$ rpki-client -vvf rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft File: OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft (raw, json) Hash identifier: gJP/oFvcHCplxlwamsiIdVGtrCZLRbJwFU26Vmhi8pY= Subject key identifier: FB:2D:DA:7C:06:C9:8A:52:D3:AC:D9:21:13:15:FD:E2:D9:AE:98:C0 Authority key identifier: 39:58:C7:8E:DB:2C:BD:A4:6B:66:A6:7E:B9:34:AA:7B:D3:C3:86:5E Certificate issuer: /CN=A912EFA6/serialNumber=3958C78EDB2CBDA46B66A67EB934AA7BD3C3865E Certificate serial: 05C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft Manifest number: 05BE Signing time: Sat 26 Apr 2025 22:45:11 +0000 Manifest this update: Sat 26 Apr 2025 22:45:10 +0000 Manifest next update: Sat 03 May 2025 22:45:10 +0000 Files and hashes: 1: OVjHjtssvaRrZqZ-uTSqe9PDhl4.crl (hash: dA0eRdXy/txTLBXG9QtpfvmONgF4/pynf9wd9b6lRo4=) 2: 73F5DB88BC9C11EB9AC8E073C4F9AE02.roa (hash: fabeHirzSfMRjgTkSzBs+NINgYgVd5ARAuZRjwIHiWk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.crl rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 22:45:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1475 (0x5c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912EFA6, serialNumber=3958C78EDB2CBDA46B66A67EB934AA7BD3C3865E Validity Not Before: Apr 26 22:45:10 2025 GMT Not After : May 3 22:45:10 2025 GMT Subject: CN=680d61f7-1c79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:03:66:08:5d:9b:92:49:76:e6:60:17:55:22: 44:a7:d1:02:bb:98:35:74:94:14:e3:e2:54:4d:7a: b8:b5:2b:c2:f3:c1:d3:64:ec:b8:06:d1:14:51:08: 4e:40:96:48:dc:bf:f7:e7:bd:f2:94:dc:95:f1:66: 32:24:74:d8:b8:b9:7e:ef:f5:1c:2b:b6:b1:55:0d: fb:79:c7:ce:a0:15:19:92:f1:25:22:3e:d2:89:49: e2:f5:06:d0:e5:28:55:50:82:57:de:80:3c:6d:a4: 59:28:3d:8d:da:c8:e0:da:2e:7c:18:42:35:1c:0e: 0d:1a:7f:53:e2:56:f9:c7:12:d0:57:94:35:7a:91: 0f:19:c4:b1:85:85:1b:1c:ef:74:f5:bd:86:f1:a8: be:3d:53:3a:98:75:6c:81:7e:9c:b7:e2:3f:55:09: 13:68:c9:73:e4:a5:94:3d:37:5d:6b:b1:1a:7a:93: 93:4b:c8:c4:c6:15:db:d9:f3:35:eb:b4:2d:19:8e: 95:5d:fb:08:6d:81:ba:14:86:c8:29:e9:f8:64:3f: 9f:62:26:6b:5a:16:ec:26:02:8c:de:8c:35:2b:0c: 57:03:f5:e1:19:d6:70:62:e9:55:30:77:99:61:64: 46:6c:9b:13:22:74:90:04:dc:fa:0d:ff:29:08:14: 2d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:2D:DA:7C:06:C9:8A:52:D3:AC:D9:21:13:15:FD:E2:D9:AE:98:C0 X509v3 Authority Key Identifier: keyid:39:58:C7:8E:DB:2C:BD:A4:6B:66:A6:7E:B9:34:AA:7B:D3:C3:86:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:43:2d:91:dd:71:d1:2c:73:f7:3d:84:6d:bc:dc:f5:25:31: 