$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft File: hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft (raw, json) Hash identifier: pAj5qUZ3X5Gz2mHetvCtQroKmRAHazttO/I0f23oBu4= Subject key identifier: BC:CE:88:0B:07:9A:0E:C0:A8:E2:7B:F7:B1:4D:BF:CC:D2:D1:1E:85 Authority key identifier: 85:79:37:72:61:CA:27:9F:1C:2F:F2:EB:C4:42:97:43:7D:D6:E6:94 Certificate issuer: /CN=A91BF5C0/serialNumber=8579377261CA279F1C2FF2EBC44297437DD6E694 Certificate serial: 02B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft Manifest number: 02AE Signing time: Sun 27 Apr 2025 01:06:55 +0000 Manifest this update: Sun 27 Apr 2025 01:06:54 +0000 Manifest next update: Sun 04 May 2025 01:06:54 +0000 Files and hashes: 1: hXk3cmHKJ58cL_LrxEKXQ33W5pQ.crl (hash: /fKZDpAFBMSprZ2APymLPp34w08a5dpVio1Ya/A7/zA=) 2: 5B6AD2DCF1C811ECBBC34549C4F9AE02.roa (hash: tIjRYvm7kHb3Z/vuy4/Hasw9Jy2neJdJRNnPansBj78=) 3: 5AD85A56F1C811ECBBC34549C4F9AE02.roa (hash: llPQK6RAm7smNmRGwi10ZC04JcuM8comzd+cTfPYGBM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.crl rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 01:06:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 695 (0x2b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF5C0, serialNumber=8579377261CA279F1C2FF2EBC44297437DD6E694 Validity Not Before: Apr 27 01:06:54 2025 GMT Not After : May 4 01:06:54 2025 GMT Subject: CN=680d832f-ad5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:0e:dd:77:c7:12:e3:a3:f4:6c:55:b2:8a:35: 81:a8:d0:c4:49:af:6a:4f:a5:81:c0:1c:93:a4:7d: a0:b5:7a:3f:01:64:f3:7d:30:5f:25:f9:d8:ec:38: eb:41:99:48:52:48:d7:03:95:b4:4c:8b:8f:09:c7: 7e:df:da:86:29:4e:07:72:92:3e:d1:ec:7d:35:82: 99:01:9b:ca:c2:cb:d0:b4:a2:26:2b:66:1c:89:1f: 71:d4:b5:c0:71:5c:c9:d6:6e:aa:9b:5b:c4:95:07: 43:cd:12:7b:0e:95:ec:13:21:31:e2:78:97:b0:1b: 8b:f0:11:eb:79:b4:31:e7:d5:70:93:6c:14:21:b8: a8:1c:36:3d:23:39:68:c5:1b:51:39:b1:b5:7f:8b: fc:8d:8f:b6:0d:0a:f5:d1:37:b5:5c:f7:09:ac:b2: f9:17:36:1e:5d:1c:81:ad:56:bd:56:ec:b4:7d:01: 52:8b:fd:a2:05:04:fd:fd:58:5e:b7:79:10:b5:61: aa:e4:5f:ad:30:3e:9e:25:a0:bb:3d:f6:1d:83:e9: 8f:35:f4:67:27:ff:e5:cd:03:8b:ab:95:c8:54:84: 48:06:53:e4:98:cb:8f:8f:93:2a:63:b8:d9:9e:a0: ea:40:f2:49:7e:9f:26:ca:3c:51:d8:ee:b2:72:89: d0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:CE:88:0B:07:9A:0E:C0:A8:E2:7B:F7:B1:4D:BF:CC:D2:D1:1E:85 X509v3 Authority