$ rpki-client -vvf rpki.apnic.net/member_repository/A91164FE/B826CA8076BF11EEB14F2D72C4F9AE02/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.mft File: 5vCGwFxeBN2Wrg5fyQOXkaN1YP4.mft (raw, json) Hash identifier: sqfRyZpXU5zEjTLUN2X8aABs0YdL5pQiNuMPB56tW0A= Subject key identifier: 90:6D:49:47:FC:49:81:5D:A5:A5:42:D1:8D:59:BF:F5:1B:6C:8F:BE Authority key identifier: E6:F0:86:C0:5C:5E:04:DD:96:AE:0E:5F:C9:03:97:91:A3:75:60:FE Certificate issuer: /CN=A91164FE/serialNumber=E6F086C05C5E04DD96AE0E5FC9039791A37560FE Certificate serial: 011D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91164FE/B826CA8076BF11EEB14F2D72C4F9AE02/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.mft Manifest number: 011A Signing time: Sun 27 Apr 2025 03:44:18 +0000 Manifest this update: Sun 27 Apr 2025 03:44:18 +0000 Manifest next update: Sun 04 May 2025 03:44:18 +0000 Files and hashes: 1: 5vCGwFxeBN2Wrg5fyQOXkaN1YP4.crl (hash: Zp+so+iQvTEm+NZm/KJDfrzR9Xk2aiSxq36Bnc9OGW8=) 2: 63EC7E9476C211EE9FDED166C4F9AE02.roa (hash: VIpTaiDF//T8jK4C9n6iwAX2TMSKtXEtM34C7KtsS6o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91164FE/B826CA8076BF11EEB14F2D72C4F9AE02/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.crl rsync://rpki.apnic.net/member_repository/A91164FE/B826CA8076BF11EEB14F2D72C4F9AE02/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 285 (0x11d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91164FE, serialNumber=E6F086C05C5E04DD96AE0E5FC9039791A37560FE Validity Not Before: Apr 27 03:44:18 2025 GMT Not After : May 4 03:44:18 2025 GMT Subject: CN=680da812-a8f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f7:7e:2c:fd:8d:6d:4d:12:76:bf:58:f6:93: ca:dc:f7:a2:13:4f:ff:22:3d:b5:86:7e:8f:54:d5: a5:bb:6b:f2:2d:d6:39:92:3b:d4:64:fe:80:d4:3e: 87:f1:9c:5f:c3:40:de:3b:79:b1:4d:46:18:41:09: 90:88:09:89:02:33:f0:6c:7c:72:fc:d8:8d:f3:06: 5c:89:23:1c:42:1e:75:3e:9d:f4:f2:7d:da:14:e1: f9:a2:a6:d1:c1:32:5a:cf:83:ea:47:0c:64:79:9f: db:7d:ee:34:83:24:1d:4e:40:fe:29:81:07:d7:56: 40:a7:92:2e:a3:08:11:6c:56:3a:8b:9f:42:7d:98: f3:b7:5d:34:3e:c6:f9:70:d1:6c:21:a4:b2:c9:d2: cc:1b:49:90:c6:25:2d:eb:64:56:d7:7a:22:04:aa: 12:36:43:b1:eb:e9:43:73:c4:62:fb:81:e5:52:76: 6b:03:e6:00:be:8e:b8:f0:1d:65:6e:91:45:49:02: f3:de:44:92:2a:29:33:32:8a:81:d3:31:1e:60:78: 32:96:a4:ef:22:ad:97:60:93:04:32:96:b3:5c:03: eb:8d:c1:57:b1:c1:52:61:d0:4a:6f:3e:1e:4c:17: 3b:52:8c:29:c6:03:8c:3c:b4:b0:ef:a6:b1:cb:f7: bd:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:6D:49:47:FC:49:81:5D:A5:A5:42:D1:8D:59:BF:F5:1B:6C:8F:BE X509v3 Authority Key Identifier: