$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.mft File: U4XhOhtYRftEzutr7Y3rTomvOCk.mft (raw, json) Hash identifier: UQyRCxVNVMCcWMLaVQYFhYsiEoCVFKv6i1iytkZw7mQ= Subject key identifier: 9A:5C:28:32:97:6B:63:6A:CD:B0:63:86:9C:81:A7:8B:F3:3E:8A:62 Authority key identifier: 53:85:E1:3A:1B:58:45:FB:44:CE:EB:6B:ED:8D:EB:4E:89:AF:38:29 Certificate issuer: /CN=A91ACFEB/serialNumber=5385E13A1B5845FB44CEEB6BED8DEB4E89AF3829 Certificate serial: 096B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4XhOhtYRftEzutr7Y3rTomvOCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.mft Manifest number: 095B Signing time: Mon 28 Apr 2025 20:38:31 +0000 Manifest this update: Mon 28 Apr 2025 20:38:31 +0000 Manifest next update: Mon 05 May 2025 20:38:31 +0000 Files and hashes: 1: U4XhOhtYRftEzutr7Y3rTomvOCk.crl (hash: nQqiXWpdlw0ixChiugP46g98nGPv1YMXcVW49oL5rOc=) 2: 3636BCD2937011EA8A795583C4F9AE02.roa (hash: Xd/9pByFb2cbZ9xoUnmDVjNmjmus87X0lFOERhfsZNI=) 3: 35831FCE937011EA8A795583C4F9AE02.roa (hash: N79J5/addSjvuTRJUjHpGEDoonJ5OZtfdl2v8Aonsr8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.crl rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4XhOhtYRftEzutr7Y3rTomvOCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:38:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2411 (0x96b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACFEB, serialNumber=5385E13A1B5845FB44CEEB6BED8DEB4E89AF3829 Validity Not Before: Apr 28 20:38:31 2025 GMT Not After : May 5 20:38:31 2025 GMT Subject: CN=680fe747-8808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5a:12:d0:4e:b7:17:49:0d:c0:33:86:0e:b1: f1:18:58:70:28:0a:b0:f8:44:6f:12:35:d9:d9:3c: 5e:c4:29:de:6f:7f:27:8e:54:01:42:ec:7a:05:29: 67:f3:cc:33:24:fc:e6:7b:4b:d3:a6:86:22:71:ff: 44:9a:3f:b8:9e:02:8c:df:3c:76:6c:7a:9f:ad:8d: 51:73:4d:43:b8:28:b5:08:26:d7:01:3c:39:87:54: 85:49:6b:a2:21:bb:b4:83:29:78:e9:ff:b7:bf:99: a0:18:4a:1d:c4:d3:d1:6d:45:52:ee:7a:d2:20:77: 64:b6:83:47:31:54:9f:8c:16:f2:86:e8:80:92:81: 21:04:c2:fd:a1:b5:4d:b7:84:06:57:ce:7b:1a:90: be:21:bf:3a:6e:dd:93:f5:97:9a:54:93:10:e0:6b: 35:f9:95:fb:9e:69:d0:7e:37:56:04:87:d0:4b:b5: 47:6e:f3:75:b9:07:be:9d:3e:3e:bb:8d:36:ff:e8: 80:a5:f2:96:9d:4d:4c:08:71:c3:ca:30:5a:1d:5b: 23:32:55:41:d5:59:23:d3:fe:39:e4:d0:fb:68:12: ac:94:58:d6:78:ee:f3:dc:39:55:f3:98:1f:5e:6c: cf:a4:25:aa:c1:0c:ee:51:83:66:7b:41:10:de:82: 30:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:5C:28:32:97:6B:63:6A:CD:B0:63:86:9C:81:A7:8B:F3:3E:8A:62 X509v3 Authority Key Identifier: