$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft File: CrmfUsmtm-C5wERwz7G2wjYP0PU.mft (raw, json) Hash identifier: RUZWlkKtwaACPmEXVwXz9OOzHBZYSIAZGPaQrgpPuSA= Subject key identifier: F6:CE:FB:35:4B:2C:A3:6A:63:0B:C2:44:B6:54:36:EE:F5:11:AC:49 Authority key identifier: 0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5 Certificate issuer: /CN=A91A6943/serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5 Certificate serial: 09C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft Manifest number: 09A1 Signing time: Mon 28 Apr 2025 20:33:17 +0000 Manifest this update: Mon 28 Apr 2025 20:33:17 +0000 Manifest next update: Mon 05 May 2025 20:33:17 +0000 Files and hashes: 1: CrmfUsmtm-C5wERwz7G2wjYP0PU.crl (hash: h9PSU9wXQ488ieeU3wW3GnZEj2fP4n+MolISGYRehic=) 2: 2ABC9DCAE70111EE8CBD5443C4F9AE02.roa (hash: XqCmEMVbctn80tZMWt9KBtSYiAl81CKhVgV+0CIH65c=) 3: D8EA816A3EEE11EF98924D60C4F9AE02.roa (hash: 5hNv554rReK06N20/FH9rDWPnZEfKsGbqYpiIu4Udbg=) 4: 3EF6E4A4291D11EFBE3C7971C4F9AE02.roa (hash: SpBt7sDt3PRONHBV0bfhwVMq6dMRxKdSE97eOEgTO/c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:33:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2505 (0x9c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6943, serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5 Validity Not Before: Apr 28 20:33:17 2025 GMT Not After : May 5 20:33:17 2025 GMT Subject: CN=680fe60d-bc9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:01:35:14:a8:ff:c7:70:d4:e6:7b:f5:0b:18: cf:e7:50:25:ac:dd:75:ad:d1:18:9e:f1:73:a3:10: 06:a2:42:48:6b:34:fe:72:d2:b1:0f:9e:94:4a:30: 21:c4:f2:fa:87:6a:90:99:6b:4c:52:09:20:43:80: cf:f6:ae:38:b0:c5:90:dd:cb:91:40:29:3b:91:08: d9:1c:fa:d2:f7:b2:44:a3:30:e3:3d:11:53:51:b8: 9f:e7:67:c5:08:bf:ad:26:2e:8d:e9:79:3a:e4:e0: 36:18:e6:9f:33:e3:47:d2:56:e0:5c:e6:03:29:61: d1:ca:9e:a7:93:3a:ff:89:bd:43:f0:70:4d:5d:94: a6:b2:ff:c6:cb:fa:f2:53:0d:1d:76:eb:e5:82:9b: 7d:79:db:bc:65:81:40:82:b8:f8:81:95:67:77:10: 7a:ed:28:72:45:b0:ec:b5:78:02:eb:ef:cf:b9:d5: 4b:73:db:5e:f4:32:b1:a6:69:8f:2e:e4:aa:02:5d: 28:ee:46:48:4f:a2:9c:2b:d8:7a:3b:6c:35:d8:bb: e5:a7:09:86:e2:c5:b8:cf:9e:bb:d2:25:b5:dc:fa: ba:e4:95:32:c9:66:3d:df:91:01:4f:fc:fd:65:14: 3a:d3:cc:e2:2b:a9:cc:77:7a:0f:c1:4f:a6:f1:ed: b2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:CE:FB:35:4B:2C:A3:6A:63:0B:C2:44:B6:54:36:EE:F5:11:AC:49 X509v3 Authority Key Identifier: keyid:0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:73:77:03:90:37:62:93:c4:a0:a7:28:82:ea:f0:c3:56:41: 14:00:50:16:51:61:07:5d:1b:28:2f:6c:6d:09:64:fe:ea:9c: ca:8b:a8:89:eb:1d:21:c4:83:51:0d:ec:b0:d1:cd:b5:88:71: 9b:ab:4d:d2:98:27:c3:0a:23:88:22:46:c6:82:d3:54:6a:ca: 76:38:62:ef:d8:74:a9:aa:c1:d6:d7:ac:ed:6c:81:d3:0b:d7: d8:36:2c:86:0f:34:00:80:a6:3e:bb:34:2c:5d:87:a5:db:8a: 88:28:0c:9d:84:06:60:47:2f:94:2d:a7:48:c8:d3:10:b7:a1: e8:55:6d:c5:91:60:d4:62:12:85:0a:53:d3:44:ee:14:20:81: 05:7e:da:cd:bb:f1:84:bc:c4:23:4c:d3:30:24:6f:4d:40:8f: 96:c9:bf:47:c1:a1:ad:71:0d:64:fe:4e:b7:95:cf:7d:82:3a: ce:d1:66:c6:89:06:5b:5b:43:60:88:c0:23:a7:80:9f:bd:4f: d0:6f:07:de:12:94:8a:cb:f8:80:e7:53:f4:9b:0f:d0:a6:4c: 02:45:e8:15:2b:f7:d9:4b:f4:67:d0:17:6f:9f:e3:d4:b7:1b: de:a0:3e:f7:7e:52:0e:01:43:37:25:b8:c8:47:bd:57:6a:3c: c6:e8:ec:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY5NDMxMTAvBgNVBAUTKDBBQjk5RjUyQzlBRDlCRTBCOUMwNDQ3MENGQjFCNkMy MzYwRkQwRjUwHhcNMjUwNDI4MjAzMzE3WhcNMjUwNTA1MjAzMzE3WjAYMRYwFAYD VQQDEw02ODBmZTYwZC1iYzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAywE1FKj/x3DU5nv1CxjP51AlrN11rdEYnvFzoxAGokJIazT+ctKxD56USjAh xPL6h2qQmWtMUgkgQ4DP9q44sMWQ3cuRQCk7kQjZHPrS97JEozDjPRFTUbif52fF CL+tJi6N6Xk65OA2GOafM+NH0lbgXOYDKWHRyp6nkzr/ib1D8HBNXZSmsv/Gy/ry Uw0dduvlgpt9edu8ZYFAgrj4gZVndxB67ShyRbDstXgC6+/PudVLc9te9DKxpmmP LuSqAl0o7kZIT6KcK9h6O2w12LvlpwmG4sW4z5670iW13Pq65JUyyWY935EBT/z9 ZRQ608ziK6nMd3oPwU+m8e2y8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPbO+zVL LKNqYwvCRLZUNu71EaxJMB8GA1UdIwQYMBaAFAq5n1LJrZvgucBEcM+xtsI2D9D1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjk0My9CNzE4MTE2ODhE NTExMUVBQjhCMjYzODRDNEY5QUUwMi9Dcm1mVXNtdG0tQzV3RVJ3ejdHMndqWVAw UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NybWZVc210bS1DNXdFUnd6N0cyd2pZUDBQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Njk0My9CNzE4MTE2ODhENTExMUVBQjhCMjYzODRDNEY5QUUwMi9Dcm1mVXNtdG0t QzV3RVJ3ejdHMndqWVAwUFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbc3cDkDdik8SgpyiC6vDDVkEUAFAWUWEHXRsoL2xtCWT+6pzKi6iJ 6x0hxINRDeyw0c21iHGbq03SmCfDCiOIIkbGgtNUasp2OGLv2HSpqsHW16ztbIHT C9fYNiyGDzQAgKY+uzQsXYel24qIKAydhAZgRy+ULadIyNMQt6HoVW3FkWDUYhKF ClPTRO4UIIEFftrNu/GEvMQjTNMwJG9NQI+Wyb9HwaGtcQ1k/k63lc99gjrO0WbG iQZbW0NgiMAjp4CfvU/QbwfeEpSKy/iA51P0mw/QpkwCRegVK/fZS/Rn0Bdvn+PU txveoD73flIOAUM3JbjIR71XajzG6Ow/ -----END CERTIFICATE-----Generated at Mon Apr 28 23:05:44 2025 by rpki-client on console.sobornost.net