$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/dD54xFmO_HLaCEZGUOuPnNoW-YA.mft File: dD54xFmO_HLaCEZGUOuPnNoW-YA.mft (raw, json) Hash identifier: 42y5IJY/gNjWyyHXMwVhPZMRjhkM1Crl00kLsmcsuyY= Subject key identifier: 84:58:AD:5A:55:7A:14:1E:13:23:FB:0A:28:B3:B6:F9:DC:C5:C2:81 Authority key identifier: 74:3E:78:C4:59:8E:FC:72:DA:08:46:46:50:EB:8F:9C:DA:16:F9:80 Certificate issuer: /CN=A91DE500/serialNumber=743E78C4598EFC72DA08464650EB8F9CDA16F980 Certificate serial: E9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dD54xFmO_HLaCEZGUOuPnNoW-YA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/dD54xFmO_HLaCEZGUOuPnNoW-YA.mft Manifest number: 01C9 Signing time: Sun 27 Apr 2025 04:20:18 +0000 Manifest this update: Sun 27 Apr 2025 04:20:17 +0000 Manifest next update: Sun 04 May 2025 04:20:17 +0000 Files and hashes: 1: dD54xFmO_HLaCEZGUOuPnNoW-YA.crl (hash: lOJLpFDIe+NVOw6wliaDJho1TF8BGfKtKzkRygH4D4Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/dD54xFmO_HLaCEZGUOuPnNoW-YA.crl rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/dD54xFmO_HLaCEZGUOuPnNoW-YA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dD54xFmO_HLaCEZGUOuPnNoW-YA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 233 (0xe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE500, serialNumber=743E78C4598EFC72DA08464650EB8F9CDA16F980 Validity Not Before: Apr 27 04:20:17 2025 GMT Not After : May 4 04:20:17 2025 GMT Subject: CN=680db081-5e4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e6:0b:9a:fb:4e:3f:74:c4:9e:00:26:59:2c: 9d:36:ac:0a:1f:fe:04:ec:20:d1:c1:43:74:86:53: cb:f6:30:b5:02:b6:48:a5:17:1a:68:b3:11:87:a3: ab:e0:33:4e:ce:46:a8:45:c4:56:34:e7:2a:5f:fd: ab:b2:57:c2:73:f1:86:79:32:7c:33:b9:85:6b:52: 9a:6f:fb:0f:49:ca:80:82:09:15:1a:50:55:05:98: f1:08:97:d2:81:ce:ad:59:38:98:9b:c5:7c:f4:cb: 24:79:58:46:5e:57:f8:ef:32:f0:eb:98:ae:23:68: 90:63:78:c0:cb:5f:e2:66:22:d3:8a:0e:1e:b9:59: 5a:16:b9:bd:c0:e8:12:bf:3b:96:0f:d0:21:58:3c: 8e:b1:6d:99:24:20:65:f3:46:c3:3d:0d:1d:fe:1b: 99:f0:51:1b:1e:0c:e3:d0:73:41:a3:10:46:0f:ef: a4:78:87:69:d1:13:8c:34:33:64:d8:ab:e2:c9:e0: 8d:33:b8:d9:0a:29:26:c6:1c:88:72:99:8c:fd:ee: 26:90:b5:65:a5:38:9a:8f:65:2f:da:f0:50:3c:2f: 47:a2:44:78:4c:c5:7a:65:2b:29:cb:b6:86:5a:ee: 56:a2:ed:ed:1f:e5:18:dc:21:46:b6:68:30:b3:9d: ea:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:58:AD:5A:55:7A:14:1E:13:23:FB:0A:28:B3:B6:F9:DC:C5:C2:81 X509v3 Authority Key Identifier: