$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft File: 5esYDNbcUWxm01KwR7npxaUCcOM.mft (raw, json) Hash identifier: vR6l1iWfhijXXvFwigEh93eg0qeW/ZSagj405CMGqTE= Subject key identifier: 12:19:CB:11:C2:AC:2F:45:60:A8:AE:E7:2A:1B:1B:5B:C5:F6:41:B4 Authority key identifier: E5:EB:18:0C:D6:DC:51:6C:66:D3:52:B0:47:B9:E9:C5:A5:02:70:E3 Certificate issuer: /CN=A91ABFD9/serialNumber=E5EB180CD6DC516C66D352B047B9E9C5A50270E3 Certificate serial: 08AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft Manifest number: 0893 Signing time: Sat 26 Apr 2025 20:19:18 +0000 Manifest this update: Sat 26 Apr 2025 20:19:18 +0000 Manifest next update: Sat 03 May 2025 20:19:17 +0000 Files and hashes: 1: 5esYDNbcUWxm01KwR7npxaUCcOM.crl (hash: gMuJqhm5CMaqLrZr+TIJwXRPiCt+AKbyt9e6buXyggU=) 2: E2E21364C4F811EAB8D31113C4F9AE02.roa (hash: KT6K45U/vV1zQkhhfiaxr9a9XeTKLIwG0eEDcyR3ERI=) 3: F1A54AC47A5611EB876D281FC4F9AE02.roa (hash: LbbFjEbhHg5fzKZNW2jokQ6UuaIS/rDPKgFU2q0pJeg=) 4: 36945EC2232711EBA0F14F17C4F9AE02.roa (hash: Gzcr6RaAc7WjlspRH4slQcyVh4i/nmyVkR/RXd4O0KM=) 5: 6AE50E1C21E011EBBF36CD21C4F9AE02.roa (hash: Lg2iSZUiBgCc3+l3q9JExUq+jxWe1fvszct9oy4Ys3k=) 6: E22ECDEAC4F811EAB8D31113C4F9AE02.roa (hash: tlDd7aRrzNeu6uslbfPluCcOk663EDpRsH8KL9nqlD4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.crl rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2223 (0x8af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABFD9, serialNumber=E5EB180CD6DC516C66D352B047B9E9C5A50270E3 Validity Not Before: Apr 26 20:19:18 2025 GMT Not After : May 3 20:19:17 2025 GMT Subject: CN=680d3fc6-463c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ff:b6:b6:71:d9:a4:68:44:7f:50:95:5e:37: 45:85:82:6c:24:3b:2c:c5:60:2f:c0:2f:ed:b8:64: 83:40:91:fd:2f:fb:e1:94:64:ab:22:cf:93:49:62: cf:9e:06:dc:21:ac:51:1b:c5:98:bc:63:a6:9f:1b: 7e:6f:3c:6f:99:e1:4f:bb:9d:a0:10:b4:6b:56:fe: d2:56:67:6b:ac:79:75:d7:68:fa:9c:05:c7:c4:bb: 26:3e:77:07:19:58:8a:9e:ef:88:0b:2c:fc:37:bb: a3:a5:bc:3e:be:7a:fe:fb:01:db:c2:d5:d2:bb:48: 8a:2d:ee:a6:b1:7a:51:78:b4:c2:29:87:1d:27:38: 68:a2:28:9d:02:af:1d:a8:f4:60:a5:c9:9b:b4:dc: 9e:77:7f:22:51:eb:8b:70:84:76:ec:79:9d:af:d3: fa:80:82:c6:e7:c1:08:04:29:f5:51:ac:ed:2b:2d: 9f:6c:1f:25:dc:5b:9d:ae:7c:b1:cd:56:26:37:06: 44:c7:03:7f:c4:9c:ac:b0:51:a2:fa:50:34:5b:bd: a2:87:2a:cc:43:d5:11:ce:2f:4b:85:02:a8:1a:09: 9a:d4:87:60:c8:7f:2f:44:43:1f:e8:c0:ad:a8:78: 24:aa:ce:81:22:26:98:23:49:34:b2:06:91:f6:e1: c4:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:19:CB:11:C2:AC:2F:45:60:A8:AE:E7:2A:1B:1B:5B:C5:F6:41:B4 