$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft File: 1BN478zNyo5lN-lfJ6o7NTdYCvM.mft (raw, json) Hash identifier: H53xzPUI4TGOX7PLb20D4tntvr3eXamMS4Hpl0s3+KM= Subject key identifier: 25:31:1E:94:A8:EA:6D:BB:24:66:2B:21:5C:37:EB:2D:17:1D:C8:36 Authority key identifier: D4:13:78:EF:CC:CD:CA:8E:65:37:E9:5F:27:AA:3B:35:37:58:0A:F3 Certificate issuer: /CN=A91F2E76/serialNumber=D41378EFCCCDCA8E6537E95F27AA3B3537580AF3 Certificate serial: 077E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BN478zNyo5lN-lfJ6o7NTdYCvM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft Manifest number: 0779 Signing time: Sat 26 Apr 2025 21:07:22 +0000 Manifest this update: Sat 26 Apr 2025 21:07:21 +0000 Manifest next update: Sat 03 May 2025 21:07:21 +0000 Files and hashes: 1: 1BN478zNyo5lN-lfJ6o7NTdYCvM.crl (hash: rStMMILEOSLG9TYAZ7mokZ/27jSD784uvhdh3omf82o=) 2: 86AE60140D7A11EB9D346C48C4F9AE02.roa (hash: EnKj89o4/2sutrwYpg7UxwXHFBOFSGJviP9dKcMIsAc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.crl rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BN478zNyo5lN-lfJ6o7NTdYCvM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1918 (0x77e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2E76, serialNumber=D41378EFCCCDCA8E6537E95F27AA3B3537580AF3 Validity Not Before: Apr 26 21:07:21 2025 GMT Not After : May 3 21:07:21 2025 GMT Subject: CN=680d4b09-02e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:8c:c2:fd:2c:c4:2c:80:21:a4:91:25:9f:f3: b1:00:08:95:49:a1:96:2c:ec:99:32:91:2e:c9:03: 92:01:ac:8d:f6:88:3d:ed:bd:13:0c:02:62:eb:05: cd:8c:1f:77:f3:fd:42:41:43:8e:55:dd:9b:89:aa: a1:e6:ed:16:59:93:dd:f0:bf:b6:37:ae:ae:4d:64: bb:7e:75:f1:f8:67:fe:a5:64:23:3b:af:e2:00:76: 1c:f1:24:b4:44:18:8b:44:17:19:d6:3b:a3:38:66: 08:8e:d4:0e:2c:55:d9:1d:b1:2b:36:0c:c6:ec:f4: d0:c2:0b:0d:2d:f3:46:c7:12:a6:46:1f:82:7d:79: 6c:eb:96:8f:52:ad:5b:ea:a5:3a:94:42:21:43:78: de:23:51:02:f3:ad:5d:4e:93:16:2f:cd:ce:6b:91: 47:18:8d:ec:34:5d:ea:19:59:14:47:f9:43:61:81: 49:15:3e:9b:01:98:08:02:b6:fd:fc:cf:99:9f:1e: 68:38:8f:34:c2:d9:76:d5:ed:17:6f:a5:fe:34:2c: cf:dd:b0:50:32:10:68:7a:0d:60:82:c1:10:ba:46: 5f:d0:de:84:6d:85:81:1f:b0:e7:35:90:a6:70:dc: e6:d4:f2:ba:31:a5:9a:11:c1:be:7b:d1:7c:68:b8: 19:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:31:1E:94:A8:EA:6D:BB:24:66:2B:21:5C:37:EB:2D:17:1D:C8:36 X509v3 Authority Key Identifier: keyid:D4:13:78:EF:CC:CD:CA:8E:65:37:E9:5F:27:AA:3B:35:37:58:0A:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BN478zNyo5lN-lfJ6o7NTdYCvM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:ee:9b:74:68:75:d2:c2:bb:a7:9b:aa:83:c1:a4:30:a6:92: 