$ rpki-client -vvf rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.mft File: 5HE8G511dZKVr2TN-6YrcNuaBTc.mft (raw, json) Hash identifier: Qz5IUYbUOjbr2nMC0ZmMCF6Z+FuFoNE4hHLVpOKj20w= Subject key identifier: 40:97:EA:BA:3D:82:B7:C4:B4:84:31:E7:37:F9:AB:C8:C5:91:57:AF Authority key identifier: E4:71:3C:1B:9D:75:75:92:95:AF:64:CD:FB:A6:2B:70:DB:9A:05:37 Certificate issuer: /CN=A91561B7/serialNumber=E4713C1B9D75759295AF64CDFBA62B70DB9A0537 Certificate serial: 1D9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HE8G511dZKVr2TN-6YrcNuaBTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.mft Manifest number: 1D88 Signing time: Mon 28 Apr 2025 16:13:52 +0000 Manifest this update: Mon 28 Apr 2025 16:13:52 +0000 Manifest next update: Mon 05 May 2025 16:13:52 +0000 Files and hashes: 1: 5HE8G511dZKVr2TN-6YrcNuaBTc.crl (hash: 84ZszWd2zg1nFf8EzawNF8tB01krJEcNzkPai5vf6gY=) 2: 4865DD00A13B11E687921078C4F9AE02.roa (hash: MaFWYkY2HcnSI16cq7zrf3Xg1TMrKe+K2OOU5n2vPcU=) 3: 1D57FF40A01311E684546521C4F9AE02.roa (hash: 8kLRR6g7/NXM5uPCUqU+X4Qb9woBVi0kDN/Wkxs+ARo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.crl rsync://rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HE8G511dZKVr2TN-6YrcNuaBTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 16:13:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7581 (0x1d9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91561B7, serialNumber=E4713C1B9D75759295AF64CDFBA62B70DB9A0537 Validity Not Before: Apr 28 16:13:52 2025 GMT Not After : May 5 16:13:52 2025 GMT Subject: CN=680fa940-293a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:bd:65:55:fc:ae:e4:e6:eb:01:a7:4b:a9:f9: 2d:8e:6d:99:11:2b:2d:ad:91:9d:1d:85:70:1d:7f: c7:09:f4:d7:48:da:71:ec:0d:4c:ed:80:08:60:3a: 06:4a:67:46:78:8c:4e:9b:93:ad:73:bb:9c:bb:20: 57:a5:6e:68:fa:54:b6:23:26:b0:d4:b2:0f:b3:4e: f1:1c:10:27:06:6b:5a:36:80:e3:e8:57:f8:c3:6a: c4:a5:11:6b:6f:95:90:44:a7:68:e1:e7:36:81:76: 28:81:ab:96:79:44:e7:fe:bb:06:c8:77:f2:cd:ee: 6b:75:ac:52:3e:65:e5:05:a2:f2:1a:e8:14:7f:c2: 31:f8:34:9e:ef:8b:5b:75:71:74:34:77:fb:d6:73: 9d:bb:92:7a:08:0d:8d:90:b0:27:c0:f1:b8:a6:2c: d9:49:c8:c2:40:c2:09:8c:55:f8:ab:87:d5:78:bf: 12:a8:5d:68:b5:f9:6f:53:b0:18:b9:fe:67:97:7b: 2a:98:d8:7e:28:79:a4:ad:56:3d:e5:54:cf:d4:4f: dc:d6:40:f4:ed:5f:8f:e3:f6:b4:fe:d4:a7:69:a4: bd:ca:21:69:88:05:87:71:90:98:e6:cc:b5:70:76: 78:02:73:2d:40:f7:d7:72:47:90:e5:3a:9e:83:55: 9b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:97:EA:BA:3D:82:B7:C4:B4:84:31:E7:37:F9:AB:C8:C5:91:57:AF X509v3 Authority Key Identifier: keyid:E4:71:3C:1B:9D:75:75:92:95:AF:64:CD:FB:A6:2B:70:DB:9A:05:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HE8G511dZKVr2TN-6YrcNuaBTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:5f:6d:9e:6a:f1:8d:5b:3e:c9:1f:15:c5:79:f7:da:9b:16: 87:76:a1:1d:9d:ed:7e:81:ca:c0:1b:59:24:0b:e9:0b:31:ee: 7b:99:c4:94:9d:89:03:f2:35:21:e4:fd:11:19:99:42:6c:18: 87:94:07:97:0c:d8:1f:25:ae:7f:ba:3b:29:86:a5:a1:13:d9: 7d:70:cf:d3:79:94:67:07:75:65:db:ca:22:6d:65:a9:1d:41: 09:f0:cc:dd:f3:30:43:52:57:38:08:d7:f2:36:fd:ec:f3:df: 01:25:48:c6:f7:47:69:2f:38:30:7a:06:b8:71:28:cb:53:14: 79:6f:9a:03:48:7a:46:f2:50:3d:ff:99:c7:ad:99:c1:cf:f9: b0:31:3e:c2:96:50:9b:12:79:40:c8:84:9c:28:3c:29:2c:42: 0a:f3:73:fa:fe:ed:ae:13:90:be:a5:ab:9d:aa:45:00:99:0a: 83:49:e2:b8:14:ba:93:3b:5a:de:86:5c:7a:ee:aa:ee:4c:bb: 99:ed:c8:24:e0:35:5b:ff:17:8a:f3:49:ca:2d:0f:84:eb:a9: 08:4a:c4:25:47:1e:65:67:26:47:9f:b8:e5:41:ac:de:fb:47: e6:e0:c2:5b:e3:a3:12:a6:e7:af:66:74:0a:9c:43:06:4e:64: 81:c6:ea:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYxQjcxMTAvBgNVBAUTKEU0NzEzQzFCOUQ3NTc1OTI5NUFGNjRDREZCQTYyQjcw REI5QTA1MzcwHhcNMjUwNDI4MTYxMzUyWhcNMjUwNTA1MTYxMzUyWjAYMRYwFAYD VQQDEw02ODBmYTk0MC0yOTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAub1lVfyu5ObrAadLqfktjm2ZESstrZGdHYVwHX/HCfTXSNpx7A1M7YAIYDoG SmdGeIxOm5Otc7ucuyBXpW5o+lS2Iyaw1LIPs07xHBAnBmtaNoDj6Ff4w2rEpRFr b5WQRKdo4ec2gXYogauWeUTn/rsGyHfyze5rdaxSPmXlBaLyGugUf8Ix+DSe74tb dXF0NHf71nOdu5J6CA2NkLAnwPG4pizZScjCQMIJjFX4q4fVeL8SqF1otflvU7AY uf5nl3sqmNh+KHmkrVY95VTP1E/c1kD07V+P4/a0/tSnaaS9yiFpiAWHcZCY5sy1 cHZ4AnMtQPfXckeQ5Tqeg1WbDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFECX6ro9 grfEtIQx5zf5q8jFkVevMB8GA1UdIwQYMBaAFORxPBuddXWSla9kzfumK3DbmgU3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjFCNy81RkExRUQzMDlF RjAxMUU2ODExMDI3MzNDNEY5QUUwMi81SEU4RzUxMWRaS1ZyMlROLTZZcmNOdWFC VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVIRThHNTExZFpLVnIyVE4tNllyY051YUJUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjFCNy81RkExRUQzMDlFRjAxMUU2ODExMDI3MzNDNEY5QUUwMi81SEU4RzUxMWRa S1ZyMlROLTZZcmNOdWFCVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsX22eavGNWz7JHxXFeffamxaHdqEdne1+gcrAG1kkC+kLMe57mcSU nYkD8jUh5P0RGZlCbBiHlAeXDNgfJa5/ujsphqWhE9l9cM/TeZRnB3Vl28oibWWp HUEJ8Mzd8zBDUlc4CNfyNv3s898BJUjG90dpLzgwega4cSjLUxR5b5oDSHpG8lA9 /5nHrZnBz/mwMT7CllCbEnlAyIScKDwpLEIK83P6/u2uE5C+paudqkUAmQqDSeK4 FLqTO1rehlx67qruTLuZ7cgk4DVb/xeK80nKLQ+E66kISsQlRx5lZyZHn7jlQaze +0fm4MJb46MSpuevZnQKnEMGTmSBxuoE -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:35 2025 by rpki-client on console.sobornost.net