X509v3 Authority Key Identifier: keyid:E5:EB:18:0C:D6:DC:51:6C:66:D3:52:B0:47:B9:E9:C5:A5:02:70:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:aa:ec:3a:3c:24:1c:7d:e0:61:d8:04:93:30:47:a7:c4:6c: 35:26:f1:19:62:62:ca:68:68:ad:ad:79:c2:fd:c5:64:fe:99: 26:d1:15:df:82:9f:93:46:0e:a8:43:c9:d0:b0:c3:cc:b1:49: ea:8f:c5:8e:8a:85:c5:00:a6:4f:18:79:cd:84:fe:5c:01:41: 0b:55:96:e9:4c:54:f3:ca:eb:19:2b:a0:a3:cb:3b:96:b6:5d: 91:01:54:c6:15:14:70:7d:36:ad:a6:a1:80:42:80:58:56:31: fd:70:27:d8:5d:5e:9e:79:92:ec:7c:d0:21:df:9c:eb:c8:69: fe:b2:64:03:9a:87:00:be:c1:cb:42:a7:f4:ab:f0:f7:ad:60: f9:db:3d:26:92:cc:80:57:c7:1e:6b:04:53:46:d0:6d:b8:29: 58:cd:94:2e:aa:40:15:f7:67:3c:1c:b5:46:43:43:2e:8e:af: 0a:ae:f4:ff:a3:32:24:be:8c:04:c2:d4:84:fd:1a:69:8a:fb: 05:c7:71:4f:4f:74:26:c6:79:4f:a9:bf:a3:f8:cd:8a:bb:ec: 5f:98:a0:45:01:d5:99:3c:5c:c7:19:19:68:85:84:3d:cd:40: f5:49:b8:47:c0:2f:60:af:b7:45:a9:c3:6f:1f:1b:85:39:05: f7:c6:a3:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUJGRDkxMTAvBgNVBAUTKEU1RUIxODBDRDZEQzUxNkM2NkQzNTJCMDQ3QjlFOUM1 QTUwMjcwRTMwHhcNMjUwNDI2MjAxOTE4WhcNMjUwNTAzMjAxOTE3WjAYMRYwFAYD VQQDEw02ODBkM2ZjNi00NjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsf+2tnHZpGhEf1CVXjdFhYJsJDssxWAvwC/tuGSDQJH9L/vhlGSrIs+TSWLP ngbcIaxRG8WYvGOmnxt+bzxvmeFPu52gELRrVv7SVmdrrHl112j6nAXHxLsmPncH GViKnu+ICyz8N7ujpbw+vnr++wHbwtXSu0iKLe6msXpReLTCKYcdJzhooiidAq8d qPRgpcmbtNyed38iUeuLcIR27Hmdr9P6gILG58EIBCn1UaztKy2fbB8l3Fudrnyx zVYmNwZExwN/xJyssFGi+lA0W72ihyrMQ9URzi9LhQKoGgma1IdgyH8vREMf6MCt qHgkqs6BIiaYI0k0sgaR9uHEaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBIZyxHC rC9FYKiu5yobG1vF9kG0MB8GA1UdIwQYMBaAFOXrGAzW3FFsZtNSsEe56cWlAnDj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkZEOS80QUU4MDQxRUI5 RDcxMUVBOUNGNTFFNUZDNEY5QUUwMi81ZXNZRE5iY1VXeG0wMUt3UjducHhhVUNj T00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVlc1lETmJjVVd4bTAxS3dSN25weGFVQ2NPTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QkZEOS80QUU4MDQxRUI5RDcxMUVBOUNGNTFFNUZDNEY5QUUwMi81ZXNZRE5iY1VX eG0wMUt3UjducHhhVUNjT00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDquw6PCQcfeBh2ASTMEenxGw1JvEZYmLKaGitrXnC/cVk/pkm0RXf gp+TRg6oQ8nQsMPMsUnqj8WOioXFAKZPGHnNhP5cAUELVZbpTFTzyusZK6CjyzuW tl2RAVTGFRRwfTatpqGAQoBYVjH9cCfYXV6eeZLsfNAh35zryGn+smQDmocAvsHL Qqf0q/D3rWD52z0mksyAV8ceawRTRtBtuClYzZQuqkAV92c8HLVGQ0Mujq8KrvT/ ozIkvowEwtSE/RppivsFx3FPT3QmxnlPqb+j+M2Ku+xfmKBFAdWZPFzHGRlohYQ9 zUD1SbhHwC9gr7dFqcNvHxuFOQX3xqOZ -----END CERTIFICATE-----Generated at Sun Apr 27 00:14:08 2025 by rpki-client on console.sobornost.net