$ rpki-client -vvf rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.mft File: eekj1QaVf9MN0m1ieTubQPj-iVY.mft (raw, json) Hash identifier: D/cg2F8qnEHlFWseB7Eqbo69qtBbWA5gSc1q37NtEKA= Subject key identifier: 5C:F8:88:7F:E6:13:51:D5:71:8E:A5:E0:E9:41:F1:AC:67:89:31:7A Authority key identifier: 79:E9:23:D5:06:95:7F:D3:0D:D2:6D:62:79:3B:9B:40:F8:FE:89:56 Certificate issuer: /CN=A916C4A5/serialNumber=79E923D506957FD30DD26D62793B9B40F8FE8956 Certificate serial: 58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eekj1QaVf9MN0m1ieTubQPj-iVY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.mft Manifest number: 57 Signing time: Sun 27 Apr 2025 06:00:55 +0000 Manifest this update: Sun 27 Apr 2025 06:00:54 +0000 Manifest next update: Sun 04 May 2025 06:00:54 +0000 Files and hashes: 1: eekj1QaVf9MN0m1ieTubQPj-iVY.crl (hash: i9YoZoGaW7nP0scOzScKfaXz6q/fu+6WmHpdB1dNdJM=) 2: FB82BBA0A24B11EFA8802F31C4F9AE02.roa (hash: FNLMkJsV83Bt0X7SmIILDAhrnYAAJNH2tKMHd6lYZGE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.crl rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eekj1QaVf9MN0m1ieTubQPj-iVY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 88 (0x58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C4A5, serialNumber=79E923D506957FD30DD26D62793B9B40F8FE8956 Validity Not Before: Apr 27 06:00:54 2025 GMT Not After : May 4 06:00:54 2025 GMT Subject: CN=680dc817-01fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2b:9b:c5:b0:54:f1:25:ad:69:b3:b6:e9:5d: fc:2f:53:2d:92:9d:f6:d2:5d:c4:f3:3a:a9:96:9d: da:c7:cb:6f:9f:c9:f7:2a:c7:ae:e6:ba:de:74:bb: 51:6b:e6:92:0d:41:c0:3e:a0:ad:68:92:be:d1:11: 55:d7:20:7a:ef:20:78:e7:ba:95:79:7e:69:03:b6: fb:16:8f:36:f8:cc:3c:b8:25:33:cb:6f:4f:38:5b: 67:db:7b:57:8c:79:18:ea:9a:99:d3:29:d2:17:65: a1:ea:f2:5e:8d:2f:43:a2:a8:11:f0:0f:80:f0:5e: 91:8b:25:f7:60:68:8a:64:4a:6f:be:e5:04:55:1c: f1:5d:b5:72:37:0b:c6:88:29:57:69:7d:bf:70:df: 61:27:e4:71:23:39:ec:b3:34:d7:cb:83:b3:eb:2e: 2f:c2:24:e7:ab:4f:fd:bd:32:5c:42:5c:c5:19:fc: 6c:c1:9d:21:f4:38:32:65:74:15:91:ef:09:54:13: 71:f6:5a:f4:3e:8f:f9:6f:ff:40:19:09:20:78:5b: df:bf:2d:a5:f9:89:b4:b9:68:e7:ec:67:8c:d7:06: cf:eb:32:86:9c:80:10:84:41:78:25:f5:6d:59:7d: 4a:87:d9:ed:0c:59:36:e3:82:f7:d5:04:0a:9a:75: 66:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:F8:88:7F:E6:13:51:D5:71:8E:A5:E0:E9:41:F1:AC:67:89:31:7A X509v3 Authority Key Identifier: keyid:79:E9:23:D5:06:95:7F:D3:0D:D2:6D:62:79:3B:9B:40:F8:FE:89:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eekj1QaVf9MN0m1ieTubQPj-iVY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:30:cc:d0:cd:67:3a:a0:5d:3d:a1:e0:34:c9:4c:c7:71:e1: b0:da:d9:ed:03:e9:f9:42:23:64:12:3f:1e:2b:d8:26:b3:a2: 0b:d6:ca:a9:9f:4e:5e:fa:25:b6:34:56:93:af:2f:6f:31:f1: a3:2a:55:52:4e:b1:bb:22:82:67:f6:3c:b5:01:90:0b:a3:2d: cd:65:c2:9a:a0:2a:e7:02:4a:c4:87:29:7e:3e:b4:17:5f:bc: 1a:b2:44:18:53:d7:f4:a4:f2:ef:36:b2:9a:4b:80:82:99:6f: 6c:85:0e:4c:e3:95:ff:64:d8:a5:85:31:58:0d:2f:08:04:5f: 91:66:d2:06:43:d8:9a:5e:27:56:91:5d:01:44:3b:d3:ee:75: 79:a1:35:46:8e:52:ad:dc:ae:2c:58:f2:0b:fb:e4:dd:8f:7b: 64:3d:a0:fa:37:4d:89:56:14:58:31:7b:b7:7d:27:51:c8:c5: 36:db:02:77:71:2c:7a:0d:0b:65:9a:56:45:ea:e8:eb:bb:0e: c3:a7:da:8c:0b:5a:41:b4:e9:86:b0:41:8b:d6:db:45:54:f3: c1:fc:a3:2e:15:ce:cf:43:ac:59:d8:06:6b:23:d2:8b:7f:77: c2:b6:bd:86:c5:0e:4f:9d:9d:20:f6:13:66:04:3b:bf:86:c6: 37:98:aa:6b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QzRBNTExMC8GA1UEBRMoNzlFOTIzRDUwNjk1N0ZEMzBERDI2RDYyNzkzQjlCNDBG OEZFODk1NjAeFw0yNTA0MjcwNjAwNTRaFw0yNTA1MDQwNjAwNTRaMBgxFjAUBgNV BAMTDTY4MGRjODE3LTAxZmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkK5vFsFTxJa1ps7bpXfwvUy2SnfbSXcTzOqmWndrHy2+fyfcqx67mut50u1Fr 5pINQcA+oK1okr7REVXXIHrvIHjnupV5fmkDtvsWjzb4zDy4JTPLb084W2fbe1eM eRjqmpnTKdIXZaHq8l6NL0OiqBHwD4DwXpGLJfdgaIpkSm++5QRVHPFdtXI3C8aI KVdpfb9w32En5HEjOeyzNNfLg7PrLi/CJOerT/29MlxCXMUZ/GzBnSH0ODJldBWR 7wlUE3H2WvQ+j/lv/0AZCSB4W9+/LaX5ibS5aOfsZ4zXBs/rMoacgBCEQXgl9W1Z fUqH2e0MWTbjgvfVBAqadWYvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXPiIf+YT UdVxjqXg6UHxrGeJMXowHwYDVR0jBBgwFoAUeekj1QaVf9MN0m1ieTubQPj+iVYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZDNEE1L0M3M0EzODk0QTIz NDExRUY5NzhDOEQ2REM0RjlBRTAyL2Vla2oxUWFWZjlNTjBtMWllVHViUVBqLWlW WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZWVrajFRYVZmOU1OMG0xaWVUdWJRUGotaVZZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZD NEE1L0M3M0EzODk0QTIzNDExRUY5NzhDOEQ2REM0RjlBRTAyL2Vla2oxUWFWZjlN TjBtMWllVHViUVBqLWlWWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKgwzNDNZzqgXT2h4DTJTMdx4bDa2e0D6flCI2QSPx4r2CazogvWyqmf Tl76JbY0VpOvL28x8aMqVVJOsbsigmf2PLUBkAujLc1lwpqgKucCSsSHKX4+tBdf vBqyRBhT1/Sk8u82sppLgIKZb2yFDkzjlf9k2KWFMVgNLwgEX5Fm0gZD2JpeJ1aR XQFEO9PudXmhNUaOUq3crixY8gv75N2Pe2Q9oPo3TYlWFFgxe7d9J1HIxTbbAndx LHoNC2WaVkXq6Ou7DsOn2owLWkG06YawQYvW20VU88H8oy4Vzs9DrFnYBmsj0ot/ d8K2vYbFDk+dnSD2E2YEO7+GxjeYqms= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:48 2025 by rpki-client on console.sobornost.net