$ rpki-client -vvf rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft File: DtUqdvMcJCF0oq0ZSByVcDty4jY.mft (raw, json) Hash identifier: 0n7+YSgq2PI3A8jZfF/Ys7PuBO9VhjrXq4xBwSutwMA= Subject key identifier: 13:32:7F:9B:64:6A:55:59:C6:92:1A:F8:30:09:F6:DB:23:14:2E:5C Authority key identifier: 0E:D5:2A:76:F3:1C:24:21:74:A2:AD:19:48:1C:95:70:3B:72:E2:36 Certificate issuer: /CN=A91E33D7/serialNumber=0ED52A76F31C242174A2AD19481C95703B72E236 Certificate serial: 0DF4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DtUqdvMcJCF0oq0ZSByVcDty4jY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft Manifest number: 0DEB Signing time: Mon 28 Apr 2025 18:04:54 +0000 Manifest this update: Mon 28 Apr 2025 18:04:53 +0000 Manifest next update: Mon 05 May 2025 18:04:53 +0000 Files and hashes: 1: DtUqdvMcJCF0oq0ZSByVcDty4jY.crl (hash: QU2W0lAzyc2/A/GGr7IIOBZoAKwFRAv33Wgp1SkzSa0=) 2: C26576D4F4ED11E9ACC51713C4F9AE02.roa (hash: leeMqNjzFzLxyR/PuwyeZTmIKl73aTot0VdgEtIi1fo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.crl rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DtUqdvMcJCF0oq0ZSByVcDty4jY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 18:04:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3572 (0xdf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E33D7, serialNumber=0ED52A76F31C242174A2AD19481C95703B72E236 Validity Not Before: Apr 28 18:04:53 2025 GMT Not After : May 5 18:04:53 2025 GMT Subject: CN=680fc346-1917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9c:94:5a:c2:c2:af:c4:be:ef:1e:d5:7f:91: e3:12:fc:36:af:e1:e6:3a:7c:68:a0:07:db:fa:ca: b2:5d:54:b2:f6:ae:ee:31:95:1d:7c:a5:25:5a:3c: 1f:c2:5a:dd:17:31:af:d4:e3:45:12:a8:b4:ef:68: bf:4f:90:ec:0f:da:da:42:d4:63:72:29:82:34:5a: d9:b1:eb:f3:da:7e:73:71:af:6d:79:5d:2c:e4:30: 11:31:cd:cb:4f:57:9c:cf:44:5e:07:28:b6:69:cd: 0e:9f:cc:54:18:19:2f:21:56:a5:fa:62:02:8b:1b: e2:c4:4b:4f:a0:81:7b:66:ff:4d:29:c9:6c:35:93: 68:34:38:be:9d:6c:85:8d:c7:c6:95:6d:ef:1a:48: cf:15:a9:a5:2d:e7:0a:57:3c:83:05:0f:aa:ca:0a: 35:4b:0c:4d:6b:c7:df:10:7d:aa:04:35:b2:7a:6b: c7:bf:b9:eb:e3:a5:ec:45:90:a0:7a:1b:70:36:ae: 92:ef:f8:f1:0a:34:19:a9:12:c1:e7:0a:21:ef:d1: 55:09:31:e2:28:e5:20:52:d6:f8:20:ea:65:ac:a7: 33:02:da:88:2c:44:be:aa:99:04:52:41:d0:14:66: 76:7f:86:55:99:3f:10:64:1d:6f:a0:e0:01:a6:23: 41:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:32:7F:9B:64:6A:55:59:C6:92:1A:F8:30:09:F6:DB:23:14:2E:5C X509v3 Authority Key Identifier: keyid:0E:D5:2A:76:F3:1C:24:21:74:A2:AD:19:48:1C:95:70:3B:72:E2:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DtUqdvMcJCF0oq0ZSByVcDty4jY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:50:4b:53:43:d4:26:19:ab:f8:7f:b1:64:c1:2f:d0:3a:9a: 69:c7:1c:18:28:17:e3:e0:4e:64:84:7c:fb:00:c9:52:90:45: f9:85:3d:54:f4:37:44:84:78:00:5f:2f:4b:77:04:74:cf:14: 95:42:a2:05:7d:f7:17:3f:38:33:4a:ab:1d:9f:e1:3f:48:e9: 70:f7:38:5f:c8:7f:2e:0e:16:d3:16:c4:87:91:1c:4d:0a:6f: b7:57:7d:57:2d:e9:d3:2f:c3:86:d0:50:1c:36:5a:f1:04:17: 04:6a:64:a4:b7:4a:fc:21:57:ee:c4:d2:d6:05:d9:01:c4:87: 86:c9:57:aa:c1:51:de:2a:4e:72:26:ed:19:e1:c9:ea:08:9f: d9:58:c2:32:01:6d:5d:28:9c:1b:99:fa:66:65:b6:91:00:b9: 18:4a:b2:0b:44:2a:53:90:27:39:fd:1f:6f:9c:00:e8:a0:c1: b5:50:41:39:e0:06:f2:b3:66:d8:a0:d7:37:d6:78:77:38:d2: 14:24:65:b3:09:f5:d9:5b:09:dc:98:35:0f:11:bc:c5:54:ce: e4:e6:bf:9b:e6:06:68:1c:ea:a4:bc:31:66:1c:21:c2:48:72: f8:13:84:7c:a8:a4:d8:11:80:e6:47:f2:f1:1c:a7:34:a0:77: 55:fb:e2:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTMzRDcxMTAvBgNVBAUTKDBFRDUyQTc2RjMxQzI0MjE3NEEyQUQxOTQ4MUM5NTcw M0I3MkUyMzYwHhcNMjUwNDI4MTgwNDUzWhcNMjUwNTA1MTgwNDUzWjAYMRYwFAYD VQQDEw02ODBmYzM0Ni0xOTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvJyUWsLCr8S+7x7Vf5HjEvw2r+HmOnxooAfb+sqyXVSy9q7uMZUdfKUlWjwf wlrdFzGv1ONFEqi072i/T5DsD9raQtRjcimCNFrZsevz2n5zca9teV0s5DARMc3L T1ecz0ReByi2ac0On8xUGBkvIVal+mICixvixEtPoIF7Zv9NKclsNZNoNDi+nWyF jcfGlW3vGkjPFamlLecKVzyDBQ+qygo1SwxNa8ffEH2qBDWyemvHv7nr46XsRZCg ehtwNq6S7/jxCjQZqRLB5woh79FVCTHiKOUgUtb4IOplrKczAtqILES+qpkEUkHQ FGZ2f4ZVmT8QZB1voOABpiNBTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBMyf5tk alVZxpIa+DAJ9tsjFC5cMB8GA1UdIwQYMBaAFA7VKnbzHCQhdKKtGUgclXA7cuI2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzNENy9EQzdEODg2NEFF QjAxMUU5OEQwOEUxM0NDNEY5QUUwMi9EdFVxZHZNY0pDRjBvcTBaU0J5VmNEdHk0 alkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R0VXFkdk1jSkNGMG9xMFpTQnlWY0R0eTRqWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzNENy9EQzdEODg2NEFFQjAxMUU5OEQwOEUxM0NDNEY5QUUwMi9EdFVxZHZNY0pD RjBvcTBaU0J5VmNEdHk0alkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuUEtTQ9QmGav4f7FkwS/QOpppxxwYKBfj4E5khHz7AMlSkEX5hT1U 9DdEhHgAXy9LdwR0zxSVQqIFffcXPzgzSqsdn+E/SOlw9zhfyH8uDhbTFsSHkRxN Cm+3V31XLenTL8OG0FAcNlrxBBcEamSkt0r8IVfuxNLWBdkBxIeGyVeqwVHeKk5y Ju0Z4cnqCJ/ZWMIyAW1dKJwbmfpmZbaRALkYSrILRCpTkCc5/R9vnADooMG1UEE5 4Abys2bYoNc31nh3ONIUJGWzCfXZWwncmDUPEbzFVM7k5r+b5gZoHOqkvDFmHCHC SHL4E4R8qKTYEYDmR/LxHKc0oHdV++LF -----END CERTIFICATE-----Generated at Mon Apr 28 20:11:12 2025 by rpki-client on console.sobornost.net