$ rpki-client -vvf rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.mft File: R29XKjgCNq8z9i2CpbomTS-7rXw.mft (raw, json) Hash identifier: iksERoxEoWX735qJMxWuKF7KHc+eXEOc8b8bchMhocQ= Subject key identifier: D7:5F:D7:BB:34:37:37:80:C8:DB:30:2E:DD:D0:A5:EB:6E:65:8E:8E Authority key identifier: 47:6F:57:2A:38:02:36:AF:33:F6:2D:82:A5:BA:26:4D:2F:BB:AD:7C Certificate issuer: /CN=A91115D5/serialNumber=476F572A380236AF33F62D82A5BA264D2FBBAD7C Certificate serial: 128A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R29XKjgCNq8z9i2CpbomTS-7rXw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.mft Manifest number: 1268 Signing time: Mon 28 Apr 2025 17:20:14 +0000 Manifest this update: Mon 28 Apr 2025 17:20:13 +0000 Manifest next update: Mon 05 May 2025 17:20:13 +0000 Files and hashes: 1: R29XKjgCNq8z9i2CpbomTS-7rXw.crl (hash: nJqZHkqm+3Nij6CerjQ23cFgoSUn8bP9/Y2VgC7sLzk=) 2: 4978C5B2089911F0B2664480C4F9AE02.roa (hash: 00dFUbxtRi+P5zmsb5ryh9HhmqE32J+HOZ/FYXFpiHQ=) 3: 48B8F476089911F0B2664480C4F9AE02.roa (hash: JWTxPbAMnC0V4yG1gFdPedapzuHJ8Aw4XsiM14hADdY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.crl rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R29XKjgCNq8z9i2CpbomTS-7rXw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 17:20:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4746 (0x128a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91115D5, serialNumber=476F572A380236AF33F62D82A5BA264D2FBBAD7C Validity Not Before: Apr 28 17:20:13 2025 GMT Not After : May 5 17:20:13 2025 GMT Subject: CN=680fb8ce-73f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:46:68:c8:0e:66:05:5e:34:ed:cd:a5:2b:45: ac:87:a2:73:39:b0:8f:a4:c4:5c:10:a8:0c:bf:16: 93:9f:35:5b:43:c9:0f:df:b7:c6:b4:ff:9c:c9:ed: bf:84:98:3e:f7:17:aa:bc:fe:22:67:c1:51:72:d3: 04:42:ea:d5:e4:7a:5f:d8:00:88:74:3b:f1:6d:b4: ac:7f:47:cf:13:a2:39:15:cf:ab:0d:87:84:5d:4c: 9b:1a:54:78:35:77:dc:37:92:e6:5f:18:4c:27:4c: d9:37:82:e2:a0:26:f4:ba:14:3c:47:a9:9b:99:58: d4:00:81:c6:ea:9e:d1:bc:3c:16:54:b4:25:d5:e6: 94:aa:64:5c:6e:27:e4:6b:99:03:c4:3a:48:88:a5: 6e:8d:03:14:f8:c1:30:f3:d7:93:4d:77:82:a6:34: 77:3b:e0:38:25:c3:52:37:25:d8:38:48:51:79:b1: 90:2f:f2:bf:89:c6:9a:72:d6:9e:c3:28:60:ff:0b: c6:53:9c:0e:a1:74:68:b6:c0:b4:6c:d1:d3:e8:40: fb:b2:07:80:1a:4a:46:c2:28:09:31:94:5f:e3:ee: 8f:0b:f6:a5:16:a1:c1:da:d3:74:fd:2c:81:49:9a: b3:cb:e7:21:a6:bc:8e:66:bc:87:b5:13:d6:5f:e1: 8d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:5F:D7:BB:34:37:37:80:C8:DB:30:2E:DD:D0:A5:EB:6E:65:8E:8E X509v3 Authority Key Identifier: