$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.mft File: kz73JgbZ1bKf46QfIMUrIMr1Vbo.mft (raw, json) Hash identifier: wJNFJUw8ASzkjcSjK4y1H1FCrkG9W3Xeo/oj1Poo7pw= Subject key identifier: DB:79:C8:88:60:3C:EA:CD:65:AE:92:9B:A3:87:39:06:49:75:DD:CB Authority key identifier: 93:3E:F7:26:06:D9:D5:B2:9F:E3:A4:1F:20:C5:2B:20:CA:F5:55:BA Certificate issuer: /CN=A91D6503/serialNumber=933EF72606D9D5B29FE3A41F20C52B20CAF555BA Certificate serial: 07D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kz73JgbZ1bKf46QfIMUrIMr1Vbo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.mft Manifest number: 07CA Signing time: Sat 26 Apr 2025 20:46:38 +0000 Manifest this update: Sat 26 Apr 2025 20:46:37 +0000 Manifest next update: Sat 03 May 2025 20:46:37 +0000 Files and hashes: 1: kz73JgbZ1bKf46QfIMUrIMr1Vbo.crl (hash: njCq1saJzvyiaeZQ56braHQWFucgbYkl5uNBoCIKHQY=) 2: 3CC77D02EE8811EA9225690DC4F9AE02.roa (hash: IS2j0d/zVkxwnqe+1txywwwV0QyYZmwCTkV8FQIqSXQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.crl rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kz73JgbZ1bKf46QfIMUrIMr1Vbo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2000 (0x7d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6503, serialNumber=933EF72606D9D5B29FE3A41F20C52B20CAF555BA Validity Not Before: Apr 26 20:46:37 2025 GMT Not After : May 3 20:46:37 2025 GMT Subject: CN=680d462d-54c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:63:a1:6c:d5:e1:7b:bb:95:b8:16:34:b4:0e: 59:f2:f0:35:50:89:35:a0:e5:11:b1:37:a1:c4:84: 45:9f:7b:9c:f1:71:cd:22:ae:e5:b8:a2:f4:69:b0: 38:9a:72:a8:c5:bf:13:a6:9b:8e:4f:d6:bc:2c:91: 5a:3a:10:b4:1c:c5:03:3a:a8:8a:19:22:0b:be:ed: d9:b5:0e:3d:98:14:59:cc:0e:8f:e9:de:99:00:4d: 43:59:94:6e:d8:4e:11:f0:0f:3a:0a:2e:f5:15:4e: 14:52:98:76:2a:a0:9a:ab:ab:99:5b:0a:b9:78:fa: 20:3e:fc:b7:86:3d:16:58:ba:9d:45:c7:14:ee:d0: b0:c1:1a:65:bc:46:2b:b4:2d:82:56:6c:de:37:4e: 94:51:84:72:bb:78:65:81:67:d7:8f:89:86:7f:b6: cc:a5:ab:ec:e3:c3:89:46:4b:81:45:7c:4b:0f:5f: 2a:7a:95:0d:d2:19:19:07:2d:7b:89:f0:12:e1:a3: fe:bc:2b:f1:04:e4:71:5e:6a:6d:ef:01:cc:2b:bd: 26:7c:07:6d:ef:03:1b:36:9f:2c:dc:e5:af:9a:0c: 3d:97:19:72:4d:07:df:17:f8:01:d1:00:f4:b5:a9: 95:2b:c3:0c:5e:f2:6e:3c:f2:37:b3:b0:09:39:82: ca:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:79:C8:88:60:3C:EA:CD:65:AE:92:9B:A3:87:39:06:49:75:DD:CB X509v3 Authority Key Identifier: