$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft File: CJx_ANge3WTbq20DcSKyoh8NO-Y.mft (raw, json) Hash identifier: T2zLhILPoBO+3Hh5rh6507Pm6iEosGgvJfzWgzgTVfY= Subject key identifier: 01:78:5B:FC:8B:72:AE:A0:09:19:F0:61:0D:EB:48:C3:BD:59:AB:8D Authority key identifier: 08:9C:7F:00:D8:1E:DD:64:DB:AB:6D:03:71:22:B2:A2:1F:0D:3B:E6 Certificate issuer: /CN=A91BB5F2/serialNumber=089C7F00D81EDD64DBAB6D037122B2A21F0D3BE6 Certificate serial: 01EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CJx_ANge3WTbq20DcSKyoh8NO-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft Manifest number: 01E2 Signing time: Sun 27 Apr 2025 01:44:01 +0000 Manifest this update: Sun 27 Apr 2025 01:44:00 +0000 Manifest next update: Sun 04 May 2025 01:44:00 +0000 Files and hashes: 1: CJx_ANge3WTbq20DcSKyoh8NO-Y.crl (hash: qZo8QXayt2Fe1wUK1+BmyMhjQjC8q4ril7SJva4WcqY=) 2: D1FD204C43B911EDB6AA2D5FC4F9AE02.roa (hash: BP/glgq2z1dVEQeJ08W20vuLvcBOY54eQXp8HeomvRk=) 3: D173DA3043B911EDB6AA2D5FC4F9AE02.roa (hash: FNYorUcrDZxaoz80iDO589JZkm4kbfGRGurVB7ty8DM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.crl rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CJx_ANge3WTbq20DcSKyoh8NO-Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 01:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 490 (0x1ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB5F2, serialNumber=089C7F00D81EDD64DBAB6D037122B2A21F0D3BE6 Validity Not Before: Apr 27 01:44:00 2025 GMT Not After : May 4 01:44:00 2025 GMT Subject: CN=680d8be1-58fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:0b:76:7c:f7:cf:87:83:00:16:87:e1:53:1d: 35:49:1a:80:a4:97:e4:76:2a:0c:38:71:12:c4:be: 90:9a:54:d3:7b:51:c1:c4:b9:71:ec:f6:a0:d3:61: 45:ff:2a:dc:26:bc:a2:b7:db:62:39:95:9b:5b:85: b8:ba:49:34:78:65:26:ab:ac:17:a0:02:88:cb:c0: c8:f3:5a:21:bf:4c:60:10:25:5e:98:05:8a:94:a0: d5:56:19:bb:52:13:79:2b:17:b0:08:e5:d0:59:a1: 57:89:48:ec:85:9f:59:65:3a:21:40:db:3b:b4:48: d1:ed:4a:13:cd:ab:97:20:8f:9a:e1:58:21:ec:c4: ff:ca:77:46:0d:81:8c:a9:61:0d:f4:91:d8:b3:97: df:6b:ae:93:3d:85:63:c5:5e:1b:5b:70:69:c5:c4: 82:bb:54:77:47:ea:85:3d:c5:5c:84:2e:d8:8a:a6: 91:88:da:1e:18:d8:de:57:6e:66:0a:4b:f9:aa:2d: 6a:e8:c7:6a:c7:9e:17:1a:81:1b:3b:21:55:70:77: 70:75:ca:f4:88:a6:6b:8d:3e:9d:1c:b2:3b:b2:c6: 0f:08:3c:ed:84:e8:f2:a0:37:45:05:65:4b:91:fe: e3:e1:8b:8f:b4:8f:54:23:60:b5:e3:6f:eb:53:e0: 42:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:78:5B:FC:8B:72:AE:A0:09:19:F0:61:0D:EB:48:C3:BD:59:AB:8D X509v3 Authority Key Identifier: keyid:08:9C:7F:00:D8:1E:DD:64:DB:AB:6D:03:71:22:B2:A2:1F:0D:3B:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CJx_ANge3WTbq20DcSKyoh8NO-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:f1:d0:a4:f9:08:da:c0:0a:aa:2b:53:fa:f3:48:84:29:9f: 20:50:b7:df:9a:89:e6:4e:47:a6:3d:ba:f1:87:28:e5:0a:24: aa:ec:e8:9d:1f:63:dc:f5:03:5f:27:ab:41:d3:d1:a2:6e:99: f1:cf:55:fc:26:37:e2:18:c9:b2:8b:8e:d6:9d:ac:5d:8e:c2: 2b:53:a1:95:06:a0:7e:94:f6:a4:07:3d:6c:81:c9:c9:bc:fd: 21:bb:3b:e5:c5:c7:83:be:c1:6d:d1:fb:87:24:42:13:f7:b2: 07:cb:11:77:c3:0f:3d:66:cf:16:2e:69:18:43:a0:c0:25:7b: 66:da:d4:38:14:97:ec:aa:40:16:42:57:7f:0d:a8:27:14:31: f3:71:f6:a6:26:91:3a:fb:fd:62:29:b7:38:7d:1c:95:27:a8: e7:66:df:5b:0b:16:06:d3:80:1e:6a:02:70:e6:23:74:8a:8d: 80:d4:3b:41:b3:aa:bf:0a:05:af:7c:51:e6:fc:04:72:6b:d7: 8b:10:1a:cf:8a:2c:13:71:19:bb:18:cb:57:be:4c:cc:5e:d4: 59:47:dd:bb:35:c3:2f:50:fd:28:49:05:85:b2:cd:a1:2e:48: cc:33:a2:ad:9e:f2:30:4a:e1:b3:db:69:2f:e8:97:94:4f:c0: 57:62:dd:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI1RjIxMTAvBgNVBAUTKDA4OUM3RjAwRDgxRURENjREQkFCNkQwMzcxMjJCMkEy MUYwRDNCRTYwHhcNMjUwNDI3MDE0NDAwWhcNMjUwNTA0MDE0NDAwWjAYMRYwFAYD VQQDEw02ODBkOGJlMS01OGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Qt2fPfPh4MAFofhUx01SRqApJfkdioMOHESxL6QmlTTe1HBxLlx7Pag02FF /yrcJryit9tiOZWbW4W4ukk0eGUmq6wXoAKIy8DI81ohv0xgECVemAWKlKDVVhm7 UhN5KxewCOXQWaFXiUjshZ9ZZTohQNs7tEjR7UoTzauXII+a4Vgh7MT/yndGDYGM qWEN9JHYs5ffa66TPYVjxV4bW3BpxcSCu1R3R+qFPcVchC7YiqaRiNoeGNjeV25m Ckv5qi1q6Mdqx54XGoEbOyFVcHdwdcr0iKZrjT6dHLI7ssYPCDzthOjyoDdFBWVL kf7j4YuPtI9UI2C142/rU+BCoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAF4W/yL cq6gCRnwYQ3rSMO9WauNMB8GA1UdIwQYMBaAFAicfwDYHt1k26ttA3EisqIfDTvm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjVGMi80QUVFRDkxQzQz QjcxMUVEOThGRjQ1NUVDNEY5QUUwMi9DSnhfQU5nZTNXVGJxMjBEY1NLeW9oOE5P LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NKeF9BTmdlM1dUYnEyMERjU0t5b2g4Tk8tWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjVGMi80QUVFRDkxQzQzQjcxMUVEOThGRjQ1NUVDNEY5QUUwMi9DSnhfQU5nZTNX VGJxMjBEY1NLeW9oOE5PLVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB18dCk+QjawAqqK1P680iEKZ8gULffmonmTkemPbrxhyjlCiSq7Oid H2Pc9QNfJ6tB09Gibpnxz1X8JjfiGMmyi47WnaxdjsIrU6GVBqB+lPakBz1sgcnJ vP0huzvlxceDvsFt0fuHJEIT97IHyxF3ww89Zs8WLmkYQ6DAJXtm2tQ4FJfsqkAW Qld/DagnFDHzcfamJpE6+/1iKbc4fRyVJ6jnZt9bCxYG04AeagJw5iN0io2A1DtB s6q/CgWvfFHm/ARya9eLEBrPiiwTcRm7GMtXvkzMXtRZR927NcMvUP0oSQWFss2h LkjMM6KtnvIwSuGz22kv6JeUT8BXYt24 -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:09 2025 by rpki-client on console.sobornost.net