$ rpki-client -vvf rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft File: eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft (raw, json) Hash identifier: rxEJe7gP9eJ5wkCZXFnS26b0ivh2kNfFNapjGcwRnXo= Subject key identifier: 0E:31:9F:20:BD:59:78:F1:F6:84:E7:49:38:C4:D5:40:D0:69:B8:23 Authority key identifier: 78:BE:DB:ED:C0:45:9B:90:0C:28:28:92:F1:3B:17:82:A9:56:04:29 Certificate issuer: /CN=A91A495C/serialNumber=78BEDBEDC0459B900C282892F13B1782A9560429 Certificate serial: 0D32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft Manifest number: 0D0D Signing time: Mon 28 Apr 2025 18:18:42 +0000 Manifest this update: Mon 28 Apr 2025 18:18:42 +0000 Manifest next update: Mon 05 May 2025 18:18:41 +0000 Files and hashes: 1: eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl (hash: WhtMU8Wey7YYJoqRmE5YIQc/m5ZKxsDY0BEtK4cJz74=) 2: 9F12E3A025A511EE87132E45C4F9AE02.roa (hash: bGVPdIvZlYGFNzxT3y5YSA5PehaGI7Seiy7YCZdX9Sg=) 3: 055A1A7A05FC11EFB61A7767C4F9AE02.roa (hash: +In7lqAfHKKuHVBt4b296chjrd7RaFgigBnxlxSxJ4Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 18:18:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3378 (0xd32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A495C, serialNumber=78BEDBEDC0459B900C282892F13B1782A9560429 Validity Not Before: Apr 28 18:18:42 2025 GMT Not After : May 5 18:18:41 2025 GMT Subject: CN=680fc682-fe12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:81:4a:16:81:96:50:ac:c1:99:72:4a:94:14: 10:84:ad:cb:5b:91:9c:53:8e:38:49:62:39:54:cf: 31:5c:c8:87:9a:45:eb:94:d0:19:20:81:19:9b:e5: 9c:08:4c:57:c0:e8:9a:ec:49:c6:9a:01:97:49:42: 7c:cb:97:92:49:f3:fa:f1:9c:d5:59:a4:43:ed:e5: c3:af:71:76:df:90:10:3e:49:7f:d5:0f:22:52:bf: 08:90:1d:de:96:e0:1e:c8:d0:c9:91:f7:93:da:22: a4:6b:22:13:dc:19:13:06:72:40:51:d5:49:12:d5: a2:bd:f4:f2:57:e6:6c:e4:8a:52:14:b8:a5:53:00: 88:4f:54:45:28:c5:8b:e4:16:97:f7:30:91:96:0b: ac:bf:f6:51:d5:0b:e4:0b:eb:eb:11:43:86:a1:74: 9d:b3:a8:8a:00:f3:45:be:76:78:6d:84:27:d0:2e: c5:29:ba:d8:5f:eb:77:ed:28:fe:a5:aa:fe:7e:09: 26:fb:6c:bc:34:21:80:23:4b:03:75:65:17:eb:89: f5:48:9d:ad:42:f6:07:ad:ef:fc:b5:37:ea:29:31: 89:14:de:90:74:9a:9e:d0:4a:25:b9:fa:cd:91:09: 61:3c:e5:65:00:b3:02:13:05:6d:34:31:2f:ae:c2: ab:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:31:9F:20:BD:59:78:F1:F6:84:E7:49:38:C4:D5:40:D0:69:B8:23 X509v3 Authority Key Identifier: keyid:78:BE:DB:ED:C0:45:9B:90:0C:28:28:92:F1:3B:17:82:A9:56:04:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:d2:37:f2:3d:80:66:1b:b1:b9:62:1b:09:7d:61:23:55:1a: 