$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.mft File: -c8El8-2fhYnKRCY8R8XhuuJ_1A.mft (raw, json) Hash identifier: moWFibO3rX0mUjoK+g8/lU2FOhEk4Jiuo9gR5r3qsSk= Subject key identifier: AE:84:58:33:20:99:C7:11:60:8D:EC:7C:C1:17:36:59:B6:6B:A1:03 Authority key identifier: F9:CF:04:97:CF:B6:7E:16:27:29:10:98:F1:1F:17:86:EB:89:FF:50 Certificate issuer: /CN=A91B5073/serialNumber=F9CF0497CFB67E1627291098F11F1786EB89FF50 Certificate serial: 1081 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-c8El8-2fhYnKRCY8R8XhuuJ_1A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.mft Manifest number: 1906 Signing time: Mon 28 Apr 2025 17:35:59 +0000 Manifest this update: Mon 28 Apr 2025 17:35:58 +0000 Manifest next update: Mon 05 May 2025 17:35:58 +0000 Files and hashes: 1: -c8El8-2fhYnKRCY8R8XhuuJ_1A.crl (hash: 7adm2LebwwTX0Xcd9jvlk2q/360dBEFsbLXeFId5YzQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.crl rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-c8El8-2fhYnKRCY8R8XhuuJ_1A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 17:35:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4225 (0x1081) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5073, serialNumber=F9CF0497CFB67E1627291098F11F1786EB89FF50 Validity Not Before: Apr 28 17:35:58 2025 GMT Not After : May 5 17:35:58 2025 GMT Subject: CN=680fbc7f-e60d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:50:19:b7:ac:f3:56:3d:06:86:7d:ca:70:02: f1:79:05:f7:76:52:f3:72:fa:bf:3f:63:dd:44:26: 7e:1b:af:c8:3f:c6:ce:c5:03:be:fc:22:8e:88:e1: 09:e1:1f:68:a2:85:94:59:58:82:34:e9:75:2e:a2: 7d:17:af:04:85:97:29:a6:d1:c3:43:f5:f8:14:62: 5a:99:3f:3a:88:ef:95:16:8b:b9:3b:bb:b6:8c:e0: df:a5:93:8f:c1:9d:5c:04:51:27:50:b4:aa:86:bd: 4e:39:5b:d5:de:b1:b3:36:7f:47:57:a6:15:20:9d: 21:7a:cf:c7:4c:a8:c1:b4:72:c4:c7:3d:2c:94:ae: cb:70:64:d8:46:d1:83:22:dd:f8:fd:8d:f8:eb:3f: 12:5a:98:51:c7:29:5c:46:91:cf:67:bd:cf:51:8c: 39:01:44:37:f7:81:68:0e:74:5b:0a:09:98:5e:0b: 83:fa:ea:47:72:4e:92:d3:57:5e:e7:ea:f5:cc:bb: d3:d7:f7:22:98:42:33:f7:b3:d5:cd:e6:e1:dc:78: 05:ec:da:7a:81:38:fe:8d:2c:1d:2d:ec:29:83:68: 12:56:51:8a:da:77:1e:5f:68:d3:fa:73:a1:6d:cf: 4d:4f:bf:ce:2d:e0:55:2b:66:94:a7:03:a2:a4:bf: e6:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:84:58:33:20:99:C7:11:60:8D:EC:7C:C1:17:36:59:B6:6B:A1:03 X509v3 Authority Key Identifier: keyid:F9:CF:04:97:CF:B6:7E:16:27:29:10:98:F1:1F:17:86:EB:89:FF:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-c8El8-2fhYnKRCY8R8XhuuJ_1A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:ba:7b:ad:d6:4a:e3:1a:b8:e0:6f:5a:11:eb:68:f8:88:ba: 3f:4d:7c:c8:fc:87:b5:dc:72:12:be:d2:cb:fa:6c:8b:46:3f: 06:59:b7:f9:b0:67:53:22:0c:99:29:42:fe:ad:97:7d:77:67: e1:c7:4d:2c:e3:17:ca:93:57:47:c3:1c:d7:53:74:15:55:30: f9:70:44:c2:d4:e9:23:36:97:58:88:7b:77:5d:81:8a:dd:9b: fd:1d:28:46:36:97:32:bf:71:59:72:73:20:26:a9:70:39:3b: 75:9f:16:fe:ce:34:6a:20:94:ac:90:f5:ab:84:13:9f:ae:51: 4a:14:5c:49:92:6a:fe:a9:8a:c5:73:d1:9e:bf:c9:da:94:a8: 00:1b:f9:e8:63:60:77:30:bd:88:a4:c6:3a:5a:ab:ed:71:78: 2d:e0:b0:fa:f3:33:f0:ed:59:ef:85:f2:c5:04:95:90:2b:80: 9c:56:a7:35:7a:51:98:ec:05:db:3a:73:2e:d9:16:bb:eb:1c: 4e:26:fb:2f:83:be:88:4e:d0:f1:5a:2e:98:42:03:7e:79:90: ad:f9:76:67:76:0c:48:40:27:be:5d:b4:22:3d:1d:d3:d4:09: 10:d3:80:ec:cd:d4:24:c5:f7:b1:40:d4:f3:2f:38:29:e0:f1: b6:7d:d1:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjUwNzMxMTAvBgNVBAUTKEY5Q0YwNDk3Q0ZCNjdFMTYyNzI5MTA5OEYxMUYxNzg2 RUI4OUZGNTAwHhcNMjUwNDI4MTczNTU4WhcNMjUwNTA1MTczNTU4WjAYMRYwFAYD VQQDEw02ODBmYmM3Zi1lNjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5VAZt6zzVj0Ghn3KcALxeQX3dlLzcvq/P2PdRCZ+G6/IP8bOxQO+/CKOiOEJ 4R9oooWUWViCNOl1LqJ9F68EhZcpptHDQ/X4FGJamT86iO+VFou5O7u2jODfpZOP wZ1cBFEnULSqhr1OOVvV3rGzNn9HV6YVIJ0hes/HTKjBtHLExz0slK7LcGTYRtGD It34/Y346z8SWphRxylcRpHPZ73PUYw5AUQ394FoDnRbCgmYXguD+upHck6S01de 5+r1zLvT1/cimEIz97PVzebh3HgF7Np6gTj+jSwdLewpg2gSVlGK2nceX2jT+nOh bc9NT7/OLeBVK2aUpwOipL/m7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK6EWDMg mccRYI3sfMEXNlm2a6EDMB8GA1UdIwQYMBaAFPnPBJfPtn4WJykQmPEfF4brif9Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTA3My80M0YxNjI2NDMz OTUxMUU5QkZCMUMyMUFDNEY5QUUwMi8tYzhFbDgtMmZoWW5LUkNZOFI4WGh1dUpf MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1jOEVsOC0yZmhZbktSQ1k4UjhYaHV1Sl8xQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTA3My80M0YxNjI2NDMzOTUxMUU5QkZCMUMyMUFDNEY5QUUwMi8tYzhFbDgtMmZo WW5LUkNZOFI4WGh1dUpfMUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNunut1krjGrjgb1oR62j4iLo/TXzI/Ie13HISvtLL+myLRj8GWbf5 sGdTIgyZKUL+rZd9d2fhx00s4xfKk1dHwxzXU3QVVTD5cETC1OkjNpdYiHt3XYGK 3Zv9HShGNpcyv3FZcnMgJqlwOTt1nxb+zjRqIJSskPWrhBOfrlFKFFxJkmr+qYrF c9Gev8nalKgAG/noY2B3ML2IpMY6WqvtcXgt4LD68zPw7VnvhfLFBJWQK4CcVqc1 elGY7AXbOnMu2Ra76xxOJvsvg76ITtDxWi6YQgN+eZCt+XZndgxIQCe+XbQiPR3T 1AkQ04DszdQkxfexQNTzLzgp4PG2fdHI -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:54 2025 by rpki-client on console.sobornost.net