$ rpki-client -vvf rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft File: a5tdFBgYlY1zBFgvJU6hddhD4_0.mft (raw, json) Hash identifier: jLMFe8pRpp5Z2iI7e1nVpnF6Aj38c2UjQp18QCjSe5I= Subject key identifier: 70:61:89:9B:F7:E3:A5:62:02:56:FB:62:87:D0:7E:9C:74:ED:84:E5 Authority key identifier: 6B:9B:5D:14:18:18:95:8D:73:04:58:2F:25:4E:A1:75:D8:43:E3:FD Certificate issuer: /CN=A91359CD/serialNumber=6B9B5D141818958D7304582F254EA175D843E3FD Certificate serial: 09B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft Manifest number: 09AE Signing time: Sat 26 Apr 2025 19:47:31 +0000 Manifest this update: Sat 26 Apr 2025 19:47:30 +0000 Manifest next update: Sat 03 May 2025 19:47:30 +0000 Files and hashes: 1: a5tdFBgYlY1zBFgvJU6hddhD4_0.crl (hash: /qKelxatwlASjDxnyWi7X6fb8Ymnp0F7iMotCRRp9wE=) 2: 8F467E0082DD11EABD325010C4F9AE02.roa (hash: pqGYncUOZKT5Ae6UAJqJyy2fRgkfmoSyVZAKTooTufw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.crl rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2485 (0x9b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91359CD, serialNumber=6B9B5D141818958D7304582F254EA175D843E3FD Validity Not Before: Apr 26 19:47:30 2025 GMT Not After : May 3 19:47:30 2025 GMT Subject: CN=680d3853-837f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b1:7f:61:f4:1e:95:81:70:b1:d6:6c:ca:94: 55:d7:02:73:73:0a:a0:04:ee:0b:9a:e5:93:b2:9c: d4:b8:ba:fe:10:1c:76:72:dc:75:f6:e8:51:bc:16: c9:44:1e:0e:bf:dc:ab:72:5b:df:a4:43:15:c9:e8: 7c:7b:d0:80:d8:f8:7a:c9:26:be:ef:c3:46:42:ae: 06:6e:44:d6:cd:c8:ab:3d:c8:3c:19:98:bb:9c:16: 0f:bd:78:e3:18:49:07:63:5d:9f:bb:0a:4d:b5:89: 3c:5c:3d:6b:da:e9:54:63:c9:04:e2:af:3f:1b:b7: 76:47:7e:9f:d9:94:eb:e1:d4:31:78:3b:9d:b0:fe: 23:34:c0:de:c6:c3:3d:64:cf:08:83:b7:37:d2:4b: b7:b1:4c:2d:a7:02:da:6a:56:89:f8:42:22:cc:f9: 73:6a:3c:4c:91:d9:da:a3:09:3a:15:45:ee:44:b5: f7:0e:74:ae:45:1f:46:5f:1d:4d:a7:5c:c1:9b:94: 5f:d9:6e:5c:de:af:da:b8:92:50:6b:82:9b:4d:d9: a2:bd:08:30:38:59:16:51:0a:5d:b4:f4:c8:1a:0b: 03:20:2f:28:b7:49:6e:f5:a4:1d:4c:64:26:55:72: eb:90:79:13:ae:d2:8c:13:6b:fb:a2:1d:05:e5:6b: a2:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:61:89:9B:F7:E3:A5:62:02:56:FB:62:87:D0:7E:9C:74:ED:84:E5 X509v3 Authority Key Identifier: keyid:6B:9B:5D:14:18:18:95:8D:73:04:58:2F:25:4E:A1:75:D8:43:E3:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:79:37:70:d4:cb:61:15:71:ef:10:9f:6a:21:c2:7c:86:ba: 