$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6006/E4FDE46AC3E811E8AC76EB16C4F9AE02/EvkubHLmyiXAdQVbSP43tlq24FI.mft File: EvkubHLmyiXAdQVbSP43tlq24FI.mft (raw, json) Hash identifier: h5YLTq0c8qaXdndHADtzYw835XnSg3kNS8jt4KFg9hw= Subject key identifier: 79:06:BB:BF:58:0D:CF:6E:E9:B1:60:9F:13:59:CF:52:D6:A7:36:E3 Authority key identifier: 12:F9:2E:6C:72:E6:CA:25:C0:75:05:5B:48:FE:37:B6:5A:B6:E0:52 Certificate issuer: /CN=A91B6006/serialNumber=12F92E6C72E6CA25C075055B48FE37B65AB6E052 Certificate serial: 12C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvkubHLmyiXAdQVbSP43tlq24FI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6006/E4FDE46AC3E811E8AC76EB16C4F9AE02/EvkubHLmyiXAdQVbSP43tlq24FI.mft Manifest number: 12A0 Signing time: Thu 24 Apr 2025 17:06:11 +0000 Manifest this update: Thu 24 Apr 2025 17:06:11 +0000 Manifest next update: Thu 01 May 2025 17:06:11 +0000 Files and hashes: 1: EvkubHLmyiXAdQVbSP43tlq24FI.crl (hash: jE66C0mykKHcHHZgwrw9ghvXM7ZApradiFkvatawYqA=) 2: D67D6C12D09611ECAE4FA90AC4F9AE02.roa (hash: ohfZG59sEvFb3B98TJzWsPWyWdsfQxGqekH2JoxH6gQ=) 3: D5BE6FF6D09611ECAE4FA90AC4F9AE02.roa (hash: QtJIcs1O/DIjF/Awmfs8kNbcOWbla/g4nCBWN3yn5TE=) 4: 2AD29284D22A11E8B6E99987C4F9AE02.roa (hash: 3q5R1J4djCmGk92jrHGge8u1JnUcb5OYOxif13zqZng=) 5: D82E5F1ADBC211E99D686940C4F9AE02.roa (hash: At2TYBc2mB9m2KMar1RnpPwLIC3piw2pCnJKYNvU7DI=) 6: 8ECD16D0CE7211ED84D09A78C4F9AE02.roa (hash: T7RO7bDELeuxgYKkuydZy/+SJnNf8qDQvOpkzhWcvjU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6006/E4FDE46AC3E811E8AC76EB16C4F9AE02/EvkubHLmyiXAdQVbSP43tlq24FI.crl rsync://rpki.apnic.net/member_repository/A91B6006/E4FDE46AC3E811E8AC76EB16C4F9AE02/EvkubHLmyiXAdQVbSP43tlq24FI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvkubHLmyiXAdQVbSP43tlq24FI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:06:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4808 (0x12c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6006, serialNumber=12F92E6C72E6CA25C075055B48FE37B65AB6E052 Validity Not Before: Apr 24 17:06:11 2025 GMT Not After : May 1 17:06:11 2025 GMT Subject: CN=680a6f83-fc78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:cf:98:04:df:fe:04:ab:f9:33:de:8c:60:5c: dd:62:5e:65:f4:b8:15:c9:4c:5c:ac:df:03:60:95: 66:ee:4c:7f:0f:1f:81:4f:50:a0:98:d9:72:e2:cb: ac:14:13:e2:e6:f1:31:44:91:a8:ad:4d:d4:97:c1: 8d:2b:bf:dd:5a:9d:34:3e:f9:ce:e7:c7:98:40:d7: 5f:03:53:1f:85:cc:e6:e0:ad:d3:c4:5e:5e:84:2e: 00:ae:d1:c9:5c:10:43:70:1b:2e:2d:38:94:52:34: f7:d5:2f:2a:1c:a9:bb:48:6c:75:40:ac:30:c5:c1: f8:ac:49:54:c9:01:16:a3:5a:08:b8:42:29:d9:0c: 15:a8:37:14:dd:1c:35:66:d9:74:f3:88:83:7c:23: 0d:45:26:50:ae:7a:17:d3:fd:ab:ef:79:e6:c4:f5: a4:49:66:fd:5c:f8:54:d8:38:2e:0f:fe:f0:80:40: 99:7c:6b:40:e6:2b:0b:b9:38:45:d0:c5:3b:a0:4d: 1f:42:8e:e9:62:27:3a:e0:b6:94:c3:e0:66:3d:86: 3c:27:5f:13:ed:4c:b2:d0:df:eb:db:f3:74:9e:bd: 7f:fa:0e:9d:92:ce:03:92:b6:d8:db:d9:eb:bc:d5: 24:55:c1:b5:b6:28:71:68:f5:8d:f9:28:1b:9b:95: 04:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:06:BB:BF:58:0D:CF:6E:E9:B1:60:9F:13:59:CF:52:D6:A7:36:E3 X509v3 Authority Key Identifier: keyid:12:F9:2E:6C:72:E6:CA:25:C0:75:05:5B:48:FE:37:B6:5A:B6:E0:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6006/E4FDE46AC3E811E8AC76EB16C4F9AE02/EvkubHLmyiXAdQVbSP43tlq24FI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvkubHLmyiXAdQVbSP43tlq24FI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6006/E4FDE46AC3E811E8AC76EB16C4F9AE02/EvkubHLmyiXAdQVbSP43tlq24FI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:75:72:b7:e7:78:fb:e5:95:23:b9:3a:4c:38:9f:72:51:0f: 89:1c:98:71:f1:36:e9:65:5a:59:a2:44:41:ea:cb:2f:cf:e6: 2d:ca:7d:da:bd:67:de:7a:ea:d9:fc:f2:56:22:29:b8:39:87: 56:20:d4:43:80:72:77:c5:3b:73:9f:3d:d1:ae:36:71:61:79: 23:52:94:14:38:6e:aa:73:0b:1d:92:e3:cb:90:c6:79:42:1c: 7f:c9:e0:d2:ea:5a:98:63:d7:4d:51:4a:d9:0d:24:f3:88:5d: 1d:c4:9b:23:67:9f:90:15:b8:9b:d2:97:43:59:36:38:06:a1: 97:c6:bd:d7:a4:f4:e4:a0:ff:d3:9d:74:b0:2c:2d:06:d1:9a: 3e:92:bc:34:72:ad:d9:f2:ed:bc:63:f1:00:7f:79:3b:ae:87: 03:85:d6:83:4d:e6:45:d5:bc:ba:09:58:8e:34:ad:98:98:2a: 62:2c:8d:f8:b2:f6:a3:b5:5a:b8:22:04:ce:26:80:ac:24:e0: 9f:02:ac:ea:64:ec:dd:5a:f3:9d:09:d1:29:3f:e1:97:4f:38: 61:67:94:f6:ae:f6:61:6c:5c:bf:1e:dd:86:7f:b1:04:ed:be: a2:50:44:3e:60:ad:2f:2d:3b:8f:58:8d:e8:05:21:24:c8:0e: c8:bd:e0:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEsgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYwMDYxMTAvBgNVBAUTKDEyRjkyRTZDNzJFNkNBMjVDMDc1MDU1QjQ4RkUzN0I2 NUFCNkUwNTIwHhcNMjUwNDI0MTcwNjExWhcNMjUwNTAxMTcwNjExWjAYMRYwFAYD VQQDEw02ODBhNmY4My1mYzc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqs+YBN/+BKv5M96MYFzdYl5l9LgVyUxcrN8DYJVm7kx/Dx+BT1CgmNly4sus FBPi5vExRJGorU3Ul8GNK7/dWp00PvnO58eYQNdfA1Mfhczm4K3TxF5ehC4ArtHJ XBBDcBsuLTiUUjT31S8qHKm7SGx1QKwwxcH4rElUyQEWo1oIuEIp2QwVqDcU3Rw1 Ztl084iDfCMNRSZQrnoX0/2r73nmxPWkSWb9XPhU2DguD/7wgECZfGtA5isLuThF 0MU7oE0fQo7pYic64LaUw+BmPYY8J18T7Uyy0N/r2/N0nr1/+g6dks4DkrbY29nr vNUkVcG1tihxaPWN+Sgbm5UE8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHkGu79Y Dc9u6bFgnxNZz1LWpzbjMB8GA1UdIwQYMBaAFBL5Lmxy5solwHUFW0j+N7ZatuBS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjAwNi9FNEZERTQ2QUMz RTgxMUU4QUM3NkVCMTZDNEY5QUUwMi9Fdmt1YkhMbXlpWEFkUVZiU1A0M3RscTI0 RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0V2a3ViSExteWlYQWRRVmJTUDQzdGxxMjRGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjAwNi9FNEZERTQ2QUMzRTgxMUU4QUM3NkVCMTZDNEY5QUUwMi9Fdmt1YkhMbXlp WEFkUVZiU1A0M3RscTI0RkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbdXK353j75ZUjuTpMOJ9yUQ+JHJhx8TbpZVpZokRB6ssvz+Ytyn3a vWfeeurZ/PJWIim4OYdWINRDgHJ3xTtznz3RrjZxYXkjUpQUOG6qcwsdkuPLkMZ5 Qhx/yeDS6lqYY9dNUUrZDSTziF0dxJsjZ5+QFbib0pdDWTY4BqGXxr3XpPTkoP/T nXSwLC0G0Zo+krw0cq3Z8u28Y/EAf3k7rocDhdaDTeZF1by6CViONK2YmCpiLI34 svajtVq4IgTOJoCsJOCfAqzqZOzdWvOdCdEpP+GXTzhhZ5T2rvZhbFy/Ht2Gf7EE 7b6iUEQ+YK0vLTuPWI3oBSEkyA7IveDd -----END CERTIFICATE-----Generated at Thu Apr 24 20:39:18 2025 by rpki-client on console.sobornost.net