$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6499/9F836C52780911EBA16AE156C4F9AE02/C99de_bArcNvIwEoNtjC3CQnkzw.mft File: C99de_bArcNvIwEoNtjC3CQnkzw.mft (raw, json) Hash identifier: iKHWjqcEBfOxR2RtijFCwtlok9PQhL1Ripi7lX7pQsM= Subject key identifier: CE:DC:9B:AC:A5:88:73:0E:9D:3A:3D:31:C0:6C:4E:0E:EF:1E:AC:19 Authority key identifier: 0B:DF:5D:7B:F6:C0:AD:C3:6F:23:01:28:36:D8:C2:DC:24:27:93:3C Certificate issuer: /CN=A91D6499/serialNumber=0BDF5D7BF6C0ADC36F23012836D8C2DC2427933C Certificate serial: 067A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C99de_bArcNvIwEoNtjC3CQnkzw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6499/9F836C52780911EBA16AE156C4F9AE02/C99de_bArcNvIwEoNtjC3CQnkzw.mft Manifest number: 0670 Signing time: Sat 26 Apr 2025 22:00:51 +0000 Manifest this update: Sat 26 Apr 2025 22:00:50 +0000 Manifest next update: Sat 03 May 2025 22:00:50 +0000 Files and hashes: 1: C99de_bArcNvIwEoNtjC3CQnkzw.crl (hash: PQTfXgtTJH5gnZkuf58i9gKgNv2W2RU1TvFvxOKOALM=) 2: FAEF1526DE9E11ECBEA8AB0EC4F9AE02.roa (hash: 3D0F61i4bYzZFK1RP5xCz8C+pmRRrnbu/OVCc11V77A=) 3: E3ED2A86F1E511EF9D0E0D1BC4F9AE02.roa (hash: lWJ7FF/SRkIiHgjEhrH+14a75dMx3dN1hls3lTn79Sw=) 4: A96F9914F1D811EFA3152963C4F9AE02.roa (hash: 9kzcr+Me7OnP5vJBlwCgM7entDT3m8eL5xohJDWx2Io=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6499/9F836C52780911EBA16AE156C4F9AE02/C99de_bArcNvIwEoNtjC3CQnkzw.crl rsync://rpki.apnic.net/member_repository/A91D6499/9F836C52780911EBA16AE156C4F9AE02/C99de_bArcNvIwEoNtjC3CQnkzw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C99de_bArcNvIwEoNtjC3CQnkzw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 22:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1658 (0x67a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6499, serialNumber=0BDF5D7BF6C0ADC36F23012836D8C2DC2427933C Validity Not Before: Apr 26 22:00:50 2025 GMT Not After : May 3 22:00:50 2025 GMT Subject: CN=680d5792-8848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:99:46:54:69:62:db:04:a5:a6:51:af:79:50: ec:ce:b8:bc:a3:15:cc:9d:ee:a1:c8:07:2b:46:f6: 02:31:b6:b3:e6:0b:59:a1:11:b8:ec:13:e4:36:c7: 9c:cb:f0:a1:03:cd:88:db:09:65:4f:cb:91:6f:8c: 51:10:05:aa:14:2b:6d:3a:95:c5:ea:d7:66:6c:d7: e5:15:3e:32:c4:84:fe:68:9c:13:6f:e1:6c:26:41: b6:6f:d8:0f:bc:91:d0:23:e2:29:31:e6:47:0c:a3: c9:77:25:94:02:0d:36:77:a7:28:3f:23:1a:3a:65: e8:de:0a:97:18:67:bf:1a:17:ba:27:1c:41:ac:00: 7e:ba:90:42:84:4e:8f:61:cb:64:ff:1f:5d:03:5d: fb:46:c2:eb:63:53:b7:b2:7b:cf:45:77:1c:dd:e7: 58:37:6e:06:f9:7d:b9:e7:e5:6b:3f:af:75:3c:54: 15:9f:48:cb:df:2e:21:16:16:4b:c7:f9:bd:7c:f9: 6f:74:fd:5b:00:40:f3:36:4c:32:8e:30:10:12:7b: 2c:12:4b:78:b3:fa:5b:73:2d:ad:a1:6a:2d:b9:7f: 4e:4c:23:d7:57:b7:11:a2:d6:51:87:a3:f1:5a:01: 28:ed:ce:40:85:45:f4:90:67:fb:6c:f3:cf:8a:eb: 61:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:DC:9B:AC:A5:88:73:0E:9D:3A:3D:31:C0:6C:4E:0E:EF:1E:AC:19 