$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/XcAwMzGJiu_bheTZFABriTdr7-E.mft File: XcAwMzGJiu_bheTZFABriTdr7-E.mft (raw, json) Hash identifier: Cgg1qfvTN0heaNdQ6jqFB2uqDKcZr+i5ax8ZSVMWthA= Subject key identifier: 53:2F:A3:2C:B1:4D:CE:7E:80:A3:B3:DC:80:FC:90:44:A3:85:0A:C8 Authority key identifier: 5D:C0:30:33:31:89:8A:EF:DB:85:E4:D9:14:00:6B:89:37:6B:EF:E1 Certificate issuer: /CN=A91E7BD4/serialNumber=5DC0303331898AEFDB85E4D914006B89376BEFE1 Certificate serial: 0654 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XcAwMzGJiu_bheTZFABriTdr7-E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/XcAwMzGJiu_bheTZFABriTdr7-E.mft Manifest number: 064B Signing time: Sat 26 Apr 2025 22:13:48 +0000 Manifest this update: Sat 26 Apr 2025 22:13:48 +0000 Manifest next update: Sat 03 May 2025 22:13:47 +0000 Files and hashes: 1: XcAwMzGJiu_bheTZFABriTdr7-E.crl (hash: 0WEhTLzBWpOzm7oMTuKpPThZY8wwGkGJcIoFVCHtSGE=) 2: 81E3F4ACBBDA11ED8FDB4E45C4F9AE02.roa (hash: zRXwtVciA3XUq61vGPC3fC7y/rZPmZqFfk9/8k9uEj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/XcAwMzGJiu_bheTZFABriTdr7-E.crl rsync://rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/XcAwMzGJiu_bheTZFABriTdr7-E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XcAwMzGJiu_bheTZFABriTdr7-E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 22:13:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1620 (0x654) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7BD4, serialNumber=5DC0303331898AEFDB85E4D914006B89376BEFE1 Validity Not Before: Apr 26 22:13:48 2025 GMT Not After : May 3 22:13:47 2025 GMT Subject: CN=680d5a9c-5421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:cf:dc:05:f4:7a:a5:a1:13:57:c6:d0:72:31: 34:41:29:a6:a0:15:07:5a:02:a1:03:d5:7f:04:c9: 0a:34:af:a9:ef:ca:c3:50:1a:e5:2f:a2:da:52:ac: 6e:85:53:5a:16:e3:e4:6e:32:43:97:32:e6:4b:f2: 1a:bc:c9:34:eb:2e:f6:28:c6:12:d8:6c:fc:3d:2b: a4:ca:b4:9b:d0:9e:33:bd:16:cc:82:ef:00:1c:cb: 0e:fc:e5:bf:40:4f:67:55:27:93:cd:f2:e4:c6:ab: 4a:97:9e:b6:e5:29:a2:f2:b3:c9:73:94:cb:29:f6: 61:b8:2f:37:12:cb:cd:e1:f2:9c:36:84:99:b4:c4: 46:08:80:10:d7:a5:92:ae:5e:f6:2d:dd:a8:d3:18: 4c:25:db:6c:94:39:72:52:4e:75:f0:e9:ab:3c:36: e7:1d:75:45:2f:3b:5c:88:7c:4a:17:5b:53:9c:72: 3d:95:fa:4f:71:83:79:24:04:e2:ba:b6:40:18:f3: 4e:38:11:60:d0:34:b3:bb:16:a0:1b:34:b7:2e:03: d0:c9:2d:c3:61:13:91:9a:47:2a:4f:6e:e1:f0:b0: 06:c4:70:2e:59:81:68:96:5c:6a:7c:4c:1f:16:8e: ee:fe:80:9e:a7:fa:70:df:2d:33:51:a3:38:8b:76: d0:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:2F:A3:2C:B1:4D:CE:7E:80:A3:B3:DC:80:FC:90:44:A3:85:0A:C8 X509v3 Authority Key Identifier: