$ rpki-client -vvf rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft File: EMpiwqdJv5H1YirewPGWGEk8u6k.mft (raw, json) Hash identifier: /EiJXmHZtukBeV8GpjHhc9B2nXaPewsUXalbrRz7DZw= Subject key identifier: 4C:B8:32:73:B1:5D:76:75:9D:FC:6A:CC:74:AC:EE:AB:A1:BD:7A:1E Authority key identifier: 10:CA:62:C2:A7:49:BF:91:F5:62:2A:DE:C0:F1:96:18:49:3C:BB:A9 Certificate issuer: /CN=A91306B2/serialNumber=10CA62C2A749BF91F5622ADEC0F19618493CBBA9 Certificate serial: 01DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMpiwqdJv5H1YirewPGWGEk8u6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft Manifest number: 01D9 Signing time: Sun 27 Apr 2025 01:46:59 +0000 Manifest this update: Sun 27 Apr 2025 01:46:59 +0000 Manifest next update: Sun 04 May 2025 01:46:59 +0000 Files and hashes: 1: EMpiwqdJv5H1YirewPGWGEk8u6k.crl (hash: Dj4nZ5fqoHEvnDfOZNmD6C4/aYsxscP+H2O8X2mGVbw=) 2: 695CA6D414BF11EEB8B95B7FC4F9AE02.roa (hash: y8u3ZZNWwXMV6EsCoReGtHsNbMX1mb+g+HfYKyQ+Y/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.crl rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMpiwqdJv5H1YirewPGWGEk8u6k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 01:46:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 478 (0x1de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91306B2, serialNumber=10CA62C2A749BF91F5622ADEC0F19618493CBBA9 Validity Not Before: Apr 27 01:46:59 2025 GMT Not After : May 4 01:46:59 2025 GMT Subject: CN=680d8c93-2860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0f:cf:9f:f0:3b:b0:4b:1d:17:7e:b7:c0:4a: 42:03:b4:86:70:be:4c:05:d7:9b:db:2a:11:16:a5: 0b:a3:fe:bd:81:8d:1d:da:ba:c0:b8:1b:e1:44:2e: 41:8f:d6:52:5f:3c:d3:da:6b:80:d0:5a:61:8f:95: 31:e2:bd:65:b0:b2:7d:92:12:16:51:d7:54:bb:8d: 2e:3c:0b:f4:a1:a2:f1:dd:11:57:34:d6:d6:b7:75: 87:37:a6:0b:68:83:32:25:0f:bd:c3:85:43:45:fe: 28:89:69:5b:16:cc:59:70:7d:90:48:05:40:41:0b: 54:b2:d5:d1:67:df:7a:31:6e:bf:3d:0c:27:83:32: 63:c7:ed:3f:42:5e:14:a6:7f:e2:a7:7b:34:24:75: ff:81:e5:93:f6:f5:f3:0f:95:6d:bf:c5:68:7a:1e: 8a:ed:71:5f:d3:40:62:70:af:21:cf:93:bb:32:71: d0:02:0b:bf:b0:f8:a2:18:20:70:21:71:95:15:86: ce:e6:e6:89:d7:3e:b2:19:ca:9d:fa:a7:1a:c1:21: c5:a4:7f:79:07:6d:2e:1b:04:27:7b:0f:db:f3:7c: 17:01:94:9f:91:72:a3:b5:12:2c:82:a8:14:7f:41: 41:51:28:81:a9:23:26:2e:a9:a2:82:96:11:da:51: df:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:B8:32:73:B1:5D:76:75:9D:FC:6A:CC:74:AC:EE:AB:A1:BD:7A:1E X509v3 Authority Key Identifier: keyid:10:CA:62:C2:A7:49:BF:91:F5:62:2A:DE:C0:F1:96:18:49:3C:BB:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMpiwqdJv5H1YirewPGWGEk8u6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:90:70:88:0e:cb:03:fe:75:41:d0:0d:7b:5e:84:de:61:38: fa:dd:77:c4:64:0e:05:8e:97:77:17:5b:f1:4a:76:32:c6:46: fe:46:06:b8:f5:09:a1:2a:6c:96:39:7a:05:1a:66:45:27:53: 22:eb:84:a4:b9:37:0e:99:5a:42:89:e5:67:f4:a9:81:91:33: b5:4d:c8:13:0c:23:42:47:aa:a9:f8:31:f6:f3:ef:1e:ee:f5: 96:2a:c8:18:69:dd:f0:8b:07:cd:26:1c:5c:e2:aa:c2:0f:65: 7e:61:10:b3:7b:de:07:c0:dd:d1:a9:a6:f0:f1:be:e9:f2:2f: ea:b8:bf:37:5e:6a:82:c1:bd:c1:5a:24:65:c1:d5:93:be:f5: 37:c2:ed:69:0d:65:76:e9:5b:91:3f:72:c4:68:34:56:9c:fa: 40:55:f6:50:e3:20:4b:2b:4d:62:ce:c2:f8:a7:cf:3d:4a:a4: 2f:9b:77:82:c7:d0:6c:40:ba:5e:5e:95:8d:d0:a9:38:71:77: a3:5c:33:97:4e:3f:01:19:62:bc:d3:f3:21:78:c4:cb:93:aa: f5:cd:43:9f:51:f4:9f:3d:97:44:19:32:ba:a9:02:a6:5b:58: 86:2a:1a:c8:24:8a:2a:a0:27:d5:d2:fa:ee:2d:75:b8:6c:4a: 89:46:19:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA2QjIxMTAvBgNVBAUTKDEwQ0E2MkMyQTc0OUJGOTFGNTYyMkFERUMwRjE5NjE4 NDkzQ0JCQTkwHhcNMjUwNDI3MDE0NjU5WhcNMjUwNTA0MDE0NjU5WjAYMRYwFAYD VQQDEw02ODBkOGM5My0yODYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvg/Pn/A7sEsdF363wEpCA7SGcL5MBdeb2yoRFqULo/69gY0d2rrAuBvhRC5B j9ZSXzzT2muA0Fphj5Ux4r1lsLJ9khIWUddUu40uPAv0oaLx3RFXNNbWt3WHN6YL aIMyJQ+9w4VDRf4oiWlbFsxZcH2QSAVAQQtUstXRZ996MW6/PQwngzJjx+0/Ql4U pn/ip3s0JHX/geWT9vXzD5Vtv8Voeh6K7XFf00BicK8hz5O7MnHQAgu/sPiiGCBw IXGVFYbO5uaJ1z6yGcqd+qcawSHFpH95B20uGwQnew/b83wXAZSfkXKjtRIsgqgU f0FBUSiBqSMmLqmigpYR2lHf6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEy4MnOx XXZ1nfxqzHSs7quhvXoeMB8GA1UdIwQYMBaAFBDKYsKnSb+R9WIq3sDxlhhJPLup MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDZCMi8zMjFGREQzRTRE ODMxMUVEODdGQjFFNkZDNEY5QUUwMi9FTXBpd3FkSnY1SDFZaXJld1BHV0dFazh1 NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VNcGl3cWRKdjVIMVlpcmV3UEdXR0VrOHU2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDZCMi8zMjFGREQzRTREODMxMUVEODdGQjFFNkZDNEY5QUUwMi9FTXBpd3FkSnY1 SDFZaXJld1BHV0dFazh1NmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXkHCIDssD/nVB0A17XoTeYTj63XfEZA4Fjpd3F1vxSnYyxkb+Rga4 9QmhKmyWOXoFGmZFJ1Mi64SkuTcOmVpCieVn9KmBkTO1TcgTDCNCR6qp+DH28+8e 7vWWKsgYad3wiwfNJhxc4qrCD2V+YRCze94HwN3Rqabw8b7p8i/quL83XmqCwb3B WiRlwdWTvvU3wu1pDWV26VuRP3LEaDRWnPpAVfZQ4yBLK01izsL4p889SqQvm3eC x9BsQLpeXpWN0Kk4cXejXDOXTj8BGWK80/MheMTLk6r1zUOfUfSfPZdEGTK6qQKm W1iGKhrIJIoqoCfV0vruLXW4bEqJRhmK -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:26 2025 by rpki-client on console.sobornost.net