$ rpki-client -vvf rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft File: 5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft (raw, json) Hash identifier: xdh0Q9R8hRDV0CJHINRycIpQjoQsYhpkBTpyW/zfk9M= Subject key identifier: DF:34:19:CD:0F:D3:E0:EE:45:BE:7E:5E:E0:85:89:6B:27:41:45:78 Authority key identifier: E5:8F:0F:52:A4:D2:D1:DE:44:67:5A:CA:17:55:7B:F9:82:EC:7D:79 Certificate issuer: /CN=A91698EC/serialNumber=E58F0F52A4D2D1DE44675ACA17557BF982EC7D79 Certificate serial: B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft Manifest number: B1 Signing time: Sun 27 Apr 2025 04:56:43 +0000 Manifest this update: Sun 27 Apr 2025 04:56:43 +0000 Manifest next update: Sun 04 May 2025 04:56:43 +0000 Files and hashes: 1: 5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl (hash: u8rtF9S6Zup6iJZG6ohQgcAZD5Sej/q2buM1ix27Ino=) 2: 1FCE5CE0214F11EFAB245D49C4F9AE02.roa (hash: MjGt04itAcx8gNx2WflFnwPVZOKhZPX7R3K5xPavI28=) 3: 02BCE50286AF11EF9EFFD52FC4F9AE02.roa (hash: erN7f1B2CkGS1+dEWje+lQKXL/zVRbw1MSrnrEP1M7Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 180 (0xb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91698EC, serialNumber=E58F0F52A4D2D1DE44675ACA17557BF982EC7D79 Validity Not Before: Apr 27 04:56:43 2025 GMT Not After : May 4 04:56:43 2025 GMT Subject: CN=680db90b-368d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:89:eb:3b:a7:32:bc:f6:cc:b4:92:4a:e5:f8: 2b:34:5b:ef:6e:9e:9d:f7:a6:9d:cd:1d:3f:3a:b2: 90:9d:b2:bf:a2:9f:8f:f4:97:9b:a5:4f:df:1e:5f: 6a:6f:e7:71:46:97:3c:c6:07:47:8e:29:8d:fb:b6: c9:51:99:93:84:36:ca:51:5b:9a:ae:31:df:d2:22: 2a:bb:ae:2a:a6:23:12:f3:f2:71:3a:7b:07:2f:23: 20:a4:e9:e2:1f:14:fc:78:55:74:5e:c7:0a:ac:af: df:c3:6e:36:6d:b1:55:ef:ed:d7:8d:5b:88:df:65: 79:e0:47:33:7e:5e:f0:66:9a:9a:7e:98:71:24:36: b1:97:b1:7b:d3:82:e0:aa:37:95:20:66:61:81:2a: 52:f5:85:c5:ef:f1:96:21:02:5c:e0:b1:1a:95:5f: 7b:f2:54:3c:5f:59:eb:08:d2:4b:71:04:8a:ed:0e: db:e6:91:32:00:86:6d:eb:ae:c2:36:ad:0a:7c:ba: 60:e9:cd:db:af:9f:65:59:61:ce:11:f2:c4:4d:0a: d2:02:77:ed:e5:66:5c:f4:f3:05:cd:8a:6f:4a:d4: 8c:3f:91:43:d1:54:b9:2f:cc:da:60:52:5d:39:e3: 1c:bb:b7:cc:59:e8:2d:d0:73:87:b7:8c:71:f2:ca: 3d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:34:19:CD:0F:D3:E0:EE:45:BE:7E:5E:E0:85:89:6B:27:41:45:78 X509v3 Authority Key Identifier: keyid:E5:8F:0F:52:A4:D2:D1:DE:44:67:5A:CA:17:55:7B:F9:82:EC:7D:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:25:6e:f9:8e:de:32:f1:54:0d:2f:c4:50:64:6c:a0:35:25: 