$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft File: qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft (raw, json) Hash identifier: 23KUw6/PfEInKFv1lLFN0KfZZhbCjBYTep8vIhUfWMM= Subject key identifier: 5F:CC:BE:66:20:C8:43:E0:CE:9F:61:70:64:74:C0:3A:C2:8F:61:B8 Authority key identifier: A9:90:DA:25:CF:4E:01:BC:EB:7E:C7:5C:17:86:0F:B9:47:BE:09:2A Certificate issuer: /CN=A91A1C52/serialNumber=A990DA25CF4E01BCEB7EC75C17860FB947BE092A Certificate serial: 0191 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZDaJc9OAbzrfsdcF4YPuUe-CSo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft Manifest number: 018E Signing time: Sun 27 Apr 2025 02:32:00 +0000 Manifest this update: Sun 27 Apr 2025 02:32:00 +0000 Manifest next update: Sun 04 May 2025 02:32:00 +0000 Files and hashes: 1: qZDaJc9OAbzrfsdcF4YPuUe-CSo.crl (hash: EAG/jBWBgBwNhU8g+0ypVroJw95jjJ9aqoKTWYAkW8o=) 2: A40C03B0D3B511EDA2A9DD7BC4F9AE02.roa (hash: qTpurh8+bWpZzwTVZxTLGeJXujwiEOMw1H0kXdqpaC8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.crl rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZDaJc9OAbzrfsdcF4YPuUe-CSo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:31:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 401 (0x191) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1C52, serialNumber=A990DA25CF4E01BCEB7EC75C17860FB947BE092A Validity Not Before: Apr 27 02:32:00 2025 GMT Not After : May 4 02:32:00 2025 GMT Subject: CN=680d9720-ec6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4d:ca:45:39:c9:b3:a6:cb:dd:81:20:5d:e9: f8:9f:18:53:4d:94:37:96:bf:f6:06:cc:e3:e5:e7: 3a:6c:67:51:2b:96:43:9f:94:09:c1:5c:e6:d2:db: 86:91:62:7d:76:3b:5d:74:f6:54:60:5e:0b:6d:d2: 80:81:38:2c:96:81:b3:82:03:1d:09:ba:1e:9a:33: 40:5d:3c:de:6d:b9:e1:4e:2f:47:77:44:a0:b8:1a: 48:d4:63:b3:0c:e5:67:da:25:fe:9a:84:03:61:cf: 2a:45:b6:3c:32:db:af:f8:43:1e:8a:11:43:f5:c8: bd:6b:97:62:43:19:d7:6b:70:72:55:39:3a:f3:c0: 24:91:68:82:a5:84:48:a5:f7:33:85:82:34:a4:cf: 68:ed:4b:5f:00:65:88:87:78:ef:90:91:af:a8:72: 29:d5:ff:e4:f9:4e:71:4e:4b:3c:c7:62:e6:aa:df: 8b:96:04:dc:55:8e:8d:3b:f1:26:6a:b7:81:4c:ff: 53:4b:f9:93:ce:f9:8c:11:27:5f:4e:8e:99:fa:18: 6a:8f:dd:e9:16:da:07:bf:39:41:81:41:ae:4a:e1: 9c:6f:b5:02:18:5a:0f:c0:4a:7b:9b:b8:47:bc:83: 9e:a8:e1:3d:a6:44:68:ce:47:29:df:ce:13:f5:ce: b7:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:CC:BE:66:20:C8:43:E0:CE:9F:61:70:64:74:C0:3A:C2:8F:61:B8 X509v3 Authority Key Identifier: keyid:A9:90:DA:25:CF:4E:01:BC:EB:7E:C7:5C:17:86:0F:B9:47:BE:09:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZDaJc9OAbzrfsdcF4YPuUe-CSo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:5e:58:d0:d9:a3:13:2d:de:f9:f1:d5:91:8e:aa:e9:c7:7f: e5:42:c1:95:ae:2a:0b:70:70:dd:57:c2:43:ff:ac:fc:ad:73: 6e:08:b6:81:03:8d:b2:61:2c:cd:4e:9b:78:0e:95:a0:38:a6: 41:93:df:de:ea:bf:d8:ae:db:c1:98:da:4f:3e:77:f7:9e:35: cc:5e:29:54:18:02:4a:39:9b:d5:94:bf:f1:6e:98:25:7c:62: 03:89:f1:2d:4b:80:cb:ec:ad:dd:ea:ef:aa:18:df:0e:e3:30: 7b:ae:99:d5:56:46:0f:ef:ea:7c:7e:05:49:01:75:40:04:44: ed:fa:d5:4f:f9:ea:b7:b9:34:6e:af:23:71:41:5c:81:a4:5d: 14:6a:22:5e:85:6e:33:c9:5d:14:6d:35:a4:83:e1:15:f1:c4: 06:b2:84:29:5a:26:5c:4b:c6:ee:97:c5:f2:51:6d:72:23:af: 6e:b6:f6:cf:59:dc:d6:df:e6:57:5b:82:10:c1:cb:dc:e3:c4: 03:07:ac:83:7e:8a:78:b3:c8:45:af:07:3a:84:64:6b:ac:57: 8e:98:46:e9:36:e8:04:dd:95:a6:30:a3:20:18:62:e9:2b:eb: 4c:da:77:48:92:78:43:85:d0:3a:9e:46:e2:1f:0c:90:37:7b: a8:6d:c5:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFDNTIxMTAvBgNVBAUTKEE5OTBEQTI1Q0Y0RTAxQkNFQjdFQzc1QzE3ODYwRkI5 NDdCRTA5MkEwHhcNMjUwNDI3MDIzMjAwWhcNMjUwNTA0MDIzMjAwWjAYMRYwFAYD VQQDEw02ODBkOTcyMC1lYzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1E3KRTnJs6bL3YEgXen4nxhTTZQ3lr/2Bszj5ec6bGdRK5ZDn5QJwVzm0tuG kWJ9djtddPZUYF4LbdKAgTgsloGzggMdCboemjNAXTzebbnhTi9Hd0SguBpI1GOz DOVn2iX+moQDYc8qRbY8Mtuv+EMeihFD9ci9a5diQxnXa3ByVTk688AkkWiCpYRI pfczhYI0pM9o7UtfAGWIh3jvkJGvqHIp1f/k+U5xTks8x2Lmqt+LlgTcVY6NO/Em areBTP9TS/mTzvmMESdfTo6Z+hhqj93pFtoHvzlBgUGuSuGcb7UCGFoPwEp7m7hH vIOeqOE9pkRozkcp384T9c638QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF/MvmYg yEPgzp9hcGR0wDrCj2G4MB8GA1UdIwQYMBaAFKmQ2iXPTgG8637HXBeGD7lHvgkq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUM1Mi8wRTVEQkZCNEM0 QkMxMUVEODg0MDNBNDhDNEY5QUUwMi9xWkRhSmM5T0FienJmc2RjRjRZUHVVZS1D U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FaRGFKYzlPQWJ6cmZzZGNGNFlQdVVlLUNTby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUM1Mi8wRTVEQkZCNEM0QkMxMUVEODg0MDNBNDhDNEY5QUUwMi9xWkRhSmM5T0Fi enJmc2RjRjRZUHVVZS1DU28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJXljQ2aMTLd758dWRjqrpx3/lQsGVrioLcHDdV8JD/6z8rXNuCLaB A42yYSzNTpt4DpWgOKZBk9/e6r/YrtvBmNpPPnf3njXMXilUGAJKOZvVlL/xbpgl fGIDifEtS4DL7K3d6u+qGN8O4zB7rpnVVkYP7+p8fgVJAXVABETt+tVP+eq3uTRu ryNxQVyBpF0UaiJehW4zyV0UbTWkg+EV8cQGsoQpWiZcS8bul8XyUW1yI69utvbP WdzW3+ZXW4IQwcvc48QDB6yDfop4s8hFrwc6hGRrrFeOmEbpNugE3ZWmMKMgGGLp K+tM2ndIknhDhdA6nkbiHwyQN3uobcU3 -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:02 2025 by rpki-client on console.sobornost.net