38:c1:62:82:7e:d0:52:00:af:6f:b0:af:a8:4c:45:fb:c6:10: f0:9a:40:11:bf:92:a9:bd:d0:3f:d8:8c:2b:c7:d2:0b:cd:5e: 12:60:ad:40:60:0a:92:0a:36:65:39:5a:47:88:b3:68:ff:3e: 5c:93:5f:1c:17:c2:9f:07:dc:d5:39:20:3a:e4:b3:a1:c6:fe: b3:75:24:1e:cd:53:f0:fa:0d:52:00:fe:f6:8d:d4:8a:29:00: 42:99:e3:23:d8:aa:38:99:30:fe:fc:f7:d7:40:2f:91:e0:01: 50:83:10:03:0c:77:99:9d:e2:c2:b6:6c:7a:09:c0:38:70:a3: 8d:77:d9:f9:11:5a:a8:0b:35:b8:90:7f:ac:c2:da:85:44:73: 01:98:ad:50:d1:51:61:82:77:9e:d3:a7:07:5f:66:fd:da:81: 7e:22:27:9f:6d:51:47:ef:66:c9:10:cd:af:c4:b8:f1:7f:e5: 7d:c5:1d:fa:6c:d0:63:f4:62:38:d3:79:70:35:5b:16:6a:0a: 9d:61:6a:c5:64:2c:fb:a3:8e:5d:e6:31:00:6c:cc:7e:24:4f: 62:95:b3:2a:02:65:f5:43:49:9d:ef:6c:43:d4:20:03:14:ee: 95:bb:b4:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU5Q0QxMTAvBgNVBAUTKDZCOUI1RDE0MTgxODk1OEQ3MzA0NTgyRjI1NEVBMTc1 RDg0M0UzRkQwHhcNMjUwNDI2MTk0NzMwWhcNMjUwNTAzMTk0NzMwWjAYMRYwFAYD VQQDEw02ODBkMzg1My04MzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvLF/YfQelYFwsdZsypRV1wJzcwqgBO4LmuWTspzUuLr+EBx2ctx19uhRvBbJ RB4Ov9yrclvfpEMVyeh8e9CA2Ph6ySa+78NGQq4GbkTWzcirPcg8GZi7nBYPvXjj GEkHY12fuwpNtYk8XD1r2ulUY8kE4q8/G7d2R36f2ZTr4dQxeDudsP4jNMDexsM9 ZM8Ig7c30ku3sUwtpwLaalaJ+EIizPlzajxMkdnaowk6FUXuRLX3DnSuRR9GXx1N p1zBm5Rf2W5c3q/auJJQa4KbTdmivQgwOFkWUQpdtPTIGgsDIC8ot0lu9aQdTGQm VXLrkHkTrtKME2v7oh0F5WuihQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHBhiZv3 46ViAlb7YofQfpx07YTlMB8GA1UdIwQYMBaAFGubXRQYGJWNcwRYLyVOoXXYQ+P9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTlDRC8xODVGRkMyODgy REIxMUVBQUMyQ0Q2MEFDNEY5QUUwMi9hNXRkRkJnWWxZMXpCRmd2SlU2aGRkaEQ0 XzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E1dGRGQmdZbFkxekJGZ3ZKVTZoZGRoRDRfMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTlDRC8xODVGRkMyODgyREIxMUVBQUMyQ0Q2MEFDNEY5QUUwMi9hNXRkRkJnWWxZ MXpCRmd2SlU2aGRkaEQ0XzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQeTdw1MthFXHvEJ9qIcJ8hro4wWKCftBSAK9vsK+oTEX7xhDwmkAR v5KpvdA/2Iwrx9ILzV4SYK1AYAqSCjZlOVpHiLNo/z5ck18cF8KfB9zVOSA65LOh xv6zdSQezVPw+g1SAP72jdSKKQBCmeMj2Ko4mTD+/PfXQC+R4AFQgxADDHeZneLC tmx6CcA4cKONd9n5EVqoCzW4kH+swtqFRHMBmK1Q0VFhgnee06cHX2b92oF+Iief bVFH72bJEM2vxLjxf+V9xR36bNBj9GI403lwNVsWagqdYWrFZCz7o45d5jEAbMx+ JE9ilbMqAmX1Q0md72xD1CADFO6Vu7SU -----END CERTIFICATE-----Generated at Sun Apr 27 00:13:56 2025 by rpki-client on console.sobornost.net