$ rpki-client -vvf rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft File: 0Q5D4Fk97x241_RMbxzRPnPC8jA.mft (raw, json) Hash identifier: PVjYAih2lFdjhqo5+YBjRBUrXuirJVXKK0N6l5N0uPk= Subject key identifier: 98:09:09:7A:D2:6D:67:28:8C:D4:94:71:D9:30:53:35:C2:91:CE:1D Authority key identifier: D1:0E:43:E0:59:3D:EF:1D:B8:D7:F4:4C:6F:1C:D1:3E:73:C2:F2:30 Certificate issuer: /CN=A91325DC/serialNumber=D10E43E0593DEF1DB8D7F44C6F1CD13E73C2F230 Certificate serial: 0AFF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft Manifest number: 0AF2 Signing time: Mon 28 Apr 2025 19:44:07 +0000 Manifest this update: Mon 28 Apr 2025 19:44:06 +0000 Manifest next update: Mon 05 May 2025 19:44:06 +0000 Files and hashes: 1: 0Q5D4Fk97x241_RMbxzRPnPC8jA.crl (hash: /ApDjM1/qu4W6vnQnsXL9ekHM2yofsKPKqajkbHDb0k=) 2: A2DE5B44AE1C11EAA46DAF7FC4F9AE02.roa (hash: wBezilbHgFlLqA1qqUMQVDVzvkJDksyuC7XhtfdBEgk=) 3: 3FC1B85E431811EA84E68121C4F9AE02.roa (hash: kRXthgEAoGC/b23UrIEWTh9+gf3/yFfF1cVAtff2rTg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.crl rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 19:44:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2815 (0xaff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91325DC, serialNumber=D10E43E0593DEF1DB8D7F44C6F1CD13E73C2F230 Validity Not Before: Apr 28 19:44:06 2025 GMT Not After : May 5 19:44:06 2025 GMT Subject: CN=680fda87-0655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:72:0d:f5:b2:b1:e1:dc:63:d2:60:c8:8a:ec: c7:cc:5b:9d:e8:8b:f2:27:8e:b1:1c:1a:76:ef:e8: 38:a8:e8:fd:79:56:d2:9e:db:ec:55:3c:3e:ec:2c: 0b:cd:62:d6:52:66:45:50:24:58:31:0c:bc:d4:f4: b4:4e:f0:fc:05:dc:72:10:b9:b2:02:d8:7b:8b:95: a8:fb:59:e4:46:88:b1:ae:ad:53:7f:52:6e:e3:fa: 87:2b:00:df:af:4d:07:41:36:26:df:99:b1:b2:d1: 68:5c:c7:6b:67:5d:78:68:2c:41:b6:52:26:61:d5: 64:fd:35:6f:a7:03:33:11:90:ad:a6:f6:69:1e:75: e8:14:37:d2:61:c0:01:b2:da:dc:5e:a0:ef:af:7c: 15:33:c7:c6:3f:16:af:f4:89:3a:74:07:fe:b5:a8: 19:bb:4c:d9:fa:fd:31:e4:f2:5a:a8:84:51:56:9f: e8:c9:df:e1:06:67:14:55:46:e2:6f:9e:fa:33:00: 40:70:90:27:ec:f7:fb:56:1d:c9:14:e5:f3:23:be: dc:ac:60:b6:42:d4:e3:b5:19:3d:f7:82:fa:e5:da: 58:84:f2:73:bd:54:13:44:dd:67:8b:b0:dd:ab:1b: c4:67:0b:77:8b:ee:59:3c:d6:08:f5:ad:fc:10:3e: 8e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:09:09:7A:D2:6D:67:28:8C:D4:94:71:D9:30:53:35:C2:91:CE:1D X509v3 Authority Key Identifier: keyid:D1:0E:43:E0:59:3D:EF:1D:B8:D7:F4:4C:6F:1C:D1:3E:73:C2:F2:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:d4:16:63:c0:b4:1f:5b:f2:71:a9:a3:a4:a6:65:5d:28:9e: 