$ rpki-client -vvf rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.mft File: A5HZpw6JPnUbxhKJxUQXuHoQRVk.mft (raw, json) Hash identifier: injSKzYdMFFBn6d/7ImC9aCOuYQpA1OkvOZh+xTi0lE= Subject key identifier: 5A:BA:23:36:4A:A8:D3:8E:60:B7:90:CE:46:99:73:42:9C:18:08:7A Authority key identifier: 03:91:D9:A7:0E:89:3E:75:1B:C6:12:89:C5:44:17:B8:7A:10:45:59 Certificate issuer: /CN=A91380F7/serialNumber=0391D9A70E893E751BC61289C54417B87A104559 Certificate serial: 53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A5HZpw6JPnUbxhKJxUQXuHoQRVk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.mft Manifest number: 52 Signing time: Sun 27 Apr 2025 06:04:10 +0000 Manifest this update: Sun 27 Apr 2025 06:04:10 +0000 Manifest next update: Sun 04 May 2025 06:04:10 +0000 Files and hashes: 1: A5HZpw6JPnUbxhKJxUQXuHoQRVk.crl (hash: /+zJTZSx1NE8lQBSmaPJ6rs8JN9Oo/jV4F1s8z0A/fM=) 2: 9B3FE178A7FA11EFA7886875C4F9AE02.roa (hash: wskyOCDE340iqc6+xbxJBMsRJGfe9vODWh/hz8Ga1HM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.crl rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A5HZpw6JPnUbxhKJxUQXuHoQRVk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91380F7, serialNumber=0391D9A70E893E751BC61289C54417B87A104559 Validity Not Before: Apr 27 06:04:10 2025 GMT Not After : May 4 06:04:10 2025 GMT Subject: CN=680dc8da-97bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:aa:ef:74:37:92:53:a2:d4:77:d3:2f:f3:72: bd:8f:fc:0a:70:08:73:13:88:30:3d:41:aa:b8:06: 8e:39:dc:2f:87:95:d0:72:c5:33:12:f8:5b:79:cf: 9f:67:e7:b0:c5:a4:10:8b:e0:6a:d4:9d:66:27:c7: 22:34:9b:a9:69:68:5a:54:2e:46:df:dd:0e:c3:98: 12:0a:30:b0:e2:0f:84:e7:68:70:5d:86:2d:1c:d5: 03:95:de:15:9a:05:ca:3d:90:e0:2a:a5:cc:43:bb: 18:e8:6e:de:56:46:a3:8b:93:c1:05:16:6b:86:62: e7:6b:8c:7a:e7:8f:9c:45:63:07:3e:bc:59:12:ce: c4:65:91:32:e5:fd:6b:7f:37:ad:60:f1:97:fd:b0: 78:72:b7:8f:a6:9b:55:34:ca:5d:81:94:41:3b:72: 2f:5f:5f:54:e2:44:fb:ba:12:b5:74:34:b5:10:7e: 97:5f:b6:63:b0:d9:d9:c3:a9:e1:7e:65:94:73:20: 53:9e:a2:1e:c0:2d:3f:f1:ac:d5:87:e5:47:b7:83: a9:a0:8f:3a:41:69:56:0b:3b:ef:b3:29:7a:87:bb: 37:88:22:47:ac:86:ea:2d:7c:56:78:94:11:c0:f4: c3:4f:70:53:ca:6d:a8:5c:56:a4:ea:2b:94:40:3d: 48:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:BA:23:36:4A:A8:D3:8E:60:B7:90:CE:46:99:73:42:9C:18:08:7A X509v3 Authority Key Identifier: keyid:03:91:D9:A7:0E:89:3E:75:1B:C6:12:89:C5:44:17:B8:7A:10:45:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A5HZpw6JPnUbxhKJxUQXuHoQRVk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:51:26:f5:24:dc:44:8d:3c:57:a1:a7:bd:80:a3:f0:52:f8: 