X509v3 Authority Key Identifier: keyid:0B:DF:5D:7B:F6:C0:AD:C3:6F:23:01:28:36:D8:C2:DC:24:27:93:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6499/9F836C52780911EBA16AE156C4F9AE02/C99de_bArcNvIwEoNtjC3CQnkzw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C99de_bArcNvIwEoNtjC3CQnkzw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6499/9F836C52780911EBA16AE156C4F9AE02/C99de_bArcNvIwEoNtjC3CQnkzw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:b4:6a:e5:0b:1f:de:81:8b:8e:61:9c:96:ef:2e:70:c6:d0: 06:da:b4:10:dd:af:e8:28:8b:22:23:90:e0:cb:0f:3d:7f:d4: 13:21:fa:01:a4:c6:b7:d0:79:83:1f:84:eb:8d:b6:b6:65:49: 10:0d:ed:96:0a:1f:33:17:67:58:5c:48:a0:9e:e3:03:ab:48: e6:88:90:a0:9a:9f:0c:82:83:e1:46:10:20:22:23:79:0c:88: 86:aa:a9:e8:c0:d2:29:4c:81:c0:c6:3d:8c:07:ea:ff:85:a3: 73:73:94:88:c5:d0:dd:c9:fc:a7:34:92:1d:64:f8:c7:23:42: da:48:0a:c7:1f:ee:c9:82:af:30:c8:e7:45:54:0f:c3:f7:d1: 44:16:cb:9b:fa:11:7b:98:51:cb:59:c6:ab:aa:15:0b:83:b1: c7:5b:dc:2b:7c:82:65:72:25:9b:19:35:1f:33:92:9e:12:5b: f7:0d:a5:16:22:65:3e:6d:bf:a5:ec:0a:83:d7:69:1e:13:5d: 98:d3:f6:b4:be:71:e8:db:cc:27:01:ab:b3:2d:65:4b:5d:47: b4:ba:6f:14:33:c4:ba:4d:e6:52:0b:43:bf:ab:b2:59:43:74: 4d:09:73:a9:69:a7:bb:d3:d6:e0:71:c9:8e:63:39:c0:b7:c7: ab:5a:a7:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY0OTkxMTAvBgNVBAUTKDBCREY1RDdCRjZDMEFEQzM2RjIzMDEyODM2RDhDMkRD MjQyNzkzM0MwHhcNMjUwNDI2MjIwMDUwWhcNMjUwNTAzMjIwMDUwWjAYMRYwFAYD VQQDEw02ODBkNTc5Mi04ODQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtZlGVGli2wSlplGveVDszri8oxXMne6hyAcrRvYCMbaz5gtZoRG47BPkNsec y/ChA82I2wllT8uRb4xREAWqFCttOpXF6tdmbNflFT4yxIT+aJwTb+FsJkG2b9gP vJHQI+IpMeZHDKPJdyWUAg02d6coPyMaOmXo3gqXGGe/Ghe6JxxBrAB+upBChE6P Yctk/x9dA137RsLrY1O3snvPRXcc3edYN24G+X255+VrP691PFQVn0jL3y4hFhZL x/m9fPlvdP1bAEDzNkwyjjAQEnssEkt4s/pbcy2toWotuX9OTCPXV7cRotZRh6Px WgEo7c5AhUX0kGf7bPPPiuthPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM7cm6yl iHMOnTo9McBsTg7vHqwZMB8GA1UdIwQYMBaAFAvfXXv2wK3DbyMBKDbYwtwkJ5M8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjQ5OS85RjgzNkM1Mjc4 MDkxMUVCQTE2QUUxNTZDNEY5QUUwMi9DOTlkZV9iQXJjTnZJd0VvTnRqQzNDUW5r encuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M5OWRlX2JBcmNOdkl3RW9OdGpDM0NRbmt6dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjQ5OS85RjgzNkM1Mjc4MDkxMUVCQTE2QUUxNTZDNEY5QUUwMi9DOTlkZV9iQXJj TnZJd0VvTnRqQzNDUW5rencubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVtGrlCx/egYuOYZyW7y5wxtAG2rQQ3a/oKIsiI5Dgyw89f9QTIfoB pMa30HmDH4Trjba2ZUkQDe2WCh8zF2dYXEignuMDq0jmiJCgmp8MgoPhRhAgIiN5 DIiGqqnowNIpTIHAxj2MB+r/haNzc5SIxdDdyfynNJIdZPjHI0LaSArHH+7Jgq8w yOdFVA/D99FEFsub+hF7mFHLWcarqhULg7HHW9wrfIJlciWbGTUfM5KeElv3DaUW ImU+bb+l7AqD12keE12Y0/a0vnHo28wnAauzLWVLXUe0um8UM8S6TeZSC0O/q7JZ Q3RNCXOpaae709bgccmOYznAt8erWqfN -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:13 2025 by rpki-client on console.sobornost.net