$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6E7D/1E9A11C2838111EAACB9BC30C4F9AE02/FhPW6_zYSc_MCoiNuX5rv1IHrbM.mft File: FhPW6_zYSc_MCoiNuX5rv1IHrbM.mft (raw, json) Hash identifier: SoKn7wz65ODi1RtQfaNVWyrll4iKLQDb0yu15WrqvJc= Subject key identifier: CA:C9:96:1D:61:AB:F7:82:69:A7:18:4F:24:BF:78:35:31:27:E5:6F Authority key identifier: 16:13:D6:EB:FC:D8:49:CF:CC:0A:88:8D:B9:7E:6B:BF:52:07:AD:B3 Certificate issuer: /CN=A91F6E7D/serialNumber=1613D6EBFCD849CFCC0A888DB97E6BBF5207ADB3 Certificate serial: 09B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPW6_zYSc_MCoiNuX5rv1IHrbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6E7D/1E9A11C2838111EAACB9BC30C4F9AE02/FhPW6_zYSc_MCoiNuX5rv1IHrbM.mft Manifest number: 09AC Signing time: Mon 28 Apr 2025 20:26:46 +0000 Manifest this update: Mon 28 Apr 2025 20:26:46 +0000 Manifest next update: Mon 05 May 2025 20:26:46 +0000 Files and hashes: 1: FhPW6_zYSc_MCoiNuX5rv1IHrbM.crl (hash: MxjXMVzfvRqaiUZ4J9tCDZsi9ZrbmVWgRM/VfswUxyw=) 2: 4AEB32A2D2F911EA93B2C659C4F9AE02.roa (hash: TMxL1xAZ65D51is8H5Va3LgyajI14UzGu3dizhDhFWQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6E7D/1E9A11C2838111EAACB9BC30C4F9AE02/FhPW6_zYSc_MCoiNuX5rv1IHrbM.crl rsync://rpki.apnic.net/member_repository/A91F6E7D/1E9A11C2838111EAACB9BC30C4F9AE02/FhPW6_zYSc_MCoiNuX5rv1IHrbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPW6_zYSc_MCoiNuX5rv1IHrbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:26:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2484 (0x9b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6E7D, serialNumber=1613D6EBFCD849CFCC0A888DB97E6BBF5207ADB3 Validity Not Before: Apr 28 20:26:46 2025 GMT Not After : May 5 20:26:46 2025 GMT Subject: CN=680fe486-80cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:95:a8:c9:ad:aa:7d:74:65:50:4d:5c:55:ae: 34:4e:46:9f:0e:b7:88:87:38:c2:cd:f4:7a:58:1b: 15:f7:ca:ae:d2:46:7d:50:06:ea:e3:a9:83:24:21: f0:4d:5d:ed:e3:c8:24:c1:51:08:7d:4f:41:15:ed: 68:c5:32:d8:94:db:d4:28:a8:17:e6:f1:ea:cb:73: 3a:b8:69:16:f3:71:4a:b8:5e:f9:e0:15:12:c6:f3: 1f:7a:68:79:61:d0:9d:a9:8d:4a:58:e7:9a:be:4f: 51:72:4f:4a:11:f5:20:25:f0:fa:a0:fc:cb:5c:07: 02:db:06:ac:6d:05:9a:3c:d5:82:8f:91:8c:b3:35: 33:e9:9a:67:d1:11:68:3e:19:74:15:f4:8f:37:cf: 40:ee:4d:96:5e:02:6c:9d:6a:85:19:b8:77:e2:53: d5:9b:61:aa:81:b8:27:ab:e6:29:73:e9:19:7e:ca: a6:90:90:7c:c9:93:d8:12:e7:f5:cf:ad:c7:08:f4: 26:28:57:26:38:dc:db:ea:56:2a:f0:f0:b0:86:9a: e6:9f:5a:4a:58:d0:82:73:8b:de:a7:b0:0a:cd:c7: 17:99:25:b9:c0:64:50:77:9a:cc:10:6f:88:15:d6: 9f:1e:2e:72:33:5d:88:a9:b5:be:cb:3a:99:b9:a5: 61:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:C9:96:1D:61:AB:F7:82:69:A7:18:4F:24:BF:78:35:31:27:E5:6F X509v3 Authority Key Identifier: keyid:16:13:D6:EB:FC:D8:49:CF:CC:0A:88:8D:B9:7E:6B:BF:52:07:AD:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6E7D/1E9A11C2838111EAACB9BC30C4F9AE02/FhPW6_zYSc_MCoiNuX5rv1IHrbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPW6_zYSc_MCoiNuX5rv1IHrbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6E7D/1E9A11C2838111EAACB9BC30C4F9AE02/FhPW6_zYSc_MCoiNuX5rv1IHrbM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:fd:bd:34:be:4a:56:3e:7d:45:ff:c6:99:e6:4c:90:89:df: 78:da:3b:a9:ef:89:50:d7:af:3c:0b:2e:5e:79:30:6d:a9:a6: 95:bf:75:e7:a5:31:cb:9f:d6:b0:6a:21:83:f8:53:f3:3c:4f: 42:3f:e6:d0:62:93:d4:06:e1:c0:0c:75:9a:fa:30:48:97:21: 3c:d2:72:ce:d0:6b:e3:b2:48:d4:bf:4e:34:8e:a8:8a:76:5f: 73:df:ce:25:4e:fc:99:5f:ee:a8:c1:cd:e5:d2:c8:d5:24:a1: f2:77:e5:96:e3:06:a8:37:e1:94:cc:d8:cc:6b:f2:ab:35:66: f4:d1:c1:82:b4:70:24:9f:89:ce:46:a0:7f:64:41:c5:ee:0f: 58:6d:de:eb:e5:91:c6:79:c9:87:8f:f9:d3:47:ab:59:aa:35: a6:66:5c:64:c4:31:b7:ab:3b:90:d8:9c:fb:7c:d6:e4:76:1e: 0c:3b:6f:81:3d:ae:19:3d:60:e0:fd:2f:4a:c1:8e:5c:9e:7a: 15:06:4b:48:fc:68:18:24:b5:95:f1:43:f0:4b:68:08:f6:76: ec:b3:a4:df:2b:c6:14:af:fb:72:c0:57:22:fd:db:5c:fb:2d: 75:49:47:72:ff:7f:9d:58:ae:5c:81:71:cb:d1:7c:ee:60:de: 25:9f:b2:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZFN0QxMTAvBgNVBAUTKDE2MTNENkVCRkNEODQ5Q0ZDQzBBODg4REI5N0U2QkJG NTIwN0FEQjMwHhcNMjUwNDI4MjAyNjQ2WhcNMjUwNTA1MjAyNjQ2WjAYMRYwFAYD VQQDEw02ODBmZTQ4Ni04MGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn5Woya2qfXRlUE1cVa40TkafDreIhzjCzfR6WBsV98qu0kZ9UAbq46mDJCHw TV3t48gkwVEIfU9BFe1oxTLYlNvUKKgX5vHqy3M6uGkW83FKuF754BUSxvMfemh5 YdCdqY1KWOeavk9Rck9KEfUgJfD6oPzLXAcC2wasbQWaPNWCj5GMszUz6Zpn0RFo Phl0FfSPN89A7k2WXgJsnWqFGbh34lPVm2Gqgbgnq+Ypc+kZfsqmkJB8yZPYEuf1 z63HCPQmKFcmONzb6lYq8PCwhprmn1pKWNCCc4vep7AKzccXmSW5wGRQd5rMEG+I FdafHi5yM12IqbW+yzqZuaVhuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMrJlh1h q/eCaacYTyS/eDUxJ+VvMB8GA1UdIwQYMBaAFBYT1uv82EnPzAqIjbl+a79SB62z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkU3RC8xRTlBMTFDMjgz ODExMUVBQUNCOUJDMzBDNEY5QUUwMi9GaFBXNl96WVNjX01Db2lOdVg1cnYxSUhy Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZoUFc2X3pZU2NfTUNvaU51WDVydjFJSHJiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkU3RC8xRTlBMTFDMjgzODExMUVBQUNCOUJDMzBDNEY5QUUwMi9GaFBXNl96WVNj X01Db2lOdVg1cnYxSUhyYk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAp/b00vkpWPn1F/8aZ5kyQid942jup74lQ1688Cy5eeTBtqaaVv3Xn pTHLn9awaiGD+FPzPE9CP+bQYpPUBuHADHWa+jBIlyE80nLO0GvjskjUv040jqiK dl9z384lTvyZX+6owc3l0sjVJKHyd+WW4waoN+GUzNjMa/KrNWb00cGCtHAkn4nO RqB/ZEHF7g9Ybd7r5ZHGecmHj/nTR6tZqjWmZlxkxDG3qzuQ2Jz7fNbkdh4MO2+B Pa4ZPWDg/S9KwY5cnnoVBktI/GgYJLWV8UPwS2gI9nbss6TfK8YUr/tywFci/dtc +y11SUdy/3+dWK5cgXHL0XzuYN4ln7L0 -----END CERTIFICATE-----Generated at Mon Apr 28 23:05:59 2025 by rpki-client on console.sobornost.net