$ rpki-client -vvf rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft File: OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft (raw, json) Hash identifier: Y/FVGSqrqXVfmt3gzjSPA67lTEAZZf8Lua42quJoZgQ= Subject key identifier: 54:92:CC:99:37:3E:05:CC:B0:33:F0:42:1A:C4:5C:74:FB:D4:DB:5B Authority key identifier: 39:01:AF:4A:93:FE:FA:AE:B8:79:CC:9F:59:94:E4:E7:F0:1A:F8:38 Certificate issuer: /CN=A91613AB/serialNumber=3901AF4A93FEFAAEB879CC9F5994E4E7F01AF838 Certificate serial: 01DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft Manifest number: 01CF Signing time: Sun 27 Apr 2025 02:00:42 +0000 Manifest this update: Sun 27 Apr 2025 02:00:42 +0000 Manifest next update: Sun 04 May 2025 02:00:42 +0000 Files and hashes: 1: OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl (hash: DvAXGL5DV4DSx5Vv9XJ0f/Noh0qiKJlqB4PSWMoWMcE=) 2: 65AFE18C91DB11EFBC4C2A3EC4F9AE02.roa (hash: LqvEH1o9qv1Spv16C52zEqgMsWnx5LeCvM7wNncYwmQ=) 3: A50FD050DA7911EDB0D3866BC4F9AE02.roa (hash: sq3CtUxJWk/lwN1trxwIddBHXPOdGnUuNzRlPvsNflY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 475 (0x1db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91613AB, serialNumber=3901AF4A93FEFAAEB879CC9F5994E4E7F01AF838 Validity Not Before: Apr 27 02:00:42 2025 GMT Not After : May 4 02:00:42 2025 GMT Subject: CN=680d8fca-3168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:85:88:13:29:e2:ca:b6:b7:b6:89:ac:09:71: af:ae:e9:47:b3:3e:c9:07:48:44:52:5c:1a:db:0f: 76:11:ae:1b:49:59:31:bf:17:c8:ce:41:c6:c7:0c: c0:c1:44:a5:23:7d:56:fe:08:91:1b:c6:c2:a5:3d: 3e:cc:ce:18:74:cd:ab:42:53:37:30:86:77:78:9c: 6b:e6:f5:f2:a7:12:99:12:52:ac:0f:52:5f:5d:aa: c8:9f:15:db:c1:68:0f:8e:15:23:02:1f:a1:f0:48: 98:18:0c:57:48:32:37:88:22:47:ce:f3:36:b7:55: 7e:9b:fb:4c:ce:37:d5:06:fa:8a:a3:cf:69:2c:5d: 0b:9a:8e:b6:d6:38:4c:36:da:5e:0c:28:8a:f3:be: 19:3c:39:01:05:8a:57:19:2e:fe:56:df:cf:0b:97: af:f8:a9:7d:72:2a:bf:2c:a8:4f:7e:25:f7:09:36: f6:f8:cb:f3:0c:d6:ed:ef:71:13:4a:a6:2a:29:27: 32:39:4d:d4:23:04:66:af:d1:a4:92:b6:b5:96:ee: a9:2c:fd:71:d4:e1:ca:19:1e:84:d8:d6:65:bc:8e: b5:d3:74:f0:77:92:d5:2e:ce:df:28:a4:8e:98:0b: 94:81:72:c7:04:64:b1:ad:86:a6:a0:6f:06:a1:39: 8f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:92:CC:99:37:3E:05:CC:B0:33:F0:42:1A:C4:5C:74:FB:D4:DB:5B X509v3 Authority Key Identifier: keyid:39:01:AF:4A:93:FE:FA:AE:B8:79:CC:9F:59:94:E4:E7:F0:1A:F8:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:26:3d:1e:80:47:d3:f8:a1:8b:59:86:7f:1e:d8:49:0f:d6: d9:67:3a:c8:47:a4:8d:6b:8b:5d:21:9b:35:85:84:f0:3a:61: 1d:26:fb:1c:eb:f0:e2:72:bb:5c:4a:1e:1e:98:6f:3b:d1:81: 4b:2f:a6:23:ed:bc:da:69:07:e3:da:75:1a:c3:9a:ce:d3:dd: 4c:73:3a:67:7b:bc:2d:96:1f:9a:bb:ec:2b:ab:31:e6:c9:33: 66:f7:06:e2:99:67:6d:55:ce:71:dd:eb:16:df:42:1d:30:6e: 46:33:f5:15:f5:6f:36:31:44:6b:93:2d:d8:ec:26:fa:6e:ba: 03:c4:f1:fe:bb:4f:a7:5a:9b:c6:ed:c5:e1:6d:86:94:3d:ae: ae:93:bd:ac:82:05:07:78:3a:1f:49:0d:ae:b3:5a:00:d6:bb: 97:21:7e:dd:fd:b4:ff:62:75:fd:fc:ab:1e:d4:5a:29:97:e0: 7a:d1:d4:42:62:04:a1:c5:05:03:f0:1c:07:93:48:47:d8:49: 67:f4:1d:98:b7:82:07:06:7a:67:fd:89:7a:c0:d1:ba:43:1b: a4:4f:39:76:8b:c1:fc:03:3e:53:3b:0e:fe:63:a0:17:d4:c1: 80:89:6a:c0:bd:28:1e:d5:cf:79:fc:9a:90:f6:0e:54:d2:9c: d1:f0:36:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjEzQUIxMTAvBgNVBAUTKDM5MDFBRjRBOTNGRUZBQUVCODc5Q0M5RjU5OTRFNEU3 RjAxQUY4MzgwHhcNMjUwNDI3MDIwMDQyWhcNMjUwNTA0MDIwMDQyWjAYMRYwFAYD VQQDEw02ODBkOGZjYS0zMTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2IWIEyniyra3tomsCXGvrulHsz7JB0hEUlwa2w92Ea4bSVkxvxfIzkHGxwzA wUSlI31W/giRG8bCpT0+zM4YdM2rQlM3MIZ3eJxr5vXypxKZElKsD1JfXarInxXb wWgPjhUjAh+h8EiYGAxXSDI3iCJHzvM2t1V+m/tMzjfVBvqKo89pLF0Lmo621jhM NtpeDCiK874ZPDkBBYpXGS7+Vt/PC5ev+Kl9ciq/LKhPfiX3CTb2+MvzDNbt73ET SqYqKScyOU3UIwRmr9Gkkra1lu6pLP1x1OHKGR6E2NZlvI6103Twd5LVLs7fKKSO mAuUgXLHBGSxrYamoG8GoTmPcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFSSzJk3 PgXMsDPwQhrEXHT71NtbMB8GA1UdIwQYMBaAFDkBr0qT/vquuHnMn1mU5OfwGvg4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTNBQi85Q0Y3RUNEQTZG OEIxMUVEOEZBRTNDMTFDNEY5QUUwMi9PUUd2U3BQLS1xNjRlY3lmV1pUazVfQWEt RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09RR3ZTcFAtLXE2NGVjeWZXWlRrNV9BYS1EZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTNBQi85Q0Y3RUNEQTZGOEIxMUVEOEZBRTNDMTFDNEY5QUUwMi9PUUd2U3BQLS1x NjRlY3lmV1pUazVfQWEtRGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhJj0egEfT+KGLWYZ/HthJD9bZZzrIR6SNa4tdIZs1hYTwOmEdJvsc 6/DicrtcSh4emG870YFLL6Yj7bzaaQfj2nUaw5rO091Mczpne7wtlh+au+wrqzHm yTNm9wbimWdtVc5x3esW30IdMG5GM/UV9W82MURrky3Y7Cb6broDxPH+u0+nWpvG 7cXhbYaUPa6uk72sggUHeDofSQ2us1oA1ruXIX7d/bT/YnX9/Kse1Fopl+B60dRC YgShxQUD8BwHk0hH2Eln9B2Yt4IHBnpn/Yl6wNG6QxukTzl2i8H8Az5TOw7+Y6AX 1MGAiWrAvSge1c95/JqQ9g5U0pzR8DZS -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:53 2025 by rpki-client on console.sobornost.net