$ rpki-client -vvf rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft File: Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft (raw, json) Hash identifier: +U7sNMWaTFO/6ZM6jQGo2P/MkhJXqrNy2gYABup4RGY= Subject key identifier: 33:C1:05:9C:E2:C0:CB:20:75:C2:5E:47:0C:CC:1B:7C:E4:76:7A:CF Authority key identifier: 21:CF:CE:81:D8:75:D5:CF:8F:59:6A:DB:FC:C3:60:19:61:C4:41:E7 Certificate issuer: /CN=A9171BF0/serialNumber=21CFCE81D875D5CF8F596ADBFCC3601961C441E7 Certificate serial: 55 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft Manifest number: 54 Signing time: Fri 25 Apr 2025 06:13:06 +0000 Manifest this update: Fri 25 Apr 2025 06:13:05 +0000 Manifest next update: Fri 02 May 2025 06:13:05 +0000 Files and hashes: 1: Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl (hash: WVVV1Vr4pFk5ZdQGtNGgBlAcq5bAPjwAyisRhqqDfZg=) 2: 115BD35AA41611EFA0D7CD42C4F9AE02.roa (hash: gEbj+lO4aYDwjrfL1QJi0wu8U7VQFh/BgCCzbNzGNWA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 85 (0x55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171BF0, serialNumber=21CFCE81D875D5CF8F596ADBFCC3601961C441E7 Validity Not Before: Apr 25 06:13:05 2025 GMT Not After : May 2 06:13:05 2025 GMT Subject: CN=680b27f1-dda6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:aa:2b:fe:8f:eb:a9:4e:8f:24:5a:d7:75:67: 95:d5:f1:52:f9:cc:b1:05:c9:ff:65:eb:19:aa:81: ff:0e:0a:7c:c8:cc:d5:70:75:12:fd:36:fb:71:a1: 80:18:cd:2e:61:44:48:38:f7:0e:b3:c2:e7:7d:d1: 0e:0b:49:1d:0a:e3:08:51:05:03:4b:4e:30:dd:28: 75:c6:22:95:ae:4d:ce:c1:9b:1b:04:32:43:aa:54: c2:07:4d:1e:bc:18:aa:7b:55:b0:f3:cd:78:3a:e4: 37:4c:31:be:7a:e6:26:a9:f5:a4:90:42:7f:4b:29: 15:84:f4:00:d8:2b:5e:f0:bd:b7:1a:27:39:e6:0f: a6:92:f3:6f:bf:1c:c9:ae:c7:10:df:ef:86:8b:8e: e5:e0:61:fa:0a:a3:fe:6b:13:b6:3c:7e:29:1a:2b: 29:5c:7d:f0:bf:cf:a8:7c:e0:90:72:08:05:96:e1: 95:7d:44:86:e1:54:5b:a6:8a:58:2b:65:5b:59:55: 15:ab:6b:8b:1e:d8:0b:81:7a:72:0a:23:f3:09:f6: a6:95:fd:f0:f5:c9:9b:72:94:b7:8d:ac:7d:a9:15: ff:df:27:a5:f2:d5:02:84:b4:4a:69:78:6c:5f:56: 4c:21:05:fd:00:d1:d5:b4:98:08:d6:c5:c0:c1:b4: 5d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:C1:05:9C:E2:C0:CB:20:75:C2:5E:47:0C:CC:1B:7C:E4:76:7A:CF X509v3 Authority Key Identifier: keyid:21:CF:CE:81:D8:75:D5:CF:8F:59:6A:DB:FC:C3:60:19:61:C4:41:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:f3:a1:49:c9:f2:bc:43:4e:54:fb:14:30:c7:f2:1b:9f:a7: