$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD4DF/310D3542399311EFA08D2E1BC4F9AE02/o222tflxI3VeVEH6xWqmu6BbCAo.mft File: o222tflxI3VeVEH6xWqmu6BbCAo.mft (raw, json) Hash identifier: Gn13No/W5HYfhzf88my/8f+berjUXQbDf9gLc3W6nGA= Subject key identifier: 2C:79:84:9D:EF:B5:3E:AF:EA:69:A4:C4:C9:1A:D2:E1:77:CC:1B:5D Authority key identifier: A3:6D:B6:B5:F9:71:23:75:5E:54:41:FA:C5:6A:A6:BB:A0:5B:08:0A Certificate issuer: /CN=A91BD4DF/serialNumber=A36DB6B5F97123755E5441FAC56AA6BBA05B080A Certificate serial: A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o222tflxI3VeVEH6xWqmu6BbCAo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD4DF/310D3542399311EFA08D2E1BC4F9AE02/o222tflxI3VeVEH6xWqmu6BbCAo.mft Manifest number: 9E Signing time: Sun 27 Apr 2025 05:09:12 +0000 Manifest this update: Sun 27 Apr 2025 05:09:11 +0000 Manifest next update: Sun 04 May 2025 05:09:11 +0000 Files and hashes: 1: o222tflxI3VeVEH6xWqmu6BbCAo.crl (hash: P9E+jOmOUbO5vz/nuHrRLVLHNnLJgljUiU7nbi63544=) 2: 4136642C39AA11EF933F9583C4F9AE02.roa (hash: +fFDWaDnFu7mpfAvBElCeG8uNXNIs5iwZjBDkX/SJz0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD4DF/310D3542399311EFA08D2E1BC4F9AE02/o222tflxI3VeVEH6xWqmu6BbCAo.crl rsync://rpki.apnic.net/member_repository/A91BD4DF/310D3542399311EFA08D2E1BC4F9AE02/o222tflxI3VeVEH6xWqmu6BbCAo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o222tflxI3VeVEH6xWqmu6BbCAo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161 (0xa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD4DF, serialNumber=A36DB6B5F97123755E5441FAC56AA6BBA05B080A Validity Not Before: Apr 27 05:09:11 2025 GMT Not After : May 4 05:09:11 2025 GMT Subject: CN=680dbbf8-6d42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:7e:7b:2d:ae:f7:47:ac:1c:a4:b3:e9:1c:89: ad:58:b5:30:ea:7e:3e:1e:e7:5f:cb:df:f5:bc:e2: 3e:db:07:a3:d1:fc:f3:fe:7b:6b:94:b7:9a:61:93: 87:a3:83:85:42:15:b0:d0:4e:22:f0:83:fc:9a:06: ac:01:d8:78:c7:70:f3:71:d2:35:73:c8:a8:25:42: a0:2a:f3:5b:f3:92:6d:d5:12:40:6f:d6:c2:8f:06: ea:b4:58:31:8e:5d:36:4e:af:f7:a0:81:9b:5e:80: 5f:fa:e6:9a:83:20:de:03:db:35:72:64:36:39:a0: c7:e3:96:86:06:8d:93:98:8e:76:ad:77:b6:ff:4b: 9f:55:10:b4:18:27:a1:f7:14:a5:dc:c2:f7:03:6f: 20:cd:03:76:1f:bb:46:4a:fd:a0:dc:89:23:a6:ff: ca:d7:fc:51:7c:cf:51:4f:dc:48:13:a6:de:73:d8: 16:24:ae:73:df:43:0b:5d:ef:cd:79:7b:c0:c0:54: 13:67:e4:84:c1:55:ce:25:41:29:67:ff:2b:e0:a4: d1:09:84:0a:3d:5c:b3:57:02:ae:c9:51:43:cd:61: a6:8b:66:17:23:06:47:fe:56:aa:53:11:bf:43:78: 14:eb:58:e5:b6:fb:21:e5:f3:3a:56:e7:29:ae:da: d1:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:79:84:9D:EF:B5:3E:AF:EA:69:A4:C4:C9:1A:D2:E1:77:CC:1B:5D X509v3 Authority Key Identifier: keyid:A3:6D:B6:B5:F9:71:23:75:5E:54:41:FA:C5:6A:A6:BB:A0:5B:08:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD4DF/310D3542399311EFA08D2E1BC4F9AE02/o222tflxI3VeVEH6xWqmu6BbCAo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o222tflxI3VeVEH6xWqmu6BbCAo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD4DF/310D3542399311EFA08D2E1BC4F9AE02/o222tflxI3VeVEH6xWqmu6BbCAo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:7f:1a:aa:78:de:23:59:93:c6:d9:45:15:a3:9d:74:49:04: c7:22:a0:1f:08:37:e8:5b:03:36:2c:e1:5c:78:f9:5b:82:57: 3e:9c:1b:54:67:35:f7:a2:15:76:18:21:ba:1f:99:08:2a:2a: 76:35:60:e4:42:39:21:00:a4:2b:ee:4a:c7:ab:d4:42:d8:15: ce:90:0f:eb:42:3a:3e:41:44:76:f8:2d:a6:fa:70:07:d8:2f: 6d:79:1d:e6:8a:ff:0e:2c:f9:70:bb:e9:02:0b:4f:66:d4:79: 11:4e:fc:94:12:8d:b0:f4:38:cc:b9:a3:e3:fe:03:6b:39:10: b5:67:da:2a:74:31:87:71:bb:a4:93:80:ee:aa:a3:8f:f0:b2: 38:f1:ad:12:83:82:bc:94:ce:62:08:0e:06:49:e1:ef:ad:55: 52:e1:18:60:e1:10:e7:d8:83:17:ec:c0:fe:e3:3f:3d:db:15: 71:5e:47:55:df:9b:8c:8c:7b:a6:b6:9a:1f:75:58:5c:2b:fb: d6:bb:09:51:53:29:d3:c5:a0:b4:91:b5:b8:62:dc:40:d3:0f: 52:20:3a:be:90:24:e4:c5:66:bd:a7:52:db:fe:0b:b0:e0:ca: ff:fd:e2:cd:b7:b5:10:9d:38:bf:c5:bb:92:7a:11:b2:3d:f6: 2e:80:e6:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ0REYxMTAvBgNVBAUTKEEzNkRCNkI1Rjk3MTIzNzU1RTU0NDFGQUM1NkFBNkJC QTA1QjA4MEEwHhcNMjUwNDI3MDUwOTExWhcNMjUwNTA0MDUwOTExWjAYMRYwFAYD VQQDEw02ODBkYmJmOC02ZDQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8357La73R6wcpLPpHImtWLUw6n4+Hudfy9/1vOI+2wej0fzz/ntrlLeaYZOH o4OFQhWw0E4i8IP8mgasAdh4x3DzcdI1c8ioJUKgKvNb85Jt1RJAb9bCjwbqtFgx jl02Tq/3oIGbXoBf+uaagyDeA9s1cmQ2OaDH45aGBo2TmI52rXe2/0ufVRC0GCeh 9xSl3ML3A28gzQN2H7tGSv2g3Ikjpv/K1/xRfM9RT9xIE6bec9gWJK5z30MLXe/N eXvAwFQTZ+SEwVXOJUEpZ/8r4KTRCYQKPVyzVwKuyVFDzWGmi2YXIwZH/laqUxG/ Q3gU61jltvsh5fM6VucprtrRcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCx5hJ3v tT6v6mmkxMka0uF3zBtdMB8GA1UdIwQYMBaAFKNttrX5cSN1XlRB+sVqprugWwgK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDRERi8zMTBEMzU0MjM5 OTMxMUVGQTA4RDJFMUJDNEY5QUUwMi9vMjIydGZseEkzVmVWRUg2eFdxbXU2QmJD QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28yMjJ0Zmx4STNWZVZFSDZ4V3FtdTZCYkNBby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDRERi8zMTBEMzU0MjM5OTMxMUVGQTA4RDJFMUJDNEY5QUUwMi9vMjIydGZseEkz VmVWRUg2eFdxbXU2QmJDQW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGfxqqeN4jWZPG2UUVo510SQTHIqAfCDfoWwM2LOFcePlbglc+nBtU ZzX3ohV2GCG6H5kIKip2NWDkQjkhAKQr7krHq9RC2BXOkA/rQjo+QUR2+C2m+nAH 2C9teR3miv8OLPlwu+kCC09m1HkRTvyUEo2w9DjMuaPj/gNrORC1Z9oqdDGHcbuk k4DuqqOP8LI48a0Sg4K8lM5iCA4GSeHvrVVS4Rhg4RDn2IMX7MD+4z892xVxXkdV 35uMjHumtpofdVhcK/vWuwlRUynTxaC0kbW4YtxA0w9SIDq+kCTkxWa9p1Lb/guw 4Mr//eLNt7UQnTi/xbuSehGyPfYugOb3 -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:55 2025 by rpki-client on console.sobornost.net