$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.mft File: hemZwivuAcMmTT0iZ1ghCS__0Cw.mft (raw, json) Hash identifier: eerRbwp6i45lHy3rD2fTq6soXM+/PkjjXYBUVe9dz2M= Subject key identifier: 2D:C7:1B:43:61:AB:36:47:65:57:3D:DC:FF:65:8E:0E:83:E1:3C:37 Authority key identifier: 85:E9:99:C2:2B:EE:01:C3:26:4D:3D:22:67:58:21:09:2F:FF:D0:2C Certificate issuer: /CN=A91AC132/serialNumber=85E999C22BEE01C3264D3D22675821092FFFD02C Certificate serial: 4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hemZwivuAcMmTT0iZ1ghCS__0Cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.mft Manifest number: 49 Signing time: Sun 27 Apr 2025 06:13:34 +0000 Manifest this update: Sun 27 Apr 2025 06:13:33 +0000 Manifest next update: Sun 04 May 2025 06:13:33 +0000 Files and hashes: 1: hemZwivuAcMmTT0iZ1ghCS__0Cw.crl (hash: fwKcgWwngGmqF8uDwjXT+wQ720pkYD3GtNyn3/h0k64=) 2: 8B91AD8CD6B811EF86FC5149C4F9AE02.roa (hash: nKrpei7NHXS/yvzIer9NaLALl/Q2sUCsHstVjHOpR2Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.crl rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hemZwivuAcMmTT0iZ1ghCS__0Cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74 (0x4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC132, serialNumber=85E999C22BEE01C3264D3D22675821092FFFD02C Validity Not Before: Apr 27 06:13:33 2025 GMT Not After : May 4 06:13:33 2025 GMT Subject: CN=680dcb0d-5301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:03:cd:b0:6d:62:16:b0:2e:05:42:e2:00:a7: a3:82:04:e9:64:a5:61:f7:7d:b9:cd:dc:77:b7:96: 6f:d0:46:d0:81:b8:de:04:87:fd:24:90:0f:5d:81: cc:68:a6:5a:1b:4e:d0:fb:1d:2b:c5:1f:9a:94:ac: b7:0f:8f:d9:28:de:45:28:0c:73:79:41:63:3e:61: 49:85:6e:1b:f8:de:84:e1:50:96:2b:51:fd:ec:7c: 48:40:85:37:b8:04:c0:8c:ba:b3:7d:4e:82:87:6b: 62:f4:03:a2:4d:5c:0c:a0:a9:e9:f5:e0:dc:c7:65: 95:42:51:7e:b4:7a:37:89:8f:16:4b:63:69:99:d4: 8f:88:3f:d5:64:ef:62:57:bd:b4:14:32:5a:57:c4: e8:14:e2:0b:e2:73:d1:04:b4:08:93:36:83:42:a6: 6d:54:08:f0:0e:6c:61:6e:86:ec:df:6c:f5:a0:ae: ed:74:c2:33:56:41:8a:03:30:07:4c:33:53:56:4a: d7:cc:1c:9e:1c:de:05:ed:74:e8:ff:28:d9:e4:3c: 6f:04:86:05:63:7a:0a:11:88:56:de:77:83:6d:04: e3:61:30:3f:53:77:23:81:5e:9d:c2:60:93:f6:1e: 6b:38:f9:ac:30:c9:7c:da:e7:ba:23:b1:d2:43:b1: e5:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:C7:1B:43:61:AB:36:47:65:57:3D:DC:FF:65:8E:0E:83:E1:3C:37 X509v3 Authority Key Identifier: keyid:85:E9:99:C2:2B:EE:01:C3:26:4D:3D:22:67:58:21:09:2F:FF:D0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hemZwivuAcMmTT0iZ1ghCS__0Cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:e0:71:3a:b4:ff:02:e5:1e:b1:e8:9f:48:71:b3:bb:a3:80: 15:c1:93:33:29:a8:c2:b9:dc:f2:49:98:b8:46:2d:6a:4a:5a: d1:e6:f6:e5:89:7b:94:51:13:3d:b4:cf:d0:d2:48:5c:26:b7: 0d:63:30:29:6c:4b:3c:d6:91:09:e5:ac:eb:f8:7d:ef:6a:f7: cd:ff:fd:cd:6b:ee:ca:73:0f:c3:7a:7d:65:63:aa:2a:3e:f8: 6d:9c:d8:57:7c:84:c0:88:e1:0b:7d:63:ef:f9:36:a1:24:27: 19:13:5c:e6:f5:bb:ca:72:16:48:ae:1d:48:62:1f:d1:85:56: 26:c0:b8:2c:4f:69:e0:72:d0:84:15:77:69:17:1b:9f:20:31: dc:ae:90:5c:3a:83:a3:b0:f9:b7:5b:cc:8c:0f:82:e0:a1:19: a7:f5:1a:73:c9:76:2f:26:35:24:42:2d:49:34:09:77:f7:06: cc:06:50:f7:95:43:8e:1d:60:cb:ab:70:4a:bf:c6:17:e7:79: 00:b9:4c:e4:31:08:f1:f1:60:36:3b:a3:d5:54:9b:c0:46:67: e8:8c:11:27:bb:40:15:58:01:9a:21:fe:21:3a:35:46:ea:bb: 68:d7:bc:f2:41:10:41:14:f4:18:07:4c:eb:b5:d8:1e:eb:2e: c0:b2:96:57 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QzEzMjExMC8GA1UEBRMoODVFOTk5QzIyQkVFMDFDMzI2NEQzRDIyNjc1ODIxMDky RkZGRDAyQzAeFw0yNTA0MjcwNjEzMzNaFw0yNTA1MDQwNjEzMzNaMBgxFjAUBgNV BAMTDTY4MGRjYjBkLTUzMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDmA82wbWIWsC4FQuIAp6OCBOlkpWH3fbnN3He3lm/QRtCBuN4Eh/0kkA9dgcxo plobTtD7HSvFH5qUrLcPj9ko3kUoDHN5QWM+YUmFbhv43oThUJYrUf3sfEhAhTe4 BMCMurN9ToKHa2L0A6JNXAygqen14NzHZZVCUX60ejeJjxZLY2mZ1I+IP9Vk72JX vbQUMlpXxOgU4gvic9EEtAiTNoNCpm1UCPAObGFuhuzfbPWgru10wjNWQYoDMAdM M1NWStfMHJ4c3gXtdOj/KNnkPG8EhgVjegoRiFbed4NtBONhMD9TdyOBXp3CYJP2 Hms4+awwyXza57ojsdJDseWzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULccbQ2Gr NkdlVz3c/2WODoPhPDcwHwYDVR0jBBgwFoAUhemZwivuAcMmTT0iZ1ghCS//0Cww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFDMTMyL0M0RkExNEY4Qjgw QzExRUY4NEZBM0UzNUM0RjlBRTAyL2hlbVp3aXZ1QWNNbVRUMGlaMWdoQ1NfXzBD dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaGVtWndpdnVBY01tVFQwaVoxZ2hDU19fMEN3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFD MTMyL0M0RkExNEY4QjgwQzExRUY4NEZBM0UzNUM0RjlBRTAyL2hlbVp3aXZ1QWNN bVRUMGlaMWdoQ1NfXzBDdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAALgcTq0/wLlHrHon0hxs7ujgBXBkzMpqMK53PJJmLhGLWpKWtHm9uWJ e5RREz20z9DSSFwmtw1jMClsSzzWkQnlrOv4fe9q983//c1r7spzD8N6fWVjqio+ +G2c2Fd8hMCI4Qt9Y+/5NqEkJxkTXOb1u8pyFkiuHUhiH9GFVibAuCxPaeBy0IQV d2kXG58gMdyukFw6g6Ow+bdbzIwPguChGaf1GnPJdi8mNSRCLUk0CXf3BswGUPeV Q44dYMurcEq/xhfneQC5TOQxCPHxYDY7o9VUm8BGZ+iMESe7QBVYAZoh/iE6NUbq u2jXvPJBEEEU9BgHTOu12B7rLsCyllc= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:53 2025 by rpki-client on console.sobornost.net