b9:45:46:0a:84:0f:3b:34:84:1b:13:88:6e:a5:c1:2e:b9:26: df:83:ba:83:e8:19:f2:86:4a:73:f1:9d:e8:d6:91:61:e5:64: e7:25:1f:69:9d:07:e1:e0:ed:36:f4:16:b9:31:03:ab:4d:d5: cd:05:75:b0:7e:12:1e:57:71:70:5a:00:64:f9:72:39:c1:a5: 29:ca:c0:ad:fb:a4:73:7b:00:11:e0:27:ca:d5:d9:c4:de:89: 6d:cd:40:26:1a:47:88:fe:bd:4d:79:6c:cf:4b:a1:69:d3:d0: cc:37:28:27:d9:6e:61:56:e8:49:8d:8a:d7:7a:23:73:17:89: 48:b5:8a:ec:66:21:0f:e2:90:7a:5f:17:ae:b6:47:26:26:84: 16:cc:75:bb:24:16:7f:6a:c1:48:24:2d:dd:26:79:fc:85:3e: 17:76:31:4c:85:e9:79:17:2a:13:d1:a5:4b:c0:16:07:58:30: 32:8e:ef:2f:98:c1:24:7c:75:be:79:0e:46:d7:29:a0:25:05: be:c8:fa:60:69:23:33:ef:21:3d:ef:ec:da:dd:2e:82:91:d5: 01:5a:22:92:dd:cd:cb:6b:13:7c:92:8d:51:ac:00:a6:90:7e: 43:38:de:27 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MUJGMDExMC8GA1UEBRMoMjFDRkNFODFEODc1RDVDRjhGNTk2QURCRkNDMzYwMTk2 MUM0NDFFNzAeFw0yNTA0MjUwNjEzMDVaFw0yNTA1MDIwNjEzMDVaMBgxFjAUBgNV BAMTDTY4MGIyN2YxLWRkYTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBqiv+j+upTo8kWtd1Z5XV8VL5zLEFyf9l6xmqgf8OCnzIzNVwdRL9NvtxoYAY zS5hREg49w6zwud90Q4LSR0K4whRBQNLTjDdKHXGIpWuTc7BmxsEMkOqVMIHTR68 GKp7VbDzzXg65DdMMb565iap9aSQQn9LKRWE9ADYK17wvbcaJznmD6aS82+/HMmu xxDf74aLjuXgYfoKo/5rE7Y8fikaKylcffC/z6h84JByCAWW4ZV9RIbhVFumilgr ZVtZVRWra4se2AuBenIKI/MJ9qaV/fD1yZtylLeNrH2pFf/fJ6Xy1QKEtEppeGxf VkwhBf0A0dW0mAjWxcDBtF1TAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUM8EFnOLA yyB1wl5HDMwbfOR2es8wHwYDVR0jBBgwFoAUIc/Ogdh11c+PWWrb/MNgGWHEQecw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcxQkYwLzlGNTkxRThFQTQx NTExRUZBMTRGQkQzRkM0RjlBRTAyL0ljX09nZGgxMWMtUFdXcmJfTU5nR1dIRVFl Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSWNfT2dkaDExYy1QV1dyYl9NTmdHV0hFUWVjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcx QkYwLzlGNTkxRThFQTQxNTExRUZBMTRGQkQzRkM0RjlBRTAyL0ljX09nZGgxMWMt UFdXcmJfTU5nR1dIRVFlYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALrzoUnJ8rxDTlT7FDDH8hufp7lFRgqEDzs0hBsTiG6lwS65Jt+DuoPo GfKGSnPxnejWkWHlZOclH2mdB+Hg7Tb0FrkxA6tN1c0FdbB+Eh5XcXBaAGT5cjnB pSnKwK37pHN7ABHgJ8rV2cTeiW3NQCYaR4j+vU15bM9LoWnT0Mw3KCfZbmFW6EmN itd6I3MXiUi1iuxmIQ/ikHpfF662RyYmhBbMdbskFn9qwUgkLd0mefyFPhd2MUyF 6XkXKhPRpUvAFgdYMDKO7y+YwSR8db55DkbXKaAlBb7I+mBpIzPvIT3v7NrdLoKR 1QFaIpLdzctrE3ySjVGsAKaQfkM43ic= -----END CERTIFICATE-----Generated at Fri Apr 25 08:23:59 2025 by rpki-client on console.sobornost.net