$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft File: CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft (raw, json) Hash identifier: +JeAicpmwVqgvTe+uJ501BV8rgTPyYHbErvNQZGyO00= Subject key identifier: D8:C7:E9:0B:C8:A0:37:D6:36:22:51:2D:14:A9:E2:16:CC:A5:AD:FF Authority key identifier: 09:97:14:A7:0E:6F:40:12:89:10:82:09:D6:A7:F4:85:9F:98:00:CC Certificate issuer: /CN=A91A5098/serialNumber=099714A70E6F401289108209D6A7F4859F9800CC Certificate serial: 1D76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft Manifest number: 1D5E Signing time: Mon 28 Apr 2025 16:15:02 +0000 Manifest this update: Mon 28 Apr 2025 16:15:02 +0000 Manifest next update: Mon 05 May 2025 16:15:02 +0000 Files and hashes: 1: CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.crl (hash: SQQcUrUpwawgTYYnXoopD42kwY1vzEEl1tCXHjVj2DQ=) 2: 945DB376E34711EE87868164C4F9AE02.roa (hash: NAFJJXNP6W1IL/8p5XX1DsTHhpW+KT2jLZylfntYa8I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.crl rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 16:15:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7542 (0x1d76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5098, serialNumber=099714A70E6F401289108209D6A7F4859F9800CC Validity Not Before: Apr 28 16:15:02 2025 GMT Not After : May 5 16:15:02 2025 GMT Subject: CN=680fa986-8769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6f:62:43:cf:0a:61:ed:49:17:4c:cf:4d:1f: 5c:f3:f7:2c:73:6e:3b:ae:e7:56:8a:26:e8:af:42: ab:c2:8b:52:f3:8e:ce:62:00:f4:bf:45:3b:5a:27: af:a7:e7:dc:66:23:d7:50:1e:70:3c:47:1c:6c:ca: de:5e:9c:fe:5e:33:bf:ed:d5:4c:d3:cd:f9:b2:51: 94:44:05:12:ec:b6:8a:a8:be:56:e4:9b:64:64:64: b3:9d:8e:86:31:a2:2e:7a:20:0f:40:44:01:52:8a: 8a:6e:47:25:e8:41:d6:38:d9:a8:be:6d:a4:00:af: 63:0a:85:60:2c:c4:ab:b4:c6:70:77:36:2b:aa:4b: f3:9d:c8:70:82:4c:d5:d8:30:65:02:b3:ee:4a:69: 54:14:ab:e1:c6:a6:b7:f1:58:bb:16:af:20:15:77: 3c:cf:4f:a2:bb:5b:45:2e:78:17:76:6b:18:d5:9c: 85:8b:ae:40:49:d9:09:3f:63:c3:5d:d2:e2:8d:fc: db:c0:ce:8f:55:71:4f:67:ba:1e:84:a7:58:98:09: 66:56:27:d0:ac:91:fa:90:cd:57:e2:c0:49:21:92: 06:88:9d:27:7d:a6:a2:46:ec:cf:97:45:fb:34:1c: f2:c1:13:b4:ed:56:1a:d8:8c:00:1c:0b:8e:60:2b: f2:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:C7:E9:0B:C8:A0:37:D6:36:22:51:2D:14:A9:E2:16:CC:A5:AD:FF X509v3 Authority Key Identifier: keyid:09:97:14:A7:0E:6F:40:12:89:10:82:09:D6:A7:F4:85:9F:98:00:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:89:1e:08:7a:35:8f:84:4f:06:5b:b9:a1:6f:62:37:11:1c: 