Pb1ZQMXRUbUVCbWVaMENEMktxaExs QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvd3BZX09vVlAxdFRtRUJtZVowQ0QyS3FoTGxBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0 NEJFLzBCMkU4QjUwNjkyMjExRUZCRjg3QkIwRUM0RjlBRTAyL3dwWV9Pb1ZQMXRU bUVCbWVaMENEMktxaExsQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALpveQoL8sZwXDDhspeGA3T3mINPA1gzVhxOivHOSEyiyar9BhTvp5zU dksHx5kSM8SXNoHhCdI9ukbRjajIZBByk11p34ZRmyEx/lo0a2QS2xLAvDT6lv3z Bzl3gUlRdDx3f0DdYW0RGyzPCIaEUyOx/I+MsAr4Zs2eq2CuZI8OZ0lSkL4zg8K3 Zd5Ey/FiaDKksVWj6Djj/1NFwYnn4K9x9/9zIrIVbVz4BB6heqhuFj+FnmySNHqW mVavmaFRd21BbgQ5D/jB3Id/mSv71sipd20SktYGReNbolA9GwW5+5aQ1W6+RIhS EF8dqCYZ3CxIT8tUOYVFAxw54B+eMMQ= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:56 2025 by rpki-client on console.sobornost.net