$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.mft File: OddGjPgMUFXp0EybT60xF1wU1l8.mft (raw, json) Hash identifier: YKViG5pSTm013JDe8/6i+y9KALmjJTf7z2QuMcn9YUQ= Subject key identifier: 03:C2:E8:C3:2F:65:C8:B9:8F:4E:F8:00:49:49:9B:73:2F:6D:15:B8 Authority key identifier: 39:D7:46:8C:F8:0C:50:55:E9:D0:4C:9B:4F:AD:31:17:5C:14:D6:5F Certificate issuer: /CN=A91AD643/serialNumber=39D7468CF80C5055E9D04C9B4FAD31175C14D65F Certificate serial: 06C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OddGjPgMUFXp0EybT60xF1wU1l8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.mft Manifest number: 06B9 Signing time: Sat 26 Apr 2025 21:48:49 +0000 Manifest this update: Sat 26 Apr 2025 21:48:49 +0000 Manifest next update: Sat 03 May 2025 21:48:49 +0000 Files and hashes: 1: OddGjPgMUFXp0EybT60xF1wU1l8.crl (hash: Gjm2gGTfzL0HnS/GNzd0XE8ZPuKQ/XOLnAYfMWObaCY=) 2: 865F2F80EE8911EBB390AC76C4F9AE02.roa (hash: 0ULrTT5sEmnlV5jXg9GCbo9G2IRIBRTqvgY01zsRTW8=) 3: 81E9653E5B8A11EB857A3F77C4F9AE02.roa (hash: hFkz2Rxz8bjHa9W5ewxpkxAw84TOeg9mnyL9BGUNw+E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.crl rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OddGjPgMUFXp0EybT60xF1wU1l8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 21:48:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1733 (0x6c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD643, serialNumber=39D7468CF80C5055E9D04C9B4FAD31175C14D65F Validity Not Before: Apr 26 21:48:49 2025 GMT Not After : May 3 21:48:49 2025 GMT Subject: CN=680d54c1-5167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0d:f9:b4:11:f8:3c:b8:05:d7:e0:39:a8:6e: 67:10:d5:e4:a2:53:5f:6d:55:d1:ff:6e:a2:0f:61: 29:c5:44:95:12:e9:3a:f4:5e:13:44:6f:f3:4e:7b: f1:5e:07:8d:b3:8c:dd:e4:f8:df:72:d6:a0:39:6d: c4:f1:83:7c:60:54:41:d7:e1:9b:4e:e9:f4:8c:3f: 63:6c:9c:68:ea:3c:f9:59:a7:89:4a:c5:57:a4:11: a2:33:81:56:fc:e5:56:92:2b:14:49:f4:a4:5c:c4: 9a:54:ee:98:9c:34:3b:b9:14:e7:78:9b:c8:ab:ca: c9:7b:58:04:cd:00:38:ad:09:15:72:f5:f7:31:a3: a4:f1:42:e7:36:d7:d4:d6:23:f5:d4:4f:d8:04:11: ca:14:e8:44:5c:ea:bd:5a:7e:9f:30:e9:10:f8:8f: f4:d0:09:8d:3c:f9:1d:25:c0:d6:55:72:dc:a0:ea: 0a:7d:eb:2a:82:38:c6:a0:f2:33:c3:1d:59:c9:fc: dc:9a:1b:6c:fd:ad:37:c5:70:12:62:dc:de:d4:70: f1:4c:33:c5:4f:2a:8c:5b:23:67:b7:6b:88:56:e1: f4:96:16:9c:24:90:5d:43:db:c7:46:bc:05:ff:31: a0:8a:9e:bc:17:5d:f6:35:1f:be:a5:86:40:ba:0a: ca:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:C2:E8:C3:2F:65:C8:B9:8F:4E:F8:00:49:49:9B:73:2F:6D:15:B8 X509v3 Authority Key Identifier: