$ rpki-client -vvf rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft File: FzXLqe4W_oXz0oP6W7lHnZryzIY.mft (raw, json) Hash identifier: 88OcyRKf3M411zR4cN4QmetavSH2fueaiJIdXs4tgTQ= Subject key identifier: 22:81:39:88:9A:75:23:2E:BD:11:D8:17:E1:4F:B5:D2:61:0F:E5:8D Authority key identifier: 17:35:CB:A9:EE:16:FE:85:F3:D2:83:FA:5B:B9:47:9D:9A:F2:CC:86 Certificate issuer: /CN=A91757CB/serialNumber=1735CBA9EE16FE85F3D283FA5BB9479D9AF2CC86 Certificate serial: C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzXLqe4W_oXz0oP6W7lHnZryzIY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft Manifest number: C5 Signing time: Sun 27 Apr 2025 04:39:07 +0000 Manifest this update: Sun 27 Apr 2025 04:39:06 +0000 Manifest next update: Sun 04 May 2025 04:39:06 +0000 Files and hashes: 1: FzXLqe4W_oXz0oP6W7lHnZryzIY.crl (hash: s2Ux1zG6FXbNUno50YvKKq8D1bs4hzg9wgRqFc2BKKU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.crl rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzXLqe4W_oXz0oP6W7lHnZryzIY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 197 (0xc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91757CB, serialNumber=1735CBA9EE16FE85F3D283FA5BB9479D9AF2CC86 Validity Not Before: Apr 27 04:39:06 2025 GMT Not After : May 4 04:39:06 2025 GMT Subject: CN=680db4ea-6d9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:38:e7:47:40:fc:e4:98:8a:c1:ff:54:a3:5a: a2:47:d9:4e:97:bc:ab:a8:15:75:14:b6:6c:d7:4b: 51:17:e4:e7:37:83:46:62:22:98:8b:cc:dc:72:86: cc:bf:9c:2f:7b:72:de:bd:6a:d6:30:2b:59:d9:69: 7d:cf:6d:91:b3:f6:8b:f7:48:d6:4c:aa:0a:f1:ea: 92:66:79:6d:8f:4f:a6:ff:53:c3:69:4b:39:4b:19: 0e:e3:d6:4c:fd:b7:d3:40:dc:90:04:70:0b:aa:54: 3f:2d:c2:3d:50:1e:a9:22:14:9a:e9:6b:b3:fa:29: aa:5f:fb:7f:85:0e:80:13:af:4a:e4:bf:d0:2b:20: a4:b8:54:c4:24:7d:86:7c:e2:d3:ad:44:d2:99:2d: 1c:b3:78:37:1d:05:58:c2:dc:a4:15:c5:76:2f:4f: 56:1d:b5:53:34:3d:95:a8:00:9a:83:74:fe:ef:f4: 0c:10:bc:66:7e:83:ee:31:8a:09:59:92:e6:fb:25: d0:7a:90:24:9d:5e:30:54:4a:07:14:c5:e8:7b:21: 3b:7f:6a:dd:c2:b5:f3:3d:fa:f4:6f:df:a5:44:a1: f8:8c:eb:64:8c:f2:12:54:42:ff:63:ed:e8:0a:b3: 1e:b7:bf:d0:95:c6:43:f3:38:f9:d7:48:2f:bc:56: eb:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:81:39:88:9A:75:23:2E:BD:11:D8:17:E1:4F:B5:D2:61:0F:E5:8D X509v3 Authority Key Identifier: keyid:17:35:CB:A9:EE:16:FE:85:F3:D2:83:FA:5B:B9:47:9D:9A:F2:CC:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzXLqe4W_oXz0oP6W7lHnZryzIY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:88:5f:57:e5:49:f1:47:62:e0:67:55:f4:35:8d:2f:73:ad: