$ rpki-client -vvf rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft File: CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft (raw, json) Hash identifier: lK4olrzD4mqzZYyR+kGQU4FxAkl4nHmSVuKCy6NyT6U= Subject key identifier: 90:96:A4:60:DC:F7:90:77:B3:F4:AB:69:57:EB:E5:8B:0F:63:DE:EC Authority key identifier: 09:5F:6C:6B:B3:87:C6:93:2F:DA:01:C0:BF:A6:26:F6:AA:C7:BB:00 Certificate issuer: /CN=A91F05B5/serialNumber=095F6C6BB387C6932FDA01C0BFA626F6AAC7BB00 Certificate serial: 0151 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft Manifest number: 014D Signing time: Sun 27 Apr 2025 03:09:14 +0000 Manifest this update: Sun 27 Apr 2025 03:09:13 +0000 Manifest next update: Sun 04 May 2025 03:09:13 +0000 Files and hashes: 1: CV9sa7OHxpMv2gHAv6Ym9qrHuwA.crl (hash: wiZRWWUPxlXxVH+DsFj6/cOeRt8fBvFXgCwaEumwTs8=) 2: E0A69DBC2AB311EE9CA5E515C4F9AE02.roa (hash: ZqsBefU5j7GUz5qH7o82aafqjpUX9O/Biz1HkkL6OG4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.crl rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 337 (0x151) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F05B5, serialNumber=095F6C6BB387C6932FDA01C0BFA626F6AAC7BB00 Validity Not Before: Apr 27 03:09:13 2025 GMT Not After : May 4 03:09:13 2025 GMT Subject: CN=680d9fd9-02ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ad:07:dc:d7:a0:a0:69:8a:b8:f0:de:fd:4d: 83:5d:cc:1b:14:8f:db:d3:92:18:f1:f3:84:b3:0c: 1d:84:b7:b8:a5:b6:8d:88:13:ad:bb:a9:8e:a2:42: e1:fc:41:7f:a1:25:7c:a4:7b:03:14:d2:60:f3:7d: b7:e4:a1:8e:90:97:02:e1:4f:d4:69:1f:73:10:a0: 9a:43:ca:69:30:92:a2:e5:0c:87:cd:44:33:28:41: 0d:4a:bd:45:f9:85:39:ac:26:3b:bb:99:ae:75:12: cc:e2:76:d7:f8:96:e6:d4:52:6f:c7:b6:37:e9:70: 91:9f:dd:1f:24:a6:c9:29:ac:44:7a:8c:cb:c9:62: fa:14:82:98:76:00:58:85:06:ad:15:a2:4f:99:64: 79:53:21:12:82:e4:25:07:20:61:90:09:ed:fe:86: af:fd:d8:af:30:f9:b8:ad:cc:de:41:4f:1c:b9:58: b3:78:1d:34:27:85:5c:c5:ea:1e:a3:d5:ae:58:ad: 39:5d:7a:88:1a:0b:74:86:56:79:90:4b:02:42:73: 69:0d:cb:9f:b6:57:ac:2d:71:5c:a7:6a:8d:39:d3: 85:6a:2e:3e:ee:44:c4:6e:23:83:54:13:e0:09:7e: 11:98:69:1d:c3:6e:d9:30:58:b5:c5:b1:03:63:6a: 8d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:96:A4:60:DC:F7:90:77:B3:F4:AB:69:57:EB:E5:8B:0F:63:DE:EC X509v3 Authority Key Identifier: keyid:09:5F:6C:6B:B3:87:C6:93:2F:DA:01:C0:BF:A6:26:F6:AA:C7:BB:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:9c:be:6c:23:35:0e:1b:0b:c2:3b:53:ac:44:35:00:35:26: b0:cc:8a:d8:9d:d4:c9:ca:49:7e:0e:43:2a:d5:58:5c:8f:dd: 25:58:4a:e5:06:7f:14:56:b0:fa:c3:2f:2c:42:e5:29:15:f0: a0:7a:8f:2c:b9:92:3d:bc:9a:05:3f:83:96:82:c7:84:a7:fa: 7a:44:1d:4c:3a:a1:ef:16:98:7a:d5:c7:71:35:8a:96:19:ca: ce:92:df:81:33:f0:16:e7:19:2a:5c:f8:16:c1:79:0a:d9:db: d4:76:44:44:de:ce:c8:f2:cb:7b:8c:01:b1:96:3d:db:fe:b7: d0:50:8c:79:8d:c0:a1:3d:e8:95:f7:f7:6d:94:80:23:3d:25: 4f:83:ee:bd:2c:9e:ab:b4:bc:39:c3:48:79:21:8f:17:54:5f: e0:fc:2d:61:f3:59:65:f1:e8:8b:82:cf:f3:21:c0:d1:ad:ca: 1d:f0:04:60:8d:b2:ac:3e:02:fe:c9:3f:ed:24:9a:0b:00:89: ea:f1:a5:bc:e7:49:02:df:70:cd:08:e8:b0:9b:67:ef:42:5b: 2b:32:5d:62:fb:00:a3:57:7a:f5:59:a4:20:ef:df:e7:69:a2: 7c:76:17:ea:d6:82:2a:b3:9a:12:4b:cb:d3:dd:bb:47:ee:07: bf:8b:58:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjA1QjUxMTAvBgNVBAUTKDA5NUY2QzZCQjM4N0M2OTMyRkRBMDFDMEJGQTYyNkY2 QUFDN0JCMDAwHhcNMjUwNDI3MDMwOTEzWhcNMjUwNTA0MDMwOTEzWjAYMRYwFAYD VQQDEw02ODBkOWZkOS0wMmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwa0H3NegoGmKuPDe/U2DXcwbFI/b05IY8fOEswwdhLe4pbaNiBOtu6mOokLh /EF/oSV8pHsDFNJg83235KGOkJcC4U/UaR9zEKCaQ8ppMJKi5QyHzUQzKEENSr1F +YU5rCY7u5mudRLM4nbX+Jbm1FJvx7Y36XCRn90fJKbJKaxEeozLyWL6FIKYdgBY hQatFaJPmWR5UyESguQlByBhkAnt/oav/divMPm4rczeQU8cuVizeB00J4Vcxeoe o9WuWK05XXqIGgt0hlZ5kEsCQnNpDcuftlesLXFcp2qNOdOFai4+7kTEbiODVBPg CX4RmGkdw27ZMFi1xbEDY2qNZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJCWpGDc 95B3s/SraVfr5YsPY97sMB8GA1UdIwQYMBaAFAlfbGuzh8aTL9oBwL+mJvaqx7sA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDVCNS80NzUwMTIwNjJB QjMxMUVFOEZBRTcyMTRDNEY5QUUwMi9DVjlzYTdPSHhwTXYyZ0hBdjZZbTlxckh1 d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NWOXNhN09IeHBNdjJnSEF2NlltOXFySHV3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDVCNS80NzUwMTIwNjJBQjMxMUVFOEZBRTcyMTRDNEY5QUUwMi9DVjlzYTdPSHhw TXYyZ0hBdjZZbTlxckh1d0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjnL5sIzUOGwvCO1OsRDUANSawzIrYndTJykl+DkMq1Vhcj90lWErl Bn8UVrD6wy8sQuUpFfCgeo8suZI9vJoFP4OWgseEp/p6RB1MOqHvFph61cdxNYqW GcrOkt+BM/AW5xkqXPgWwXkK2dvUdkRE3s7I8st7jAGxlj3b/rfQUIx5jcChPeiV 9/dtlIAjPSVPg+69LJ6rtLw5w0h5IY8XVF/g/C1h81ll8eiLgs/zIcDRrcod8ARg jbKsPgL+yT/tJJoLAInq8aW850kC33DNCOiwm2fvQlsrMl1i+wCjV3r1WaQg79/n aaJ8dhfq1oIqs5oSS8vT3btH7ge/i1gf -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:17 2025 by rpki-client on console.sobornost.net