87:fc:37:c3:9d:84:7c:64:a2:ab:5e:f0:d7:c8:b6:74:89:24: 19:82:95:b4:13:77:b8:4e:c0:4a:ec:e5:41:09:d3:93:61:33: 04:c9:ff:ff:8c:84:6c:6c:d1:93:28:bd:ce:ea:e2:d7:0d:76: 0b:84:c1:f4:4b:a4:bd:2f:1b:d8:7d:4f:d2:2d:7e:b9:ab:02: f8:02:56:c7:03:6e:47:76:b2:c4:40:12:2e:8d:e1:45:de:45: 69:98:8a:90:91:ff:d5:30:83:e1:d4:3b:38:ee:dc:a3:26:06: 1d:49:78:b7:ca:4b:41:75:83:2d:e9:7a:c2:9c:6f:49:dd:33: 39:b1:6b:f8:43:f9:4a:98:86:d7:1f:c2:9d:5f:30:28:34:5e: b2:4f:09:ce:6f:5b:10:bd:c6:56:bf:56:29:12:d4:03:41:de: d2:f3:70:28:b6:83:c3:16:15:39:a3:8a:8b:44:db:61:d4:84: 20:e9:78:09:d4:e8:f4:9c:b7:76:e5:6e:a8:99:0f:30:e5:61: 1f:63:84:ee:7e:58:17:d6:d0:fb:16:2f:9f:dc:6b:95:8a:44: 9e:b0:b0:44:25:5e:36:f5:85:14:89:84:1c:56:32:3f:af:ae: 6a:cc:ff:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkVGQTYxMTAvBgNVBAUTKDM5NThDNzhFREIyQ0JEQTQ2QjY2QTY3RUI5MzRBQTdC RDNDMzg2NUUwHhcNMjUwNDI2MjI0NTEwWhcNMjUwNTAzMjI0NTEwWjAYMRYwFAYD VQQDEw02ODBkNjFmNy0xYzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxwNmCF2bkkl25mAXVSJEp9ECu5g1dJQU4+JUTXq4tSvC88HTZOy4BtEUUQhO QJZI3L/3573ylNyV8WYyJHTYuLl+7/UcK7axVQ37ecfOoBUZkvElIj7SiUni9QbQ 5ShVUIJX3oA8baRZKD2N2sjg2i58GEI1HA4NGn9T4lb5xxLQV5Q1epEPGcSxhYUb HO909b2G8ai+PVM6mHVsgX6ct+I/VQkTaMlz5KWUPTdda7EaepOTS8jExhXb2fM1 67QtGY6VXfsIbYG6FIbIKen4ZD+fYiZrWhbsJgKM3ow1KwxXA/XhGdZwYulVMHeZ YWRGbJsTInSQBNz6Df8pCBQtIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPst2nwG yYpS06zZIRMV/eLZrpjAMB8GA1UdIwQYMBaAFDlYx47bLL2ka2amfrk0qnvTw4Ze MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRUZBNi8wNjE2RTg0MkJD OUIxMUVCOTZGMzVGNkJDNEY5QUUwMi9PVmpIanRzc3ZhUnJacVotdVRTcWU5UERo bDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09WakhqdHNzdmFSclpxWi11VFNxZTlQRGhsNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RUZBNi8wNjE2RTg0MkJDOUIxMUVCOTZGMzVGNkJDNEY5QUUwMi9PVmpIanRzc3Zh UnJacVotdVRTcWU5UERobDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASQy2R3XHRLHP3PYRtvNz1JTGH/DfDnYR8ZKKrXvDXyLZ0iSQZgpW0 E3e4TsBK7OVBCdOTYTMEyf//jIRsbNGTKL3O6uLXDXYLhMH0S6S9LxvYfU/SLX65 qwL4AlbHA25HdrLEQBIujeFF3kVpmIqQkf/VMIPh1Ds47tyjJgYdSXi3yktBdYMt 6XrCnG9J3TM5sWv4Q/lKmIbXH8KdXzAoNF6yTwnOb1sQvcZWv1YpEtQDQd7S83Ao toPDFhU5o4qLRNth1IQg6XgJ1Oj0nLd25W6omQ8w5WEfY4TuflgX1tD7Fi+f3GuV ikSesLBEJV429YUUiYQcVjI/r65qzP9H -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:25 2025 by rpki-client on console.sobornost.net