aa:a2:e8:e2:e6:13:da:25:ea:20:8a:67:1c:6a:bf:3d:57:29: a0:ac:ea:93:b7:d3:02:73:18:9a:81:f9:e5:a8:4d:48:bd:13: 43:38:43:8b:0c:7e:a8:0e:3b:1e:6f:1d:ff:14:6e:72:4c:99: 62:f0:a8:f9:58:36:3d:46:3e:da:36:40:a2:24:c1:3e:b5:d3: bd:78:cb:58:0d:07:9b:5e:69:5f:2c:74:79:9a:66:e9:49:bb: 28:09:a6:22:97:f7:25:ed:18:73:22:c8:c9:66:9e:6c:09:f6: 4f:09:ac:72:3d:78:0d:5a:77:9d:ab:34:df:15:9d:dc:98:67: 49:74:dd:b7:48:53:e7:13:11:a7:75:f8:3a:03:87:1b:bb:e6: a8:e7:56:19:3d:d2:c8:a3:44:06:bd:21:f0:37:1c:fb:04:7a: d4:04:7c:d3:08:c9:8e:02:a7:49:15:45:28:ca:a1:31:ae:0c: b4:13:08:b8:5c:a7:4f:f2:3f:f4:b5:20:ea:b7:e0:94:85:13: da:60:7e:6e:a3:e6:43:56:42:e3:c3:fa:ea:98:f5:28:79:59: 20:32:38:22:3a:7c:89:6d:1e:4c:81:4b:c8:ff:3c:87:eb:5c: 6c:70:24:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU3Q0IxMTAvBgNVBAUTKDE3MzVDQkE5RUUxNkZFODVGM0QyODNGQTVCQjk0NzlE OUFGMkNDODYwHhcNMjUwNDI3MDQzOTA2WhcNMjUwNTA0MDQzOTA2WjAYMRYwFAYD VQQDEw02ODBkYjRlYS02ZDliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoDjnR0D85JiKwf9Uo1qiR9lOl7yrqBV1FLZs10tRF+TnN4NGYiKYi8zccobM v5wve3LevWrWMCtZ2Wl9z22Rs/aL90jWTKoK8eqSZnltj0+m/1PDaUs5SxkO49ZM /bfTQNyQBHALqlQ/LcI9UB6pIhSa6Wuz+imqX/t/hQ6AE69K5L/QKyCkuFTEJH2G fOLTrUTSmS0cs3g3HQVYwtykFcV2L09WHbVTND2VqACag3T+7/QMELxmfoPuMYoJ WZLm+yXQepAknV4wVEoHFMXoeyE7f2rdwrXzPfr0b9+lRKH4jOtkjPISVEL/Y+3o CrMet7/QlcZD8zj510gvvFbr4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCKBOYia dSMuvRHYF+FPtdJhD+WNMB8GA1UdIwQYMBaAFBc1y6nuFv6F89KD+lu5R52a8syG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTdDQi80RUQyMTJEQ0Yy RjgxMUVFQTM1MDY3MzhDNEY5QUUwMi9GelhMcWU0V19vWHowb1A2VzdsSG5acnl6 SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z6WExxZTRXX29YejBvUDZXN2xIblpyeXpJWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTdDQi80RUQyMTJEQ0YyRjgxMUVFQTM1MDY3MzhDNEY5QUUwMi9GelhMcWU0V19v WHowb1A2VzdsSG5acnl6SVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhiF9X5UnxR2LgZ1X0NY0vc62qouji5hPaJeogimccar89VymgrOqT t9MCcxiagfnlqE1IvRNDOEOLDH6oDjsebx3/FG5yTJli8Kj5WDY9Rj7aNkCiJME+ tdO9eMtYDQebXmlfLHR5mmbpSbsoCaYil/cl7RhzIsjJZp5sCfZPCaxyPXgNWned qzTfFZ3cmGdJdN23SFPnExGndfg6A4cbu+ao51YZPdLIo0QGvSHwNxz7BHrUBHzT CMmOAqdJFUUoyqExrgy0Ewi4XKdP8j/0tSDqt+CUhRPaYH5uo+ZDVkLjw/rqmPUo eVkgMjgiOnyJbR5MgUvI/zyH61xscCT6 -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:49 2025 by rpki-client on console.sobornost.net