keyid:5D:C0:30:33:31:89:8A:EF:DB:85:E4:D9:14:00:6B:89:37:6B:EF:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/XcAwMzGJiu_bheTZFABriTdr7-E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XcAwMzGJiu_bheTZFABriTdr7-E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/XcAwMzGJiu_bheTZFABriTdr7-E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:89:36:9a:d6:a0:d0:85:f5:65:4e:c4:cb:a3:b4:fa:90:20: 63:ca:04:f3:60:45:61:03:cc:2e:46:6d:52:44:85:66:b2:9a: d3:19:49:05:54:17:22:d5:b4:88:0d:c3:a4:f8:e4:79:4c:6f: 38:36:e0:3f:6a:4b:a0:54:88:c4:71:ae:14:62:11:6c:b8:fc: 3b:ca:60:70:13:ef:91:b6:bb:4a:6e:8c:91:c8:9d:83:e3:54: c4:79:5a:41:56:a3:32:67:76:cf:d6:de:9f:86:51:c9:8a:b1: 73:08:5a:62:55:29:ab:fd:78:98:a9:7d:0c:9b:3a:02:c3:91: e5:a9:28:ca:5f:76:da:c5:87:22:f5:fe:cb:b7:25:80:c5:67: 38:71:2e:05:66:63:cb:2c:85:0a:5b:b7:45:c0:a5:1e:4d:43: 1d:89:36:48:b4:ae:ba:90:e3:8d:d2:87:6e:bf:58:32:c4:24: ab:38:08:f1:78:59:b1:17:f8:ef:6a:7b:90:b2:b6:9d:77:25: ed:bb:ea:b1:50:1e:82:58:5c:c2:66:99:ac:8f:e7:da:ca:86: fd:8b:18:7e:72:10:f1:31:df:92:dc:e2:08:15:25:a1:83:c8: 58:9d:33:10:dc:9b:ef:ec:b9:48:1d:4f:f8:3a:85:64:d6:0d: f2:c5:a8:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdCRDQxMTAvBgNVBAUTKDVEQzAzMDMzMzE4OThBRUZEQjg1RTREOTE0MDA2Qjg5 Mzc2QkVGRTEwHhcNMjUwNDI2MjIxMzQ4WhcNMjUwNTAzMjIxMzQ3WjAYMRYwFAYD VQQDEw02ODBkNWE5Yy01NDIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApM/cBfR6paETV8bQcjE0QSmmoBUHWgKhA9V/BMkKNK+p78rDUBrlL6LaUqxu hVNaFuPkbjJDlzLmS/IavMk06y72KMYS2Gz8PSukyrSb0J4zvRbMgu8AHMsO/OW/ QE9nVSeTzfLkxqtKl5625Smi8rPJc5TLKfZhuC83EsvN4fKcNoSZtMRGCIAQ16WS rl72Ld2o0xhMJdtslDlyUk518OmrPDbnHXVFLztciHxKF1tTnHI9lfpPcYN5JATi urZAGPNOOBFg0DSzuxagGzS3LgPQyS3DYRORmkcqT27h8LAGxHAuWYFollxqfEwf Fo7u/oCep/pw3y0zUaM4i3bQVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFMvoyyx Tc5+gKOz3ID8kESjhQrIMB8GA1UdIwQYMBaAFF3AMDMxiYrv24Xk2RQAa4k3a+/h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0JENC80RTg3QTQ2QTg2 QjExMUVCQjhCRTIxN0NDNEY5QUUwMi9YY0F3TXpHSml1X2JoZVRaRkFCcmlUZHI3 LUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hjQXdNekdKaXVfYmhlVFpGQUJyaVRkcjctRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF N0JENC80RTg3QTQ2QTg2QjExMUVCQjhCRTIxN0NDNEY5QUUwMi9YY0F3TXpHSml1 X2JoZVRaRkFCcmlUZHI3LUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCziTaa1qDQhfVlTsTLo7T6kCBjygTzYEVhA8wuRm1SRIVmsprTGUkF VBci1bSIDcOk+OR5TG84NuA/akugVIjEca4UYhFsuPw7ymBwE++RtrtKboyRyJ2D 41TEeVpBVqMyZ3bP1t6fhlHJirFzCFpiVSmr/XiYqX0MmzoCw5HlqSjKX3baxYci 9f7LtyWAxWc4cS4FZmPLLIUKW7dFwKUeTUMdiTZItK66kOON0oduv1gyxCSrOAjx eFmxF/jvanuQsraddyXtu+qxUB6CWFzCZpmsj+fayob9ixh+chDxMd+S3OIIFSWh g8hYnTMQ3Jvv7LlIHU/4OoVk1g3yxaiF -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:15 2025 by rpki-client on console.sobornost.net