$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA623/D3167F0A060C11ECAF675043C4F9AE02/0S_1veXU0upxiMsALH_wFtyZTXI.mft File: 0S_1veXU0upxiMsALH_wFtyZTXI.mft (raw, json) Hash identifier: GSbNs6uA+QPl5L2Zc6St5ywT/1CKrg4eYomOSyADxH0= Subject key identifier: DB:07:D2:6B:BA:48:14:0B:44:48:C8:00:85:79:23:40:74:E3:1D:49 Authority key identifier: D1:2F:F5:BD:E5:D4:D2:EA:71:88:CB:00:2C:7F:F0:16:DC:99:4D:72 Certificate issuer: /CN=A91EA623/serialNumber=D12FF5BDE5D4D2EA7188CB002C7FF016DC994D72 Certificate serial: 0502 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0S_1veXU0upxiMsALH_wFtyZTXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA623/D3167F0A060C11ECAF675043C4F9AE02/0S_1veXU0upxiMsALH_wFtyZTXI.mft Manifest number: 0502 Signing time: Sat 26 Apr 2025 23:19:27 +0000 Manifest this update: Sat 26 Apr 2025 23:19:26 +0000 Manifest next update: Sat 03 May 2025 23:19:26 +0000 Files and hashes: 1: 0S_1veXU0upxiMsALH_wFtyZTXI.crl (hash: /HUwW0Rvt7YQ5g5LwX58pLxxkR0mpy29n0+J2SjKPZw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA623/D3167F0A060C11ECAF675043C4F9AE02/0S_1veXU0upxiMsALH_wFtyZTXI.crl rsync://rpki.apnic.net/member_repository/A91EA623/D3167F0A060C11ECAF675043C4F9AE02/0S_1veXU0upxiMsALH_wFtyZTXI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0S_1veXU0upxiMsALH_wFtyZTXI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 23:19:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1282 (0x502) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA623, serialNumber=D12FF5BDE5D4D2EA7188CB002C7FF016DC994D72 Validity Not Before: Apr 26 23:19:26 2025 GMT Not After : May 3 23:19:26 2025 GMT Subject: CN=680d69ff-1f9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:23:ce:60:b6:41:c3:e9:5e:e1:62:e4:97:57: 97:a4:91:bd:49:ea:c0:f1:94:79:21:aa:87:7f:72: 69:56:72:a0:9b:6c:39:2a:47:7e:06:c7:0c:c1:ed: b4:d5:4e:ef:95:77:91:f4:f4:ff:70:f2:75:b4:4b: 63:85:37:5c:d1:5b:d7:04:8f:9f:1f:26:2d:4d:9b: 73:29:13:9d:85:f7:10:48:d9:9e:78:38:3d:8d:85: db:36:82:16:92:50:f0:c6:d7:cb:88:92:7b:91:ec: 55:3f:a3:8a:c9:bb:1a:d8:a8:b8:57:c5:8f:ff:5b: 0c:67:52:60:d1:65:69:62:72:b6:e4:18:c8:06:5c: 1a:13:e2:cd:81:2f:5e:74:79:69:5a:96:e7:40:c0: a5:d9:3b:f1:cd:70:2c:a9:dd:17:77:c1:d2:d4:41: 57:b3:9d:f9:1c:16:f6:4e:2d:3b:ea:e8:a5:c9:48: 2f:66:81:d4:60:8d:68:35:fa:1b:ef:38:3f:9c:cf: 02:78:0d:7e:98:af:e9:c6:24:5d:7a:46:6e:43:dc: b9:f9:8a:62:4c:46:d3:27:9f:d1:39:c7:3a:2c:ea: fc:9f:73:b7:e6:d0:92:97:71:f9:7e:5a:cb:7a:6d: 53:90:d7:17:f9:4e:aa:d8:a6:aa:d5:07:d6:cb:71: 59:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:07:D2:6B:BA:48:14:0B:44:48:C8:00:85:79:23:40:74:E3:1D:49 X509v3 Authority Key Identifier: keyid:D1:2F:F5:BD:E5:D4:D2:EA:71:88:CB:00:2C:7F:F0:16:DC:99:4D:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA623/D3167F0A060C11ECAF675043C4F9AE02/0S_1veXU0upxiMsALH_wFtyZTXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0S_1veXU0upxiMsALH_wFtyZTXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA623/D3167F0A060C11ECAF675043C4F9AE02/0S_1veXU0upxiMsALH_wFtyZTXI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:eb:35:ef:2e:b4:50:40:44:cf:79:b7:f4:b0:f6:6b:65:05: 86:a7:e8:29:c9:02:a2:30:3e:a7:00:93:23:b9:0b:01:5e:08: 04:6f:62:83:99:b8:e5:50:f8:1d:bb:d7:37:8e:18:6a:5b:be: 63:e0:55:dd:c6:ce:df:f8:0d:26:9b:87:23:eb:f6:7a:27:af: 07:0a:05:c2:ef:b5:f3:77:85:c3:cc:5b:61:5a:ad:64:1f:90: 03:4c:b9:9c:7d:f8:3a:89:41:4a:a7:2c:1b:45:22:05:51:31: 3f:cf:5c:dd:e3:6e:d4:be:7c:ec:21:9f:d0:b9:c8:a6:ce:8f: 95:dd:37:3c:0e:7c:fe:3d:43:4a:02:30:2e:f1:25:ce:67:7c: d7:7a:f5:a7:a2:98:55:48:55:e8:3b:61:e1:bc:c5:8e:95:4b: 48:cb:5d:33:b0:9d:3e:c7:74:6a:36:23:65:15:2e:9e:48:4c: 4d:29:d5:36:37:12:fd:c4:18:42:da:e8:e0:8f:2e:00:b5:9b: 4f:d5:89:5a:b8:fa:be:b0:26:bb:46:5c:81:c1:e9:19:84:f3: 38:a2:d7:27:cf:1d:bf:b6:89:53:97:95:d1:44:36:33:57:ae: 28:8a:40:23:cf:57:9a:df:12:2a:6c:cc:f2:74:7d:ef:5e:70: d1:01:06:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE2MjMxMTAvBgNVBAUTKEQxMkZGNUJERTVENEQyRUE3MTg4Q0IwMDJDN0ZGMDE2 REM5OTRENzIwHhcNMjUwNDI2MjMxOTI2WhcNMjUwNTAzMjMxOTI2WjAYMRYwFAYD VQQDEw02ODBkNjlmZi0xZjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxyPOYLZBw+le4WLkl1eXpJG9SerA8ZR5IaqHf3JpVnKgm2w5Kkd+BscMwe20 1U7vlXeR9PT/cPJ1tEtjhTdc0VvXBI+fHyYtTZtzKROdhfcQSNmeeDg9jYXbNoIW klDwxtfLiJJ7kexVP6OKybsa2Ki4V8WP/1sMZ1Jg0WVpYnK25BjIBlwaE+LNgS9e dHlpWpbnQMCl2TvxzXAsqd0Xd8HS1EFXs535HBb2Ti076uilyUgvZoHUYI1oNfob 7zg/nM8CeA1+mK/pxiRdekZuQ9y5+YpiTEbTJ5/ROcc6LOr8n3O35tCSl3H5flrL em1TkNcX+U6q2Kaq1QfWy3FZNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNsH0mu6 SBQLREjIAIV5I0B04x1JMB8GA1UdIwQYMBaAFNEv9b3l1NLqcYjLACx/8BbcmU1y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTYyMy9EMzE2N0YwQTA2 MEMxMUVDQUY2NzUwNDNDNEY5QUUwMi8wU18xdmVYVTB1cHhpTXNBTEhfd0Z0eVpU WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBTXzF2ZVhVMHVweGlNc0FMSF93RnR5WlRYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTYyMy9EMzE2N0YwQTA2MEMxMUVDQUY2NzUwNDNDNEY5QUUwMi8wU18xdmVYVTB1 cHhpTXNBTEhfd0Z0eVpUWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBp6zXvLrRQQETPebf0sPZrZQWGp+gpyQKiMD6nAJMjuQsBXggEb2KD mbjlUPgdu9c3jhhqW75j4FXdxs7f+A0mm4cj6/Z6J68HCgXC77Xzd4XDzFthWq1k H5ADTLmcffg6iUFKpywbRSIFUTE/z1zd427UvnzsIZ/Qucimzo+V3Tc8Dnz+PUNK AjAu8SXOZ3zXevWnophVSFXoO2HhvMWOlUtIy10zsJ0+x3RqNiNlFS6eSExNKdU2 NxL9xBhC2ujgjy4AtZtP1YlauPq+sCa7RlyBwekZhPM4otcnzx2/tolTl5XRRDYz V64oikAjz1ea3xIqbMzydH3vXnDRAQac -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:16 2025 by rpki-client on console.sobornost.net