$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft File: HLQwTtZoyPcWQT79ZhdMOGcMics.mft (raw, json) Hash identifier: ntI/mOnjm19KfFVJdeqLwlNrLZmRT3vL+EJQSK3bJhA= Subject key identifier: EF:1B:CF:BB:71:40:5C:25:86:FA:5F:46:58:B9:00:1D:E7:8D:63:87 Authority key identifier: 1C:B4:30:4E:D6:68:C8:F7:16:41:3E:FD:66:17:4C:38:67:0C:89:CB Certificate issuer: /CN=A91B4286/serialNumber=1CB4304ED668C8F716413EFD66174C38670C89CB Certificate serial: 13FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLQwTtZoyPcWQT79ZhdMOGcMics.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft Manifest number: 13F2 Signing time: Mon 28 Apr 2025 17:10:05 +0000 Manifest this update: Mon 28 Apr 2025 17:10:05 +0000 Manifest next update: Mon 05 May 2025 17:10:05 +0000 Files and hashes: 1: HLQwTtZoyPcWQT79ZhdMOGcMics.crl (hash: yF8u9R1kQthaQ/F2ZjmkJBIaEFe4mfjEnzchHcHVpuI=) 2: 1CA71D84493D11EAAB30C638C4F9AE02.roa (hash: Namfm+gMj3DTGbqctWwU+VBkFxpSXUjfjiuK5KjjSb8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.crl rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLQwTtZoyPcWQT79ZhdMOGcMics.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 17:10:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5115 (0x13fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4286, serialNumber=1CB4304ED668C8F716413EFD66174C38670C89CB Validity Not Before: Apr 28 17:10:05 2025 GMT Not After : May 5 17:10:05 2025 GMT Subject: CN=680fb66d-dc90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:92:3e:b6:ff:87:3a:21:cc:b8:c8:d0:2d:92: 48:44:fa:82:58:e7:da:b1:59:20:26:82:b1:8a:1e: 50:5f:93:7c:1e:2d:de:1c:0f:79:9e:16:a0:5c:99: 97:e2:7f:30:e8:78:e1:c3:82:0d:db:19:cf:76:65: 52:22:46:40:d7:ea:44:84:62:9f:f3:c6:cc:70:6c: b9:1a:b2:bc:4c:11:4f:78:e0:7f:48:a1:c8:20:52: 22:5b:86:06:10:c7:ba:41:6e:58:b4:c9:06:61:f3: b5:ce:a6:1e:b4:d3:c3:62:33:c7:1a:77:8f:90:05: 82:bb:d1:da:fc:16:20:ad:ad:61:e9:fd:0b:52:91: 97:0a:2f:34:63:34:57:7b:ac:38:3e:03:14:e1:20: 37:71:0e:b5:b0:72:e0:72:30:52:b3:bf:87:4a:b9: b7:04:7d:d2:75:0d:b0:34:77:5d:6d:f8:b7:1a:c5: ee:c8:28:f6:99:b1:8a:3e:96:10:e7:a5:d5:9a:bb: 21:d0:a5:fd:b6:dd:d0:14:1c:e5:07:d2:ca:5d:48: 40:89:9c:40:88:6c:ec:27:f7:13:6f:95:c8:3d:40: 54:1f:33:75:ab:6b:ec:be:13:70:93:e2:e9:5c:78: 9c:c2:82:af:d7:5f:f4:de:f9:c3:db:4c:69:c0:c5: 9d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:1B:CF:BB:71:40:5C:25:86:FA:5F:46:58:B9:00:1D:E7:8D:63:87 X509v3 Authority Key Identifier: keyid:1C:B4:30:4E:D6:68:C8:F7:16:41:3E:FD:66:17:4C:38:67:0C:89:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLQwTtZoyPcWQT79ZhdMOGcMics.