keyid:53:85:E1:3A:1B:58:45:FB:44:CE:EB:6B:ED:8D:EB:4E:89:AF:38:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4XhOhtYRftEzutr7Y3rTomvOCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:a9:26:f0:7a:9c:ea:3f:58:b8:f1:b4:0c:e1:bd:cc:3e:27: b8:fa:b5:ea:8f:29:24:52:87:c0:6f:63:f7:4f:81:93:49:08: d4:74:1d:a0:06:c0:ac:6a:a9:15:56:6c:76:10:34:d3:b8:2c: c9:59:53:d5:cf:e3:bd:ab:a8:f4:e5:88:e1:24:f6:b2:51:0a: ad:60:6c:d7:42:c7:12:ae:50:51:c3:b0:8d:59:d2:78:03:39: 48:b2:14:59:e0:c5:a1:0c:c6:f7:a9:a8:b1:08:0c:f5:9a:67: d2:c4:94:c1:78:34:e2:01:c8:91:95:e7:e1:09:24:56:64:4b: 76:69:54:85:da:54:3f:a5:6e:34:c0:cf:42:a3:3f:1d:65:89: bd:a1:f1:8f:a0:14:d8:68:a2:8f:94:48:f6:45:09:5f:d3:21: 3d:62:b0:72:f0:2d:0f:d6:ff:81:b4:4b:dd:03:fb:2c:22:7c: 83:fd:3e:1a:0a:51:ae:c7:91:7b:bb:6e:d0:ce:c2:e0:fc:5e: 5e:de:dc:b3:04:c1:fb:00:96:c7:a7:e8:1a:d4:00:99:b2:9e: b4:c5:a3:ac:e2:09:21:08:f9:bf:04:c7:12:1a:10:66:15:d0: 89:0e:bb:24:51:66:77:9a:35:6b:47:d9:e4:dd:37:4b:64:1a: 6b:07:d5:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNGRUIxMTAvBgNVBAUTKDUzODVFMTNBMUI1ODQ1RkI0NENFRUI2QkVEOERFQjRF ODlBRjM4MjkwHhcNMjUwNDI4MjAzODMxWhcNMjUwNTA1MjAzODMxWjAYMRYwFAYD VQQDEw02ODBmZTc0Ny04ODA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvVoS0E63F0kNwDOGDrHxGFhwKAqw+ERvEjXZ2TxexCneb38njlQBQux6BSln 88wzJPzme0vTpoYicf9Emj+4ngKM3zx2bHqfrY1Rc01DuCi1CCbXATw5h1SFSWui Ibu0gyl46f+3v5mgGEodxNPRbUVS7nrSIHdktoNHMVSfjBbyhuiAkoEhBML9obVN t4QGV857GpC+Ib86bt2T9ZeaVJMQ4Gs1+ZX7nmnQfjdWBIfQS7VHbvN1uQe+nT4+ u402/+iApfKWnU1MCHHDyjBaHVsjMlVB1Vkj0/455ND7aBKslFjWeO7z3DlV85gf XmzPpCWqwQzuUYNme0EQ3oIwcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJpcKDKX a2NqzbBjhpyBp4vzPopiMB8GA1UdIwQYMBaAFFOF4TobWEX7RM7ra+2N606Jrzgp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0ZFQi9DQjJDMzNFNjkz NkUxMUVBQTVFNTZCN0VDNEY5QUUwMi9VNFhoT2h0WVJmdEV6dXRyN1kzclRvbXZP Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U0WGhPaHRZUmZ0RXp1dHI3WTNyVG9tdk9Day5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0ZFQi9DQjJDMzNFNjkzNkUxMUVBQTVFNTZCN0VDNEY5QUUwMi9VNFhoT2h0WVJm dEV6dXRyN1kzclRvbXZPQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWqSbwepzqP1i48bQM4b3MPie4+rXqjykkUofAb2P3T4GTSQjUdB2g BsCsaqkVVmx2EDTTuCzJWVPVz+O9q6j05YjhJPayUQqtYGzXQscSrlBRw7CNWdJ4 AzlIshRZ4MWhDMb3qaixCAz1mmfSxJTBeDTiAciRlefhCSRWZEt2aVSF2lQ/pW40 wM9Coz8dZYm9ofGPoBTYaKKPlEj2RQlf0yE9YrBy8C0P1v+BtEvdA/ssInyD/T4a ClGux5F7u27QzsLg/F5e3tyzBMH7AJbHp+ga1ACZsp60xaOs4gkhCPm/BMcSGhBm FdCJDrskUWZ3mjVrR9nk3TdLZBprB9Ur -----END CERTIFICATE-----Generated at Mon Apr 28 23:05:46 2025 by rpki-client on console.sobornost.net