$ rpki-client -vvf rpki.apnic.net/member_repository/A917B520/4CFC08DAB76C11EFB874276EC4F9AE02/OT6njk2TI25QcfuK_61B1iQmql0.mft File: OT6njk2TI25QcfuK_61B1iQmql0.mft (raw, json) Hash identifier: RF1ggDTeWn6SNSnN9v5eddaEFMIEIi+NPrpSh4Mov4Y= Subject key identifier: 64:87:3C:8A:F8:24:24:C9:72:32:AD:05:10:F3:47:90:00:A8:31:D3 Authority key identifier: 39:3E:A7:8E:4D:93:23:6E:50:71:FB:8A:FF:AD:41:D6:24:26:AA:5D Certificate issuer: /CN=A917B520/serialNumber=393EA78E4D93236E5071FB8AFFAD41D62426AA5D Certificate serial: 49 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/OT6njk2TI25QcfuK_61B1iQmql0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B520/4CFC08DAB76C11EFB874276EC4F9AE02/OT6njk2TI25QcfuK_61B1iQmql0.mft Manifest number: 48 Signing time: Sun 27 Apr 2025 02:43:26 +0000 Manifest this update: Sun 27 Apr 2025 02:43:25 +0000 Manifest next update: Sun 04 May 2025 02:43:25 +0000 Files and hashes: 1: OT6njk2TI25QcfuK_61B1iQmql0.crl (hash: DLts9XYqtIK/rFtGG/tM686gg0DKdN53JQlh6g4k6w4=) 2: 3CFE7680BC5C11EFB951FD4FC4F9AE02.roa (hash: NUffLHq82hY3xMoVf55lHNGR19ZjrAZu9OH8lX1bsUc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B520/4CFC08DAB76C11EFB874276EC4F9AE02/OT6njk2TI25QcfuK_61B1iQmql0.crl rsync://rpki.apnic.net/member_repository/A917B520/4CFC08DAB76C11EFB874276EC4F9AE02/OT6njk2TI25QcfuK_61B1iQmql0.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/OT6njk2TI25QcfuK_61B1iQmql0.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:43:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B520, serialNumber=393EA78E4D93236E5071FB8AFFAD41D62426AA5D Validity Not Before: Apr 27 02:43:25 2025 GMT Not After : May 4 02:43:25 2025 GMT Subject: CN=680d99cd-e9cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:17:51:b1:47:9d:5b:bb:b7:cc:fd:bb:05:c7: 67:9b:a1:e6:41:2d:e2:5b:7d:3d:0b:3b:3f:c4:f1: ae:8b:0f:56:45:6e:f8:4a:20:1f:03:e1:aa:c8:e0: 20:31:cc:61:a7:f5:90:8c:53:e9:03:19:c1:47:f6: 41:f2:e6:3b:c4:ca:1f:9e:02:81:c4:b5:a4:c7:79: 20:c0:a8:52:b8:ef:72:2b:2a:38:de:36:59:81:08: 8c:79:46:a7:ac:b8:fb:93:26:ce:c1:bd:ea:f2:84: 71:54:25:71:0f:94:fa:f2:47:c4:3b:c1:e2:ce:8c: 6f:58:aa:a0:c8:b1:77:76:d1:2a:4c:30:ed:78:df: cf:0d:1c:ce:14:29:0f:98:36:43:b3:d5:e2:eb:7a: f9:6e:89:50:14:2e:eb:05:bf:5a:61:10:89:43:1f: 81:66:88:77:02:e3:bb:a0:05:d9:08:cf:d1:e5:80: f4:f7:05:0e:eb:9e:a6:cc:a0:c6:3e:b0:91:0e:63: be:af:64:55:2e:93:cb:ad:e9:8e:d7:4f:0a:c2:b8: 1b:ff:f7:75:ab:72:f0:b5:bf:86:ca:2d:f6:42:ee: d0:d8:91:0f:6a:1f:81:2e:9b:12:d8:5b:1d:75:bd: b9:b7:83:37:ec:e3:30:31:28:75:db:29:f6:2f:f8: b2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:87:3C:8A:F8:24:24:C9:72:32:AD:05:10:F3:47:90:00:A8:31:D3 X509v3 Authority Key Identifier: keyid:39:3E:A7:8E:4D:93:23:6E:50:71:FB:8A:FF:AD:41:D6:24:26:AA:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B520/4CFC08DAB76C11EFB874276EC4F9AE02/OT6njk2TI25QcfuK_61B1iQmql0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/OT6njk2TI25QcfuK_61B1iQmql0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/4CFC08DAB76C11EFB874276EC4F9AE02/OT6njk2TI25QcfuK_61B1iQmql0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:60:f2:1b:ad:80:39:44:b7:68:cf:ad:c6:ba:2f:70:4a:90: 0c:b7:12:91:40:9b:6f:4a:92:37:a7:d9:cd:52:02:aa:8a:88: b4:ce:bc:62:da:12:8c:fc:89:05:99:0b:ee:20:80:30:07:f6: bf:47:ea:c2:93:cb:8e:ab:de:66:68:16:78:12:4f:82:61:13: ab:83:78:74:6c:99:13:dd:65:93:bd:12:db:88:6e:de:4f:f7: 75:a2:24:3e:3c:47:83:e8:3f:12:e6:76:89:cf:06:2f:d9:1e: f7:ea:90:67:84:7a:56:99:84:b2:40:cb:6b:f0:db:f2:6c:4a: 36:76:fc:32:5c:24:b4:2e:5f:1d:3d:7c:35:20:03:17:a3:95: ff:f4:9e:6e:e2:52:ad:c8:94:e6:30:11:ea:d7:42:2e:09:04: 43:92:4b:9e:3f:6b:a6:37:a1:c4:57:cf:bd:2d:d8:c2:6a:9d: b9:db:08:68:94:6b:ec:4c:cb:89:26:c7:ab:bc:b6:64:7a:ee: 0e:34:92:ae:01:aa:eb:ac:bd:5d:f9:e6:06:8d:fd:4a:b0:d4: e6:04:38:f8:a2:a1:31:43:e9:2a:02:c1:12:7f:7b:22:f2:bf: fc:0b:cd:04:e6:9f:f4:c0:eb:ea:9a:29:0e:22:88:41:87:6a: 8a:84:82:d2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QjUyMDExMC8GA1UEBRMoMzkzRUE3OEU0RDkzMjM2RTUwNzFGQjhBRkZBRDQxRDYy NDI2QUE1RDAeFw0yNTA0MjcwMjQzMjVaFw0yNTA1MDQwMjQzMjVaMBgxFjAUBgNV BAMTDTY4MGQ5OWNkLWU5Y2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLF1GxR51bu7fM/bsFx2eboeZBLeJbfT0LOz/E8a6LD1ZFbvhKIB8D4arI4CAx zGGn9ZCMU+kDGcFH9kHy5jvEyh+eAoHEtaTHeSDAqFK473IrKjjeNlmBCIx5Rqes uPuTJs7BveryhHFUJXEPlPryR8Q7weLOjG9YqqDIsXd20SpMMO14388NHM4UKQ+Y NkOz1eLrevluiVAULusFv1phEIlDH4FmiHcC47ugBdkIz9HlgPT3BQ7rnqbMoMY+ sJEOY76vZFUuk8ut6Y7XTwrCuBv/93WrcvC1v4bKLfZC7tDYkQ9qH4EumxLYWx11 vbm3gzfs4zAxKHXbKfYv+LLzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZIc8ivgk JMlyMq0FEPNHkACoMdMwHwYDVR0jBBgwFoAUOT6njk2TI25QcfuK/61B1iQmql0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdCNTIwLzRDRkMwOERBQjc2 QzExRUZCODc0Mjc2RUM0RjlBRTAyL09UNm5qazJUSTI1UWNmdUtfNjFCMWlRbXFs MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvT1Q2bmprMlRJMjVRY2Z1S182MUIxaVFtcWwwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdC NTIwLzRDRkMwOERBQjc2QzExRUZCODc0Mjc2RUM0RjlBRTAyL09UNm5qazJUSTI1 UWNmdUtfNjFCMWlRbXFsMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFVg8hutgDlEt2jPrca6L3BKkAy3EpFAm29Kkjen2c1SAqqKiLTOvGLa Eoz8iQWZC+4ggDAH9r9H6sKTy46r3mZoFngST4JhE6uDeHRsmRPdZZO9EtuIbt5P 93WiJD48R4PoPxLmdonPBi/ZHvfqkGeEelaZhLJAy2vw2/JsSjZ2/DJcJLQuXx09 fDUgAxejlf/0nm7iUq3IlOYwEerXQi4JBEOSS54/a6Y3ocRXz70t2MJqnbnbCGiU a+xMy4kmx6u8tmR67g40kq4BquusvV355gaN/Uqw1OYEOPiioTFD6SoCwRJ/eyLy v/wLzQTmn/TA6+qaKQ4iiEGHaoqEgtI= -----END CERTIFICATE-----Generated at Sun Apr 27 05:42:09 2025 by rpki-client on console.sobornost.net