$ rpki-client -vvf rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft File: Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft (raw, json) Hash identifier: JH4q0XtoNHPtt+yxdxxTWjPk5ZHI1WljWSEGnjp46qM= Subject key identifier: 4B:35:CA:09:F0:1D:9F:DC:02:A7:1C:5A:C8:FF:50:6A:D7:D5:C1:6B Authority key identifier: 15:BF:21:0B:73:78:1D:5C:C0:BE:99:BD:39:D7:0B:2F:EB:4E:B8:6C Certificate issuer: /CN=A91D61DF/serialNumber=15BF210B73781D5CC0BE99BD39D70B2FEB4EB86C Certificate serial: 0162 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft Manifest number: 015C Signing time: Mon 05 May 2025 03:01:17 +0000 Manifest this update: Mon 05 May 2025 03:01:17 +0000 Manifest next update: Mon 12 May 2025 03:01:17 +0000 Files and hashes: 1: Fb8hC3N4HVzAvpm9OdcLL-tOuGw.crl (hash: KVpDTguxOcuCujHLZPnvBTzQ94V+qs7dqie59WlFiDQ=) 2: 1D52E8E860D711EEA524AE64C4F9AE02.roa (hash: GbdpkuqmY37s9wPgW3tN3BtEev3tZBJWQSfg/vR2zzo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.crl rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 03:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 354 (0x162) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D61DF, serialNumber=15BF210B73781D5CC0BE99BD39D70B2FEB4EB86C Validity Not Before: May 5 03:01:17 2025 GMT Not After : May 12 03:01:17 2025 GMT Subject: CN=681829fd-0791 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8c:07:d7:f6:90:c1:6f:26:17:a1:33:30:7e: b0:80:6d:e6:99:4e:1f:60:30:3a:a7:98:6e:50:0c: 69:76:5e:99:af:37:a6:e5:5a:ac:0e:d8:f5:0c:64: 58:41:7c:7a:c7:12:7d:9f:fb:e2:2f:c9:07:5e:f6: 63:1e:b9:a6:43:d7:6a:1d:61:d1:9d:14:84:2f:0f: ac:c8:ff:44:d1:1a:7b:df:65:a7:4f:85:61:bd:49: 9f:ba:c8:4f:cb:95:f0:61:c1:31:0a:8c:e4:a0:d0: 4d:cb:96:8b:7f:d5:30:d9:dc:b9:23:f3:35:de:7d: 24:ac:46:f1:4f:ce:a3:66:1d:a1:dc:cc:7d:88:f8: 12:15:ed:65:de:cf:8c:fd:02:96:78:ca:4a:28:f9: b4:36:6f:07:f5:b8:9f:97:ca:5e:0a:0a:f6:c0:32: 9b:ec:d2:53:6f:8a:37:a3:40:13:94:32:42:91:41: 31:f7:e6:d6:1d:69:3e:d5:ff:d8:75:d3:c3:d2:d2: e7:44:33:ba:35:70:4f:56:ee:b8:3d:d7:38:42:8d: 4d:e2:da:07:92:87:66:47:a4:95:e8:12:0a:94:17: db:c4:12:20:3e:7a:48:1b:98:b4:92:26:da:d4:f6: 3a:f9:f6:bf:19:c0:0e:c5:db:76:be:df:a0:d2:c7: 26:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:35:CA:09:F0:1D:9F:DC:02:A7:1C:5A:C8:FF:50:6A:D7:D5:C1:6B X509v3 Authority Key Identifier: keyid:15:BF:21:0B:73:78:1D:5C:C0:BE:99:BD:39:D7:0B:2F:EB:4E:B8:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:c3:18:3f:32:a2:8e:fe:a2:82:24:c6:02:88:45:b8:70:a6: