$ rpki-client -vvf rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.mft File: pevfmDkZxg9iLzTvj8Uh5ySJ0c0.mft (raw, json) Hash identifier: lIF0SnSQoFSmdlNrzqWKknYfv0W1kWG8hS86/7lE35I= Subject key identifier: A7:43:2A:14:21:79:0F:89:48:C2:DE:C8:7E:83:8E:7E:48:3E:E6:2B Authority key identifier: A5:EB:DF:98:39:19:C6:0F:62:2F:34:EF:8F:C5:21:E7:24:89:D1:CD Certificate issuer: /CN=A91A995E/serialNumber=A5EBDF983919C60F622F34EF8FC521E72489D1CD Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.mft Manifest number: 20 Signing time: Sun 27 Apr 2025 06:42:52 +0000 Manifest this update: Sun 27 Apr 2025 06:42:51 +0000 Manifest next update: Sun 04 May 2025 06:42:51 +0000 Files and hashes: 1: pevfmDkZxg9iLzTvj8Uh5ySJ0c0.crl (hash: cNCglsjydn6VBKW2K+s6PDyu0XUuMdpQ6+jLM7y10+E=) 2: B3E4D03621B111F089CE216DC4F9AE02.roa (hash: VCQENYwleJhQRqqUILKpkln6ADdmKoB6HviWfuCE7i4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.crl rsync://rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A995E, serialNumber=A5EBDF983919C60F622F34EF8FC521E72489D1CD Validity Not Before: Apr 27 06:42:51 2025 GMT Not After : May 4 06:42:51 2025 GMT Subject: CN=680dd1eb-b59a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:cc:17:6c:d5:99:10:68:0c:e5:b5:24:77:35: 39:f9:bc:09:97:70:4c:e9:25:fb:e0:7e:83:28:fe: 9c:c0:08:8a:25:c7:7b:bb:24:c7:29:dc:ec:d7:e0: ed:4e:37:5c:12:49:eb:54:73:fe:84:41:e4:6a:bf: fe:7d:c7:13:75:72:82:2d:01:b1:b4:1e:46:22:c5: 03:67:ee:15:5a:54:a5:9f:6c:6a:70:7e:40:97:63: b5:9c:9f:ef:a8:6f:2e:30:a0:69:f3:0a:bc:19:fb: 18:1d:bd:22:d8:62:11:79:a6:c4:33:24:86:88:2d: 37:d2:4f:20:29:0d:e3:28:38:19:b0:30:55:a8:e2: a0:14:c8:84:56:aa:a6:9c:28:7f:b0:b9:34:50:8a: 2b:78:a6:df:c5:4a:19:8e:23:cc:9d:64:06:7b:f9: 3a:55:42:f8:79:03:96:4f:4b:c8:36:c3:63:34:fc: 19:b8:ca:9f:71:ce:4e:a2:e3:51:50:4f:90:d9:05: 6a:dd:4d:8b:f6:9f:94:e8:b9:68:a9:83:ed:1d:db: 72:81:3f:74:9b:09:ee:13:db:a2:88:0e:9a:f2:96: d9:18:ee:5c:37:ce:30:04:84:87:4c:11:fc:ee:cf: 6c:31:54:86:07:1b:1b:91:43:1e:45:11:bc:4c:8f: 65:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:43:2A:14:21:79:0F:89:48:C2:DE:C8:7E:83:8E:7E:48:3E:E6:2B X509v3 Authority Key Identifier: keyid:A5:EB:DF:98:39:19:C6:0F:62:2F:34:EF:8F:C5:21:E7:24:89:D1:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:93:1c:ca:69:95:d7:d5:78:5c:89:8f:89:29:4b:4d:3c:45: 