34:82:73:f4:a3:26:e5:bd:6e:cb:e7:79:6a:0c:eb:8f:e0:53: 76:a7:a2:fe:80:79:35:b9:94:67:a4:29:1c:eb:02:d2:f9:0c: b4:e0:30:ec:eb:5d:4c:15:39:7c:12:05:c4:f8:17:06:be:f7: 0a:c8:87:c0:21:94:fe:52:f8:ce:83:20:d0:a2:47:1f:ac:3a: 81:7d:46:7c:c5:35:dc:1b:e6:c8:fc:71:24:4e:e0:b0:e4:4e: 66:b1:9c:53:5a:a5:78:b5:08:28:5c:15:30:ba:e7:c6:ab:e9: 45:58:fd:2e:20:c7:e2:98:04:de:79:81:6a:a8:e6:f5:a5:a2: 88:17:db:f1:1e:7f:6b:85:0d:7a:73:8e:8a:02:29:8e:3a:2a: 11:0b:f9:d6:88:14:f0:39:dd:94:fc:be:97:11:bf:df:8f:8b: f6:cf:33:8a:9b:43:3e:60:77:26:28:bb:7f:20:55:bb:a4:50: 2d:62:79:f0:55:8f:d7:a3:98:20:4b:6e:2e:ff:dc:e4:d5:7c: e4:07:70:54:ae:a1:6a:37:59:09:cc:47:30:ed:c2:9d:e9:0a: 51:a6:ff:6d:26:e9:e6:f2:6b:4b:a1:1f:73:7f:dd:0f:5f:29: 7a:7b:6c:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUwOTgxMTAvBgNVBAUTKDA5OTcxNEE3MEU2RjQwMTI4OTEwODIwOUQ2QTdGNDg1 OUY5ODAwQ0MwHhcNMjUwNDI4MTYxNTAyWhcNMjUwNTA1MTYxNTAyWjAYMRYwFAYD VQQDEw02ODBmYTk4Ni04NzY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyG9iQ88KYe1JF0zPTR9c8/csc247rudWiibor0KrwotS847OYgD0v0U7Wiev p+fcZiPXUB5wPEccbMreXpz+XjO/7dVM0835slGURAUS7LaKqL5W5JtkZGSznY6G MaIueiAPQEQBUoqKbkcl6EHWONmovm2kAK9jCoVgLMSrtMZwdzYrqkvznchwgkzV 2DBlArPuSmlUFKvhxqa38Vi7Fq8gFXc8z0+iu1tFLngXdmsY1ZyFi65ASdkJP2PD XdLijfzbwM6PVXFPZ7oehKdYmAlmVifQrJH6kM1X4sBJIZIGiJ0nfaaiRuzPl0X7 NBzywRO07VYa2IwAHAuOYCvynQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNjH6QvI oDfWNiJRLRSp4hbMpa3/MB8GA1UdIwQYMBaAFAmXFKcOb0ASiRCCCdan9IWfmADM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTA5OC9DNjgwOTE5NkFD OTcxMUU2QTQ5MURDMTdDNEY5QUUwMi9DWmNVcHc1dlFCS0pFSUlKMXFmMGhaLVlB TXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NaY1VwdzV2UUJLSkVJSUoxcWYwaFotWUFNdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTA5OC9DNjgwOTE5NkFDOTcxMUU2QTQ5MURDMTdDNEY5QUUwMi9DWmNVcHc1dlFC S0pFSUlKMXFmMGhaLVlBTXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1iR4IejWPhE8GW7mhb2I3ERw0gnP0oyblvW7L53lqDOuP4FN2p6L+ gHk1uZRnpCkc6wLS+Qy04DDs611MFTl8EgXE+BcGvvcKyIfAIZT+UvjOgyDQokcf rDqBfUZ8xTXcG+bI/HEkTuCw5E5msZxTWqV4tQgoXBUwuufGq+lFWP0uIMfimATe eYFqqOb1paKIF9vxHn9rhQ16c46KAimOOioRC/nWiBTwOd2U/L6XEb/fj4v2zzOK m0M+YHcmKLt/IFW7pFAtYnnwVY/Xo5ggS24u/9zk1XzkB3BUrqFqN1kJzEcw7cKd 6QpRpv9tJunm8mtLoR9zf90PXyl6e2xc -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:52 2025 by rpki-client on console.sobornost.net