$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.mft File: oPojd21UTId5RsrHxId0ZRmTfbg.mft (raw, json) Hash identifier: epeN3liBj+CURx/ifYuLumjUzVjHON/9+oaE1O5Z/yA= Subject key identifier: EE:72:CB:DB:7C:7E:29:0E:69:4D:C1:2C:25:06:7D:29:75:C0:C9:6A Authority key identifier: A0:FA:23:77:6D:54:4C:87:79:46:CA:C7:C4:87:74:65:19:93:7D:B8 Certificate issuer: /CN=A91DD584/serialNumber=A0FA23776D544C877946CAC7C487746519937DB8 Certificate serial: 60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPojd21UTId5RsrHxId0ZRmTfbg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.mft Manifest number: 5D Signing time: Sun 27 Apr 2025 05:58:02 +0000 Manifest this update: Sun 27 Apr 2025 05:58:01 +0000 Manifest next update: Sun 04 May 2025 05:58:01 +0000 Files and hashes: 1: oPojd21UTId5RsrHxId0ZRmTfbg.crl (hash: St7Z99/ijnbOQRgHAeNyMW50xgtjtXJkC7iWKq5iU6Y=) 2: B4C685B09CB111EFA6F8E627C4F9AE02.roa (hash: GuNo7IUV7Thwoh9B3txt8mnx9fY3g5B8M+APQokJxqg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.crl rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPojd21UTId5RsrHxId0ZRmTfbg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 96 (0x60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD584, serialNumber=A0FA23776D544C877946CAC7C487746519937DB8 Validity Not Before: Apr 27 05:58:01 2025 GMT Not After : May 4 05:58:01 2025 GMT Subject: CN=680dc76a-4e1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:67:1d:36:be:d5:85:f5:d3:7a:03:71:4c:90: 46:3a:0e:9c:aa:fc:9d:68:d0:70:d8:ce:6b:a3:39: cb:37:1e:bb:83:ba:af:46:57:8b:43:2b:6c:6f:ed: 35:4b:e1:81:21:9c:00:13:77:b7:84:7e:8d:cf:ea: b2:23:f0:da:9f:39:3b:12:7d:6d:af:70:6b:f2:91: f1:48:fa:b9:9c:88:84:bf:5c:8d:4e:98:3b:88:3c: 7e:c9:b6:09:4e:6a:02:bd:bf:06:5c:ce:cb:35:ac: 97:6f:1d:ff:1b:06:76:ad:6c:c0:6e:ce:9e:71:e6: 47:97:91:ab:c2:93:7e:eb:fc:c8:51:2e:fe:45:e8: 1c:c9:21:9b:75:2b:23:86:44:2e:e6:54:cc:c2:da: 11:af:98:0c:c0:90:1f:a1:f1:43:9a:b7:b7:00:23: 9f:1d:5f:d8:44:8c:2e:5b:47:74:b1:20:b8:09:c9: 27:8a:d6:2d:1b:a1:88:7a:96:be:6e:2d:ff:ef:a6: 41:52:cc:32:a0:e9:6d:23:86:d1:8c:da:83:02:ff: cc:f5:e2:51:58:f9:c3:b3:d5:a9:40:37:43:25:20: f5:9e:ae:af:ff:9e:27:b5:13:1e:52:3e:37:ee:a4: e6:c7:3a:96:5d:fa:83:9d:ae:47:45:1d:f5:dc:e6: 29:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:72:CB:DB:7C:7E:29:0E:69:4D:C1:2C:25:06:7D:29:75:C0:C9:6A X509v3 Authority Key Identifier: keyid:A0:FA:23:77:6D:54:4C:87:79:46:CA:C7:C4:87:74:65:19:93:7D:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPojd21UTId5RsrHxId0ZRmTfbg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:0b:59:b8:a2:1b:c7:fe:5e:82:98:6e:69:77:d5:84:70:42: cb:2c:fe:03:b3:09:cf:b8:c7:d8:47:6d:90:5b:03:c1:77:05: c8:c5:98:67:8d:e0:d2:54:5c:1b:60:87:4e:45:0b:56:28:c1: ce:b4:93:7e:89:01:cc:f5:9c:35:da:38:b2:b0:f7:3a:cb:21: a3:eb:c1:f7:e9:73:20:43:77:08:59:c0:27:a2:0c:88:8f:92: 1e:c6:f3:22:2f:b4:6b:92:61:c0:a7:3a:9b:2d:5d:1e:58:10: a6:66:6c:b8:a5:d8:91:4f:05:28:85:14:1f:4e:3b:a3:7e:ff: fd:2b:72:19:24:80:30:92:e8:b2:f0:80:6e:f8:d1:1e:c8:df: 02:6c:df:22:64:5c:56:42:d4:ad:7f:5a:d5:96:c4:d7:63:bb: 96:0d:1b:54:89:dd:a8:bc:d2:6c:11:f1:13:92:e6:cc:26:d0: 4c:c3:7f:c7:72:58:d2:e3:65:b9:bb:08:b3:30:3c:37:5d:81: f8:f9:67:21:ee:69:43:19:09:b5:18:36:dd:63:4e:37:24:e8: e1:37:c3:24:ab:9c:91:04:ea:d2:02:3f:d5:e3:81:41:7e:f2: cc:48:14:74:c3:66:84:67:39:f9:ed:72:a7:04:23:74:b2:ac: 2f:0c:b7:45 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RDU4NDExMC8GA1UEBRMoQTBGQTIzNzc2RDU0NEM4Nzc5NDZDQUM3QzQ4Nzc0NjUx OTkzN0RCODAeFw0yNTA0MjcwNTU4MDFaFw0yNTA1MDQwNTU4MDFaMBgxFjAUBgNV BAMTDTY4MGRjNzZhLTRlMWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNZx02vtWF9dN6A3FMkEY6Dpyq/J1o0HDYzmujOcs3HruDuq9GV4tDK2xv7TVL 4YEhnAATd7eEfo3P6rIj8NqfOTsSfW2vcGvykfFI+rmciIS/XI1OmDuIPH7JtglO agK9vwZczss1rJdvHf8bBnatbMBuzp5x5keXkavCk37r/MhRLv5F6BzJIZt1KyOG RC7mVMzC2hGvmAzAkB+h8UOat7cAI58dX9hEjC5bR3SxILgJySeK1i0boYh6lr5u Lf/vpkFSzDKg6W0jhtGM2oMC/8z14lFY+cOz1alAN0MlIPWerq//nie1Ex5SPjfu pObHOpZd+oOdrkdFHfXc5ikNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7nLL23x+ KQ5pTcEsJQZ9KXXAyWowHwYDVR0jBBgwFoAUoPojd21UTId5RsrHxId0ZRmTfbgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURENTg0LzMyNzA3MzgyOUNC MTExRUZBRUEwMEQyNUM0RjlBRTAyL29Qb2pkMjFVVElkNVJzckh4SWQwWlJtVGZi Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb1BvamQyMVVUSWQ1UnNySHhJZDBaUm1UZmJnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURE NTg0LzMyNzA3MzgyOUNCMTExRUZBRUEwMEQyNUM0RjlBRTAyL29Qb2pkMjFVVElk NVJzckh4SWQwWlJtVGZiZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEALWbiiG8f+XoKYbml31YRwQsss/gOzCc+4x9hHbZBbA8F3BcjFmGeN 4NJUXBtgh05FC1Yowc60k36JAcz1nDXaOLKw9zrLIaPrwffpcyBDdwhZwCeiDIiP kh7G8yIvtGuSYcCnOpstXR5YEKZmbLil2JFPBSiFFB9OO6N+//0rchkkgDCS6LLw gG740R7I3wJs3yJkXFZC1K1/WtWWxNdju5YNG1SJ3ai80mwR8ROS5swm0EzDf8dy WNLjZbm7CLMwPDddgfj5ZyHuaUMZCbUYNt1jTjck6OE3wySrnJEE6tICP9XjgUF+ 8sxIFHTDZoRnOfntcqcEI3SyrC8Mt0U= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:57 2025 by rpki-client on console.sobornost.net