keyid:47:6F:57:2A:38:02:36:AF:33:F6:2D:82:A5:BA:26:4D:2F:BB:AD:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R29XKjgCNq8z9i2CpbomTS-7rXw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:7a:e3:6c:2c:b8:8e:2f:dc:91:81:0b:19:9a:10:d7:49:94: 53:41:4e:d6:c6:8e:46:a6:d6:98:6e:af:98:c1:59:7c:3b:55: 33:c7:ad:8f:db:99:7e:d6:a5:43:39:ba:80:cc:df:b0:db:9c: 6a:05:cb:d5:9f:14:5b:5e:0d:13:c6:89:ae:9e:17:8e:5a:70: 7a:26:4c:1b:12:bf:f4:7d:3a:05:bf:c2:5c:74:39:0f:1a:c6: e4:bd:98:7e:1f:e9:8a:71:f5:9a:95:ba:4f:95:9d:ad:73:cc: d3:53:26:2e:38:16:ac:9c:b3:fa:55:0a:cb:a5:0f:c5:8a:6e: 44:6f:49:2b:d2:18:99:9d:79:66:a1:7b:03:96:63:9b:2b:de: 7e:80:f3:6d:47:c8:15:2b:ca:eb:8a:1c:eb:e5:6f:77:31:7e: 97:ce:00:d3:2b:19:05:54:3c:70:ee:09:d3:00:16:91:5d:a9: 11:b3:77:35:9a:a0:79:e2:b7:f9:74:04:95:15:e8:01:76:f3: 98:fe:84:01:fa:ac:5a:75:40:b3:37:7b:4f:04:cc:d5:c4:fb: de:51:17:5e:7f:ea:a6:07:4f:41:85:c5:89:e2:2d:69:f6:29: e3:40:72:b5:52:38:d7:05:be:13:c5:10:a2:82:51:81:25:6e: 5f:99:fa:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTE1RDUxMTAvBgNVBAUTKDQ3NkY1NzJBMzgwMjM2QUYzM0Y2MkQ4MkE1QkEyNjRE MkZCQkFEN0MwHhcNMjUwNDI4MTcyMDEzWhcNMjUwNTA1MTcyMDEzWjAYMRYwFAYD VQQDEw02ODBmYjhjZS03M2YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApUZoyA5mBV407c2lK0Wsh6JzObCPpMRcEKgMvxaTnzVbQ8kP37fGtP+cye2/ hJg+9xeqvP4iZ8FRctMEQurV5Hpf2ACIdDvxbbSsf0fPE6I5Fc+rDYeEXUybGlR4 NXfcN5LmXxhMJ0zZN4LioCb0uhQ8R6mbmVjUAIHG6p7RvDwWVLQl1eaUqmRcbifk a5kDxDpIiKVujQMU+MEw89eTTXeCpjR3O+A4JcNSNyXYOEhRebGQL/K/icaactae wyhg/wvGU5wOoXRotsC0bNHT6ED7sgeAGkpGwigJMZRf4+6PC/alFqHB2tN0/SyB SZqzy+chpryOZryHtRPWX+GNtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNdf17s0 NzeAyNswLt3QpetuZY6OMB8GA1UdIwQYMBaAFEdvVyo4AjavM/YtgqW6Jk0vu618 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTVENS80RUJDQUYyNkQw QUYxMUU4QUFFQjA3NTZDNEY5QUUwMi9SMjlYS2pnQ05xOHo5aTJDcGJvbVRTLTdy WHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1IyOVhLamdDTnE4ejlpMkNwYm9tVFMtN3JYdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTVENS80RUJDQUYyNkQwQUYxMUU4QUFFQjA3NTZDNEY5QUUwMi9SMjlYS2pnQ05x OHo5aTJDcGJvbVRTLTdyWHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJeuNsLLiOL9yRgQsZmhDXSZRTQU7Wxo5GptaYbq+YwVl8O1Uzx62P 25l+1qVDObqAzN+w25xqBcvVnxRbXg0TxomunheOWnB6JkwbEr/0fToFv8JcdDkP GsbkvZh+H+mKcfWalbpPlZ2tc8zTUyYuOBasnLP6VQrLpQ/Fim5Eb0kr0hiZnXlm oXsDlmObK95+gPNtR8gVK8rrihzr5W93MX6XzgDTKxkFVDxw7gnTABaRXakRs3c1 mqB54rf5dASVFegBdvOY/oQB+qxadUCzN3tPBMzVxPveURdef+qmB09BhcWJ4i1p 9injQHK1UjjXBb4TxRCiglGBJW5fmfoy -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:21 2025 by rpki-client on console.sobornost.net