22:01:88:fb:39:f6:da:3c:07:45:e2:1e:3c:e5:5a:03:15:f1: 71:d2:4d:c5:6c:b7:87:98:26:c2:9d:27:4c:1c:bb:a8:c2:29: 6a:1e:2a:3b:1b:19:18:09:03:b0:04:bc:c6:b2:02:04:d4:6f: e2:3a:a4:2f:52:4f:4b:1d:57:05:6a:9b:f4:87:19:a5:5b:ca: b5:f0:0c:75:47:1b:75:b0:37:22:6f:5c:53:fc:23:77:44:16: 45:ae:17:db:42:01:02:5c:68:bd:a9:3c:04:8f:d3:78:0f:05: cd:e6:53:4a:86:92:ed:c8:44:95:ba:8c:4b:c3:b9:b4:5f:3b: 4e:33:6a:72:e7:0e:1d:b5:9c:8f:c3:3d:d7:ac:4c:ca:92:53: 42:fd:c0:cc:aa:68:5e:61:9b:23:82:59:c8:e2:c6:a1:73:2c: 46:43:90:6c:e1:33:39:6b:1b:19:7c:eb:ae:05:ea:2e:cf:6e: 19:c5:8d:5a:2a:7c:6f:fc:ca:04:1b:79:06:bc:4d:c8:c1:08: fd:42:6b:4a:ef:62:70:a5:c2:db:cf:05:e5:29:65:03:c5:53: 7f:99:3f:98:c3:97:e5:33:77:10:c3:5f:86:3f:9d:58:a7:92: 35:a4:71:02 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OTk1RTExMC8GA1UEBRMoQTVFQkRGOTgzOTE5QzYwRjYyMkYzNEVGOEZDNTIxRTcy NDg5RDFDRDAeFw0yNTA0MjcwNjQyNTFaFw0yNTA1MDQwNjQyNTFaMBgxFjAUBgNV BAMTDTY4MGRkMWViLWI1OWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwzBds1ZkQaAzltSR3NTn5vAmXcEzpJfvgfoMo/pzACIolx3u7JMcp3OzX4O1O N1wSSetUc/6EQeRqv/59xxN1coItAbG0HkYixQNn7hVaVKWfbGpwfkCXY7Wcn++o by4woGnzCrwZ+xgdvSLYYhF5psQzJIaILTfSTyApDeMoOBmwMFWo4qAUyIRWqqac KH+wuTRQiit4pt/FShmOI8ydZAZ7+TpVQvh5A5ZPS8g2w2M0/Bm4yp9xzk6i41FQ T5DZBWrdTYv2n5TouWipg+0d23KBP3SbCe4T26KIDpryltkY7lw3zjAEhIdMEfzu z2wxVIYHGxuRQx5FEbxMj2UtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUp0MqFCF5 D4lIwt7IfoOOfkg+5iswHwYDVR0jBBgwFoAUpevfmDkZxg9iLzTvj8Uh5ySJ0c0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5OTVFLzM3QkI1RjgyRkE2 MjExRUY5NTU1NUMwRUM0RjlBRTAyL3BldmZtRGtaeGc5aUx6VHZqOFVoNXlTSjBj MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcGV2Zm1Ea1p4ZzlpTHpUdmo4VWg1eVNKMGMwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5 OTVFLzM3QkI1RjgyRkE2MjExRUY5NTU1NUMwRUM0RjlBRTAyL3BldmZtRGtaeGc5 aUx6VHZqOFVoNXlTSjBjMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADKTHMppldfVeFyJj4kpS008RSIBiPs59to8B0XiHjzlWgMV8XHSTcVs t4eYJsKdJ0wcu6jCKWoeKjsbGRgJA7AEvMayAgTUb+I6pC9ST0sdVwVqm/SHGaVb yrXwDHVHG3WwNyJvXFP8I3dEFkWuF9tCAQJcaL2pPASP03gPBc3mU0qGku3IRJW6 jEvDubRfO04zanLnDh21nI/DPdesTMqSU0L9wMyqaF5hmyOCWcjixqFzLEZDkGzh MzlrGxl8664F6i7PbhnFjVoqfG/8ygQbeQa8TcjBCP1Ca0rvYnClwtvPBeUpZQPF U3+ZP5jDl+UzdxDDX4Y/nVinkjWkcQI= -----END CERTIFICATE-----Generated at Sun Apr 27 10:27:18 2025 by rpki-client on console.sobornost.net