$ rpki-client -vvf rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.mft File: CcNrxl3nKgQUf51yIL26jVJdFWQ.mft (raw, json) Hash identifier: HZoVN9H8tuEY3MpZQ2LoKg6Nj5F8BG/x1slImQ15De8= Subject key identifier: 8E:56:D4:33:89:E4:9B:6B:A2:56:01:33:28:C8:52:35:2C:AF:4C:B8 Authority key identifier: 09:C3:6B:C6:5D:E7:2A:04:14:7F:9D:72:20:BD:BA:8D:52:5D:15:64 Certificate issuer: /CN=A91F83DC/serialNumber=09C36BC65DE72A04147F9D7220BDBA8D525D1564 Certificate serial: A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcNrxl3nKgQUf51yIL26jVJdFWQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.mft Manifest number: A7 Signing time: Sun 27 Apr 2025 05:00:31 +0000 Manifest this update: Sun 27 Apr 2025 05:00:30 +0000 Manifest next update: Sun 04 May 2025 05:00:30 +0000 Files and hashes: 1: CcNrxl3nKgQUf51yIL26jVJdFWQ.crl (hash: ph0Zb2U5+rKMZKWxlQJaNBvyZILNLjXxMfxSqHAXDEA=) 2: 24AB7D08271F11EF81086430C4F9AE02.roa (hash: Iji2xdjNL9b32bfsJ+kVOrXH1mKlpeXd/SW3QeUD+pI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.crl rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcNrxl3nKgQUf51yIL26jVJdFWQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 169 (0xa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F83DC, serialNumber=09C36BC65DE72A04147F9D7220BDBA8D525D1564 Validity Not Before: Apr 27 05:00:30 2025 GMT Not After : May 4 05:00:30 2025 GMT Subject: CN=680db9ee-ba23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fa:c8:db:a1:8e:55:3e:12:b8:64:3f:c4:ed: fa:7b:9b:41:ae:a2:a4:b6:62:cf:4e:d2:82:7b:fb: c1:67:3c:fd:33:28:79:41:d1:1b:1d:c8:41:c8:a1: a8:c4:0a:13:32:6d:84:04:09:3a:ee:5f:05:43:3d: 47:cb:a2:0d:74:c2:2b:57:04:fa:3c:dc:74:64:28: 8a:9f:86:16:4c:85:80:ad:6c:65:9c:39:52:9b:3b: 57:0c:b6:8d:88:52:1f:0f:c9:56:b1:f1:e3:c2:57: 98:12:21:c6:53:da:ef:3b:6c:e3:98:6e:87:ed:58: e7:45:86:df:5a:62:fd:56:61:f0:a2:25:ed:9d:08: 50:fb:c8:1e:a6:53:a2:ae:55:75:f6:75:90:ec:71: 76:fe:f8:f6:81:3b:e4:94:a2:c2:ca:c4:d3:a5:d2: 45:db:47:45:55:d3:32:a8:4c:1e:c4:bb:43:de:a9: 49:65:1f:b2:9f:12:cb:12:2c:d3:85:26:ec:f5:c2: e9:46:bd:2b:5c:a6:b9:6a:01:e9:4a:b0:f8:a2:b8: a1:78:a5:11:61:af:39:bd:a0:ae:81:4a:66:38:6c: 05:5a:64:3d:94:3a:4d:05:1d:7e:6d:a6:e3:7d:fa: 48:e7:e5:d5:6f:d5:16:1f:1a:5b:0e:a3:84:bc:8f: 9c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:56:D4:33:89:E4:9B:6B:A2:56:01:33:28:C8:52:35:2C:AF:4C:B8 X509v3 Authority Key Identifier: keyid:09:C3:6B:C6:5D:E7:2A:04:14:7F:9D:72:20:BD:BA:8D:52:5D:15:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcNrxl3nKgQUf51yIL26jVJdFWQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:b8:02:16:58:8d:0a:b0:d7:c7:75:e3:5f:d1:fc:90:61:91: 65:79:db:27:a9:80:b6:ba:44:f4:b1:e4:ba:3a:77:be:b6:8d: 6e:f4:e1:ae:0e:72:d2:4f:b8:9b:f3:91:a3:a1:b6:4e:2b:19: a7:16:fc:cf:eb:0f:b0:bf:7a:9b:05:5b:71:36:c7:59:0c:71: fd:9a:a9:f8:33:a2:9a:3f:75:34:a7:c9:6c:be:1a:83:82:a2: a2:0c:5d:ec:f3:51:70:ce:61:c7:74:9f:cd:98:37:7b:fb:5a: 62:ad:36:6c:4f:d5:17:ef:e2:83:2d:bd:e8:26:c8:49:9e:0c: c7:ca:23:27:55:47:ac:c5:97:19:a7:a9:ca:61:39:cf:ef:ca: 16:0c:0e:d5:a4:2e:b0:6e:e7:d7:03:0c:18:8c:da:cd:5c:ed: c0:1b:db:c3:04:4d:99:52:96:78:0d:1b:b0:48:b2:06:e7:51: 33:af:a3:40:6a:7b:ee:2c:cf:ae:71:24:73:5e:da:bc:42:af: 00:fc:30:e2:ef:44:f4:6c:fc:1a:17:00:b7:8e:27:73:f7:45: 81:91:bd:e5:42:d9:ce:3f:0f:82:d1:09:65:23:88:dc:fa:30: f0:34:50:ed:51:b2:d6:e8:c5:d2:6d:3e:9a:e7:a5:d2:3e:fe: d4:95:b2:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgzREMxMTAvBgNVBAUTKDA5QzM2QkM2NURFNzJBMDQxNDdGOUQ3MjIwQkRCQThE NTI1RDE1NjQwHhcNMjUwNDI3MDUwMDMwWhcNMjUwNTA0MDUwMDMwWjAYMRYwFAYD VQQDEw02ODBkYjllZS1iYTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvvrI26GOVT4SuGQ/xO36e5tBrqKktmLPTtKCe/vBZzz9Myh5QdEbHchByKGo xAoTMm2EBAk67l8FQz1Hy6INdMIrVwT6PNx0ZCiKn4YWTIWArWxlnDlSmztXDLaN iFIfD8lWsfHjwleYEiHGU9rvO2zjmG6H7VjnRYbfWmL9VmHwoiXtnQhQ+8geplOi rlV19nWQ7HF2/vj2gTvklKLCysTTpdJF20dFVdMyqEwexLtD3qlJZR+ynxLLEizT hSbs9cLpRr0rXKa5agHpSrD4oriheKURYa85vaCugUpmOGwFWmQ9lDpNBR1+babj ffpI5+XVb9UWHxpbDqOEvI+c4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI5W1DOJ 5JtrolYBMyjIUjUsr0y4MB8GA1UdIwQYMBaAFAnDa8Zd5yoEFH+dciC9uo1SXRVk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODNEQy9BMzk3QTNFNDI2 RUQxMUVGQjRDOUJBMjhDNEY5QUUwMi9DY05yeGwzbktnUVVmNTF5SUwyNmpWSmRG V1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NjTnJ4bDNuS2dRVWY1MXlJTDI2alZKZEZXUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODNEQy9BMzk3QTNFNDI2RUQxMUVGQjRDOUJBMjhDNEY5QUUwMi9DY05yeGwzbktn UVVmNTF5SUwyNmpWSmRGV1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSuAIWWI0KsNfHdeNf0fyQYZFledsnqYC2ukT0seS6One+to1u9OGu DnLST7ib85GjobZOKxmnFvzP6w+wv3qbBVtxNsdZDHH9mqn4M6KaP3U0p8lsvhqD gqKiDF3s81FwzmHHdJ/NmDd7+1pirTZsT9UX7+KDLb3oJshJngzHyiMnVUesxZcZ p6nKYTnP78oWDA7VpC6wbufXAwwYjNrNXO3AG9vDBE2ZUpZ4DRuwSLIG51Ezr6NA anvuLM+ucSRzXtq8Qq8A/DDi70T0bPwaFwC3jidz90WBkb3lQtnOPw+C0QllI4jc +jDwNFDtUbLW6MXSbT6a56XSPv7UlbLb -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:59 2025 by rpki-client on console.sobornost.net