d5:c7:32:40:0c:ab:22:c7:6d:1b:55:89:48:5f:0e:78:09:45: d4:89:92:c3:d9:43:48:58:97:13:5c:e0:64:a6:95:7a:2b:68: 5d:87:0d:fc:2d:90:64:6d:1f:8b:4b:8d:13:a6:54:9d:64:4f: f3:b4:5b:8d:58:f4:eb:e5:42:e5:f6:03:d4:c4:73:94:b9:0c: e2:89:3c:5b:88:c2:e8:4f:cc:9a:dd:36:0a:b9:2c:e1:7a:fd: da:e2:4b:50:30:5e:6e:0c:69:ba:36:ae:40:02:80:de:d2:a1: 64:94:11:e4:55:ed:81:0a:03:bf:cf:d6:23:ed:6c:27:b1:34: 57:f1:07:2d:67:0f:50:39:44:9a:85:db:e4:16:be:30:73:d8: a4:c1:cc:a2:46:e7:2f:2c:1e:36:85:e0:5b:99:25:c0:3b:ee: e3:92:a3:11:d3:fc:37:b1:28:c0:14:97:bd:d0:0c:6d:9b:10: e6:76:82:b3:c4:21:15:4b:49:44:2c:52:fc:db:4a:dd:68:cd: 5c:aa:e9:28:85:02:98:37:40:72:2e:d0:25:b1:a1:30:9e:ea: 84:a9:fe:e0:da:e2:a0:22:50:da:d9:3b:19:51:9f:d6:b1:73: 83:74:ae:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYxREYxMTAvBgNVBAUTKDE1QkYyMTBCNzM3ODFENUNDMEJFOTlCRDM5RDcwQjJG RUI0RUI4NkMwHhcNMjUwNTA1MDMwMTE3WhcNMjUwNTEyMDMwMTE3WjAYMRYwFAYD VQQDEw02ODE4MjlmZC0wNzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzYwH1/aQwW8mF6EzMH6wgG3mmU4fYDA6p5huUAxpdl6Zrzem5VqsDtj1DGRY QXx6xxJ9n/viL8kHXvZjHrmmQ9dqHWHRnRSELw+syP9E0Rp732WnT4VhvUmfushP y5XwYcExCozkoNBNy5aLf9Uw2dy5I/M13n0krEbxT86jZh2h3Mx9iPgSFe1l3s+M /QKWeMpKKPm0Nm8H9bifl8peCgr2wDKb7NJTb4o3o0ATlDJCkUEx9+bWHWk+1f/Y ddPD0tLnRDO6NXBPVu64Pdc4Qo1N4toHkodmR6SV6BIKlBfbxBIgPnpIG5i0kiba 1PY6+fa/GcAOxdt2vt+g0scm5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEs1ygnw HZ/cAqccWsj/UGrX1cFrMB8GA1UdIwQYMBaAFBW/IQtzeB1cwL6ZvTnXCy/rTrhs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjFERi8wRDBDNUY3NDFD NjYxMUVFOUExMzJCODRDNEY5QUUwMi9GYjhoQzNONEhWekF2cG05T2RjTEwtdE91 R3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZiOGhDM040SFZ6QXZwbTlPZGNMTC10T3VHdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjFERi8wRDBDNUY3NDFDNjYxMUVFOUExMzJCODRDNEY5QUUwMi9GYjhoQzNONEhW ekF2cG05T2RjTEwtdE91R3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBowxg/MqKO/qKCJMYCiEW4cKbVxzJADKsix20bVYlIXw54CUXUiZLD 2UNIWJcTXOBkppV6K2hdhw38LZBkbR+LS40TplSdZE/ztFuNWPTr5ULl9gPUxHOU uQziiTxbiMLoT8ya3TYKuSzhev3a4ktQMF5uDGm6Nq5AAoDe0qFklBHkVe2BCgO/ z9Yj7WwnsTRX8QctZw9QOUSahdvkFr4wc9ikwcyiRucvLB42heBbmSXAO+7jkqMR 0/w3sSjAFJe90AxtmxDmdoKzxCEVS0lELFL820rdaM1cqukohQKYN0ByLtAlsaEw nuqEqf7g2uKgIlDa2TsZUZ/WsXODdK7f -----END CERTIFICATE-----Generated at Mon May 5 09:48:12 2025 by rpki-client on console.sobornost.net