$ rpki-client -vvf rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft File: Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft (raw, json) Hash identifier: jDhALbIzrboKjpFFYPNqYn3OnJorIjnfOgKJFLJrg6s= Subject key identifier: 05:06:1A:BB:34:61:E6:04:11:8B:87:04:12:B4:24:1B:3A:42:35:8C Authority key identifier: 03:1E:29:F2:6E:78:32:81:B7:68:E8:91:08:53:14:4D:F1:EE:55:34 Certificate issuer: /CN=A91805BF/serialNumber=031E29F26E783281B768E8910853144DF1EE5534 Certificate serial: 0770 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft Manifest number: 076A Signing time: Sat 26 Apr 2025 21:12:47 +0000 Manifest this update: Sat 26 Apr 2025 21:12:45 +0000 Manifest next update: Sat 03 May 2025 21:12:45 +0000 Files and hashes: 1: Ax4p8m54MoG3aOiRCFMUTfHuVTQ.crl (hash: irDzvqwKAhD3rdZj8EyxaQI/NN8MXB6iE1F33rquvkk=) 2: B89D979A13F411EB8BF49553C4F9AE02.roa (hash: uA//4m9RZCjXQutR/xTMIccaTwt8NsdxBBjUfw2F3iI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.crl rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1904 (0x770) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91805BF, serialNumber=031E29F26E783281B768E8910853144DF1EE5534 Validity Not Before: Apr 26 21:12:45 2025 GMT Not After : May 3 21:12:45 2025 GMT Subject: CN=680d4c4e-01f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:81:20:6c:89:5c:a6:bd:e7:77:5a:40:97:6e: 5f:1b:de:6a:3b:85:f7:aa:3c:30:e0:84:67:1c:95: e6:41:23:4d:11:f1:51:03:b0:90:2f:2c:9f:93:a0: c8:73:9e:40:1c:bc:5a:98:1e:52:5d:49:74:6f:8d: 6b:85:16:4e:fc:69:4b:5c:f9:73:89:cf:6f:cb:b3: 29:5d:d2:c1:4d:1d:cc:f7:de:53:02:1a:88:08:3e: 5f:c0:24:86:c5:17:98:71:e6:92:e9:e7:19:94:f3: eb:00:a4:71:74:81:76:06:27:6b:23:1c:34:cc:ef: fa:d7:66:66:9d:8c:7b:77:b3:20:f3:e5:3b:63:61: 1a:3f:b4:16:54:14:e0:d9:3c:02:24:14:26:1a:b1: 90:00:5f:72:ce:1f:86:54:30:74:ba:c7:d0:31:b9: 5c:3b:a9:7f:43:0f:38:3a:b3:af:27:e8:44:05:12: 73:35:7f:10:3d:b6:d1:7e:ec:33:fe:56:39:bd:0c: 0b:78:57:68:ca:9e:ba:a8:8d:c4:04:09:47:8c:9e: 64:5f:a2:5d:0c:be:85:2d:7c:de:7d:cb:ec:d0:29: c9:7a:4c:2f:be:02:60:0e:8e:26:7a:0e:93:4f:c8: 73:00:61:18:2d:69:aa:d4:5d:86:c8:b5:bd:5d:b1: 82:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:06:1A:BB:34:61:E6:04:11:8B:87:04:12:B4:24:1B:3A:42:35:8C X509v3 Authority Key Identifier: keyid:03:1E:29:F2:6E:78:32:81:B7:68:E8:91:08:53:14:4D:F1:EE:55:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:cc:7b:3d:9d:b5:18:5c:71:37:59:53:61:3f:f5:31:47:f5: b0:a5:d1:1a:c6:8c:c0:ae:76:41:3f:68:36:26:43:77:f0:4a: 97:d4:d5:5f:bc:4d:4e:e4:59:42:0a:94:f7:1b:68:d4:6c:7c: 19:03:06:d6:68:4f:a3:d4:19:a6:47:a7:e2:54:76:45:6b:7a: b2:b6:6c:5b:1b:bc:dc:58:24:12:34:3f:24:68:d7:91:ab:02: 71:3b:e4:94:2b:27:f2:95:94:e9:9d:5e:70:3c:33:dd:fb:f3: c2:f8:b9:49:30:c6:64:0d:58:8e:3e:c4:2d:70:0f:d6:83:e0: 4e:20:82:be:00:5a:84:6e:45:d3:85:0a:a4:67:c1:b9:54:9e: a9:46:85:6d:a8:fc:5c:d2:2c:73:47:aa:04:d3:0d:62:95:28: 64:30:df:4a:94:b6:ac:7e:9b:44:58:41:b4:67:d5:66:c4:83: d6:da:68:5c:e5:10:73:2d:32:b0:28:b7:b5:9d:09:1e:0f:db: 79:fb:f9:76:f3:32:b8:fd:95:f0:df:a3:f9:d4:79:da:41:79: cb:14:bb:1b:7e:dd:9e:69:d9:16:ee:3a:aa:a8:a7:b1:83:95: fb:8a:b2:e6:57:27:c5:17:6f:2b:c2:27:60:b5:8d:df:f1:36: b1:a1:86:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA1QkYxMTAvBgNVBAUTKDAzMUUyOUYyNkU3ODMyODFCNzY4RTg5MTA4NTMxNDRE RjFFRTU1MzQwHhcNMjUwNDI2MjExMjQ1WhcNMjUwNTAzMjExMjQ1WjAYMRYwFAYD VQQDEw02ODBkNGM0ZS0wMWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2IEgbIlcpr3nd1pAl25fG95qO4X3qjww4IRnHJXmQSNNEfFRA7CQLyyfk6DI c55AHLxamB5SXUl0b41rhRZO/GlLXPlzic9vy7MpXdLBTR3M995TAhqICD5fwCSG xReYceaS6ecZlPPrAKRxdIF2BidrIxw0zO/612ZmnYx7d7Mg8+U7Y2EaP7QWVBTg 2TwCJBQmGrGQAF9yzh+GVDB0usfQMblcO6l/Qw84OrOvJ+hEBRJzNX8QPbbRfuwz /lY5vQwLeFdoyp66qI3EBAlHjJ5kX6JdDL6FLXzefcvs0CnJekwvvgJgDo4meg6T T8hzAGEYLWmq1F2GyLW9XbGCRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAUGGrs0 YeYEEYuHBBK0JBs6QjWMMB8GA1UdIwQYMBaAFAMeKfJueDKBt2jokQhTFE3x7lU0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDVCRi9GMTMzQkRBQzEz RjIxMUVCOUJFRkNENTFDNEY5QUUwMi9BeDRwOG01NE1vRzNhT2lSQ0ZNVVRmSHVW VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0F4NHA4bTU0TW9HM2FPaVJDRk1VVGZIdVZUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDVCRi9GMTMzQkRBQzEzRjIxMUVCOUJFRkNENTFDNEY5QUUwMi9BeDRwOG01NE1v RzNhT2lSQ0ZNVVRmSHVWVFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdzHs9nbUYXHE3WVNhP/UxR/WwpdEaxozArnZBP2g2JkN38EqX1NVf vE1O5FlCCpT3G2jUbHwZAwbWaE+j1BmmR6fiVHZFa3qytmxbG7zcWCQSND8kaNeR qwJxO+SUKyfylZTpnV5wPDPd+/PC+LlJMMZkDViOPsQtcA/Wg+BOIIK+AFqEbkXT hQqkZ8G5VJ6pRoVtqPxc0ixzR6oE0w1ilShkMN9KlLasfptEWEG0Z9VmxIPW2mhc 5RBzLTKwKLe1nQkeD9t5+/l28zK4/ZXw36P51HnaQXnLFLsbft2eadkW7jqqqKex g5X7irLmVyfFF28rwidgtY3f8TaxoYbD -----END CERTIFICATE-----Generated at Sun Apr 27 00:14:02 2025 by rpki-client on console.sobornost.net