$ rpki-client -vvf rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft File: 8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft (raw, json) Hash identifier: GkkI2m0Y1OcKvcrl5oTFS0YRDOpyU2qpsLPHOjdRkPg= Subject key identifier: 8C:A0:9D:E9:DA:32:CE:2F:32:49:95:1D:C1:2F:7D:B5:02:53:79:97 Authority key identifier: F0:49:29:EF:74:3C:54:C0:8B:45:E1:9C:FC:51:BF:2A:A5:59:DA:A1 Certificate issuer: /CN=A91B165F/serialNumber=F04929EF743C54C08B45E19CFC51BF2AA559DAA1 Certificate serial: 55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft Manifest number: 54 Signing time: Sun 27 Apr 2025 06:02:41 +0000 Manifest this update: Sun 27 Apr 2025 06:02:40 +0000 Manifest next update: Sun 04 May 2025 06:02:40 +0000 Files and hashes: 1: 8Ekp73Q8VMCLReGc_FG_KqVZ2qE.crl (hash: hisGhEf1ujirqWW2T6ooavv+L8pIdNW6rkz2syU94mw=) 2: 1DF22790A4B611EF9CDA1A2CC4F9AE02.roa (hash: w3wkEl72R5yHh8FDEdSTJXXK4Ra1LhkLOkjK6q8uAIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.crl rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 85 (0x55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B165F, serialNumber=F04929EF743C54C08B45E19CFC51BF2AA559DAA1 Validity Not Before: Apr 27 06:02:40 2025 GMT Not After : May 4 06:02:40 2025 GMT Subject: CN=680dc881-9d74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:88:8a:d6:89:38:c5:b6:cf:43:8f:e3:53:59: 3c:ea:e4:43:24:d6:6d:17:ba:fb:42:d6:81:bd:98: 82:b4:7a:c4:54:a4:99:0a:32:0c:cc:b5:a5:1e:a1: 2c:05:02:d2:7e:62:a3:9b:2a:2a:d1:5f:1d:b1:10: 6a:7a:b2:5e:9c:15:c6:b4:df:4a:07:89:bf:41:b0: 5f:8f:61:16:5a:de:96:9e:5b:5d:f6:ef:b4:e7:09: 9c:83:26:3d:d1:a2:a3:be:d5:3b:5c:43:c8:5a:f1: e7:68:d9:4f:01:23:c4:cd:b9:ca:32:60:fb:47:53: 0b:52:18:81:81:4a:4a:19:b4:5c:96:51:51:db:43: 5a:37:af:74:15:dc:52:35:aa:fc:a9:0d:f5:a2:3c: 6e:1a:b2:b8:63:a3:39:dc:04:32:90:d6:5c:10:0f: 3a:26:75:2f:61:6c:ca:59:1f:65:9c:d0:1b:db:1b: e7:d5:20:98:54:13:ee:ce:fd:93:bd:3b:79:43:c1: 47:94:78:43:58:d3:b3:b5:e1:64:82:32:45:1f:c3: 17:a2:fc:a0:8d:b8:7d:ac:84:ba:27:88:50:2d:2f: 7e:c5:ec:5e:8e:c5:2f:44:1f:62:d3:d4:84:a3:b4: b3:59:2f:d3:b1:ac:51:76:a0:e6:59:35:0f:c3:4f: b2:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:A0:9D:E9:DA:32:CE:2F:32:49:95:1D:C1:2F:7D:B5:02:53:79:97 X509v3 Authority Key Identifier: keyid:F0:49:29:EF:74:3C:54:C0:8B:45:E1:9C:FC:51:BF:2A:A5:59:DA:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:c1:70:68:93:2f:a5:aa:31:5a:33:43:35:da:c0:a0:61:5f: 