8f:ce:2c:d2:df:41:a6:ed:45:9b:46:ac:cd:5b:2d:89:25:15: 20:c3:a9:c6:bb:4a:6e:08:9a:d2:88:b0:e7:b3:f3:db:31:de: 31:a9:90:82:2f:f7:6c:d3:42:7b:46:cc:87:ad:c6:f3:41:ef: b5:5c:85:fb:96:e9:ce:fb:38:8f:5d:f6:84:3d:02:5e:11:45: b5:5f:95:51:64:b0:30:f6:58:eb:fb:8c:4e:b3:13:c5:97:ad: 13:2a:76:32:a1:5e:5c:71:41:41:3f:88:28:fa:c3:f2:9d:bd: 90:3b:00:32:f7:d6:e7:ad:d5:86:5c:00:99:38:59:66:e0:c1: 0b:1b:e1:98:a5:2e:1b:00:d1:4f:83:2c:dd:66:d3:df:40:b2: e6:84:37:8d:70:7b:c1:99:8d:dd:7e:9c:d4:2a:89:ab:cd:2e: ab:a8:96:45:d9:c7:e3:1f:6f:8d:ac:12:ac:db:24:d6:2c:77: 74:08:a3:12:9e:e2:95:4b:59:51:6b:88:c3:ab:40:45:c8:84: 0f:1e:4a:b6:af:b4:d0:08:88:da:39:f2:89:0c:05:f9:94:f2: b6:09:e8:2b:30:39:f0:10:80:18:5f:56:d3:b4:fc:1a:6f:3b: 80:13:16:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCv8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI1REMxMTAvBgNVBAUTKEQxMEU0M0UwNTkzREVGMURCOEQ3RjQ0QzZGMUNEMTNF NzNDMkYyMzAwHhcNMjUwNDI4MTk0NDA2WhcNMjUwNTA1MTk0NDA2WjAYMRYwFAYD VQQDEw02ODBmZGE4Ny0wNjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzXIN9bKx4dxj0mDIiuzHzFud6IvyJ46xHBp27+g4qOj9eVbSntvsVTw+7CwL zWLWUmZFUCRYMQy81PS0TvD8BdxyELmyAth7i5Wo+1nkRoixrq1Tf1Ju4/qHKwDf r00HQTYm35mxstFoXMdrZ114aCxBtlImYdVk/TVvpwMzEZCtpvZpHnXoFDfSYcAB strcXqDvr3wVM8fGPxav9Ik6dAf+tagZu0zZ+v0x5PJaqIRRVp/oyd/hBmcUVUbi b576MwBAcJAn7Pf7Vh3JFOXzI77crGC2QtTjtRk994L65dpYhPJzvVQTRN1ni7Dd qxvEZwt3i+5ZPNYI9a38ED6O1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJgJCXrS bWcojNSUcdkwUzXCkc4dMB8GA1UdIwQYMBaAFNEOQ+BZPe8duNf0TG8c0T5zwvIw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjVEQy80NjEyRDUxRTQz MTYxMUVBQjI2Mjc4MURDNEY5QUUwMi8wUTVENEZrOTd4MjQxX1JNYnh6UlBuUEM4 akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBRNUQ0Rms5N3gyNDFfUk1ieHpSUG5QQzhqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjVEQy80NjEyRDUxRTQzMTYxMUVBQjI2Mjc4MURDNEY5QUUwMi8wUTVENEZrOTd4 MjQxX1JNYnh6UlBuUEM4akEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAo1BZjwLQfW/JxqaOkpmVdKJ6PzizS30Gm7UWbRqzNWy2JJRUgw6nG u0puCJrSiLDns/PbMd4xqZCCL/ds00J7RsyHrcbzQe+1XIX7lunO+ziPXfaEPQJe EUW1X5VRZLAw9ljr+4xOsxPFl60TKnYyoV5ccUFBP4go+sPynb2QOwAy99bnrdWG XACZOFlm4MELG+GYpS4bANFPgyzdZtPfQLLmhDeNcHvBmY3dfpzUKomrzS6rqJZF 2cfjH2+NrBKs2yTWLHd0CKMSnuKVS1lRa4jDq0BFyIQPHkq2r7TQCIjaOfKJDAX5 lPK2CegrMDnwEIAYX1bTtPwabzuAExZn -----END CERTIFICATE-----Generated at Mon Apr 28 23:05:01 2025 by rpki-client on console.sobornost.net