$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA618/557EAB3C3ABE11EF8619D220C4F9AE02/pSvwKHcZGUlxLT2tKdSreid57EM.mft File: pSvwKHcZGUlxLT2tKdSreid57EM.mft (raw, json) Hash identifier: B+DmU/O4vezbkfYZhlYBbQ8aWgRkIBzFshkuein6F78= Subject key identifier: 25:32:15:BA:27:59:E8:33:14:0C:0D:56:C1:B4:9E:9F:E9:5A:5E:2B Authority key identifier: A5:2B:F0:28:77:19:19:49:71:2D:3D:AD:29:D4:AB:7A:27:79:EC:43 Certificate issuer: /CN=A91AA618/serialNumber=A52BF02877191949712D3DAD29D4AB7A2779EC43 Certificate serial: 9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pSvwKHcZGUlxLT2tKdSreid57EM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA618/557EAB3C3ABE11EF8619D220C4F9AE02/pSvwKHcZGUlxLT2tKdSreid57EM.mft Manifest number: 9C Signing time: Sun 27 Apr 2025 05:09:56 +0000 Manifest this update: Sun 27 Apr 2025 05:09:55 +0000 Manifest next update: Sun 04 May 2025 05:09:55 +0000 Files and hashes: 1: pSvwKHcZGUlxLT2tKdSreid57EM.crl (hash: ugc+45JYQR0F+MjoLK20qQV0S8KM/eHn2gtQhBB9f+w=) 2: 88F562E83DAD11EFAA46E417C4F9AE02.roa (hash: y+CwsCOmzO2omqt+7OucZwgkShxhjQvdzFrUFNJogYw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA618/557EAB3C3ABE11EF8619D220C4F9AE02/pSvwKHcZGUlxLT2tKdSreid57EM.crl rsync://rpki.apnic.net/member_repository/A91AA618/557EAB3C3ABE11EF8619D220C4F9AE02/pSvwKHcZGUlxLT2tKdSreid57EM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pSvwKHcZGUlxLT2tKdSreid57EM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 157 (0x9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA618, serialNumber=A52BF02877191949712D3DAD29D4AB7A2779EC43 Validity Not Before: Apr 27 05:09:55 2025 GMT Not After : May 4 05:09:55 2025 GMT Subject: CN=680dbc24-6228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b0:f5:4f:54:3a:66:4d:45:05:76:28:6e:86: cb:72:87:df:9e:f3:ac:07:a4:ce:af:d7:20:8d:71: c3:7a:02:c3:49:ba:25:02:98:a4:4e:9b:95:15:74: 12:c7:79:23:76:ac:47:c6:c7:e1:d4:3b:48:ab:54: ba:5c:f6:6a:ca:ab:2c:02:f8:ec:37:c8:7c:24:b7: e0:a2:87:a9:c6:bf:ff:0f:02:e8:dc:a4:9d:bf:2c: 3a:81:ee:ee:41:2a:24:73:61:63:78:50:17:79:3c: 58:74:af:96:99:62:31:cc:d3:e5:75:4c:11:0f:a1: 14:85:e5:b2:5d:b6:33:8f:40:b6:f2:8e:72:c8:d5: a8:ee:fb:40:f6:79:bd:05:44:cd:b7:8e:e7:d0:93: 96:a4:80:6f:12:4d:23:2e:1b:9b:d5:45:d0:52:d4: 02:51:66:d3:ca:be:e1:1e:d7:a4:36:fc:e3:71:31: 12:ab:0d:02:c8:f5:49:a2:66:e4:d3:1a:be:ff:3b: da:c5:65:7a:c7:38:2e:4a:04:a5:00:e1:de:5a:c1: de:39:8a:8a:86:62:49:3c:52:ca:be:09:80:d6:96: 6f:b7:77:0d:d9:47:26:12:a6:f4:22:45:1f:38:f4: 95:60:b4:b7:76:0c:3c:0a:3b:be:f0:a5:0a:01:ca: 58:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:32:15:BA:27:59:E8:33:14:0C:0D:56:C1:B4:9E:9F:E9:5A:5E:2B X509v3 Authority Key Identifier: keyid:A5:2B:F0:28:77:19:19:49:71:2D:3D:AD:29:D4:AB:7A:27:79:EC:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA618/557EAB3C3ABE11EF8619D220C4F9AE02/pSvwKHcZGUlxLT2tKdSreid57EM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pSvwKHcZGUlxLT2tKdSreid57EM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA618/557EAB3C3ABE11EF8619D220C4F9AE02/pSvwKHcZGUlxLT2tKdSreid57EM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:92:41:ae:af:15:21:5c:34:15:19:ad:8d:0c:5a:14:0d:31: 5f:c3:11:1d:39:61:68:d3:1f:22:07:91:ab:30:31:7c:1c:39: e6:f1:10:cc:54:4b:b8:c2:92:ea:42:6d:f2:dd:62:52:ec:37: 35:4d:89:0b:39:21:ed:1b:cb:76:9a:2d:42:36:0e:3a:67:08: 68:a6:d7:57:e9:79:2d:c3:19:f0:b8:77:38:f9:ff:82:c3:f2: a1:5f:a6:d8:27:08:cf:d4:41:ae:ad:b7:53:45:58:c5:fe:8d: 95:0a:73:4a:bf:1e:a1:a1:ee:d0:65:03:c5:d7:e7:4c:21:95: 03:62:e7:72:d2:31:16:22:cd:27:d1:e9:fd:d8:f1:3a:11:87: 40:58:97:88:59:45:c5:ac:97:61:33:12:38:14:b8:68:01:81: 0c:e9:73:27:57:21:01:f3:2c:25:73:37:d8:6a:f9:24:3d:e8: c8:2d:0a:7b:76:7f:58:36:9d:a2:f7:3f:d7:68:eb:b7:21:f3: 01:63:52:33:c7:69:a5:12:24:1a:e0:50:d5:d4:c4:d1:14:b8: 50:24:4c:4e:fe:31:8a:64:f0:58:f3:d3:d8:e0:f0:2b:86:2b: f2:ff:6a:48:b0:ae:20:8a:73:b9:6a:f6:8a:0b:df:6a:f1:3e: c6:59:b5:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE2MTgxMTAvBgNVBAUTKEE1MkJGMDI4NzcxOTE5NDk3MTJEM0RBRDI5RDRBQjdB Mjc3OUVDNDMwHhcNMjUwNDI3MDUwOTU1WhcNMjUwNTA0MDUwOTU1WjAYMRYwFAYD VQQDEw02ODBkYmMyNC02MjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA27D1T1Q6Zk1FBXYobobLcoffnvOsB6TOr9cgjXHDegLDSbolApikTpuVFXQS x3kjdqxHxsfh1DtIq1S6XPZqyqssAvjsN8h8JLfgooepxr//DwLo3KSdvyw6ge7u QSokc2FjeFAXeTxYdK+WmWIxzNPldUwRD6EUheWyXbYzj0C28o5yyNWo7vtA9nm9 BUTNt47n0JOWpIBvEk0jLhub1UXQUtQCUWbTyr7hHtekNvzjcTESqw0CyPVJombk 0xq+/zvaxWV6xzguSgSlAOHeWsHeOYqKhmJJPFLKvgmA1pZvt3cN2UcmEqb0IkUf OPSVYLS3dgw8Cju+8KUKAcpYKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCUyFbon WegzFAwNVsG0np/pWl4rMB8GA1UdIwQYMBaAFKUr8Ch3GRlJcS09rSnUq3oneexD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTYxOC81NTdFQUIzQzNB QkUxMUVGODYxOUQyMjBDNEY5QUUwMi9wU3Z3S0hjWkdVbHhMVDJ0S2RTcmVpZDU3 RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BTdndLSGNaR1VseExUMnRLZFNyZWlkNTdFTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTYxOC81NTdFQUIzQzNBQkUxMUVGODYxOUQyMjBDNEY5QUUwMi9wU3Z3S0hjWkdV bHhMVDJ0S2RTcmVpZDU3RU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBskkGurxUhXDQVGa2NDFoUDTFfwxEdOWFo0x8iB5GrMDF8HDnm8RDM VEu4wpLqQm3y3WJS7Dc1TYkLOSHtG8t2mi1CNg46ZwhoptdX6XktwxnwuHc4+f+C w/KhX6bYJwjP1EGurbdTRVjF/o2VCnNKvx6hoe7QZQPF1+dMIZUDYudy0jEWIs0n 0en92PE6EYdAWJeIWUXFrJdhMxI4FLhoAYEM6XMnVyEB8ywlczfYavkkPejILQp7 dn9YNp2i9z/XaOu3IfMBY1Izx2mlEiQa4FDV1MTRFLhQJExO/jGKZPBY89PY4PAr hivy/2pIsK4ginO5avaKC99q8T7GWbXj -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:53 2025 by rpki-client on console.sobornost.net