$ rpki-client -vvf rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft File: 4XI0Y4kx9DllENfQutUfivTrhrY.mft (raw, json) Hash identifier: /090zkWyX/qjp84nIjHLuTFjZtpqrSMEo++Szx+ogJU= Subject key identifier: C2:A8:1D:9B:E7:26:6D:05:8C:FC:CC:F4:54:D6:42:8D:DC:C7:4B:DA Authority key identifier: E1:72:34:63:89:31:F4:39:65:10:D7:D0:BA:D5:1F:8A:F4:EB:86:B6 Certificate issuer: /CN=A91F34FA/serialNumber=E17234638931F4396510D7D0BAD51F8AF4EB86B6 Certificate serial: 01CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft Manifest number: 01C9 Signing time: Sun 27 Apr 2025 01:55:58 +0000 Manifest this update: Sun 27 Apr 2025 01:55:58 +0000 Manifest next update: Sun 04 May 2025 01:55:58 +0000 Files and hashes: 1: 4XI0Y4kx9DllENfQutUfivTrhrY.crl (hash: D+dscUjZ5GovGCMUn5uqZ2d1mRXTy3K3NsYFbkcNBpU=) 2: 8256A692444A11EFB043DE36C4F9AE02.roa (hash: Ple4OYydaAojanyJwx7ZWPyKox9DD4lFfc6gQi2CwTI=) 3: 81B847F4444A11EFB043DE36C4F9AE02.roa (hash: iBZ0Vc5oqFw84Bi0mykH6jGLVo3+N0cmUjqo5T+vIIo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.crl rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 01:55:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 461 (0x1cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F34FA, serialNumber=E17234638931F4396510D7D0BAD51F8AF4EB86B6 Validity Not Before: Apr 27 01:55:58 2025 GMT Not After : May 4 01:55:58 2025 GMT Subject: CN=680d8eae-2dbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fc:c2:14:80:aa:59:cc:25:1e:28:86:97:a9: 53:a2:8f:dd:e3:81:67:36:1d:24:9e:9d:8c:4e:bc: f6:6b:b0:fc:eb:48:00:a9:33:a3:5e:40:4d:86:f9: 28:7a:55:b0:25:24:51:81:ab:ac:fc:eb:ca:3d:b4: 83:dc:d8:6f:fd:f6:8b:ec:c9:7c:e7:5d:24:48:8f: 96:52:7a:52:14:e2:c9:2a:ef:40:98:30:b4:b6:c5: ad:b9:a3:bc:a3:82:ae:96:bf:e6:b4:11:9c:81:cd: de:05:02:ad:51:03:50:7b:8a:9c:59:59:6a:36:95: dd:d7:75:f9:12:d1:3f:44:56:e9:ec:ef:98:43:59: 4f:93:30:e4:d6:1c:35:75:d0:36:50:c2:ea:17:7f: e5:d2:28:11:21:97:2c:1e:73:a0:ca:52:8b:cf:91: 3b:21:1c:6e:bb:86:65:bd:4d:08:4d:6f:38:6f:0e: f8:26:9f:5b:53:fa:b0:84:66:ac:2f:18:b8:96:bd: 43:98:ac:5e:03:15:98:c3:cf:d8:c8:04:5f:3a:40: e8:1d:c4:24:e8:7d:e7:29:12:5f:2f:f7:21:79:65: 48:9a:f5:b5:20:da:c5:47:5c:1c:75:eb:de:d1:1a: 78:3c:18:6f:7e:61:f8:5f:78:2b:0c:cc:b7:60:64: 2d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A8:1D:9B:E7:26:6D:05:8C:FC:CC:F4:54:D6:42:8D:DC:C7:4B:DA X509v3 Authority Key Identifier: keyid:E1:72:34:63:89:31:F4:39:65:10:D7:D0:BA:D5:1F:8A:F4:EB:86:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:a8:49:89:0a:5f:f5:06:92:95:33:b0:03:db:dc:e0:3f:be: ae:a2:8e:8b:a7:88:10:5d:14:ad:7f:48:80:dc:06:9f:20:cf: 9c:22:61:f9:39:84:57:d9:a6:65:1d:7f:e4:9b:db:48:57:bd: 04:00:4c:6b:ce:9f:e7:f5:bb:1a:36:9a:fe:d2:99:8e:17:f5: fa:f8:26:4f:3a:15:6b:1b:d5:36:81:03:b9:3a:b0:2c:f3:70: 4a:81:26:81:ed:92:5f:cb:12:bc:d7:9b:b3:20:79:67:d6:ca: bb:f2:f2:a4:32:ef:05:90:39:09:d5:75:a2:b4:d4:5c:47:ba: 02:1f:93:6a:0f:c3:03:6c:19:cf:e4:41:80:d4:9c:91:f2:2e: 59:e3:fa:ac:a7:16:f3:0c:6e:32:11:b4:84:96:fc:d8:2c:37: f3:02:d7:20:67:35:91:2c:79:c1:0e:56:b9:c9:6c:63:cb:81: 84:a6:e1:28:ff:4d:ea:54:94:92:fe:48:a3:f1:26:a7:cf:b9: b9:09:a6:b1:21:32:56:db:e2:cc:c7:7e:26:e4:11:87:28:42: ec:ee:6e:13:a4:47:f8:20:4f:12:90:78:1d:11:cb:23:98:82: 4b:f1:2d:bc:b6:50:cd:53:76:46:57:fe:62:1a:71:42:38:dd: 03:1a:e1:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM0RkExMTAvBgNVBAUTKEUxNzIzNDYzODkzMUY0Mzk2NTEwRDdEMEJBRDUxRjhB RjRFQjg2QjYwHhcNMjUwNDI3MDE1NTU4WhcNMjUwNTA0MDE1NTU4WjAYMRYwFAYD VQQDEw02ODBkOGVhZS0yZGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo/zCFICqWcwlHiiGl6lToo/d44FnNh0knp2MTrz2a7D860gAqTOjXkBNhvko elWwJSRRgaus/OvKPbSD3Nhv/faL7Ml8510kSI+WUnpSFOLJKu9AmDC0tsWtuaO8 o4Kulr/mtBGcgc3eBQKtUQNQe4qcWVlqNpXd13X5EtE/RFbp7O+YQ1lPkzDk1hw1 ddA2UMLqF3/l0igRIZcsHnOgylKLz5E7IRxuu4ZlvU0ITW84bw74Jp9bU/qwhGas Lxi4lr1DmKxeAxWYw8/YyARfOkDoHcQk6H3nKRJfL/cheWVImvW1INrFR1wcdeve 0Rp4PBhvfmH4X3grDMy3YGQtNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMKoHZvn Jm0FjPzM9FTWQo3cx0vaMB8GA1UdIwQYMBaAFOFyNGOJMfQ5ZRDX0LrVH4r064a2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzRGQS80NUU5RTE2QTY1 OEExMUVEOTlBMjFCNkZDNEY5QUUwMi80WEkwWTRreDlEbGxFTmZRdXRVZml2VHJo clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRYSTBZNGt4OURsbEVOZlF1dFVmaXZUcmhyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzRGQS80NUU5RTE2QTY1OEExMUVEOTlBMjFCNkZDNEY5QUUwMi80WEkwWTRreDlE bGxFTmZRdXRVZml2VHJoclkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWqEmJCl/1BpKVM7AD29zgP76uoo6Lp4gQXRStf0iA3AafIM+cImH5 OYRX2aZlHX/km9tIV70EAExrzp/n9bsaNpr+0pmOF/X6+CZPOhVrG9U2gQO5OrAs 83BKgSaB7ZJfyxK815uzIHln1sq78vKkMu8FkDkJ1XWitNRcR7oCH5NqD8MDbBnP 5EGA1JyR8i5Z4/qspxbzDG4yEbSElvzYLDfzAtcgZzWRLHnBDla5yWxjy4GEpuEo /03qVJSS/kij8Sanz7m5CaaxITJW2+LMx34m5BGHKELs7m4TpEf4IE8SkHgdEcsj mIJL8S28tlDNU3ZGV/5iGnFCON0DGuEi -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:17 2025 by rpki-client on console.sobornost.net