$ rpki-client -vvf rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.mft File: 0dZcikMk4of26pFbOfXTYC0eN6Y.mft (raw, json) Hash identifier: AVi7aYPe34G7cyw35d8BIUFT3JIWHHfMoj9E88z3cNw= Subject key identifier: 1B:E9:AB:62:11:33:EE:6D:C8:03:52:04:35:5D:C5:50:BD:E9:57:1D Authority key identifier: D1:D6:5C:8A:43:24:E2:87:F6:EA:91:5B:39:F5:D3:60:2D:1E:37:A6 Certificate issuer: /CN=A91743EF/serialNumber=D1D65C8A4324E287F6EA915B39F5D3602D1E37A6 Certificate serial: 17FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0dZcikMk4of26pFbOfXTYC0eN6Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.mft Manifest number: 17EE Signing time: Mon 28 Apr 2025 16:55:11 +0000 Manifest this update: Mon 28 Apr 2025 16:55:10 +0000 Manifest next update: Mon 05 May 2025 16:55:10 +0000 Files and hashes: 1: 0dZcikMk4of26pFbOfXTYC0eN6Y.crl (hash: HK0OgZyIkk481GDNHH2c65ie1NfoNj36Gb/DkFAZ1GM=) 2: 8B2EE9667A0911EE934F1262C4F9AE02.roa (hash: 9kSGBDbvCLlzspfA0Gzs2ktHLSvcGxJ7fb3N5eg2SV4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.crl rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0dZcikMk4of26pFbOfXTYC0eN6Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 16:55:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6143 (0x17ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91743EF, serialNumber=D1D65C8A4324E287F6EA915B39F5D3602D1E37A6 Validity Not Before: Apr 28 16:55:10 2025 GMT Not After : May 5 16:55:10 2025 GMT Subject: CN=680fb2ee-5a6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:01:f8:84:2e:fe:6e:bc:fa:b3:d4:de:f9:d6: 78:38:35:da:1f:bd:3d:c3:a2:fa:0d:a9:ce:4b:a0: 43:45:57:a0:e9:0a:ce:51:91:e2:9c:1e:57:68:d6: f8:c8:80:9f:72:d6:87:2a:2a:22:b7:79:4f:b3:7a: cf:6e:40:71:df:51:dc:49:94:6f:ff:fb:24:3a:90: e6:f7:af:67:f0:20:75:76:36:ad:b0:59:75:5a:e2: 1f:37:6a:db:f7:f6:c1:5b:f4:a6:28:54:a4:c1:28: 23:42:ac:ec:08:aa:bb:ed:a2:a6:d8:d5:74:bf:55: 42:e3:97:63:6c:85:42:b7:db:db:91:3b:89:d7:02: 4d:d7:ab:7d:ad:08:53:cd:5e:44:ae:14:f3:a7:88: 0a:b1:3a:f5:a2:11:b7:b0:02:91:9d:3a:63:c5:70: 13:36:ac:ac:91:a1:66:ec:10:c8:c3:61:80:f4:91: ba:11:29:2f:7b:74:ed:5b:6f:5a:79:86:79:c1:db: 0d:c8:94:a0:54:4e:b2:df:79:c3:72:b4:2f:4d:31: 75:54:6d:ae:95:f7:b1:e1:d8:89:83:5c:eb:b7:53: 05:19:48:4c:54:f6:31:0a:d0:14:23:bc:dc:91:91: ea:f1:dc:06:0c:40:ba:f6:eb:cc:65:b1:13:ad:8d: 0e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:E9:AB:62:11:33:EE:6D:C8:03:52:04:35:5D:C5:50:BD:E9:57:1D X509v3 Authority Key Identifier: keyid:D1:D6:5C:8A:43:24:E2:87:F6:EA:91:5B:39:F5:D3:60:2D:1E:37:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0dZcikMk4of26pFbOfXTYC0eN6Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:f3:a6:cc:ab:f4:c8:e7:22:bd:52:cc:e8:e0:38:08:ca:6f: ba:10:13:17:3c:db:3c:a5:2f:7a:dd:55:a6:8b:38:81:f9:ae: 48:72:17:0b:61:77:25:0b:7d:54:77:8f:f1:fb:24:b7:ba:2e: e0:be:db:2c:43:72:aa:a8:9f:7e:ae:89:ad:4c:53:09:dc:ea: 0c:1b:e0:54:79:88:36:7d:60:d2:24:13:97:71:cf:cb:38:92: 24:a8:a9:b1:b1:0a:40:3b:d2:e0:06:50:46:d0:67:b0:1e:11: 40:f9:20:3a:bc:fc:82:91:ba:fe:c5:c9:22:3d:11:d6:15:d6: 25:d5:c0:a6:e8:aa:09:cc:30:f2:76:19:16:73:2d:06:8f:08: 8e:38:a6:3c:97:6c:34:7c:90:c1:1d:b0:e0:a4:a8:cf:67:40: e1:7f:6f:7a:d6:b0:3c:a8:3b:d4:06:c9:bd:82:a5:c0:8c:72: bf:f3:8d:b0:dd:08:91:1d:8a:0a:90:1b:64:c6:04:b9:7c:24: 7c:5c:4b:a6:b0:d0:0c:3c:c1:02:e2:3a:4e:68:e4:2a:18:46: 4b:18:a2:9e:ae:d3:95:1c:1f:18:80:12:40:22:38:66:eb:7c: 00:4c:72:16:91:25:91:40:87:e9:0f:d2:72:de:b1:93:ee:50: b8:c5:37:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF/8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQzRUYxMTAvBgNVBAUTKEQxRDY1QzhBNDMyNEUyODdGNkVBOTE1QjM5RjVEMzYw MkQxRTM3QTYwHhcNMjUwNDI4MTY1NTEwWhcNMjUwNTA1MTY1NTEwWjAYMRYwFAYD VQQDEw02ODBmYjJlZS01YTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5AH4hC7+brz6s9Te+dZ4ODXaH709w6L6DanOS6BDRVeg6QrOUZHinB5XaNb4 yICfctaHKioit3lPs3rPbkBx31HcSZRv//skOpDm969n8CB1djatsFl1WuIfN2rb 9/bBW/SmKFSkwSgjQqzsCKq77aKm2NV0v1VC45djbIVCt9vbkTuJ1wJN16t9rQhT zV5ErhTzp4gKsTr1ohG3sAKRnTpjxXATNqyskaFm7BDIw2GA9JG6ESkve3TtW29a eYZ5wdsNyJSgVE6y33nDcrQvTTF1VG2ulfex4diJg1zrt1MFGUhMVPYxCtAUI7zc kZHq8dwGDEC69uvMZbETrY0OoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBvpq2IR M+5tyANSBDVdxVC96VcdMB8GA1UdIwQYMBaAFNHWXIpDJOKH9uqRWzn102AtHjem MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDNFRi9FNkFCQjAxMEJB NDAxMUU3QTA4RDI2NkZDNEY5QUUwMi8wZFpjaWtNazRvZjI2cEZiT2ZYVFlDMGVO NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBkWmNpa01rNG9mMjZwRmJPZlhUWUMwZU42WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDNFRi9FNkFCQjAxMEJBNDAxMUU3QTA4RDI2NkZDNEY5QUUwMi8wZFpjaWtNazRv ZjI2cEZiT2ZYVFlDMGVONlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBC86bMq/TI5yK9Uszo4DgIym+6EBMXPNs8pS963VWmiziB+a5IchcL YXclC31Ud4/x+yS3ui7gvtssQ3KqqJ9+romtTFMJ3OoMG+BUeYg2fWDSJBOXcc/L OJIkqKmxsQpAO9LgBlBG0GewHhFA+SA6vPyCkbr+xckiPRHWFdYl1cCm6KoJzDDy dhkWcy0GjwiOOKY8l2w0fJDBHbDgpKjPZ0Dhf2961rA8qDvUBsm9gqXAjHK/842w 3QiRHYoKkBtkxgS5fCR8XEumsNAMPMEC4jpOaOQqGEZLGKKertOVHB8YgBJAIjhm 63wATHIWkSWRQIfpD9Jy3rGT7lC4xTen -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:42 2025 by rpki-client on console.sobornost.net