$ rpki-client -vvf rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft File: rCjcKlVLTjOaOZyWQrTOAmio37A.mft (raw, json) Hash identifier: dltRos3g5pnL6B54f+7ypje3QPtsKUDTokUsCtrCqYM= Subject key identifier: F7:CD:11:6A:A2:78:F3:B7:4B:CB:7A:0B:F7:1E:1B:31:4E:3B:58:9B Authority key identifier: AC:28:DC:2A:55:4B:4E:33:9A:39:9C:96:42:B4:CE:02:68:A8:DF:B0 Certificate issuer: /CN=A915EA46/serialNumber=AC28DC2A554B4E339A399C9642B4CE0268A8DFB0 Certificate serial: 5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCjcKlVLTjOaOZyWQrTOAmio37A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft Manifest number: 5A Signing time: Sun 27 Apr 2025 05:57:30 +0000 Manifest this update: Sun 27 Apr 2025 05:57:30 +0000 Manifest next update: Sun 04 May 2025 05:57:30 +0000 Files and hashes: 1: rCjcKlVLTjOaOZyWQrTOAmio37A.crl (hash: 4DXp9G7y3qMFKOLjGX4zTMIslytluoEUz25fETg2ULE=) 2: A1E99A4E9C1211EFB233147EC4F9AE02.roa (hash: 3ye2avJW3DGdXLpGllemApGuBs5Hg/Dy3+TFvLk8rE8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.crl rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCjcKlVLTjOaOZyWQrTOAmio37A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EA46, serialNumber=AC28DC2A554B4E339A399C9642B4CE0268A8DFB0 Validity Not Before: Apr 27 05:57:30 2025 GMT Not After : May 4 05:57:30 2025 GMT Subject: CN=680dc74a-dc86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:dc:be:f7:06:61:9f:48:be:88:07:79:25:35: 1f:61:c4:08:69:60:af:0e:15:d8:bf:69:db:63:a3: 6d:7c:a4:e3:8c:dc:d3:d9:82:9b:ac:89:70:fa:31: ac:63:cf:49:40:97:a0:c7:c6:a0:b1:23:64:3e:35: 1c:1d:5a:d7:cd:88:9e:d9:ab:e7:5a:37:24:ef:56: 6f:77:25:5b:46:1a:24:ae:80:24:af:da:37:7a:17: da:e7:b1:58:52:84:ea:8e:de:d2:c9:6b:4f:5d:12: f2:c8:1f:61:05:34:21:35:89:dc:fd:65:f8:3e:2c: 51:9b:aa:13:60:f5:0f:3e:d0:70:3f:c4:a1:a4:dd: 5e:ea:cb:37:3b:ad:54:7b:de:11:4c:e4:b0:77:17: 88:e8:4b:ba:0d:ba:7a:fd:05:e9:fc:ef:d0:9f:ab: 3a:a5:a8:78:be:17:9f:3a:bc:b0:05:69:0c:6d:cf: 88:86:78:f3:da:c6:ea:46:a6:20:67:eb:06:26:66: ef:39:4b:2f:26:08:99:3d:1b:b6:a1:95:ce:65:3e: 03:8c:82:da:c0:04:66:b3:54:61:0d:90:bf:4c:f2: 9d:52:ca:04:28:6c:d3:8f:81:bc:8e:9f:9d:42:18: 79:bc:e9:2c:ff:82:a2:8d:17:18:be:be:7f:07:1b: 9f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:CD:11:6A:A2:78:F3:B7:4B:CB:7A:0B:F7:1E:1B:31:4E:3B:58:9B X509v3 Authority Key Identifier: keyid:AC:28:DC:2A:55:4B:4E:33:9A:39:9C:96:42:B4:CE:02:68:A8:DF:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCjcKlVLTjOaOZyWQrTOAmio37A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:5f:77:d9:ea:12:a8:f5:84:90:06:da:03:f8:2d:a1:33:6b: 