$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft File: e1kFUhKEkQWtbznliB2ELnB0Oa8.mft (raw, json) Hash identifier: 2lUd7s0TYYK+U2JM7eLSpj9Fc8qx2AEiWlS4JbBWouk= Subject key identifier: D4:0B:6B:33:B0:A1:67:D1:74:92:DD:F9:0F:E6:E4:D3:6B:25:FF:D4 Authority key identifier: 7B:59:05:52:12:84:91:05:AD:6F:39:E5:88:1D:84:2E:70:74:39:AF Certificate issuer: /CN=A91A5308/serialNumber=7B59055212849105AD6F39E5881D842E707439AF Certificate serial: 0CB9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1kFUhKEkQWtbznliB2ELnB0Oa8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft Manifest number: 0C9D Signing time: Mon 28 Apr 2025 18:28:01 +0000 Manifest this update: Mon 28 Apr 2025 18:28:01 +0000 Manifest next update: Mon 05 May 2025 18:28:01 +0000 Files and hashes: 1: e1kFUhKEkQWtbznliB2ELnB0Oa8.crl (hash: llgBLPtp2+egLCrbupKLMoZX52VcutmJe4uGFwKeUhc=) 2: CD5B717E8AB811EDA3D4ED68C4F9AE02.roa (hash: lNPyeHDBk4x3+OT0MY/Uf8Bss2twrnvkFLdy1WuJGcs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.crl rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1kFUhKEkQWtbznliB2ELnB0Oa8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 18:27:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3257 (0xcb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5308, serialNumber=7B59055212849105AD6F39E5881D842E707439AF Validity Not Before: Apr 28 18:28:01 2025 GMT Not After : May 5 18:28:01 2025 GMT Subject: CN=680fc8b1-b867 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a3:41:29:02:eb:b6:98:ff:db:d2:5a:31:1f: 6d:49:f6:34:44:64:42:6b:3c:88:68:9a:6f:18:91: 06:52:ec:c8:51:63:84:d5:2c:d5:6a:0f:21:aa:a3: dd:a9:52:97:6a:7d:d8:34:e9:7d:cd:9b:d1:6d:99: ff:8b:7f:7e:b6:a8:d4:b2:88:71:4e:a5:c1:40:7b: fd:cf:df:2d:7b:ac:2e:66:04:a9:f3:e0:85:ca:02: d0:97:e1:0b:61:df:56:17:43:4a:89:c4:21:e8:71: 8c:00:10:79:61:f1:bc:6c:9d:47:9e:29:4e:63:27: 34:81:91:22:02:da:ec:71:f5:25:6b:c7:77:91:10: 73:b4:9d:90:6f:41:85:ff:da:0c:8a:f5:e1:89:d4: 21:cd:6e:5a:5b:e2:d5:f1:04:5e:ec:6f:d4:ca:61: 08:e3:dc:eb:27:af:e1:8b:f1:5b:fc:00:20:ff:ff: e7:b5:2b:9c:08:5e:3a:f4:3d:22:cf:e4:b8:bc:9c: a1:ad:87:e9:90:f6:b4:53:e0:66:a3:89:b9:ae:df: 7f:95:b8:d5:f4:c1:f9:2c:bb:92:ee:1c:aa:64:1e: 7c:1f:5b:36:9e:d9:e2:f6:33:a4:7e:25:e5:78:20: 11:35:40:f9:2c:7f:c2:0f:50:51:46:23:db:e1:2e: ea:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:0B:6B:33:B0:A1:67:D1:74:92:DD:F9:0F:E6:E4:D3:6B:25:FF:D4 X509v3 Authority Key Identifier: keyid:7B:59:05:52:12:84:91:05:AD:6F:39:E5:88:1D:84:2E:70:74:39:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1kFUhKEkQWtbznliB2ELnB0Oa8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:6d:46:c9:e5:28:73:19:37:c0:d6:ad:e9:22:ab:c2:f9:97: 7f:3c:c3:a0:dc:4f:e4:19:56:e8:94:7e:b4:b5:1c:37:54:97: fe:6e:e1:23:95:e0:3e:23:b4:bc:86:06:b3:48:83:7b:2b:3d: 1d:3c:8e:ee:e6:8a:e7:8d:3c:ef:40:c4:e6:3b:51:dc:9d:9c: 74:dc:34:ed:31:42:07:6d:a9:96:97:0a:b4:0f:53:d8:f1:93: 11:11:45:f2:0c:4c:0f:98:0e:2c:09:fb:f4:65:c1:5e:64:62: fc:94:4e:89:90:d4:19:ad:48:1a:5b:f5:d5:02:10:ff:eb:a7: 8d:c3:3e:e9:d4:bb:7a:e6:03:ae:3c:86:5b:6d:3d:33:1c:47: 3f:69:c1:09:f4:e9:0a:5f:e5:de:73:97:6d:f0:09:5e:cc:09: 5f:3e:f2:28:b0:a9:10:9d:10:a4:5a:a5:b5:1c:bf:24:19:3c: f4:1d:97:8f:68:57:95:08:a6:35:89:06:9b:c1:e1:c1:05:a3: d8:1d:e6:cd:c0:ec:bd:44:e6:4d:9e:dd:3c:43:8b:4e:74:56: 5c:37:b1:e7:ca:e5:b6:6d:0a:79:ed:2f:27:ec:7c:73:26:72: bc:ef:5a:06:45:c5:8d:d6:07:8e:66:2d:30:56:a5:10:6b:05: c8:bb:dd:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUzMDgxMTAvBgNVBAUTKDdCNTkwNTUyMTI4NDkxMDVBRDZGMzlFNTg4MUQ4NDJF NzA3NDM5QUYwHhcNMjUwNDI4MTgyODAxWhcNMjUwNTA1MTgyODAxWjAYMRYwFAYD VQQDEw02ODBmYzhiMS1iODY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo6NBKQLrtpj/29JaMR9tSfY0RGRCazyIaJpvGJEGUuzIUWOE1SzVag8hqqPd qVKXan3YNOl9zZvRbZn/i39+tqjUsohxTqXBQHv9z98te6wuZgSp8+CFygLQl+EL Yd9WF0NKicQh6HGMABB5YfG8bJ1HnilOYyc0gZEiAtrscfUla8d3kRBztJ2Qb0GF /9oMivXhidQhzW5aW+LV8QRe7G/UymEI49zrJ6/hi/Fb/AAg///ntSucCF469D0i z+S4vJyhrYfpkPa0U+Bmo4m5rt9/lbjV9MH5LLuS7hyqZB58H1s2ntni9jOkfiXl eCARNUD5LH/CD1BRRiPb4S7qkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNQLazOw oWfRdJLd+Q/m5NNrJf/UMB8GA1UdIwQYMBaAFHtZBVIShJEFrW855YgdhC5wdDmv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTMwOC9BODE5MTRFMkY0 RDUxMUU5QjkxN0YzNDlDNEY5QUUwMi9lMWtGVWhLRWtRV3Riem5saUIyRUxuQjBP YTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Uxa0ZVaEtFa1FXdGJ6bmxpQjJFTG5CME9hOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTMwOC9BODE5MTRFMkY0RDUxMUU5QjkxN0YzNDlDNEY5QUUwMi9lMWtGVWhLRWtR V3Riem5saUIyRUxuQjBPYTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBybUbJ5ShzGTfA1q3pIqvC+Zd/PMOg3E/kGVbolH60tRw3VJf+buEj leA+I7S8hgazSIN7Kz0dPI7u5ornjTzvQMTmO1HcnZx03DTtMUIHbamWlwq0D1PY 8ZMREUXyDEwPmA4sCfv0ZcFeZGL8lE6JkNQZrUgaW/XVAhD/66eNwz7p1Lt65gOu PIZbbT0zHEc/acEJ9OkKX+Xec5dt8AlezAlfPvIosKkQnRCkWqW1HL8kGTz0HZeP aFeVCKY1iQabweHBBaPYHebNwOy9ROZNnt08Q4tOdFZcN7HnyuW2bQp57S8n7Hxz JnK871oGRcWN1geOZi0wVqUQawXIu90G -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:52 2025 by rpki-client on console.sobornost.net