keyid:39:D7:46:8C:F8:0C:50:55:E9:D0:4C:9B:4F:AD:31:17:5C:14:D6:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OddGjPgMUFXp0EybT60xF1wU1l8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:50:14:d6:71:3b:5e:c1:99:75:02:04:68:b9:b2:df:1f:c4: 66:a0:09:f7:a6:95:9a:a0:6f:cb:dd:0d:d5:68:ba:91:df:9d: 51:ea:87:20:d4:10:d6:d1:b2:8c:c5:39:c6:7b:4f:e2:81:c2: 34:88:b0:8d:3d:f3:8d:cb:c0:c0:54:0d:e8:3c:29:78:c2:c9: 3f:ac:ae:74:8b:20:df:3b:1e:96:9f:40:f9:af:e5:26:9d:4f: bd:98:31:19:4d:e4:f5:28:47:3d:00:ce:82:3d:ce:b1:46:ab: 82:74:cc:0e:79:18:bc:0a:da:fd:86:b8:99:5d:a9:af:e0:35: 1f:1b:ea:7f:69:58:e7:ce:3c:35:ec:de:e5:18:f8:18:e8:d6: db:c3:4e:3a:b6:2b:fa:44:1e:16:94:b5:27:74:27:7d:00:9e: ca:50:8e:29:d1:d1:79:90:5b:c6:04:ae:7e:3d:79:01:39:ba: 41:19:59:4c:ba:c1:04:ca:2a:9b:65:76:74:f3:98:41:44:0e: b7:4f:f8:37:35:6f:27:7e:ed:2f:76:90:c2:70:e8:ce:54:31: 66:9b:0c:d5:56:a6:d2:cc:b1:fd:a2:5e:33:42:92:ae:db:c3: 35:07:3f:97:85:ec:30:0b:2f:66:c4:08:2a:52:9f:51:5b:69: e1:b3:0c:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ2NDMxMTAvBgNVBAUTKDM5RDc0NjhDRjgwQzUwNTVFOUQwNEM5QjRGQUQzMTE3 NUMxNEQ2NUYwHhcNMjUwNDI2MjE0ODQ5WhcNMjUwNTAzMjE0ODQ5WjAYMRYwFAYD VQQDEw02ODBkNTRjMS01MTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuA35tBH4PLgF1+A5qG5nENXkolNfbVXR/26iD2EpxUSVEuk69F4TRG/zTnvx XgeNs4zd5PjfctagOW3E8YN8YFRB1+GbTun0jD9jbJxo6jz5WaeJSsVXpBGiM4FW /OVWkisUSfSkXMSaVO6YnDQ7uRTneJvIq8rJe1gEzQA4rQkVcvX3MaOk8ULnNtfU 1iP11E/YBBHKFOhEXOq9Wn6fMOkQ+I/00AmNPPkdJcDWVXLcoOoKfesqgjjGoPIz wx1Zyfzcmhts/a03xXASYtze1HDxTDPFTyqMWyNnt2uIVuH0lhacJJBdQ9vHRrwF /zGgip68F132NR++pYZAugrKtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAPC6MMv Zci5j074AElJm3MvbRW4MB8GA1UdIwQYMBaAFDnXRoz4DFBV6dBMm0+tMRdcFNZf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDY0My9FRkJFNkVCMjVC ODgxMUVCQkQ1RjMwNzZDNEY5QUUwMi9PZGRHalBnTVVGWHAwRXliVDYweEYxd1Ux bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09kZEdqUGdNVUZYcDBFeWJUNjB4RjF3VTFsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDY0My9FRkJFNkVCMjVCODgxMUVCQkQ1RjMwNzZDNEY5QUUwMi9PZGRHalBnTVVG WHAwRXliVDYweEYxd1UxbDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcUBTWcTtewZl1AgRoubLfH8RmoAn3ppWaoG/L3Q3VaLqR351R6ocg 1BDW0bKMxTnGe0/igcI0iLCNPfONy8DAVA3oPCl4wsk/rK50iyDfOx6Wn0D5r+Um nU+9mDEZTeT1KEc9AM6CPc6xRquCdMwOeRi8Ctr9hriZXamv4DUfG+p/aVjnzjw1 7N7lGPgY6Nbbw046tiv6RB4WlLUndCd9AJ7KUI4p0dF5kFvGBK5+PXkBObpBGVlM usEEyiqbZXZ085hBRA63T/g3NW8nfu0vdpDCcOjOVDFmmwzVVqbSzLH9ol4zQpKu 28M1Bz+XhewwCy9mxAgqUp9RW2nhswxg -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:07 2025 by rpki-client on console.sobornost.net