$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA723/2CD7F5C8B27D11ED8856FA81C4F9AE02/uQQiVZtYxNqonyJNSccf9E-byjQ.mft File: uQQiVZtYxNqonyJNSccf9E-byjQ.mft (raw, json) Hash identifier: ECkxr3WlCEUtS8zi/18lZYtwsrBIJR5rq14c6kDrlHg= Subject key identifier: E8:EC:F8:E8:14:12:9E:19:2D:FB:CB:4E:F1:63:D9:30:01:AF:3E:EF Authority key identifier: B9:04:22:55:9B:58:C4:DA:A8:9F:22:4D:49:C7:1F:F4:4F:9B:CA:34 Certificate issuer: /CN=A91EA723/serialNumber=B90422559B58C4DAA89F224D49C71FF44F9BCA34 Certificate serial: 01B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uQQiVZtYxNqonyJNSccf9E-byjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA723/2CD7F5C8B27D11ED8856FA81C4F9AE02/uQQiVZtYxNqonyJNSccf9E-byjQ.mft Manifest number: 01A9 Signing time: Sun 27 Apr 2025 02:24:33 +0000 Manifest this update: Sun 27 Apr 2025 02:24:33 +0000 Manifest next update: Sun 04 May 2025 02:24:33 +0000 Files and hashes: 1: uQQiVZtYxNqonyJNSccf9E-byjQ.crl (hash: QIHraxRSz52Xm0uLOrG3b/z0oyWzPEBLxBIy0Fyq/Z4=) 2: 4868355806A611F08F878981C4F9AE02.roa (hash: CY2/EJImr1t3NibBfSgu4VzBiSPC1MYnf7DadJvamq4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA723/2CD7F5C8B27D11ED8856FA81C4F9AE02/uQQiVZtYxNqonyJNSccf9E-byjQ.crl rsync://rpki.apnic.net/member_repository/A91EA723/2CD7F5C8B27D11ED8856FA81C4F9AE02/uQQiVZtYxNqonyJNSccf9E-byjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uQQiVZtYxNqonyJNSccf9E-byjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:24:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 438 (0x1b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA723, serialNumber=B90422559B58C4DAA89F224D49C71FF44F9BCA34 Validity Not Before: Apr 27 02:24:33 2025 GMT Not After : May 4 02:24:33 2025 GMT Subject: CN=680d9561-5532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:18:06:05:04:59:20:cd:63:28:0d:3a:f6:ed: 1a:8f:23:95:db:1c:12:ba:35:2d:0f:04:b4:e2:2c: 07:eb:fa:e4:b6:29:e1:c0:37:3b:f9:32:28:8f:de: d3:45:f5:87:03:67:ac:dd:b9:68:b4:fd:d8:03:28: 52:08:57:2d:3b:26:ec:e5:5d:42:5c:70:45:55:59: 69:b8:f1:4a:86:bb:d2:a2:27:55:c0:1f:74:fb:76: 6e:8a:a5:db:88:b7:0e:35:a8:01:71:95:27:d5:bb: 30:90:9c:80:68:47:54:73:3a:5f:bb:da:bd:97:1d: 17:1e:57:2e:ee:bb:d2:3d:da:6c:66:78:2c:43:5f: 4c:0c:f2:04:77:34:c7:5e:e9:cb:13:56:d6:07:a9: f5:ad:6e:2e:94:56:87:1f:34:48:19:67:48:51:b1: 62:cc:8f:5e:3b:49:e8:cd:66:92:ee:a2:24:85:78: 44:35:5f:3b:04:22:2f:c6:da:d4:b6:8a:cb:c5:7d: 54:fa:b2:00:ef:27:f2:23:57:84:1c:2e:8c:68:3c: 4e:e0:2d:51:a0:76:84:42:34:b5:09:fc:af:7d:a1: ea:9b:9c:e5:8a:78:32:77:8a:2a:4c:8e:40:aa:3f: 0b:93:d9:03:24:8c:fe:88:06:aa:14:38:76:a1:9c: 1a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:EC:F8:E8:14:12:9E:19:2D:FB:CB:4E:F1:63:D9:30:01:AF:3E:EF X509v3 Authority Key Identifier: keyid:B9:04:22:55:9B:58:C4:DA:A8:9F:22:4D:49:C7:1F:F4:4F:9B:CA:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA723/2CD7F5C8B27D11ED8856FA81C4F9AE02/uQQiVZtYxNqonyJNSccf9E-byjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uQQiVZtYxNqonyJNSccf9E-byjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA723/2CD7F5C8B27D11ED8856FA81C4F9AE02/uQQiVZtYxNqonyJNSccf9E-byjQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:b2:4b:6a:78:ec:eb:16:54:b4:3e:7f:44:f3:5c:18:19:dd: 46:67:52:ef:e9:42:84:45:a8:f5:bc:4f:38:4f:7b:3a:7d:4d: 2c:f0:ad:03:c8:ff:07:4c:4e:d7:66:39:a4:2d:a7:bf:e6:95: 44:c5:9e:92:53:4e:28:aa:d6:69:7d:cb:eb:46:b5:b6:4c:72: b1:ba:00:b3:dc:a1:8f:b0:f6:50:66:ec:b3:f6:8b:63:15:52: 96:df:a6:8e:73:eb:59:cd:67:d0:1f:4f:99:21:5a:e5:9e:53: e4:62:49:3b:dd:c0:52:44:72:8e:22:f0:93:2d:b0:6a:2b:65: ca:56:47:24:9b:90:8c:ea:6e:d2:44:79:e8:f0:00:96:e4:67: 20:c3:ce:c4:62:c0:52:0c:b1:cf:8f:d4:5b:6b:87:22:c3:43: b6:38:65:fe:97:f1:db:59:a7:27:7e:e6:df:ac:bf:3a:17:c1: 8e:47:e3:d7:11:8b:62:ef:c4:08:35:b5:56:fa:de:38:2e:83: 2e:a2:eb:59:07:c7:e7:61:f5:20:98:7b:46:4f:aa:e9:af:59: 79:1b:5c:f8:25:31:f8:17:11:82:d1:39:70:a1:65:fb:8d:e9: ac:1c:46:2a:a2:e9:c5:9a:63:d3:8d:29:49:37:1a:4a:c7:89: 21:95:f6:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE3MjMxMTAvBgNVBAUTKEI5MDQyMjU1OUI1OEM0REFBODlGMjI0RDQ5QzcxRkY0 NEY5QkNBMzQwHhcNMjUwNDI3MDIyNDMzWhcNMjUwNTA0MDIyNDMzWjAYMRYwFAYD VQQDEw02ODBkOTU2MS01NTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0hgGBQRZIM1jKA069u0ajyOV2xwSujUtDwS04iwH6/rktinhwDc7+TIoj97T RfWHA2es3blotP3YAyhSCFctOybs5V1CXHBFVVlpuPFKhrvSoidVwB90+3ZuiqXb iLcONagBcZUn1bswkJyAaEdUczpfu9q9lx0XHlcu7rvSPdpsZngsQ19MDPIEdzTH XunLE1bWB6n1rW4ulFaHHzRIGWdIUbFizI9eO0nozWaS7qIkhXhENV87BCIvxtrU torLxX1U+rIA7yfyI1eEHC6MaDxO4C1RoHaEQjS1CfyvfaHqm5zlingyd4oqTI5A qj8Lk9kDJIz+iAaqFDh2oZwabwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOjs+OgU Ep4ZLfvLTvFj2TABrz7vMB8GA1UdIwQYMBaAFLkEIlWbWMTaqJ8iTUnHH/RPm8o0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTcyMy8yQ0Q3RjVDOEIy N0QxMUVEODg1NkZBODFDNEY5QUUwMi91UVFpVlp0WXhOcW9ueUpOU2NjZjlFLWJ5 alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VRUWlWWnRZeE5xb255Sk5TY2NmOUUtYnlqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTcyMy8yQ0Q3RjVDOEIyN0QxMUVEODg1NkZBODFDNEY5QUUwMi91UVFpVlp0WXhO cW9ueUpOU2NjZjlFLWJ5alEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbsktqeOzrFlS0Pn9E81wYGd1GZ1Lv6UKERaj1vE84T3s6fU0s8K0D yP8HTE7XZjmkLae/5pVExZ6SU04oqtZpfcvrRrW2THKxugCz3KGPsPZQZuyz9otj FVKW36aOc+tZzWfQH0+ZIVrlnlPkYkk73cBSRHKOIvCTLbBqK2XKVkckm5CM6m7S RHno8ACW5Gcgw87EYsBSDLHPj9Rba4ciw0O2OGX+l/HbWacnfubfrL86F8GOR+PX EYti78QINbVW+t44LoMuoutZB8fnYfUgmHtGT6rpr1l5G1z4JTH4FxGC0TlwoWX7 jemsHEYqounFmmPTjSlJNxpKx4khlfbA -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:16 2025 by rpki-client on console.sobornost.net