$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.mft File: mFpmWpz7T1ygDsqL_rgGML9PSBY.mft (raw, json) Hash identifier: h/sLOQRqqGZ8dtRig7k+p5Eftdoe5K4Ha3kr/RRBAcc= Subject key identifier: 43:32:71:81:85:02:DE:C4:14:99:BD:CC:1E:74:A7:DE:59:4E:CF:54 Authority key identifier: 98:5A:66:5A:9C:FB:4F:5C:A0:0E:CA:8B:FE:B8:06:30:BF:4F:48:16 Certificate issuer: /CN=A91E6D5D/serialNumber=985A665A9CFB4F5CA00ECA8BFEB80630BF4F4816 Certificate serial: 2529 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFpmWpz7T1ygDsqL_rgGML9PSBY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.mft Manifest number: 9F02 Signing time: Mon 28 Apr 2025 14:32:32 +0000 Manifest this update: Mon 28 Apr 2025 14:32:31 +0000 Manifest next update: Mon 05 May 2025 14:32:31 +0000 Files and hashes: 1: mFpmWpz7T1ygDsqL_rgGML9PSBY.crl (hash: UI7whoWzkm5awdauxflOrydbPK5uqAunMTQufstr/xg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.crl rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFpmWpz7T1ygDsqL_rgGML9PSBY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 14:32:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9513 (0x2529) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6D5D, serialNumber=985A665A9CFB4F5CA00ECA8BFEB80630BF4F4816 Validity Not Before: Apr 28 14:32:31 2025 GMT Not After : May 5 14:32:31 2025 GMT Subject: CN=680f9180-0fab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c2:ee:85:0c:a2:d6:24:da:1b:8c:d7:1a:b8: f5:c1:67:80:8c:e4:61:52:bf:09:6f:42:bd:f4:8f: 2b:93:af:22:4e:cc:19:b8:92:33:97:bd:b9:36:f9: dc:e8:db:ee:99:f9:1a:88:78:92:4e:2d:c4:37:e1: 9a:9e:a4:6b:69:aa:50:93:a4:36:21:cd:26:65:ff: c4:c6:df:dd:ea:a1:a3:92:fd:cf:c0:75:bd:32:f4: 6d:fa:d4:92:3e:82:8c:a0:2a:6c:d2:bd:8a:fd:ae: 46:6c:b9:07:d5:b3:6d:62:bb:f7:71:cd:92:15:cd: e8:32:17:cb:a6:8a:b1:37:45:e3:72:66:d2:01:91: 40:15:dd:28:8a:b2:d3:10:96:9a:c2:f6:e7:75:84: a8:86:f9:58:48:bc:e1:83:37:b1:98:56:43:df:bc: 80:ab:d6:bc:f0:75:fe:0f:8c:ff:0b:26:98:b6:ee: 89:30:61:51:8c:9a:c8:b7:07:8f:2e:fb:d3:da:e9: b1:8c:ba:f3:45:f4:cb:fe:7f:17:e8:ff:bc:94:2a: b5:98:18:a7:53:1d:86:3c:19:84:53:8a:64:bb:62: e8:02:7d:3e:6e:23:f5:3b:34:a6:a3:bf:91:cf:96: 50:8c:79:02:42:ba:30:82:1e:9b:e7:a6:c0:08:49: 92:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:32:71:81:85:02:DE:C4:14:99:BD:CC:1E:74:A7:DE:59:4E:CF:54 X509v3 Authority Key Identifier: keyid:98:5A:66:5A:9C:FB:4F:5C:A0:0E:CA:8B:FE:B8:06:30:BF:4F:48:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFpmWpz7T1ygDsqL_rgGML9PSBY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:9e:8c:4b:eb:ba:eb:02:2f:76:a8:39:49:67:76:51:dc:a8: df:60:77:bb:06:5c:ec:d2:c7:9e:86:8e:23:69:f7:f5:00:04: b7:dd:90:67:65:28:24:0f:43:a9:12:e4:9b:4a:5c:6c:2a:4b: 83:1d:57:45:4a:5c:b0:af:db:7e:61:68:a5:93:88:3e:0d:bc: 87:66:2c:2c:3a:b9:4e:1c:35:c8:30:fb:d3:c5:29:28:75:8b: f6:b9:ae:22:76:62:d5:53:d5:bd:f7:85:f1:68:38:c1:1b:4e: 73:7f:21:c5:a2:da:2b:5e:43:57:be:68:43:46:e7:b5:9c:44: a2:c5:5d:61:e8:1a:18:ec:83:28:e8:5c:ac:8e:50:b3:01:88: 06:60:9e:a6:3c:f3:04:8b:6a:a0:c9:d7:b6:20:0c:a9:23:5d: 4e:b6:c1:da:b1:5b:d8:af:91:32:46:69:94:20:e8:fc:58:fb: a2:32:be:b2:16:ab:c8:2b:e4:62:ac:da:2b:d4:9b:d8:74:d6: e1:d4:71:cc:ca:a9:cd:ac:19:27:dc:37:5a:b7:7c:64:7d:bb: d4:67:d7:68:c3:b9:78:4c:ae:aa:fc:c3:47:64:12:4b:3c:71: 94:94:83:16:56:20:2a:c5:7a:77:f2:dd:56:fd:69:3f:a4:03: a7:f0:51:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJSkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZENUQxMTAvBgNVBAUTKDk4NUE2NjVBOUNGQjRGNUNBMDBFQ0E4QkZFQjgwNjMw QkY0RjQ4MTYwHhcNMjUwNDI4MTQzMjMxWhcNMjUwNTA1MTQzMjMxWjAYMRYwFAYD VQQDEw02ODBmOTE4MC0wZmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwcLuhQyi1iTaG4zXGrj1wWeAjORhUr8Jb0K99I8rk68iTswZuJIzl725Nvnc 6NvumfkaiHiSTi3EN+GanqRraapQk6Q2Ic0mZf/Ext/d6qGjkv3PwHW9MvRt+tSS PoKMoCps0r2K/a5GbLkH1bNtYrv3cc2SFc3oMhfLpoqxN0XjcmbSAZFAFd0oirLT EJaawvbndYSohvlYSLzhgzexmFZD37yAq9a88HX+D4z/CyaYtu6JMGFRjJrItweP LvvT2umxjLrzRfTL/n8X6P+8lCq1mBinUx2GPBmEU4pku2LoAn0+biP1OzSmo7+R z5ZQjHkCQrowgh6b56bACEmSqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEMycYGF At7EFJm9zB50p95ZTs9UMB8GA1UdIwQYMBaAFJhaZlqc+09coA7Ki/64BjC/T0gW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkQ1RC85RENCNjhFMDFE ODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9tRnBtV3B6N1QxeWdEc3FMX3JnR01MOVBT QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21GcG1XcHo3VDF5Z0RzcUxfcmdHTUw5UFNCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkQ1RC85RENCNjhFMDFEODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9tRnBtV3B6N1Qx eWdEc3FMX3JnR01MOVBTQlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKnoxL67rrAi92qDlJZ3ZR3KjfYHe7Blzs0seeho4jaff1AAS33ZBn ZSgkD0OpEuSbSlxsKkuDHVdFSlywr9t+YWilk4g+DbyHZiwsOrlOHDXIMPvTxSko dYv2ua4idmLVU9W994XxaDjBG05zfyHFotorXkNXvmhDRue1nESixV1h6BoY7IMo 6FysjlCzAYgGYJ6mPPMEi2qgyde2IAypI11OtsHasVvYr5EyRmmUIOj8WPuiMr6y FqvIK+RirNor1JvYdNbh1HHMyqnNrBkn3Ddat3xkfbvUZ9dow7l4TK6q/MNHZBJL PHGUlIMWViAqxXp38t1W/Wk/pAOn8FEB -----END CERTIFICATE-----Generated at Mon Apr 28 17:46:03 2025 by rpki-client on console.sobornost.net