$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5CEA/28A77B6864EE11EDA4A34513C4F9AE02/_U5c-75RNAFgOW1ZbhsySM_IHMQ.mft File: _U5c-75RNAFgOW1ZbhsySM_IHMQ.mft (raw, json) Hash identifier: TzQwlEizXmpowceyitbCuuWjwdvHp32fla3v0Zh78Qs= Subject key identifier: B9:79:5F:EC:39:24:5A:89:79:78:89:DF:18:A3:95:EC:0A:73:2D:C6 Authority key identifier: FD:4E:5C:FB:BE:51:34:01:60:39:6D:59:6E:1B:32:48:CF:C8:1C:C4 Certificate issuer: /CN=A91B5CEA/serialNumber=FD4E5CFBBE51340160396D596E1B3248CFC81CC4 Certificate serial: 01D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_U5c-75RNAFgOW1ZbhsySM_IHMQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5CEA/28A77B6864EE11EDA4A34513C4F9AE02/_U5c-75RNAFgOW1ZbhsySM_IHMQ.mft Manifest number: 01CF Signing time: Sun 27 Apr 2025 01:55:24 +0000 Manifest this update: Sun 27 Apr 2025 01:55:23 +0000 Manifest next update: Sun 04 May 2025 01:55:23 +0000 Files and hashes: 1: _U5c-75RNAFgOW1ZbhsySM_IHMQ.crl (hash: lBHLLkpNiubV0ckAyI9vSJCuzbKVcMqciXIK5Z64JLQ=) 2: B42198DC64F211ED9AEC046FC4F9AE02.roa (hash: mfM+unwRd1y5KNLtchPVfnPJL1r2yUuTkpo8qV3b6dM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5CEA/28A77B6864EE11EDA4A34513C4F9AE02/_U5c-75RNAFgOW1ZbhsySM_IHMQ.crl rsync://rpki.apnic.net/member_repository/A91B5CEA/28A77B6864EE11EDA4A34513C4F9AE02/_U5c-75RNAFgOW1ZbhsySM_IHMQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_U5c-75RNAFgOW1ZbhsySM_IHMQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 01:55:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 467 (0x1d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5CEA, serialNumber=FD4E5CFBBE51340160396D596E1B3248CFC81CC4 Validity Not Before: Apr 27 01:55:23 2025 GMT Not After : May 4 01:55:23 2025 GMT Subject: CN=680d8e8b-4859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e1:ba:98:c9:6c:ac:5b:02:bc:70:d4:97:05: 1e:aa:62:4b:bc:de:0a:e4:11:9c:78:dd:28:a8:5e: cb:b3:46:95:63:5d:6d:76:82:2d:fc:8a:05:67:4f: c8:ee:c5:dd:87:8f:c4:84:e5:b2:17:40:06:c3:e6: 9f:4e:9b:89:4b:f5:38:c6:78:5c:4f:39:c3:f2:25: e9:b8:7a:2b:08:74:66:34:f7:fc:39:eb:ad:fe:bf: 0b:70:13:e0:2f:da:c9:53:83:e0:b0:32:ed:65:2e: db:9f:e3:34:f1:d1:41:6a:9b:95:f2:86:7a:7d:e5: 4e:e0:63:2e:29:12:b6:a5:99:df:7c:23:89:80:5d: c3:ab:37:6b:56:fa:ca:5d:df:7f:c0:f2:18:12:23: d4:a7:6a:74:25:b7:90:c8:f2:19:ca:c6:93:11:16: db:7d:ed:46:94:87:cf:03:32:aa:70:6f:52:4f:fd: 11:ca:ee:44:f0:8e:c8:9e:4b:f4:22:19:1a:90:cf: 4b:15:dd:d6:71:32:20:6f:80:16:1d:31:8c:e1:72: 38:dd:63:05:39:07:60:64:1c:4d:93:00:72:a8:43: cb:86:aa:e0:34:ff:73:0b:32:f9:ec:77:47:09:98: 1a:ef:86:56:8d:e7:78:47:5e:cf:e5:69:59:bb:5c: 93:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:79:5F:EC:39:24:5A:89:79:78:89:DF:18:A3:95:EC:0A:73:2D:C6 X509v3 Authority Key Identifier: keyid:FD:4E:5C:FB:BE:51:34:01:60:39:6D:59:6E:1B:32:48:CF:C8:1C:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5CEA/28A77B6864EE11EDA4A34513C4F9AE02/_U5c-75RNAFgOW1ZbhsySM_IHMQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_U5c-75RNAFgOW1ZbhsySM_IHMQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5CEA/28A77B6864EE11EDA4A34513C4F9AE02/_U5c-75RNAFgOW1ZbhsySM_IHMQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:35:bb:d6:6f:9d:85:9b:55:91:0a:e7:dc:e6:33:80:04:41: e4:ce:d2:35:4f:40:2b:bd:2e:dd:3b:bc:d2:1c:d3:60:f2:96: 76:dc:3d:5d:82:40:72:cc:19:8e:1d:10:4f:3b:61:d6:28:2e: 1c:4b:e2:af:76:49:a8:7b:df:83:82:31:9b:50:44:5f:2b:49: 44:d1:12:65:da:9d:e0:0d:5a:21:64:b6:19:87:47:fd:99:be: 87:53:8d:a7:3c:9f:e8:e6:7a:48:b7:1f:a7:4c:b2:51:73:61: aa:38:b5:c9:6b:59:16:9a:d7:31:f8:0f:f6:e5:bd:80:31:af: e0:e5:da:2c:8b:d0:ac:e5:09:9c:3f:cd:d6:20:df:fb:b4:0b: c9:8b:dc:6c:30:85:4c:d7:74:71:4e:89:8f:49:83:34:10:0b: a0:50:3b:23:94:93:d4:34:a4:92:9e:52:06:8d:9d:9e:ec:cd: c7:ae:38:08:b5:92:44:ba:82:3b:32:d9:1d:6c:af:4c:61:a0: e5:d4:0c:fe:d9:32:9b:3c:33:67:5c:51:25:3d:75:a0:04:ec: 61:16:75:db:ee:33:c8:3b:f8:10:7d:75:53:c4:7a:f0:98:0c: 28:20:0b:f4:e0:a4:0b:14:1c:7e:8b:69:66:c0:f2:ac:d6:54: 8a:ec:3e:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVDRUExMTAvBgNVBAUTKEZENEU1Q0ZCQkU1MTM0MDE2MDM5NkQ1OTZFMUIzMjQ4 Q0ZDODFDQzQwHhcNMjUwNDI3MDE1NTIzWhcNMjUwNTA0MDE1NTIzWjAYMRYwFAYD VQQDEw02ODBkOGU4Yi00ODU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArOG6mMlsrFsCvHDUlwUeqmJLvN4K5BGceN0oqF7Ls0aVY11tdoIt/IoFZ0/I 7sXdh4/EhOWyF0AGw+afTpuJS/U4xnhcTznD8iXpuHorCHRmNPf8Oeut/r8LcBPg L9rJU4PgsDLtZS7bn+M08dFBapuV8oZ6feVO4GMuKRK2pZnffCOJgF3DqzdrVvrK Xd9/wPIYEiPUp2p0JbeQyPIZysaTERbbfe1GlIfPAzKqcG9ST/0Ryu5E8I7Inkv0 IhkakM9LFd3WcTIgb4AWHTGM4XI43WMFOQdgZBxNkwByqEPLhqrgNP9zCzL57HdH CZga74ZWjed4R17P5WlZu1yTcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLl5X+w5 JFqJeXiJ3xijlewKcy3GMB8GA1UdIwQYMBaAFP1OXPu+UTQBYDltWW4bMkjPyBzE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUNFQS8yOEE3N0I2ODY0 RUUxMUVEQTRBMzQ1MTNDNEY5QUUwMi9fVTVjLTc1Uk5BRmdPVzFaYmhzeVNNX0lI TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19VNWMtNzVSTkFGZ09XMVpiaHN5U01fSUhNUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUNFQS8yOEE3N0I2ODY0RUUxMUVEQTRBMzQ1MTNDNEY5QUUwMi9fVTVjLTc1Uk5B RmdPVzFaYmhzeVNNX0lITVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDMNbvWb52Fm1WRCufc5jOABEHkztI1T0ArvS7dO7zSHNNg8pZ23D1d gkByzBmOHRBPO2HWKC4cS+Kvdkmoe9+DgjGbUERfK0lE0RJl2p3gDVohZLYZh0f9 mb6HU42nPJ/o5npItx+nTLJRc2GqOLXJa1kWmtcx+A/25b2AMa/g5dosi9Cs5Qmc P83WIN/7tAvJi9xsMIVM13RxTomPSYM0EAugUDsjlJPUNKSSnlIGjZ2e7M3HrjgI tZJEuoI7MtkdbK9MYaDl1Az+2TKbPDNnXFElPXWgBOxhFnXb7jPIO/gQfXVTxHrw mAwoIAv04KQLFBx+i2lmwPKs1lSK7D6y -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:08 2025 by rpki-client on console.sobornost.net