keyid:E6:F0:86:C0:5C:5E:04:DD:96:AE:0E:5F:C9:03:97:91:A3:75:60:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91164FE/B826CA8076BF11EEB14F2D72C4F9AE02/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91164FE/B826CA8076BF11EEB14F2D72C4F9AE02/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:ae:46:d9:da:51:3b:03:0a:a7:c5:c8:13:67:1e:5f:be:36: 1f:bd:96:93:ad:cf:74:63:7a:3c:2d:25:2f:fc:fb:0b:98:4a: b3:54:ea:a8:d3:e1:1e:75:97:c8:b8:ad:0c:61:ce:32:1f:d5: c9:d6:d9:75:e2:38:2a:7c:aa:75:eb:63:40:c4:1d:32:99:82: a5:5f:f9:88:9c:4d:dd:f4:05:45:51:60:b1:25:07:2a:bd:28: 52:67:28:78:82:73:dc:9e:c2:df:37:8f:f1:d5:8e:e5:2c:0a: 61:4e:f2:eb:4f:1c:8d:f5:5f:db:27:3a:e4:bf:7b:41:c7:72: 4c:5c:63:c8:ed:77:ab:fe:88:50:3a:c4:19:91:82:61:4a:a7: 9e:f0:dd:a5:33:83:ed:3c:ad:00:c3:ec:5c:75:87:5d:d4:4f: 4b:b7:de:22:60:32:f4:f0:88:44:e6:96:0d:24:d6:fd:6c:e4: 78:2e:b4:2d:2b:d6:00:24:e6:34:e7:3e:29:ca:1c:6a:05:a3: f2:c0:c8:a3:78:38:31:92:75:92:b7:0a:81:28:8e:95:7c:cd: 72:3a:d1:28:7c:84:15:18:ca:ff:76:ac:1b:75:8e:3f:28:a2: 89:f8:48:11:fd:23:95:cc:de:a5:07:5e:a2:86:9f:b3:5b:91: 75:dd:4a:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY0RkUxMTAvBgNVBAUTKEU2RjA4NkMwNUM1RTA0REQ5NkFFMEU1RkM5MDM5Nzkx QTM3NTYwRkUwHhcNMjUwNDI3MDM0NDE4WhcNMjUwNTA0MDM0NDE4WjAYMRYwFAYD VQQDEw02ODBkYTgxMi1hOGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2fd+LP2NbU0Sdr9Y9pPK3PeiE0//Ij21hn6PVNWlu2vyLdY5kjvUZP6A1D6H 8Zxfw0DeO3mxTUYYQQmQiAmJAjPwbHxy/NiN8wZciSMcQh51Pp308n3aFOH5oqbR wTJaz4PqRwxkeZ/bfe40gyQdTkD+KYEH11ZAp5IuowgRbFY6i59CfZjzt100Psb5 cNFsIaSyydLMG0mQxiUt62RW13oiBKoSNkOx6+lDc8Ri+4HlUnZrA+YAvo648B1l bpFFSQLz3kSSKikzMoqB0zEeYHgylqTvIq2XYJMEMpazXAPrjcFXscFSYdBKbz4e TBc7UowpxgOMPLSw76axy/e9gwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJBtSUf8 SYFdpaVC0Y1Zv/UbbI++MB8GA1UdIwQYMBaAFObwhsBcXgTdlq4OX8kDl5GjdWD+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjRGRS9CODI2Q0E4MDc2 QkYxMUVFQjE0RjJENzJDNEY5QUUwMi81dkNHd0Z4ZUJOMldyZzVmeVFPWGthTjFZ UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV2Q0d3RnhlQk4yV3JnNWZ5UU9Ya2FOMVlQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjRGRS9CODI2Q0E4MDc2QkYxMUVFQjE0RjJENzJDNEY5QUUwMi81dkNHd0Z4ZUJO MldyZzVmeVFPWGthTjFZUDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtrkbZ2lE7AwqnxcgTZx5fvjYfvZaTrc90Y3o8LSUv/PsLmEqzVOqo 0+EedZfIuK0MYc4yH9XJ1tl14jgqfKp162NAxB0ymYKlX/mInE3d9AVFUWCxJQcq vShSZyh4gnPcnsLfN4/x1Y7lLAphTvLrTxyN9V/bJzrkv3tBx3JMXGPI7Xer/ohQ OsQZkYJhSqee8N2lM4PtPK0Aw+xcdYdd1E9Lt94iYDL08IhE5pYNJNb9bOR4LrQt K9YAJOY05z4pyhxqBaPywMijeDgxknWStwqBKI6VfM1yOtEofIQVGMr/dqwbdY4/ KKKJ+EgR/SOVzN6lB16ihp+zW5F13Up2 -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:15 2025 by rpki-client on console.sobornost.net