$ rpki-client -vvf rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.mft File: oKMiStDIKz-aYvNHrKP5RdsI8rA.mft (raw, json) Hash identifier: kda2K70zpWTsJn12NIyu563wJrz22bWxAHlwjPnoIIA= Subject key identifier: F0:1B:25:FE:91:7D:C5:04:CB:8D:BD:BD:DB:35:2A:C1:6A:44:E0:8B Authority key identifier: A0:A3:22:4A:D0:C8:2B:3F:9A:62:F3:47:AC:A3:F9:45:DB:08:F2:B0 Certificate issuer: /CN=A91B80BD/serialNumber=A0A3224AD0C82B3F9A62F347ACA3F945DB08F2B0 Certificate serial: 3045 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKMiStDIKz-aYvNHrKP5RdsI8rA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.mft Manifest number: 3017 Signing time: Mon 28 Apr 2025 15:32:43 +0000 Manifest this update: Mon 28 Apr 2025 15:32:42 +0000 Manifest next update: Mon 05 May 2025 15:32:42 +0000 Files and hashes: 1: oKMiStDIKz-aYvNHrKP5RdsI8rA.crl (hash: vD99/s0pMTl23C54RD3kpPoNFonzdOJGFdGqV+FanoQ=) 2: 583C1F6854F611E79DF7E643C4F9AE02.roa (hash: J9SJ4DIJ/7Jqarub1sf8j6PHgZAGlGGdRbRsMiv9apI=) 3: 915E51B8F3BE11ED8B9B1450C4F9AE02.roa (hash: 9deMiuArgkPyt65CV7Ht+L/9JKrWYVcP+qJb8LKGzOI=) 4: 4C72E61CB0EC11E5A6934B42C4F9AE02.roa (hash: 2+WTGnYcaeWw8w6rtvBrYx7uq+JHkK1rDrCVxpG+T+Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.crl rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKMiStDIKz-aYvNHrKP5RdsI8rA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 15:32:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12357 (0x3045) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B80BD, serialNumber=A0A3224AD0C82B3F9A62F347ACA3F945DB08F2B0 Validity Not Before: Apr 28 15:32:42 2025 GMT Not After : May 5 15:32:42 2025 GMT Subject: CN=680f9f9a-c715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8b:9b:53:61:84:f9:34:8d:7b:4c:8c:66:bd: e9:cd:a5:0e:40:42:1f:9e:25:8e:96:d7:bf:82:7d: b0:f9:00:aa:35:5a:a6:e2:64:42:44:2e:86:0e:ad: 8c:be:18:09:f5:65:52:8b:76:53:0e:c8:00:94:4d: 26:4f:a4:7f:61:3f:77:e4:66:09:6a:1f:71:93:92: 58:e6:4e:74:3f:c6:53:21:49:f7:f0:ea:56:65:4e: 1d:a7:51:0e:5d:d1:40:a2:67:e2:40:67:57:4d:a7: 46:60:9e:56:65:62:95:3c:1f:0e:4e:cd:60:a4:63: b3:9f:c2:b7:c1:c8:e9:77:e4:14:3b:17:c6:cd:68: 7c:25:fd:28:5f:7a:45:02:cb:d8:81:05:2f:47:d6: de:b9:58:da:09:04:94:b1:86:75:49:0f:4a:67:01: 8f:58:db:17:5b:52:e3:ae:b7:a2:b3:07:0b:98:bc: 43:02:ad:08:e6:37:bf:3b:53:de:35:00:2c:56:a1: f6:92:9d:77:0d:3a:75:a7:85:8e:90:21:0a:53:15: 1a:a5:97:e1:3b:9d:a1:f7:3d:c7:ce:af:e3:23:3c: 75:7b:ce:74:c8:2d:3a:9a:cc:91:d8:0a:13:7c:1d: b1:54:ce:ce:d1:e0:c5:ef:a2:17:bb:c6:d9:93:32: 75:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:1B:25:FE:91:7D:C5:04:CB:8D:BD:BD:DB:35:2A:C1:6A:44:E0:8B X509v3 Authority Key Identifier: keyid:A0:A3:22:4A:D0:C8:2B:3F:9A:62:F3:47:AC:A3:F9:45:DB:08:F2:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKMiStDIKz-aYvNHrKP5RdsI8rA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:ba:25:6b:0d:27:ac:e5:e9:59:9a:3a:96:b6:7c:51:b4:10: 79:ad:1a:bf:8d:23:24:3a:d7:a8:9c:cd:f4:3d:a9:af:07:1f: 36:1f:1f:39:40:f3:31:a1:3e:48:32:fa:a2:34:c2:ed:e0:b5: 99:cd:0d:99:82:f3:5e:bc:b3:52:08:f7:57:81:28:b8:da:f0: 96:9c:e2:52:80:ad:75:65:b7:3e:63:43:f4:40:b8:e1:6e:22: 88:4d:32:28:54:b3:a4:b9:96:f2:50:41:70:61:b6:eb:5f:fb: 11:3a:eb:4c:bc:d2:a9:ff:aa:ff:f8:d5:c7:8c:d2:b7:49:4f: d3:95:16:d8:7d:41:80:e2:61:41:d7:d2:4b:a9:79:36:73:5e: 40:1c:2e:e9:91:4f:cf:56:d0:07:2a:5a:f7:be:eb:9d:38:07: 2a:30:ad:45:7a:50:78:d2:eb:f6:30:5b:d7:ea:3f:14:20:09: 9f:e1:18:cd:90:f1:6b:e8:49:74:0f:d3:e6:9f:f1:22:ec:53: 8e:8e:2b:51:af:f0:87:4e:d2:26:b9:d0:f4:b9:22:53:37:e1: c8:f7:e2:ba:64:fb:36:a3:a5:aa:8f:8b:74:74:e1:7f:a8:d6: 47:4e:7c:7d:a2:48:73:8c:9a:3f:e1:c3:51:f7:72:18:b5:18: 0c:25:8e:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMEUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgwQkQxMTAvBgNVBAUTKEEwQTMyMjRBRDBDODJCM0Y5QTYyRjM0N0FDQTNGOTQ1 REIwOEYyQjAwHhcNMjUwNDI4MTUzMjQyWhcNMjUwNTA1MTUzMjQyWjAYMRYwFAYD VQQDEw02ODBmOWY5YS1jNzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwoubU2GE+TSNe0yMZr3pzaUOQEIfniWOlte/gn2w+QCqNVqm4mRCRC6GDq2M vhgJ9WVSi3ZTDsgAlE0mT6R/YT935GYJah9xk5JY5k50P8ZTIUn38OpWZU4dp1EO XdFAomfiQGdXTadGYJ5WZWKVPB8OTs1gpGOzn8K3wcjpd+QUOxfGzWh8Jf0oX3pF AsvYgQUvR9beuVjaCQSUsYZ1SQ9KZwGPWNsXW1LjrreiswcLmLxDAq0I5je/O1Pe NQAsVqH2kp13DTp1p4WOkCEKUxUapZfhO52h9z3Hzq/jIzx1e850yC06msyR2AoT fB2xVM7O0eDF76IXu8bZkzJ1NwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPAbJf6R fcUEy429vds1KsFqROCLMB8GA1UdIwQYMBaAFKCjIkrQyCs/mmLzR6yj+UXbCPKw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODBCRC9CNUE2MzZEOEZF NUMxMUUyQUVDMDQyNTA1OTExRUEzMi9vS01pU3RESUt6LWFZdk5IcktQNVJkc0k4 ckEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29LTWlTdERJS3otYVl2TkhyS1A1UmRzSThyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODBCRC9CNUE2MzZEOEZFNUMxMUUyQUVDMDQyNTA1OTExRUEzMi9vS01pU3RESUt6 LWFZdk5IcktQNVJkc0k4ckEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLuiVrDSes5elZmjqWtnxRtBB5rRq/jSMkOteonM30PamvBx82Hx85 QPMxoT5IMvqiNMLt4LWZzQ2ZgvNevLNSCPdXgSi42vCWnOJSgK11Zbc+Y0P0QLjh biKITTIoVLOkuZbyUEFwYbbrX/sROutMvNKp/6r/+NXHjNK3SU/TlRbYfUGA4mFB 19JLqXk2c15AHC7pkU/PVtAHKlr3vuudOAcqMK1FelB40uv2MFvX6j8UIAmf4RjN kPFr6El0D9Pmn/Ei7FOOjitRr/CHTtImudD0uSJTN+HI9+K6ZPs2o6Wqj4t0dOF/ qNZHTnx9okhzjJo/4cNR93IYtRgMJY4v -----END CERTIFICATE-----Generated at Mon Apr 28 17:46:02 2025 by rpki-client on console.sobornost.net