1a:66:66:c8:ad:70:4f:53:e9:eb:59:87:cc:36:1e:d9:fc:b9: 48:4b:63:00:44:99:7c:e9:76:76:72:74:cb:04:47:84:6f:a0: 51:3a:e8:cc:b0:e2:af:6e:de:ce:d4:79:07:ac:ea:b0:81:df: 19:fb:f0:c6:d5:f8:cb:07:2d:ad:1e:d7:f5:d6:8f:f9:af:a6: ce:6a:a2:4e:03:56:48:39:f7:a1:f2:dc:bc:fb:7b:82:52:fc: 2b:ee:7f:61:cc:27:ca:14:88:ff:11:90:61:79:09:2d:55:ac: 03:2c:47:13:2b:12:ed:e1:ca:83:d4:6c:44:e9:40:a0:35:43: b6:83:7c:df:a3:9f:7f:0e:9b:32:82:d7:e7:ae:87:00:e5:e2: 98:eb:e0:31:30:d9:92:be:34:d4:2d:c7:a7:9f:a4:27:64:85: 62:f5:cf:37:d4:67:b9:50:18:02:17:85:f4:25:15:d3:12:1d: e3:ca:28:d8:7f:56:63:78:ce:c8:c4:48:7c:0a:dd:e6:c3:03: db:17:5c:74:d6:02:13:b6:44:1d:38:0d:45:f6:8d:5c:64:e0: c3:da:f8:2a:55:11:cd:d5:08:9b:ef:68:7e:16:ed:8f:e1:49: 20:22:25:1d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz ODBGNzExMC8GA1UEBRMoMDM5MUQ5QTcwRTg5M0U3NTFCQzYxMjg5QzU0NDE3Qjg3 QTEwNDU1OTAeFw0yNTA0MjcwNjA0MTBaFw0yNTA1MDQwNjA0MTBaMBgxFjAUBgNV BAMTDTY4MGRjOGRhLTk3YmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDqu90N5JTotR30y/zcr2P/ApwCHMTiDA9Qaq4Bo453C+HldByxTMS+Ft5z59n 57DFpBCL4GrUnWYnxyI0m6lpaFpULkbf3Q7DmBIKMLDiD4TnaHBdhi0c1QOV3hWa Bco9kOAqpcxDuxjobt5WRqOLk8EFFmuGYudrjHrnj5xFYwc+vFkSzsRlkTLl/Wt/ N61g8Zf9sHhyt4+mm1U0yl2BlEE7ci9fX1TiRPu6ErV0NLUQfpdftmOw2dnDqeF+ ZZRzIFOeoh7ALT/xrNWH5Ue3g6mgjzpBaVYLO++zKXqHuzeIIkeshuotfFZ4lBHA 9MNPcFPKbahcVqTqK5RAPUhTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWrojNkqo 045gt5DORplzQpwYCHowHwYDVR0jBBgwFoAUA5HZpw6JPnUbxhKJxUQXuHoQRVkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4MEY3L0E3RUJDMUQyQTdG ODExRUZCQjQ0RjM3MUM0RjlBRTAyL0E1SFpwdzZKUG5VYnhoS0p4VVFYdUhvUVJW ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQTVIWnB3NkpQblVieGhLSnhVUVh1SG9RUlZrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4 MEY3L0E3RUJDMUQyQTdGODExRUZCQjQ0RjM3MUM0RjlBRTAyL0E1SFpwdzZKUG5V YnhoS0p4VVFYdUhvUVJWay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGJRJvUk3ESNPFehp72Ao/BS+BpmZsitcE9T6etZh8w2Htn8uUhLYwBE mXzpdnZydMsER4RvoFE66Myw4q9u3s7UeQes6rCB3xn78MbV+MsHLa0e1/XWj/mv ps5qok4DVkg596Hy3Lz7e4JS/Cvuf2HMJ8oUiP8RkGF5CS1VrAMsRxMrEu3hyoPU bETpQKA1Q7aDfN+jn38OmzKC1+euhwDl4pjr4DEw2ZK+NNQtx6efpCdkhWL1zzfU Z7lQGAIXhfQlFdMSHePKKNh/VmN4zsjESHwK3ebDA9sXXHTWAhO2RB04DUX2jVxk 4MPa+CpVEc3VCJvvaH4W7Y/hSSAiJR0= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:42 2025 by rpki-client on console.sobornost.net