$ rpki-client -vvf rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft File: _Ern2eP0GafSBKVMedHz76mn1sg.mft (raw, json) Hash identifier: /GHV70q1ux4arkPcgERSMTAu+94KB0BSqm0/IsahhbI= Subject key identifier: 99:F1:22:53:F8:0D:32:D3:3C:0E:20:35:64:40:09:FA:FC:6E:47:FA Authority key identifier: FC:4A:E7:D9:E3:F4:19:A7:D2:04:A5:4C:79:D1:F3:EF:A9:A7:D6:C8 Certificate issuer: /CN=A91262F0/serialNumber=FC4AE7D9E3F419A7D204A54C79D1F3EFA9A7D6C8 Certificate serial: 01A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft Manifest number: 01A2 Signing time: Sun 27 Apr 2025 02:19:44 +0000 Manifest this update: Sun 27 Apr 2025 02:19:44 +0000 Manifest next update: Sun 04 May 2025 02:19:44 +0000 Files and hashes: 1: _Ern2eP0GafSBKVMedHz76mn1sg.crl (hash: PejYwmfNS0uvZ8R3Yxr4iQGtRXV4meqAs3NYCpeS4WQ=) 2: 8E412748A33311EDA2CB2420C4F9AE02.roa (hash: VYee2tDfZOJDgRSyvh9847Isyru0Slu6wYlhlW9JZCM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.crl rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:19:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 423 (0x1a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91262F0, serialNumber=FC4AE7D9E3F419A7D204A54C79D1F3EFA9A7D6C8 Validity Not Before: Apr 27 02:19:44 2025 GMT Not After : May 4 02:19:44 2025 GMT Subject: CN=680d9440-e5e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:1a:02:37:64:00:5b:65:03:6f:19:b4:df:04: 99:75:91:2a:a8:80:d2:7a:b8:2c:c2:13:db:44:98: 92:6e:bc:74:ed:46:2d:99:b4:6d:0a:36:02:71:e3: 6a:81:06:13:d2:17:fc:80:da:72:b2:7b:e1:0b:1b: ab:27:9f:d2:df:f6:46:0b:33:61:ae:33:2b:22:98: 05:14:d6:44:04:9a:a7:74:6e:1d:f0:83:9e:d9:99: fb:4e:93:c0:8d:8d:14:9f:f5:2d:0a:91:ba:87:23: 31:dd:c4:aa:5f:9a:fb:1f:ca:65:fd:f8:12:9b:5b: de:d2:9d:50:bb:96:47:bc:4e:32:43:59:da:45:9a: 62:02:7e:c4:93:86:ca:83:ab:5b:f4:3b:c1:eb:b7: eb:db:7f:0c:bc:fc:d6:b5:16:1a:0b:63:b7:c8:f9: eb:61:65:cc:7e:b4:04:79:3d:7e:c3:0b:7e:53:dc: 9a:d5:e4:fa:f6:a0:ce:97:59:ae:b5:98:76:d4:ad: 89:83:90:6c:ce:fd:42:d5:0d:6e:df:5f:65:88:42: 9e:12:87:be:7f:6e:34:f1:c1:71:cb:fc:5b:07:1b: 09:51:46:1a:6f:cc:d5:b5:7e:12:e5:21:c5:67:02: f0:61:b7:cd:b0:4f:6d:90:6b:32:d1:63:fc:ae:3d: b2:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:F1:22:53:F8:0D:32:D3:3C:0E:20:35:64:40:09:FA:FC:6E:47:FA X509v3 Authority Key Identifier: keyid:FC:4A:E7:D9:E3:F4:19:A7:D2:04:A5:4C:79:D1:F3:EF:A9:A7:D6:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:1a:87:b3:2a:7b:25:b9:c1:17:42:c4:25:9e:fb:74:eb:93: ac:5d:76:b1:fd:24:8a:26:fb:d3:58:ed:92:41:c6:74:0c:1b: 40:68:98:1e:97:d5:2e:a2:4f:9c:d4:6d:d2:1b:ed:42:33:dc: 57:d1:20:e1:56:4e:b7:c1:df:e9:31:9a:89:79:0a:67:93:3f: 7e:75:9f:f5:5d:f2:ed:22:bf:ac:02:a1:09:67:8d:40:47:9d: 34:40:ff:e7:aa:fd:3d:4b:dd:9c:aa:58:f1:42:62:b5:f4:0c: fa:73:70:a6:5a:90:63:e3:c6:f3:2a:ff:ae:f5:b7:7c:3e:84: 36:e3:01:7d:ad:59:79:09:8e:22:07:53:7f:75:22:48:f1:45: d6:b8:1c:ac:2b:26:73:27:e0:73:40:68:aa:c1:9d:5d:13:f5: f3:ed:01:f2:58:a1:48:b0:b7:40:5c:49:12:6d:0a:45:6a:9f: 16:21:34:f8:2c:c2:ca:ef:a0:95:5c:c0:07:99:e1:32:d8:92: 28:ea:43:c9:d3:2f:ec:2e:44:e8:37:e1:af:e3:88:8e:16:75: bb:c9:97:72:10:2f:6d:c9:7a:33:f0:f9:aa:62:ad:9d:85:84: ad:5e:93:b4:44:c6:1b:b2:f6:43:9e:ef:5b:77:dd:4a:04:30: ea:70:5d:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYyRjAxMTAvBgNVBAUTKEZDNEFFN0Q5RTNGNDE5QTdEMjA0QTU0Qzc5RDFGM0VG QTlBN0Q2QzgwHhcNMjUwNDI3MDIxOTQ0WhcNMjUwNTA0MDIxOTQ0WjAYMRYwFAYD VQQDEw02ODBkOTQ0MC1lNWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2xoCN2QAW2UDbxm03wSZdZEqqIDSergswhPbRJiSbrx07UYtmbRtCjYCceNq gQYT0hf8gNpysnvhCxurJ5/S3/ZGCzNhrjMrIpgFFNZEBJqndG4d8IOe2Zn7TpPA jY0Un/UtCpG6hyMx3cSqX5r7H8pl/fgSm1ve0p1Qu5ZHvE4yQ1naRZpiAn7Ek4bK g6tb9DvB67fr238MvPzWtRYaC2O3yPnrYWXMfrQEeT1+wwt+U9ya1eT69qDOl1mu tZh21K2Jg5Bszv1C1Q1u319liEKeEoe+f2408cFxy/xbBxsJUUYab8zVtX4S5SHF ZwLwYbfNsE9tkGsy0WP8rj2yUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJnxIlP4 DTLTPA4gNWRACfr8bkf6MB8GA1UdIwQYMBaAFPxK59nj9Bmn0gSlTHnR8++pp9bI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJGMC8zM0FEMEE2MkEz MEMxMUVEQjMzODhDMENDNEY5QUUwMi9fRXJuMmVQMEdhZlNCS1ZNZWRIejc2bW4x c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19Fcm4yZVAwR2FmU0JLVk1lZEh6NzZtbjFzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjJGMC8zM0FEMEE2MkEzMEMxMUVEQjMzODhDMENDNEY5QUUwMi9fRXJuMmVQMEdh ZlNCS1ZNZWRIejc2bW4xc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXGoezKnslucEXQsQlnvt065OsXXax/SSKJvvTWO2SQcZ0DBtAaJge l9Uuok+c1G3SG+1CM9xX0SDhVk63wd/pMZqJeQpnkz9+dZ/1XfLtIr+sAqEJZ41A R500QP/nqv09S92cqljxQmK19Az6c3CmWpBj48bzKv+u9bd8PoQ24wF9rVl5CY4i B1N/dSJI8UXWuBysKyZzJ+BzQGiqwZ1dE/Xz7QHyWKFIsLdAXEkSbQpFap8WITT4 LMLK76CVXMAHmeEy2JIo6kPJ0y/sLkToN+Gv44iOFnW7yZdyEC9tyXoz8PmqYq2d hYStXpO0RMYbsvZDnu9bd91KBDDqcF05 -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:20 2025 by rpki-client on console.sobornost.net