$ rpki-client -vvf rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft File: EkcIHpupfBPH3T1o5EPR9UebKv8.mft (raw, json) Hash identifier: Cp5Bz4HUKZgTfARFqtwQyBIqVtW85MDrYvRbtmOVKGA= Subject key identifier: 20:0B:DA:70:2C:78:B4:98:0E:3B:93:D8:A7:0A:66:17:3B:D3:57:04 Authority key identifier: 12:47:08:1E:9B:A9:7C:13:C7:DD:3D:68:E4:43:D1:F5:47:9B:2A:FF Certificate issuer: /CN=A91396E7/serialNumber=1247081E9BA97C13C7DD3D68E443D1F5479B2AFF Certificate serial: 65 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EkcIHpupfBPH3T1o5EPR9UebKv8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft Manifest number: 62 Signing time: Wed 23 Apr 2025 06:10:20 +0000 Manifest this update: Wed 23 Apr 2025 06:10:20 +0000 Manifest next update: Wed 30 Apr 2025 06:10:20 +0000 Files and hashes: 1: EkcIHpupfBPH3T1o5EPR9UebKv8.crl (hash: nTl059aig7bNl5dfNfLOevdVnlbAQTiw5bxmizNsW8Y=) 2: A1CF550A912511EF8FF0813AC4F9AE02.roa (hash: 5nFCTmC5xU4JIe+ocqPzYmN20Z681T2Mb6LU4xxafNQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.crl rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EkcIHpupfBPH3T1o5EPR9UebKv8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 101 (0x65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91396E7, serialNumber=1247081E9BA97C13C7DD3D68E443D1F5479B2AFF Validity Not Before: Apr 23 06:10:20 2025 GMT Not After : Apr 30 06:10:20 2025 GMT Subject: CN=6808844c-c46f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:89:b8:88:33:16:e6:14:13:02:e7:16:b9:cd: 62:44:36:8a:6f:82:e2:92:5b:eb:a9:c3:6b:b9:cf: f8:fb:34:f0:e1:36:5c:91:9f:12:60:fd:17:5b:c4: 21:4d:c4:2d:82:74:ee:ee:a6:3c:f9:75:14:92:33: 89:51:98:4e:7c:d0:4a:39:0c:05:da:4f:99:8e:6b: 94:62:58:e9:2b:87:35:23:0f:ff:e1:ab:d9:8c:63: 60:ae:b7:47:e1:a4:9a:ae:03:3d:f3:97:56:ff:bf: e2:57:cf:8b:90:77:a5:6b:cf:04:c1:7b:c1:d8:9e: 08:66:2a:e9:ee:93:dc:1c:35:ca:23:52:5d:27:5a: c5:d3:4e:7e:5f:a8:b1:dd:bc:b4:d2:c7:03:60:e1: d0:43:44:08:9c:4d:a3:e4:72:69:f6:70:42:92:21: e7:82:46:13:08:7d:2f:72:ce:9d:b4:3f:97:91:35: 09:c3:cc:5e:8e:fb:b3:bf:ae:22:46:37:d1:aa:c7: 3a:d6:99:8d:ee:42:95:64:ea:b9:ea:07:79:9a:e2: 7b:bb:9b:22:a4:33:82:04:21:85:9c:93:92:b2:8f: c1:7c:5a:1d:f2:f1:cd:63:b9:13:d7:c1:87:a3:ec: 87:ee:7b:5d:c3:92:66:6b:a3:18:15:73:59:0e:f1: 6b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:0B:DA:70:2C:78:B4:98:0E:3B:93:D8:A7:0A:66:17:3B:D3:57:04 X509v3 Authority Key Identifier: keyid:12:47:08:1E:9B:A9:7C:13:C7:DD:3D:68:E4:43:D1:F5:47:9B:2A:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EkcIHpupfBPH3T1o5EPR9UebKv8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:d1:3f:9f:02:ad:3b:4c:f5:08:0a:20:be:62:a3:5e:cc:83: cd:02:b5:fd:eb:50:f1:29:80:d3:aa:ad:75:63:30:b4:ce:be: f4:01:d0:5b:66:63:03:1c:7c:7c:25:09:32:8a:c2:7e:32:b7: d7:de:e9:be:9c:0e:e9:b3:26:b6:4e:d6:97:88:4d:57:bf:3d: 0d:c8:70:b3:ea:c0:c5:e1:73:92:22:53:df:fa:2e:f8:30:ea: 20:a0:58:19:30:69:61:a1:75:b5:68:e4:a1:d4:ee:1d:04:2f: a9:d0:18:ee:4a:ba:b0:5d:59:b9:f7:c7:c4:7e:1b:82:5f:2f: 13:48:0a:84:83:16:b9:c5:ac:fd:86:92:c2:94:b9:fb:e5:7f: 0d:2c:58:23:3f:13:c2:1b:35:32:32:5f:b2:a7:75:96:dc:5e: e4:f2:f2:7d:2a:4e:9b:64:bf:cf:bc:94:15:c0:8a:77:0e:82: 04:41:61:af:a8:f6:a5:67:79:d6:22:48:b9:07:af:b5:f9:cd: 2e:39:1f:c6:b0:eb:08:8f:15:8a:66:cc:75:0a:d9:1c:3b:b2: 35:88:a5:bf:05:b6:77:89:36:53:bb:a3:f7:93:80:9b:45:cc: d5:3e:86:fb:16:f6:ca:bb:79:78:4f:8e:9e:c8:36:c3:c1:1d: 13:db:87:26 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz OTZFNzExMC8GA1UEBRMoMTI0NzA4MUU5QkE5N0MxM0M3REQzRDY4RTQ0M0QxRjU0 NzlCMkFGRjAeFw0yNTA0MjMwNjEwMjBaFw0yNTA0MzAwNjEwMjBaMBgxFjAUBgNV BAMTDTY4MDg4NDRjLWM0NmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+ibiIMxbmFBMC5xa5zWJENopvguKSW+upw2u5z/j7NPDhNlyRnxJg/RdbxCFN xC2CdO7upjz5dRSSM4lRmE580Eo5DAXaT5mOa5RiWOkrhzUjD//hq9mMY2Cut0fh pJquAz3zl1b/v+JXz4uQd6VrzwTBe8HYnghmKunuk9wcNcojUl0nWsXTTn5fqLHd vLTSxwNg4dBDRAicTaPkcmn2cEKSIeeCRhMIfS9yzp20P5eRNQnDzF6O+7O/riJG N9GqxzrWmY3uQpVk6rnqB3ma4nu7myKkM4IEIYWck5Kyj8F8Wh3y8c1juRPXwYej 7Ifue13DkmZroxgVc1kO8WslAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIAvacCx4 tJgOO5PYpwpmFzvTVwQwHwYDVR0jBBgwFoAUEkcIHpupfBPH3T1o5EPR9UebKv8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5NkU3LzA2NzlBQ0Y0OTEy NTExRUY5NDJBMkIyOEM0RjlBRTAyL0VrY0lIcHVwZkJQSDNUMW81RVBSOVVlYkt2 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRWtjSUhwdXBmQlBIM1QxbzVFUFI5VWViS3Y4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5 NkU3LzA2NzlBQ0Y0OTEyNTExRUY5NDJBMkIyOEM0RjlBRTAyL0VrY0lIcHVwZkJQ SDNUMW81RVBSOVVlYkt2OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALnRP58CrTtM9QgKIL5io17Mg80Ctf3rUPEpgNOqrXVjMLTOvvQB0Ftm YwMcfHwlCTKKwn4yt9fe6b6cDumzJrZO1peITVe/PQ3IcLPqwMXhc5IiU9/6Lvgw 6iCgWBkwaWGhdbVo5KHU7h0EL6nQGO5KurBdWbn3x8R+G4JfLxNICoSDFrnFrP2G ksKUufvlfw0sWCM/E8IbNTIyX7KndZbcXuTy8n0qTptkv8+8lBXAincOggRBYa+o 9qVnedYiSLkHr7X5zS45H8aw6wiPFYpmzHUK2Rw7sjWIpb8FtneJNlO7o/eTgJtF zNU+hvsW9sq7eXhPjp7INsPBHRPbhyY= -----END CERTIFICATE-----Generated at Wed Apr 23 09:02:23 2025 by rpki-client on console.sobornost.net