13:f5:87:a6:76:4a:63:91:39:95:c1:9c:bb:0a:06:c6:f9:90: 6a:79:f4:95:74:5a:61:3d:2a:e4:b8:ba:5f:db:ff:0c:d9:e1: 88:06:92:c9:2f:4c:fd:22:6e:f1:f2:6b:bc:92:9d:27:26:7c: 71:c6:aa:76:b3:ea:36:87:71:51:54:57:48:b8:f2:dd:63:97: a1:c1:48:53:0c:12:6b:e0:33:df:bb:09:61:cb:e1:47:e6:68: 08:7e:50:ef:f6:b5:11:e8:d9:a1:a3:c1:5f:37:17:b4:ce:25: b8:40:e0:6c:87:7f:e1:86:8e:66:02:1f:48:e0:95:c3:e5:d3: 8c:33:91:43:7a:39:ba:6d:21:79:dd:b8:fa:ff:bd:6b:99:7b: c3:1a:0e:4b:54:1d:ae:dd:92:6e:4e:92:d0:22:c5:c4:bc:9b: 21:87:16:9c:b1:9b:22:9d:1d:6e:74:b8:d4:5e:01:94:6f:12: fe:7c:bd:ea:8f:8d:fe:28:42:6d:55:f8:3f:b5:c2:58:48:31: d4:f9:01:3a:4d:e2:e4:ae:8c:b8:65:0b:b4:63:c9:cd:ef:11: 66:69:8b:17:6a:b4:1c:94:d5:3d:f9:e0:76:47:c8:d0:34:56: 83:cc:2f:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk4RUMxMTAvBgNVBAUTKEU1OEYwRjUyQTREMkQxREU0NDY3NUFDQTE3NTU3QkY5 ODJFQzdENzkwHhcNMjUwNDI3MDQ1NjQzWhcNMjUwNTA0MDQ1NjQzWjAYMRYwFAYD VQQDEw02ODBkYjkwYi0zNjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApInrO6cyvPbMtJJK5fgrNFvvbp6d96adzR0/OrKQnbK/op+P9JebpU/fHl9q b+dxRpc8xgdHjimN+7bJUZmThDbKUVuarjHf0iIqu64qpiMS8/JxOnsHLyMgpOni HxT8eFV0XscKrK/fw242bbFV7+3XjVuI32V54Eczfl7wZpqafphxJDaxl7F704Lg qjeVIGZhgSpS9YXF7/GWIQJc4LEalV978lQ8X1nrCNJLcQSK7Q7b5pEyAIZt667C Nq0KfLpg6c3br59lWWHOEfLETQrSAnft5WZc9PMFzYpvStSMP5FD0VS5L8zaYFJd OeMcu7fMWegt0HOHt4xx8so9MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN80Gc0P 0+DuRb5+XuCFiWsnQUV4MB8GA1UdIwQYMBaAFOWPD1Kk0tHeRGdayhdVe/mC7H15 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OThFQy8yMUU1QTMwQTFF RTExMUVGOTNGOTg1M0RDNEY5QUUwMi81WThQVXFUUzBkNUVaMXJLRjFWNy1ZTHNm WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVZOFBVcVRTMGQ1RVoxcktGMVY3LVlMc2ZYay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OThFQy8yMUU1QTMwQTFFRTExMUVGOTNGOTg1M0RDNEY5QUUwMi81WThQVXFUUzBk NUVaMXJLRjFWNy1ZTHNmWGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8JW75jt4y8VQNL8RQZGygNSUT9YemdkpjkTmVwZy7CgbG+ZBqefSV dFphPSrkuLpf2/8M2eGIBpLJL0z9Im7x8mu8kp0nJnxxxqp2s+o2h3FRVFdIuPLd Y5ehwUhTDBJr4DPfuwlhy+FH5mgIflDv9rUR6Nmho8FfNxe0ziW4QOBsh3/hho5m Ah9I4JXD5dOMM5FDejm6bSF53bj6/71rmXvDGg5LVB2u3ZJuTpLQIsXEvJshhxac sZsinR1udLjUXgGUbxL+fL3qj43+KEJtVfg/tcJYSDHU+QE6TeLkroy4ZQu0Y8nN 7xFmaYsXarQclNU9+eB2R8jQNFaDzC8S -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:48 2025 by rpki-client on console.sobornost.net