$ rpki-client -vvf rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft File: awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft (raw, json) Hash identifier: 9srlLH3hYn6VV/L1Ps5nCrzFhfkPmcSZgG0udt9tOzs= Subject key identifier: CC:83:5C:3D:7F:62:B0:FF:3B:39:65:83:32:4D:9B:B6:2B:FD:6E:7F Authority key identifier: 6B:0C:B5:95:03:DA:89:5F:F9:42:69:D7:A9:BC:20:26:17:04:DC:E9 Certificate issuer: /CN=A91A45E0/serialNumber=6B0CB59503DA895FF94269D7A9BC20261704DCE9 Certificate serial: 0C2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft Manifest number: 0C09 Signing time: Mon 28 Apr 2025 19:05:24 +0000 Manifest this update: Mon 28 Apr 2025 19:05:23 +0000 Manifest next update: Mon 05 May 2025 19:05:23 +0000 Files and hashes: 1: awy1lQPaiV_5QmnXqbwgJhcE3Ok.crl (hash: 3N1fd3TYdAM4l6BVeqw7PiEvfFtZI2uGesiEn2N41Bc=) 2: 1ECA8050696211EC8A05D115C4F9AE02.roa (hash: TDJGQsW2NIk73+noi3yai+lnEcUS65iyjDduaFF8MsU=) 3: 7A0359125C0E11ECA36CBF0FC4F9AE02.roa (hash: o+CZ7fn0neERiRGT74H4pMCJhxb2efrn1ZqyAv5eZQ0=) 4: DF1E2FEA97D611EB8BEF8223C4F9AE02.roa (hash: +Z1f48sI1Kz7JI6qJ55JG0SRXt9VC0MvWpOU7eCKqS8=) 5: 884C5FB8E60411EFBF5A7957C4F9AE02.roa (hash: lJpIF/DoFI3JvxRyvCQySFIPNE83lEmMNZBRdgQLMfI=) 6: 84CFF0D6D2F311EEAFCF3273C4F9AE02.roa (hash: lwAwrTafRErL3moVwMNPzUjYlQsMQhM9S9kLt9SAVBg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.crl rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 19:05:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3115 (0xc2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A45E0, serialNumber=6B0CB59503DA895FF94269D7A9BC20261704DCE9 Validity Not Before: Apr 28 19:05:23 2025 GMT Not After : May 5 19:05:23 2025 GMT Subject: CN=680fd174-5583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:30:1b:3b:32:a9:88:83:da:a5:6f:56:96:8c: 25:d0:4d:49:a2:45:65:0f:50:08:04:26:1b:c9:a6: bb:47:28:4f:a4:0d:bf:74:9c:9c:04:e5:be:86:84: ab:4b:cd:3d:68:20:e5:32:0f:7d:e9:ce:4a:21:c9: 61:8d:3e:da:7b:b5:f5:fa:63:77:a6:bc:c5:a0:de: 6d:8e:68:5d:98:87:80:f4:85:23:5e:54:8e:b9:b5: af:0b:4a:a5:02:2b:8f:20:7a:f6:dd:00:79:c5:8f: 55:26:f6:49:8c:68:c8:a0:3b:b8:7d:37:1e:c8:bc: 58:0e:77:de:d1:af:40:af:fa:d2:dd:67:63:e5:58: 8a:be:96:f0:cb:84:e4:69:e8:74:26:9d:93:8b:a4: 43:5c:55:5a:24:c6:9f:d7:85:c6:26:5b:7c:29:f4: b8:9f:5d:b7:9e:6e:1c:c6:0c:50:64:83:ec:03:5d: 45:27:2c:88:75:27:6e:1c:97:ad:77:b7:74:55:01: 94:80:52:81:52:cf:95:03:f4:11:4f:ad:c7:7e:0a: aa:10:ac:ae:7e:63:6e:80:aa:03:1b:d1:51:5f:64: b8:bf:7f:c1:7e:72:f6:56:ce:48:f7:37:cb:62:c5: 81:10:6d:f6:1a:fe:98:46:62:82:39:68:70:70:3f: 76:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:83:5C:3D:7F:62:B0:FF:3B:39:65:83:32:4D:9B:B6:2B:FD:6E:7F X509v3 Authority Key Identifier: keyid:6B:0C:B5:95:03:DA:89:5F:F9:42:69:D7:A9:BC:20:26:17:04:DC:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:93:b0:a5:d3:34:e2:0a:ec:1c:d1:e8:b8:3e:59:c1:21:30: d8:75:3f:bc:9f:3f:30:ae:5c:97:6e:66:20:c0:92:fe:03:35: a5:00:a6:2a:08:6b:0c:c9:ac:17:43:b7:d7:c0:fd:8b:79:38: bc:42:88:14:9a:31:b9:b1:5e:46:d4:86:66:6d:4b:ff:d7:90: 95:9c:f8:03:c4:64:8c:a0:f3:8a:0f:8b:75:16:85:21:be:35: 66:6f:bc:76:d9:fa:93:14:35:6f:b8:1f:e1:97:f8:1e:3a:bb: 4d:44:39:ea:e9:f7:a7:63:77:0b:c9:1a:26:5d:f2:e3:53:e3: 09:b4:67:65:ad:a8:f6:88:30:50:e3:5a:e1:6a:3d:56:c8:01: de:db:e3:8b:7b:34:50:a8:56:c7:24:d4:6f:1d:1f:bd:f2:63: 8a:ce:d0:62:7e:27:e5:db:6d:f3:0b:69:3a:4c:b8:c8:fd:68: 77:ca:60:00:e8:3c:77:98:99:34:30:3f:b5:a6:62:8e:59:93: 73:4f:82:c0:06:b5:4b:f5:34:b6:fe:80:44:c0:a2:33:78:c3: e0:2d:c1:9d:6b:5f:d5:7a:06:b4:4e:ad:6a:14:e0:f6:6a:37: 2d:34:5a:53:e7:19:73:46:93:03:b9:cb:d2:89:a8:d4:d0:15: 2d:32:9d:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ1RTAxMTAvBgNVBAUTKDZCMENCNTk1MDNEQTg5NUZGOTQyNjlEN0E5QkMyMDI2 MTcwNERDRTkwHhcNMjUwNDI4MTkwNTIzWhcNMjUwNTA1MTkwNTIzWjAYMRYwFAYD VQQDEw02ODBmZDE3NC01NTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsTAbOzKpiIPapW9Wlowl0E1JokVlD1AIBCYbyaa7RyhPpA2/dJycBOW+hoSr S809aCDlMg996c5KIclhjT7ae7X1+mN3przFoN5tjmhdmIeA9IUjXlSOubWvC0ql AiuPIHr23QB5xY9VJvZJjGjIoDu4fTceyLxYDnfe0a9Ar/rS3Wdj5ViKvpbwy4Tk aeh0Jp2Ti6RDXFVaJMaf14XGJlt8KfS4n123nm4cxgxQZIPsA11FJyyIdSduHJet d7d0VQGUgFKBUs+VA/QRT63HfgqqEKyufmNugKoDG9FRX2S4v3/BfnL2Vs5I9zfL YsWBEG32Gv6YRmKCOWhwcD92lwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMyDXD1/ YrD/OzllgzJNm7Yr/W5/MB8GA1UdIwQYMBaAFGsMtZUD2olf+UJp16m8ICYXBNzp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDVFMC8yM0JGMkYyNjEx M0UxMUVBODhFODc4NzZDNEY5QUUwMi9hd3kxbFFQYWlWXzVRbW5YcWJ3Z0poY0Uz T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2F3eTFsUVBhaVZfNVFtblhxYndnSmhjRTNPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDVFMC8yM0JGMkYyNjExM0UxMUVBODhFODc4NzZDNEY5QUUwMi9hd3kxbFFQYWlW XzVRbW5YcWJ3Z0poY0UzT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCak7Cl0zTiCuwc0ei4PlnBITDYdT+8nz8wrlyXbmYgwJL+AzWlAKYq CGsMyawXQ7fXwP2LeTi8QogUmjG5sV5G1IZmbUv/15CVnPgDxGSMoPOKD4t1FoUh vjVmb7x22fqTFDVvuB/hl/geOrtNRDnq6fenY3cLyRomXfLjU+MJtGdlraj2iDBQ 41rhaj1WyAHe2+OLezRQqFbHJNRvHR+98mOKztBififl223zC2k6TLjI/Wh3ymAA 6Dx3mJk0MD+1pmKOWZNzT4LABrVL9TS2/oBEwKIzeMPgLcGda1/Vega0Tq1qFOD2 ajctNFpT5xlzRpMDucvSiajU0BUtMp0i -----END CERTIFICATE-----Generated at Mon Apr 28 23:05:42 2025 by rpki-client on console.sobornost.net