keyid:74:3E:78:C4:59:8E:FC:72:DA:08:46:46:50:EB:8F:9C:DA:16:F9:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/dD54xFmO_HLaCEZGUOuPnNoW-YA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dD54xFmO_HLaCEZGUOuPnNoW-YA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/dD54xFmO_HLaCEZGUOuPnNoW-YA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:09:4e:7b:12:93:04:bd:08:49:b4:2d:35:0b:99:f5:2e:e6: 51:0f:1d:23:84:a5:2c:94:c6:20:24:2f:ca:59:4b:d9:c1:28: 46:bc:6b:8f:2d:cf:87:8b:45:08:c3:36:af:55:fa:35:2f:3c: 5b:44:d2:10:28:da:b7:7f:9d:c6:34:56:b0:a2:0b:0f:49:a2: 37:ea:29:0a:01:bb:15:eb:6b:2d:8d:d6:a8:5c:3d:ea:9d:17: ae:11:3b:89:ac:32:b9:36:ed:ef:f6:82:72:83:bb:cd:09:e7: 8a:be:04:7c:63:e7:ff:2b:ab:4a:ec:6f:e7:d0:eb:15:0b:25: 11:0f:7f:12:31:e4:8a:0a:72:5e:70:a3:99:e7:03:c3:74:7b: 21:6a:bc:46:ba:06:68:6b:24:c6:5d:a3:72:26:ee:c1:b4:c3: 19:8b:14:d4:91:63:62:01:74:43:6f:c9:28:53:ca:c8:56:8f: cc:bc:dc:ea:54:18:e2:3b:14:16:f3:1e:d6:40:1f:eb:d7:f2: 16:91:ad:c3:ac:c6:12:39:4e:b5:1e:d7:e3:af:08:11:56:98: a4:fe:66:2b:b6:55:23:e4:b6:5d:22:81:f9:30:12:9f:27:b2: 8c:97:54:70:bb:b8:d4:c8:c2:22:0d:79:bb:54:7d:62:eb:da: 20:cc:e8:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU1MDAxMTAvBgNVBAUTKDc0M0U3OEM0NTk4RUZDNzJEQTA4NDY0NjUwRUI4RjlD REExNkY5ODAwHhcNMjUwNDI3MDQyMDE3WhcNMjUwNTA0MDQyMDE3WjAYMRYwFAYD VQQDEw02ODBkYjA4MS01ZTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAveYLmvtOP3TEngAmWSydNqwKH/4E7CDRwUN0hlPL9jC1ArZIpRcaaLMRh6Or 4DNOzkaoRcRWNOcqX/2rslfCc/GGeTJ8M7mFa1Kab/sPScqAggkVGlBVBZjxCJfS gc6tWTiYm8V89MskeVhGXlf47zLw65iuI2iQY3jAy1/iZiLTig4euVlaFrm9wOgS vzuWD9AhWDyOsW2ZJCBl80bDPQ0d/huZ8FEbHgzj0HNBoxBGD++keIdp0ROMNDNk 2KviyeCNM7jZCikmxhyIcpmM/e4mkLVlpTiaj2Uv2vBQPC9HokR4TMV6ZSspy7aG Wu5Wou3tH+UY3CFGtmgws53qaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIRYrVpV ehQeEyP7CiiztvncxcKBMB8GA1UdIwQYMBaAFHQ+eMRZjvxy2ghGRlDrj5zaFvmA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTUwMC8zRkZGNUMzRUM3 MkQxMUVFOUM3QzM1MURDNEY5QUUwMi9kRDU0eEZtT19ITGFDRVpHVU91UG5Ob1ct WUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2RENTR4Rm1PX0hMYUNFWkdVT3VQbk5vVy1ZQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTUwMC8zRkZGNUMzRUM3MkQxMUVFOUM3QzM1MURDNEY5QUUwMi9kRDU0eEZtT19I TGFDRVpHVU91UG5Ob1ctWUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrCU57EpMEvQhJtC01C5n1LuZRDx0jhKUslMYgJC/KWUvZwShGvGuP Lc+Hi0UIwzavVfo1LzxbRNIQKNq3f53GNFawogsPSaI36ikKAbsV62stjdaoXD3q nReuETuJrDK5Nu3v9oJyg7vNCeeKvgR8Y+f/K6tK7G/n0OsVCyURD38SMeSKCnJe cKOZ5wPDdHsharxGugZoayTGXaNyJu7BtMMZixTUkWNiAXRDb8koU8rIVo/MvNzq VBjiOxQW8x7WQB/r1/IWka3DrMYSOU61HtfjrwgRVpik/mYrtlUj5LZdIoH5MBKf J7KMl1Rwu7jUyMIiDXm7VH1i69ogzOiP -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:57 2025 by rpki-client on console.sobornost.net