$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft File: DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft (raw, json) Hash identifier: 6pFWVxPPFRLTPG7vVrxj1r8epAwn7Z0pZaI9RmGjOt4= Subject key identifier: 5C:CA:BE:3A:9E:39:8E:44:91:10:16:A7:B7:74:64:A1:12:AD:A3:24 Authority key identifier: 0C:CA:B9:44:7A:17:AC:3C:8A:78:7B:E9:47:EC:5D:6F:4A:89:5C:E9 Certificate issuer: /CN=A91A6EA0/serialNumber=0CCAB9447A17AC3C8A787BE947EC5D6F4A895CE9 Certificate serial: 01B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DMq5RHoXrDyKeHvpR-xdb0qJXOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft Manifest number: 01B4 Signing time: Sun 27 Apr 2025 02:11:56 +0000 Manifest this update: Sun 27 Apr 2025 02:11:56 +0000 Manifest next update: Sun 04 May 2025 02:11:56 +0000 Files and hashes: 1: DMq5RHoXrDyKeHvpR-xdb0qJXOk.crl (hash: wJMxT/B5AWxur1CRLe7JA+Ulzts42A3iBbv9IdzVbCk=) 2: 35CFAB068C4111ED8E01DF60C4F9AE02.roa (hash: s2ufqDtIL2LcUO3l3IJXmwdiZKcS7NlwuSG6RgI0b0c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.crl rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DMq5RHoXrDyKeHvpR-xdb0qJXOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:11:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 441 (0x1b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6EA0, serialNumber=0CCAB9447A17AC3C8A787BE947EC5D6F4A895CE9 Validity Not Before: Apr 27 02:11:56 2025 GMT Not After : May 4 02:11:56 2025 GMT Subject: CN=680d926c-4b1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:85:7e:e5:50:d9:55:a7:4c:01:99:67:a7:16: 27:c5:85:55:95:9a:98:af:9d:18:9a:58:a4:1e:3c: 57:82:62:27:1e:da:d8:34:11:a7:84:d8:c2:9e:70: b7:80:0d:3a:98:55:ce:24:68:d1:9e:49:d9:9a:ee: 07:f9:b2:66:06:08:f9:4c:93:7b:15:1f:33:d0:23: 6a:66:38:b6:04:50:d5:53:02:b9:f4:57:44:ee:d1: b3:84:73:ee:f1:ff:ed:1e:7c:0b:d6:14:3e:dd:35: a3:58:4f:0c:94:e8:6c:15:6d:db:b8:15:a4:a1:30: 9f:9c:08:f6:6b:a6:b0:06:76:18:f8:9f:fb:fb:94: 34:2e:98:7e:9b:54:45:29:e0:70:b7:04:14:cc:b7: 32:cb:50:20:bd:74:dc:73:c4:74:6a:16:8d:86:99: ec:37:3a:49:7d:56:8f:3c:3e:27:dd:39:40:1a:31: 06:8e:cf:6d:18:7d:60:c4:eb:0b:4b:ce:78:95:d7: 63:ff:1d:77:a1:1e:12:dd:1f:c2:ab:98:49:58:4d: 05:61:f2:a0:37:55:9a:0d:16:e3:9c:97:a1:5b:fb: 10:3f:a3:29:7d:a3:a0:02:55:88:b9:e8:52:b9:3b: 2b:d7:86:2a:26:eb:c0:46:33:7f:45:09:b7:ff:e4: be:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:CA:BE:3A:9E:39:8E:44:91:10:16:A7:B7:74:64:A1:12:AD:A3:24 X509v3 Authority Key Identifier: keyid:0C:CA:B9:44:7A:17:AC:3C:8A:78:7B:E9:47:EC:5D:6F:4A:89:5C:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DMq5RHoXrDyKeHvpR-xdb0qJXOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:4f:bc:10:2c:12:6c:fc:87:3f:b0:2d:86:c1:bd:5b:b2:03: b2:cf:6e:e4:1f:d7:cc:33:e2:8a:84:b0:f5:93:f9:75:62:c2: 31:ce:96:f4:ee:fd:b9:17:ea:cb:fe:f5:d5:62:46:bd:12:6b: 51:da:09:1d:04:c2:5f:61:ae:5f:b9:b0:d1:50:2c:a3:76:08: 7c:4f:ec:d7:1d:e2:01:4c:42:28:ca:ab:56:9c:81:7e:18:d1: d8:bf:91:3f:20:a9:84:47:14:01:5b:27:0b:38:40:c4:d0:b3: 2b:67:0c:8a:4e:2d:72:b5:14:d9:e1:3b:eb:dd:d0:1e:fc:d1: eb:28:7c:64:96:89:0b:59:23:07:c3:9f:ce:eb:c0:ab:13:5d: 19:5f:0a:96:c5:e8:4d:d7:59:ed:ba:ff:e0:33:dd:1c:9c:34: 78:4f:ca:ff:67:2f:8b:46:c2:ac:73:77:6d:3c:3d:a7:24:b3: 33:c9:30:01:76:bd:5b:a5:9a:2d:b1:43:9a:45:5f:5b:f0:8b: 12:57:91:c6:fe:d7:93:82:73:fc:7f:0a:02:58:be:b9:ce:13: 57:be:dc:b9:02:43:51:28:7d:85:0b:57:0e:f2:07:5c:34:bd: 13:bd:a2:68:4b:ab:f4:41:de:18:08:b2:1a:55:2d:48:d9:81: d5:85:7f:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZFQTAxMTAvBgNVBAUTKDBDQ0FCOTQ0N0ExN0FDM0M4QTc4N0JFOTQ3RUM1RDZG NEE4OTVDRTkwHhcNMjUwNDI3MDIxMTU2WhcNMjUwNTA0MDIxMTU2WjAYMRYwFAYD VQQDEw02ODBkOTI2Yy00YjFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxIV+5VDZVadMAZlnpxYnxYVVlZqYr50YmlikHjxXgmInHtrYNBGnhNjCnnC3 gA06mFXOJGjRnknZmu4H+bJmBgj5TJN7FR8z0CNqZji2BFDVUwK59FdE7tGzhHPu 8f/tHnwL1hQ+3TWjWE8MlOhsFW3buBWkoTCfnAj2a6awBnYY+J/7+5Q0Lph+m1RF KeBwtwQUzLcyy1AgvXTcc8R0ahaNhpnsNzpJfVaPPD4n3TlAGjEGjs9tGH1gxOsL S854lddj/x13oR4S3R/Cq5hJWE0FYfKgN1WaDRbjnJehW/sQP6MpfaOgAlWIuehS uTsr14YqJuvARjN/RQm3/+S++wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFzKvjqe OY5EkRAWp7d0ZKESraMkMB8GA1UdIwQYMBaAFAzKuUR6F6w8inh76UfsXW9KiVzp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkVBMC9GOTE0MDBDMjhD MkMxMUVEOTYzOEU2NzJDNEY5QUUwMi9ETXE1UkhvWHJEeUtlSHZwUi14ZGIwcUpY T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RNcTVSSG9YckR5S2VIdnBSLXhkYjBxSlhPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkVBMC9GOTE0MDBDMjhDMkMxMUVEOTYzOEU2NzJDNEY5QUUwMi9ETXE1UkhvWHJE eUtlSHZwUi14ZGIwcUpYT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+T7wQLBJs/Ic/sC2Gwb1bsgOyz27kH9fMM+KKhLD1k/l1YsIxzpb0 7v25F+rL/vXVYka9EmtR2gkdBMJfYa5fubDRUCyjdgh8T+zXHeIBTEIoyqtWnIF+ GNHYv5E/IKmERxQBWycLOEDE0LMrZwyKTi1ytRTZ4Tvr3dAe/NHrKHxklokLWSMH w5/O68CrE10ZXwqWxehN11ntuv/gM90cnDR4T8r/Zy+LRsKsc3dtPD2nJLMzyTAB dr1bpZotsUOaRV9b8IsSV5HG/teTgnP8fwoCWL65zhNXvty5AkNRKH2FC1cO8gdc NL0TvaJoS6v0Qd4YCLIaVS1I2YHVhX+X -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:02 2025 by rpki-client on console.sobornost.net