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:16:92:b6:dd:a6:73:ce:a1:7f:14:98:5e:40:43:2e:2d:44: 6d:2a:1d:d1:29:62:cf:74:2f:ae:c5:c0:d3:a0:e6:a8:28:ea: 7b:e2:89:f9:89:89:2c:5c:69:65:ad:72:f1:aa:99:5f:a5:45: db:43:5e:c3:89:5b:9a:fe:0b:c0:42:33:b5:f3:4a:fe:bc:d3: 5e:8b:86:f9:c9:cf:f8:c8:02:6d:5c:b3:2d:3c:e7:ab:74:b2: d9:ab:d7:b8:89:ad:2f:97:32:c2:3e:9a:a5:4d:7b:c0:44:9d: 5f:98:58:ba:86:28:6b:d1:b9:1a:6b:d8:0c:0a:6a:ac:87:76: 8e:a0:b9:9b:7e:c4:e5:9d:4a:aa:8b:62:cf:ba:98:41:37:bd: f2:0a:2b:fb:f3:d0:9c:82:d8:3b:64:78:cd:39:fb:34:69:8d: 98:a6:d0:ea:78:01:de:79:85:b1:a9:39:95:64:b7:82:4a:cf: 06:8e:68:9c:de:25:40:b2:81:5f:ed:69:20:68:eb:b5:1b:7e: 9a:be:0b:60:c0:2a:58:cf:55:c9:d8:5d:d5:fd:89:d1:0e:43: d4:e1:5a:41:bb:fc:35:11:43:e4:03:1d:87:b3:41:fd:1a:c4: 5c:b6:37:0c:c3:68:a0:e2:e1:9e:4c:32:a9:cb:53:81:0e:b2: 87:a5:ab:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE/swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQyODYxMTAvBgNVBAUTKDFDQjQzMDRFRDY2OEM4RjcxNjQxM0VGRDY2MTc0QzM4 NjcwQzg5Q0IwHhcNMjUwNDI4MTcxMDA1WhcNMjUwNTA1MTcxMDA1WjAYMRYwFAYD VQQDEw02ODBmYjY2ZC1kYzkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ZI+tv+HOiHMuMjQLZJIRPqCWOfasVkgJoKxih5QX5N8Hi3eHA95nhagXJmX 4n8w6Hjhw4IN2xnPdmVSIkZA1+pEhGKf88bMcGy5GrK8TBFPeOB/SKHIIFIiW4YG EMe6QW5YtMkGYfO1zqYetNPDYjPHGnePkAWCu9Ha/BYgra1h6f0LUpGXCi80YzRX e6w4PgMU4SA3cQ61sHLgcjBSs7+HSrm3BH3SdQ2wNHddbfi3GsXuyCj2mbGKPpYQ 56XVmrsh0KX9tt3QFBzlB9LKXUhAiZxAiGzsJ/cTb5XIPUBUHzN1q2vsvhNwk+Lp XHicwoKv11/03vnD20xpwMWdJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO8bz7tx QFwlhvpfRli5AB3njWOHMB8GA1UdIwQYMBaAFBy0ME7WaMj3FkE+/WYXTDhnDInL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDI4Ni9CMjFBQTA5NDdG NDkxMUU4ODhEMzU2NDJDNEY5QUUwMi9ITFF3VHRab3lQY1dRVDc5WmhkTU9HY01p Y3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hMUXdUdFpveVBjV1FUNzlaaGRNT0djTWljcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDI4Ni9CMjFBQTA5NDdGNDkxMUU4ODhEMzU2NDJDNEY5QUUwMi9ITFF3VHRab3lQ Y1dRVDc5WmhkTU9HY01pY3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwFpK23aZzzqF/FJheQEMuLURtKh3RKWLPdC+uxcDToOaoKOp74on5 iYksXGllrXLxqplfpUXbQ17DiVua/gvAQjO180r+vNNei4b5yc/4yAJtXLMtPOer dLLZq9e4ia0vlzLCPpqlTXvARJ1fmFi6hihr0bkaa9gMCmqsh3aOoLmbfsTlnUqq i2LPuphBN73yCiv789Ccgtg7ZHjNOfs0aY2YptDqeAHeeYWxqTmVZLeCSs8Gjmic 3iVAsoFf7WkgaOu1G36avgtgwCpYz1XJ2F3V/YnRDkPU4VpBu/w1EUPkAx2Hs0H9 GsRctjcMw2ig4uGeTDKpy1OBDrKHpash -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:54 2025 by rpki-client on console.sobornost.net