73:b0:1e:06:c0:b0:e5:bb:34:7f:51:4d:e3:92:0f:9f:3a:17: 82:a9:1f:b9:40:75:c3:d9:33:ec:61:01:98:0c:35:bb:f1:55: 2f:6e:fc:e5:f1:b9:39:1a:52:a8:0a:50:dc:33:c6:fe:13:31: 34:39:e4:11:4a:89:40:76:14:87:13:67:04:18:b7:76:0a:48: e6:0a:9c:a2:aa:d2:9d:57:ad:85:a7:b0:65:e1:1d:aa:97:45: 5f:20:a8:23:54:2d:5a:8e:4e:99:4d:0c:41:3e:b2:e4:15:7b: a2:67:0b:01:ab:69:f5:2b:a5:7c:be:ef:90:5a:0c:ab:fb:88: 1c:4e:63:1e:bf:1b:17:8a:96:13:fa:d0:1b:8e:33:02:73:fe: 9e:d0:2f:ff:19:18:f2:27:72:c8:84:0c:9e:1e:26:d6:fd:a9: 83:d0:69:c7:db:98:ed:28:8a:14:4a:ff:d3:24:96:48:0a:84: ee:85:2b:c1:31:56:2a:05:26:57:cb:92:40:3c:f3:2c:74:b6: 0c:4f:09:e2:cb:3c:7d:ff:32:c1:2a:a8:f2:d8:05:98:07:fe: 61:4e:99:3d:06:92:52:9b:68:cc:a9:e0:b2:97:a8:3d:cf:6b: cb:94:7e:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDTIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ5NUMxMTAvBgNVBAUTKDc4QkVEQkVEQzA0NTlCOTAwQzI4Mjg5MkYxM0IxNzgy QTk1NjA0MjkwHhcNMjUwNDI4MTgxODQyWhcNMjUwNTA1MTgxODQxWjAYMRYwFAYD VQQDEw02ODBmYzY4Mi1mZTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuoFKFoGWUKzBmXJKlBQQhK3LW5GcU444SWI5VM8xXMiHmkXrlNAZIIEZm+Wc CExXwOia7EnGmgGXSUJ8y5eSSfP68ZzVWaRD7eXDr3F235AQPkl/1Q8iUr8IkB3e luAeyNDJkfeT2iKkayIT3BkTBnJAUdVJEtWivfTyV+Zs5IpSFLilUwCIT1RFKMWL 5BaX9zCRlgusv/ZR1QvkC+vrEUOGoXSds6iKAPNFvnZ4bYQn0C7FKbrYX+t37Sj+ par+fgkm+2y8NCGAI0sDdWUX64n1SJ2tQvYHre/8tTfqKTGJFN6QdJqe0EolufrN kQlhPOVlALMCEwVtNDEvrsKr6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA4xnyC9 WXjx9oTnSTjE1UDQabgjMB8GA1UdIwQYMBaAFHi+2+3ARZuQDCgokvE7F4KpVgQp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDk1Qy81NTkxODAwNEUy QUQxMUU5QjRBMjc1NDZDNEY5QUUwMi9lTDdiN2NCRm01QU1LQ2lTOFRzWGdxbFdC Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VMN2I3Y0JGbTVBTUtDaVM4VHNYZ3FsV0JDay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDk1Qy81NTkxODAwNEUyQUQxMUU5QjRBMjc1NDZDNEY5QUUwMi9lTDdiN2NCRm01 QU1LQ2lTOFRzWGdxbFdCQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZ0jfyPYBmG7G5YhsJfWEjVRpzsB4GwLDluzR/UU3jkg+fOheCqR+5 QHXD2TPsYQGYDDW78VUvbvzl8bk5GlKoClDcM8b+EzE0OeQRSolAdhSHE2cEGLd2 CkjmCpyiqtKdV62Fp7Bl4R2ql0VfIKgjVC1ajk6ZTQxBPrLkFXuiZwsBq2n1K6V8 vu+QWgyr+4gcTmMevxsXipYT+tAbjjMCc/6e0C//GRjyJ3LIhAyeHibW/amD0GnH 25jtKIoUSv/TJJZICoTuhSvBMVYqBSZXy5JAPPMsdLYMTwniyzx9/zLBKqjy2AWY B/5hTpk9BpJSm2jMqeCyl6g9z2vLlH4d -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:52 2025 by rpki-client on console.sobornost.net