$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.mft File: 7w5JMvxot1LjQokiqT5mq-MfNDE.mft (raw, json) Hash identifier: AQrUz+hHa6BY5p6yr3qLzPuplv+t6DeNDDPWB9C0l1Q= Subject key identifier: 0C:E4:78:B7:B4:74:3D:95:0A:DB:F0:98:E8:DF:11:53:AE:15:BD:0C Authority key identifier: EF:0E:49:32:FC:68:B7:52:E3:42:89:22:A9:3E:66:AB:E3:1F:34:31 Certificate issuer: /CN=A91B4B33/serialNumber=EF0E4932FC68B752E3428922A93E66ABE31F3431 Certificate serial: AC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7w5JMvxot1LjQokiqT5mq-MfNDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.mft Manifest number: AA Signing time: Sun 27 Apr 2025 04:58:10 +0000 Manifest this update: Sun 27 Apr 2025 04:58:10 +0000 Manifest next update: Sun 04 May 2025 04:58:10 +0000 Files and hashes: 1: 7w5JMvxot1LjQokiqT5mq-MfNDE.crl (hash: gADN0702yLN/viDn6B1jn+2PClxid/5nz/bTeNiIfho=) 2: 80741B04221F11EF92A42E1AC4F9AE02.roa (hash: tCXmsiS2pZhfyBR2w7/CD7l4+Sf7uzGB1XazUIv4/b4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.crl rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7w5JMvxot1LjQokiqT5mq-MfNDE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 172 (0xac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4B33, serialNumber=EF0E4932FC68B752E3428922A93E66ABE31F3431 Validity Not Before: Apr 27 04:58:10 2025 GMT Not After : May 4 04:58:10 2025 GMT Subject: CN=680db962-a176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:38:0f:40:76:f7:f9:8c:55:51:23:90:f6:c2: 6c:89:e6:3f:36:6f:e8:ea:4c:b9:63:0d:97:09:b5: 68:35:19:ad:6e:dd:e3:9b:69:fa:fd:1c:a5:2d:20: 74:fe:78:ef:34:5c:bb:97:e3:6c:2a:bc:ad:52:71: b9:29:53:eb:e5:4d:fa:53:4e:fd:8f:e8:10:4e:26: a5:20:55:6f:53:56:10:90:1e:8b:98:23:c6:e0:54: dc:cb:ce:67:82:37:b2:b4:e0:95:e6:40:83:67:40: f3:e6:cc:50:68:1b:42:d5:66:4c:f3:9d:b7:96:64: ad:81:aa:ea:7d:aa:17:83:02:c4:4f:f7:c0:71:be: 08:72:2c:0e:71:20:1a:46:fc:bb:6a:04:95:c7:f8: 8e:49:56:ed:a7:55:24:fa:ad:09:6d:e2:3a:03:5c: 85:e5:d7:96:6d:58:3a:3a:d6:17:bd:0f:2d:1c:0d: 00:21:1b:97:66:d5:d3:55:29:7a:b1:54:10:ff:a5: c6:74:ed:a0:81:52:32:f6:0f:fb:13:53:36:01:86: c5:7e:65:49:5e:de:65:fb:2e:c4:3b:0b:d8:75:96: 6f:5b:08:40:03:03:fa:e3:eb:26:79:ff:de:71:9c: 86:63:00:d1:e1:fe:b6:0b:f0:18:cc:1b:ee:d5:64: e9:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:E4:78:B7:B4:74:3D:95:0A:DB:F0:98:E8:DF:11:53:AE:15:BD:0C X509v3 Authority Key Identifier: keyid:EF:0E:49:32:FC:68:B7:52:E3:42:89:22:A9:3E:66:AB:E3:1F:34:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7w5JMvxot1LjQokiqT5mq-MfNDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:fb:5f:99:be:59:db:80:be:cf:9f:fb:a9:49:17:84:84:8b: d2:12:66:1b:48:2b:07:5e:15:97:ed:0d:c7:6e:89:0c:fe:da: 24:be:d4:03:3b:e8:66:07:a6:9c:a4:4e:4a:3c:5f:42:06:31: b9:d9:fe:93:cc:49:df:26:40:74:bf:3e:9e:43:23:40:9b:32: f6:e5:1d:31:84:2c:08:4a:d2:eb:f2:e3:9b:ca:b1:4e:85:f1: c5:b1:a4:50:2b:c6:59:9e:c5:b0:82:11:cf:0f:22:ae:4a:7c: 94:79:81:fe:cf:00:8c:f9:1e:ac:b1:80:30:78:c3:53:44:0e: 86:7f:28:42:2d:1d:1e:ba:86:78:63:ab:b3:6a:9d:fa:ad:c6: 2a:cc:e6:76:2c:34:10:b0:c1:c8:e8:13:08:c2:a7:71:31:6d: f2:41:2a:eb:68:ea:1a:42:ef:f5:a4:ba:ac:7a:03:e3:73:cc: a4:19:66:fb:d3:46:0b:70:79:ac:13:7f:9b:ea:cd:74:82:9f: b8:68:4a:20:6a:c2:46:47:55:f5:a1:37:7f:d7:58:aa:6c:f6: 75:93:03:30:0a:cf:0a:93:07:c7:30:3a:a6:3e:13:40:a6:39: 47:90:74:2f:50:90:01:4d:18:91:81:89:a5:c1:a3:05:f3:ec: a2:e3:fb:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRCMzMxMTAvBgNVBAUTKEVGMEU0OTMyRkM2OEI3NTJFMzQyODkyMkE5M0U2NkFC RTMxRjM0MzEwHhcNMjUwNDI3MDQ1ODEwWhcNMjUwNTA0MDQ1ODEwWjAYMRYwFAYD VQQDEw02ODBkYjk2Mi1hMTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApzgPQHb3+YxVUSOQ9sJsieY/Nm/o6ky5Yw2XCbVoNRmtbt3jm2n6/RylLSB0 /njvNFy7l+NsKrytUnG5KVPr5U36U079j+gQTialIFVvU1YQkB6LmCPG4FTcy85n gjeytOCV5kCDZ0Dz5sxQaBtC1WZM8523lmStgarqfaoXgwLET/fAcb4IciwOcSAa Rvy7agSVx/iOSVbtp1Uk+q0JbeI6A1yF5deWbVg6OtYXvQ8tHA0AIRuXZtXTVSl6 sVQQ/6XGdO2ggVIy9g/7E1M2AYbFfmVJXt5l+y7EOwvYdZZvWwhAAwP64+smef/e cZyGYwDR4f62C/AYzBvu1WTpfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAzkeLe0 dD2VCtvwmOjfEVOuFb0MMB8GA1UdIwQYMBaAFO8OSTL8aLdS40KJIqk+ZqvjHzQx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEIzMy8xQUNFN0QwNDIy MUUxMUVGOTM0NEEzMDlDNEY5QUUwMi83dzVKTXZ4b3QxTGpRb2tpcVQ1bXEtTWZO REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzd3NUpNdnhvdDFMalFva2lxVDVtcS1NZk5ERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEIzMy8xQUNFN0QwNDIyMUUxMUVGOTM0NEEzMDlDNEY5QUUwMi83dzVKTXZ4b3Qx TGpRb2tpcVQ1bXEtTWZOREUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDD+1+ZvlnbgL7Pn/upSReEhIvSEmYbSCsHXhWX7Q3HbokM/tokvtQD O+hmB6acpE5KPF9CBjG52f6TzEnfJkB0vz6eQyNAmzL25R0xhCwIStLr8uObyrFO hfHFsaRQK8ZZnsWwghHPDyKuSnyUeYH+zwCM+R6ssYAweMNTRA6GfyhCLR0euoZ4 Y6uzap36rcYqzOZ2LDQQsMHI6BMIwqdxMW3yQSrraOoaQu/1pLqsegPjc8ykGWb7 00YLcHmsE3+b6s10gp+4aEogasJGR1X1oTd/11iqbPZ1kwMwCs8KkwfHMDqmPhNA pjlHkHQvUJABTRiRgYmlwaMF8+yi4/u1 -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:54 2025 by rpki-client on console.sobornost.net