88:30:34:7f:ff:ec:ec:3b:41:15:b9:4a:5a:f7:7e:a3:7c:a4: 73:30:12:29:29:28:33:d0:94:a4:a5:1a:cb:f3:52:f4:91:2a: f7:d8:f7:79:2e:c8:56:4f:24:ec:39:8e:66:f1:7a:3b:ac:ac: 2a:1a:53:36:59:93:10:30:44:ed:43:fa:75:a1:76:05:e8:b9: c9:98:05:c6:1f:21:6c:93:5a:3a:bd:87:3b:4a:95:cf:e2:1d: 54:fc:61:e2:1a:67:e0:d1:0f:83:2c:2b:9c:5d:21:06:8a:54: d1:06:0e:42:81:2b:c0:56:f7:c7:f4:1d:00:bc:e3:9d:d2:99: b7:8b:e6:23:dc:58:db:bc:fe:54:1a:87:9c:90:29:c0:b4:2d: 44:9a:3e:27:4f:84:1c:c1:9f:7f:b7:bc:e3:dd:96:3a:17:6f: 65:76:29:88:1a:7f:17:9d:ee:eb:2a:6c:81:f4:ee:dc:cd:30: 63:b3:9c:16:6e:29:b1:4d:be:75:29:fc:05:17:ad:14:1d:be: 0c:15:3e:9c:6a:9c:a2:73:08:e2:bd:01:c0:9f:d0:62:24:6c: 44:c3:9a:51:12:8c:7e:35:51:fc:54:06:07:38:49:de:6a:68: 4b:af:06:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB34wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJFNzYxMTAvBgNVBAUTKEQ0MTM3OEVGQ0NDRENBOEU2NTM3RTk1RjI3QUEzQjM1 Mzc1ODBBRjMwHhcNMjUwNDI2MjEwNzIxWhcNMjUwNTAzMjEwNzIxWjAYMRYwFAYD VQQDEw02ODBkNGIwOS0wMmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3YzC/SzELIAhpJEln/OxAAiVSaGWLOyZMpEuyQOSAayN9og97b0TDAJi6wXN jB938/1CQUOOVd2biaqh5u0WWZPd8L+2N66uTWS7fnXx+Gf+pWQjO6/iAHYc8SS0 RBiLRBcZ1jujOGYIjtQOLFXZHbErNgzG7PTQwgsNLfNGxxKmRh+CfXls65aPUq1b 6qU6lEIhQ3jeI1EC861dTpMWL83Oa5FHGI3sNF3qGVkUR/lDYYFJFT6bAZgIArb9 /M+Znx5oOI80wtl21e0Xb6X+NCzP3bBQMhBoeg1ggsEQukZf0N6EbYWBH7DnNZCm cNzm1PK6MaWaEcG+e9F8aLgZKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCUxHpSo 6m27JGYrIVw36y0XHcg2MB8GA1UdIwQYMBaAFNQTeO/MzcqOZTfpXyeqOzU3WArz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkU3Ni84RjNDOUU2QTBE NzcxMUVCQkJBRTM0NDBDNEY5QUUwMi8xQk40Nzh6TnlvNWxOLWxmSjZvN05UZFlD dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFCTjQ3OHpOeW81bE4tbGZKNm83TlRkWUN2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkU3Ni84RjNDOUU2QTBENzcxMUVCQkJBRTM0NDBDNEY5QUUwMi8xQk40Nzh6Tnlv NWxOLWxmSjZvN05UZFlDdk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCY7pt0aHXSwrunm6qDwaQwppKIMDR//+zsO0EVuUpa936jfKRzMBIp KSgz0JSkpRrL81L0kSr32Pd5LshWTyTsOY5m8Xo7rKwqGlM2WZMQMETtQ/p1oXYF 6LnJmAXGHyFsk1o6vYc7SpXP4h1U/GHiGmfg0Q+DLCucXSEGilTRBg5CgSvAVvfH 9B0AvOOd0pm3i+Yj3FjbvP5UGoeckCnAtC1Emj4nT4QcwZ9/t7zj3ZY6F29ldimI Gn8Xne7rKmyB9O7czTBjs5wWbimxTb51KfwFF60UHb4MFT6capyicwjivQHAn9Bi JGxEw5pREox+NVH8VAYHOEneamhLrwam -----END CERTIFICATE-----Generated at Sun Apr 27 00:14:14 2025 by rpki-client on console.sobornost.net