keyid:93:3E:F7:26:06:D9:D5:B2:9F:E3:A4:1F:20:C5:2B:20:CA:F5:55:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kz73JgbZ1bKf46QfIMUrIMr1Vbo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:c7:61:fa:73:35:00:a6:cc:d4:5b:e1:49:fd:e5:17:7b:b0: fc:e8:f3:b6:0b:81:90:21:f2:6e:05:5f:77:5d:58:50:e5:d3: d8:1c:c0:01:90:72:11:35:0f:44:25:b6:b3:00:64:c2:62:eb: 33:62:55:e1:8d:12:58:b9:e6:c4:8f:6c:9a:0c:4e:a3:89:7e: 35:07:c3:ee:7b:0c:e4:4d:a5:7a:45:44:5c:71:35:e6:de:52: f8:66:79:3e:f4:8c:45:e0:11:dc:2b:13:28:1b:8f:ae:83:97: da:ad:94:cc:74:1a:4b:dd:71:9b:88:32:43:ba:86:9c:d0:2e: 7b:67:79:7d:6d:e3:23:ed:e1:a0:d9:6d:9f:52:71:7c:9d:46: b4:55:d4:38:fc:3d:6d:19:9a:42:e1:91:bb:72:b2:fd:8d:a8: 7e:8d:b4:3a:62:5c:c8:a5:11:93:51:b6:1d:b9:b2:f4:fd:38: ee:f1:d8:5a:a2:4d:ac:6f:69:94:5d:ae:26:d1:58:d8:aa:ef: e2:45:4e:a0:6b:29:62:4a:ac:9c:e0:0a:44:fb:9c:c8:13:11: f2:65:dd:a5:ac:dc:d7:3d:b2:36:b2:46:d8:c8:ae:92:95:62: 48:43:f3:ba:48:e3:ca:8c:b2:9c:a4:44:9f:2d:43:a3:01:39: 9b:c8:40:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY1MDMxMTAvBgNVBAUTKDkzM0VGNzI2MDZEOUQ1QjI5RkUzQTQxRjIwQzUyQjIw Q0FGNTU1QkEwHhcNMjUwNDI2MjA0NjM3WhcNMjUwNTAzMjA0NjM3WjAYMRYwFAYD VQQDEw02ODBkNDYyZC01NGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyWOhbNXhe7uVuBY0tA5Z8vA1UIk1oOURsTehxIRFn3uc8XHNIq7luKL0abA4 mnKoxb8TppuOT9a8LJFaOhC0HMUDOqiKGSILvu3ZtQ49mBRZzA6P6d6ZAE1DWZRu 2E4R8A86Ci71FU4UUph2KqCaq6uZWwq5ePogPvy3hj0WWLqdRccU7tCwwRplvEYr tC2CVmzeN06UUYRyu3hlgWfXj4mGf7bMpavs48OJRkuBRXxLD18qepUN0hkZBy17 ifAS4aP+vCvxBORxXmpt7wHMK70mfAdt7wMbNp8s3OWvmgw9lxlyTQffF/gB0QD0 tamVK8MMXvJuPPI3s7AJOYLK7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNt5yIhg POrNZa6Sm6OHOQZJdd3LMB8GA1UdIwQYMBaAFJM+9yYG2dWyn+OkHyDFKyDK9VW6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjUwMy8wMTU0QjRCNkVF ODcxMUVBQjUyQTVDMDlDNEY5QUUwMi9rejczSmdiWjFiS2Y0NlFmSU1VcklNcjFW Ym8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t6NzNKZ2JaMWJLZjQ2UWZJTVVySU1yMVZiby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjUwMy8wMTU0QjRCNkVFODcxMUVBQjUyQTVDMDlDNEY5QUUwMi9rejczSmdiWjFi S2Y0NlFmSU1VcklNcjFWYm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6x2H6czUApszUW+FJ/eUXe7D86PO2C4GQIfJuBV93XVhQ5dPYHMAB kHIRNQ9EJbazAGTCYuszYlXhjRJYuebEj2yaDE6jiX41B8PuewzkTaV6RURccTXm 3lL4Znk+9IxF4BHcKxMoG4+ug5farZTMdBpL3XGbiDJDuoac0C57Z3l9beMj7eGg 2W2fUnF8nUa0VdQ4/D1tGZpC4ZG7crL9jah+jbQ6YlzIpRGTUbYdubL0/Tju8dha ok2sb2mUXa4m0VjYqu/iRU6gayliSqyc4ApE+5zIExHyZd2lrNzXPbI2skbYyK6S lWJIQ/O6SOPKjLKcpESfLUOjATmbyEAX -----END CERTIFICATE-----Generated at Sun Apr 27 00:14:11 2025 by rpki-client on console.sobornost.net