6a:bc:ff:a1:dd:f9:31:56:91:96:0e:2c:10:54:13:f2:99:65: 42:76:42:8b:32:4f:bc:d9:96:dd:d4:24:bd:9d:ea:57:b2:9a: 18:e5:2b:c2:79:dd:75:4c:6d:db:7e:d7:bb:7f:ad:a2:10:07: d3:46:66:7a:15:c3:e6:7f:60:dc:e8:bb:3d:16:e1:28:8a:d7: 60:f3:14:e0:4c:cc:59:f0:a6:d4:cb:58:69:01:2a:03:af:6c: 6f:6c:19:b5:96:49:a6:fd:95:a2:3e:15:36:26:0c:06:7d:f2: 7e:d3:c3:34:bd:8a:d2:92:a4:e1:b4:27:7f:00:ab:20:59:7c: e7:06:6b:ad:ab:b2:a7:0c:2a:11:6b:ab:2e:4c:ce:9f:54:15: 15:22:04:00:e6:dd:95:e9:c4:7a:85:ad:bf:b9:0b:ef:4c:e7: 10:d4:67:d1:7b:17:e9:97:68:f0:36:54:08:2d:83:a2:d1:49: 06:e2:34:1c:d0:61:c3:5e:37:d5:93:4d:16:94:3b:6c:e6:9e: a4:79:5b:2d:e5:0d:fd:0a:90:b3:c9:07:e6:e0:91:9d:be:5d: 86:e3:1b:b8:5c:6b:bd:5b:f3:62:fb:b9:38:eb:e2:54:09:57: b4:93:3e:3c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MTY1RjExMC8GA1UEBRMoRjA0OTI5RUY3NDNDNTRDMDhCNDVFMTlDRkM1MUJGMkFB NTU5REFBMTAeFw0yNTA0MjcwNjAyNDBaFw0yNTA1MDQwNjAyNDBaMBgxFjAUBgNV BAMTDTY4MGRjODgxLTlkNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0iIrWiTjFts9Dj+NTWTzq5EMk1m0XuvtC1oG9mIK0esRUpJkKMgzMtaUeoSwF AtJ+YqObKirRXx2xEGp6sl6cFca030oHib9BsF+PYRZa3paeW13277TnCZyDJj3R oqO+1TtcQ8ha8edo2U8BI8TNucoyYPtHUwtSGIGBSkoZtFyWUVHbQ1o3r3QV3FI1 qvypDfWiPG4asrhjozncBDKQ1lwQDzomdS9hbMpZH2Wc0BvbG+fVIJhUE+7O/ZO9 O3lDwUeUeENY07O14WSCMkUfwxei/KCNuH2shLoniFAtL37F7F6OxS9EH2LT1ISj tLNZL9OxrFF2oOZZNQ/DT7KzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjKCd6doy zi8ySZUdwS99tQJTeZcwHwYDVR0jBBgwFoAU8Ekp73Q8VMCLReGc/FG/KqVZ2qEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIxNjVGLzhDMjE0OTc0QTRC MzExRUY4ODlDNzY4N0M0RjlBRTAyLzhFa3A3M1E4Vk1DTFJlR2NfRkdfS3FWWjJx RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOEVrcDczUThWTUNMUmVHY19GR19LcVZaMnFFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIx NjVGLzhDMjE0OTc0QTRCMzExRUY4ODlDNzY4N0M0RjlBRTAyLzhFa3A3M1E4Vk1D TFJlR2NfRkdfS3FWWjJxRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEXBcGiTL6WqMVozQzXawKBhX2q8/6Hd+TFWkZYOLBBUE/KZZUJ2Qosy T7zZlt3UJL2d6leymhjlK8J53XVMbdt+17t/raIQB9NGZnoVw+Z/YNzouz0W4SiK 12DzFOBMzFnwptTLWGkBKgOvbG9sGbWWSab9laI+FTYmDAZ98n7TwzS9itKSpOG0 J38AqyBZfOcGa62rsqcMKhFrqy5Mzp9UFRUiBADm3ZXpxHqFrb+5C+9M5xDUZ9F7 F+mXaPA2VAgtg6LRSQbiNBzQYcNeN9WTTRaUO2zmnqR5Wy3lDf0KkLPJB+bgkZ2+ XYbjG7hca71b82L7uTjr4lQJV7STPjw= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:54 2025 by rpki-client on console.sobornost.net