$ rpki-client -vvf rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft File: Op4IQWhX5XRXw49Tbg1usjbf-2E.mft (raw, json) Hash identifier: VOGtxwWyif83/DTTmvUX0gL4PJxPp2ALAZGeV7V7bJk= Subject key identifier: 90:5F:AF:D8:6F:C0:14:E3:03:30:AA:E6:1C:0D:EC:51:47:5D:33:8B Authority key identifier: 3A:9E:08:41:68:57:E5:74:57:C3:8F:53:6E:0D:6E:B2:36:DF:FB:61 Certificate issuer: /CN=A9197CED/serialNumber=3A9E08416857E57457C38F536E0D6EB236DFFB61 Certificate serial: 35D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Op4IQWhX5XRXw49Tbg1usjbf-2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft Manifest number: 3535 Signing time: Sat 26 Apr 2025 14:23:48 +0000 Manifest this update: Sat 26 Apr 2025 14:23:47 +0000 Manifest next update: Sat 03 May 2025 14:23:47 +0000 Files and hashes: 1: Op4IQWhX5XRXw49Tbg1usjbf-2E.crl (hash: VGp2SVrScB3CE0WI+dNQCvBNmreePJxdo+vlIhZU34w=) 2: A96CFF2E19C911F0BE901A50C4F9AE02.roa (hash: a00cqrXWT6VD+OkUHfqfeCDeSngMMd4dCO8jlB8sdUQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.crl rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Op4IQWhX5XRXw49Tbg1usjbf-2E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 13:09:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13781 (0x35d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197CED, serialNumber=3A9E08416857E57457C38F536E0D6EB236DFFB61 Validity Not Before: Apr 26 14:23:47 2025 GMT Not After : May 3 14:23:47 2025 GMT Subject: CN=680cec74-107f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e4:41:63:da:89:52:a4:e3:19:19:04:fa:f8: 56:33:04:9c:d8:c6:10:35:9a:50:8d:5e:00:ec:03: 3e:a7:8a:d4:de:fb:6d:78:e8:69:bf:13:5f:ac:62: 9c:34:03:ad:61:14:9a:5c:43:20:61:06:89:02:d3: 0e:6f:f1:2b:bf:13:9d:ea:82:ca:6c:f2:5a:d2:f7: 6b:f4:38:38:e1:fe:30:5a:4f:a7:bd:c6:23:86:b5: f9:a4:e0:8d:26:1a:d9:2d:bb:6c:07:72:ec:a6:1d: 9e:43:c3:59:73:c6:bb:1d:50:64:5d:8e:dc:30:57: af:5b:7b:cb:ad:88:39:4a:3b:f9:2b:91:62:1c:6a: 8f:86:75:ea:25:f4:7a:f6:8b:2c:15:40:29:01:bc: 93:2a:40:35:55:15:48:40:e9:eb:ae:69:a5:b0:89: 9e:0a:01:51:10:63:ae:bc:ca:95:bf:7a:a8:17:f8: 33:52:8d:25:43:bd:21:dd:d8:6f:5c:5a:ff:f0:3a: 05:df:4b:3e:92:9f:c1:2b:0d:50:ad:b4:00:fc:b2: a6:38:b7:ec:6c:4b:80:64:0c:18:87:28:de:57:a5: c2:f0:8a:46:c7:a9:f4:d8:ff:d9:5d:cb:70:b5:11: d7:58:e1:19:65:91:3a:af:d7:75:47:b5:ef:77:d6: 3e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:5F:AF:D8:6F:C0:14:E3:03:30:AA:E6:1C:0D:EC:51:47:5D:33:8B X509v3 Authority Key Identifier: keyid:3A:9E:08:41:68:57:E5:74:57:C3:8F:53:6E:0D:6E:B2:36:DF:FB:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Op4IQWhX5XRXw49Tbg1usjbf-2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:0e:a4:ca:64:29:37:63:15:cc:3e:7c:39:ca:ce:f7:d6:3c: 14:e4:b1:11:cd:4c:92:b3:28:85:2a:27:93:c3:4f:30:f0:b1: 35:f2:16:8a:5a:3e:bd:c0:eb:bd:ed:ae:1a:d9:35:cf:b4:f2: d4:7c:90:18:5d:e1:11:4e:12:2a:26:1a:39:c2:69:9c:60:17: 98:bb:91:a0:05:3e:5e:30:3e:48:bf:08:d2:ac:8d:b5:c2:f6: 6b:2c:12:0d:32:fa:72:d8:5b:a8:52:65:86:59:a4:53:ae:58: e2:29:27:59:f0:e2:02:52:28:fb:25:71:ba:27:92:8c:02:ef: ec:84:d4:c6:a5:0d:4f:42:af:41:47:9f:64:d8:18:f6:47:c5: 4d:43:5f:77:40:89:7d:35:a8:99:31:41:12:a6:e2:14:94:2d: 3a:6f:c8:d8:48:ea:07:bb:2d:45:44:3c:4f:56:25:dd:9c:9c: 19:eb:23:9b:6d:0e:4a:35:15:95:5f:8e:0e:f1:44:c9:cd:b7: d9:97:82:cc:79:58:bb:e5:44:d4:18:af:45:b8:74:f5:db:42: 8c:bf:98:ff:5e:e5:9d:23:a9:2b:b7:2e:79:51:b5:07:ad:4a: 81:b6:3f:fa:30:c8:70:dc:30:10:82:29:9a:bd:e7:8e:35:e6: c5:47:1f:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdDRUQxMTAvBgNVBAUTKDNBOUUwODQxNjg1N0U1NzQ1N0MzOEY1MzZFMEQ2RUIy MzZERkZCNjEwHhcNMjUwNDI2MTQyMzQ3WhcNMjUwNTAzMTQyMzQ3WjAYMRYwFAYD VQQDEw02ODBjZWM3NC0xMDdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2eRBY9qJUqTjGRkE+vhWMwSc2MYQNZpQjV4A7AM+p4rU3vtteOhpvxNfrGKc NAOtYRSaXEMgYQaJAtMOb/ErvxOd6oLKbPJa0vdr9Dg44f4wWk+nvcYjhrX5pOCN JhrZLbtsB3Lsph2eQ8NZc8a7HVBkXY7cMFevW3vLrYg5Sjv5K5FiHGqPhnXqJfR6 9ossFUApAbyTKkA1VRVIQOnrrmmlsImeCgFREGOuvMqVv3qoF/gzUo0lQ70h3dhv XFr/8DoF30s+kp/BKw1QrbQA/LKmOLfsbEuAZAwYhyjeV6XC8IpGx6n02P/ZXctw tRHXWOEZZZE6r9d1R7Xvd9Y+wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJBfr9hv wBTjAzCq5hwN7FFHXTOLMB8GA1UdIwQYMBaAFDqeCEFoV+V0V8OPU24NbrI23/th MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0NFRC84M0Y1NkRBQzFE ODQxMUUyOTEwNjg5REEwOEIwMkNEMi9PcDRJUVdoWDVYUlh3NDlUYmcxdXNqYmYt MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09wNElRV2hYNVhSWHc0OVRiZzF1c2piZi0yRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0NFRC84M0Y1NkRBQzFEODQxMUUyOTEwNjg5REEwOEIwMkNEMi9PcDRJUVdoWDVY Ulh3NDlUYmcxdXNqYmYtMkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBDqTKZCk3YxXMPnw5ys731jwU5LERzUySsyiFKieTw08w8LE18haK Wj69wOu97a4a2TXPtPLUfJAYXeERThIqJho5wmmcYBeYu5GgBT5eMD5IvwjSrI21 wvZrLBINMvpy2FuoUmWGWaRTrljiKSdZ8OICUij7JXG6J5KMAu/shNTGpQ1PQq9B R59k2Bj2R8VNQ193QIl9NaiZMUESpuIUlC06b8jYSOoHuy1FRDxPViXdnJwZ6yOb bQ5KNRWVX44O8UTJzbfZl4LMeVi75UTUGK9FuHT120KMv5j/XuWdI6krty55UbUH rUqBtj/6MMhw3DAQgimaveeONebFRx8X -----END CERTIFICATE-----Generated at Sat Apr 26 15:55:41 2025 by rpki-client on console.sobornost.net