65:66:66:14:ae:2d:5c:d1:b4:4e:0d:4c:b9:d7:68:1e:d5:b5: 58:53:e3:04:09:a3:07:97:6b:b9:c8:57:b6:a1:81:11:32:22: 51:47:9e:f1:88:ba:b6:40:4f:a6:24:fb:35:99:0a:30:b7:34: f3:ac:8b:34:9c:7f:76:e3:55:ad:e4:2f:2c:a1:28:9d:76:3c: e9:a7:ed:08:a2:3c:49:c2:46:e1:1b:a8:4b:57:1c:45:96:a9: 36:73:a6:2f:4d:64:bc:b3:18:98:7e:49:5b:46:68:99:40:c0: 3e:6c:55:2a:89:d5:43:a2:4a:bf:5c:82:2d:c1:85:2f:1e:4f: 44:f4:ca:48:75:d0:2d:49:46:18:2a:cf:c7:52:36:24:f9:9f: 04:78:c8:e4:7e:45:6c:43:e2:f8:ff:d6:74:2d:e2:6e:f7:dd: 07:3e:41:1c:9a:bf:be:62:fe:b3:f0:54:f8:ba:14:ab:c5:6b: 98:7f:37:e1:f3:f5:67:ac:84:bd:f3:42:53:de:d1:bf:3f:ec: 49:72:c1:67:f3:20:75:8a:1d:62:0b:b0:56:6c:a9:fc:15:82: 4e:08:35:79:09:57:27:6c:ea:2f:13:d3:65:9a:63:45:fd:d0: 2c:2a:26:51 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RUE0NjExMC8GA1UEBRMoQUMyOERDMkE1NTRCNEUzMzlBMzk5Qzk2NDJCNENFMDI2 OEE4REZCMDAeFw0yNTA0MjcwNTU3MzBaFw0yNTA1MDQwNTU3MzBaMBgxFjAUBgNV BAMTDTY4MGRjNzRhLWRjODYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCe3L73BmGfSL6IB3klNR9hxAhpYK8OFdi/adtjo218pOOM3NPZgpusiXD6Maxj z0lAl6DHxqCxI2Q+NRwdWtfNiJ7Zq+daNyTvVm93JVtGGiSugCSv2jd6F9rnsVhS hOqO3tLJa09dEvLIH2EFNCE1idz9Zfg+LFGbqhNg9Q8+0HA/xKGk3V7qyzc7rVR7 3hFM5LB3F4joS7oNunr9Ben879CfqzqlqHi+F586vLAFaQxtz4iGePPaxupGpiBn 6wYmZu85Sy8mCJk9G7ahlc5lPgOMgtrABGazVGENkL9M8p1SygQobNOPgbyOn51C GHm86Sz/gqKNFxi+vn8HG59pAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU980RaqJ4 87dLy3oL9x4bMU47WJswHwYDVR0jBBgwFoAUrCjcKlVLTjOaOZyWQrTOAmio37Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVFQTQ2L0RCREEyQ0M0OUMx MTExRUY5MkZCQTk3Q0M0RjlBRTAyL3JDamNLbFZMVGpPYU9aeVdRclRPQW1pbzM3 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvckNqY0tsVkxUak9hT1p5V1FyVE9BbWlvMzdBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVF QTQ2L0RCREEyQ0M0OUMxMTExRUY5MkZCQTk3Q0M0RjlBRTAyL3JDamNLbFZMVGpP YU9aeVdRclRPQW1pbzM3QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJBfd9nqEqj1hJAG2gP4LaEza2VmZhSuLVzRtE4NTLnXaB7VtVhT4wQJ oweXa7nIV7ahgREyIlFHnvGIurZAT6Yk+zWZCjC3NPOsizScf3bjVa3kLyyhKJ12 POmn7QiiPEnCRuEbqEtXHEWWqTZzpi9NZLyzGJh+SVtGaJlAwD5sVSqJ1UOiSr9c gi3BhS8eT0T0ykh10C1JRhgqz8dSNiT5nwR4yOR+RWxD4vj/1nQt4m733Qc+QRya v75i/rPwVPi6FKvFa5h/N+Hz9WeshL3zQlPe0b8/7ElywWfzIHWKHWILsFZsqfwV gk4INXkJVyds6i8T02WaY0X90CwqJlE= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:47 2025 by rpki-client on console.sobornost.net