Key Identifier: keyid:85:79:37:72:61:CA:27:9F:1C:2F:F2:EB:C4:42:97:43:7D:D6:E6:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:df:01:bf:20:ba:1e:dd:69:7d:f6:67:62:f2:b9:da:22:b9: c4:c9:37:02:28:66:99:2b:33:29:34:c9:3a:d2:d7:0b:da:2e: d1:fe:68:eb:3a:ce:a1:27:23:04:81:f8:b4:07:f1:c9:1b:a5: 25:2a:32:78:28:80:2c:85:30:4d:1c:18:6d:ea:e7:bc:fa:b3: 8b:03:03:5b:17:44:2f:1e:a7:00:75:c0:1b:49:61:c1:32:52: fd:e8:e4:d7:d1:44:b7:7b:d3:5e:9e:bd:1f:bf:53:29:d5:ce: 03:bc:6a:1b:38:71:3e:1f:0d:a1:10:76:c6:a7:66:78:a2:18: 64:35:81:d1:25:a5:03:d2:3d:6b:02:b1:0a:33:fb:49:af:99: 1b:bb:a0:81:99:73:da:b2:7d:1e:b4:46:a5:a5:17:16:94:51: 8b:da:a6:5d:70:f4:6e:2c:94:8a:12:91:11:e1:2e:a0:31:db: 3e:89:67:fe:31:5d:e2:2f:9f:a3:62:ba:97:ce:12:b2:71:27: 20:d1:b6:eb:9d:7b:e6:a2:ce:95:8d:0b:a0:74:f4:8e:a3:e1: b9:77:fc:5f:ac:b2:78:b8:64:25:98:bb:c0:f4:a3:8a:1b:2d: 51:b1:8e:23:d6:dc:10:3d:1d:8c:c0:9a:b5:34:50:73:76:3c: 2c:22:04:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY1QzAxMTAvBgNVBAUTKDg1NzkzNzcyNjFDQTI3OUYxQzJGRjJFQkM0NDI5NzQz N0RENkU2OTQwHhcNMjUwNDI3MDEwNjU0WhcNMjUwNTA0MDEwNjU0WjAYMRYwFAYD VQQDEw02ODBkODMyZi1hZDVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1A7dd8cS46P0bFWyijWBqNDESa9qT6WBwByTpH2gtXo/AWTzfTBfJfnY7Djr QZlIUkjXA5W0TIuPCcd+39qGKU4HcpI+0ex9NYKZAZvKwsvQtKImK2YciR9x1LXA cVzJ1m6qm1vElQdDzRJ7DpXsEyEx4niXsBuL8BHrebQx59Vwk2wUIbioHDY9Izlo xRtRObG1f4v8jY+2DQr10Te1XPcJrLL5FzYeXRyBrVa9Vuy0fQFSi/2iBQT9/Vhe t3kQtWGq5F+tMD6eJaC7PfYdg+mPNfRnJ//lzQOLq5XIVIRIBlPkmMuPj5MqY7jZ nqDqQPJJfp8myjxR2O6yconQoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLzOiAsH mg7AqOJ797FNv8zS0R6FMB8GA1UdIwQYMBaAFIV5N3JhyiefHC/y68RCl0N91uaU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjVDMC9CQ0JENEZCNkYx QzIxMUVDQTE2M0ZENDJDNEY5QUUwMi9oWGszY21IS0o1OGNMX0xyeEVLWFEzM1c1 cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hYazNjbUhLSjU4Y0xfTHJ4RUtYUTMzVzVwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjVDMC9CQ0JENEZCNkYxQzIxMUVDQTE2M0ZENDJDNEY5QUUwMi9oWGszY21IS0o1 OGNMX0xyeEVLWFEzM1c1cFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAY3wG/ILoe3Wl99mdi8rnaIrnEyTcCKGaZKzMpNMk60tcL2i7R/mjr Os6hJyMEgfi0B/HJG6UlKjJ4KIAshTBNHBht6ue8+rOLAwNbF0QvHqcAdcAbSWHB MlL96OTX0US3e9Nenr0fv1Mp1c4DvGobOHE+Hw2hEHbGp2Z4ohhkNYHRJaUD0j1r ArEKM/tJr5kbu6CBmXPasn0etEalpRcWlFGL2qZdcPRuLJSKEpER4S6gMds+iWf+ MV3iL5+jYrqXzhKycScg0bbrnXvmos6VjQugdPSOo+G5d/xfrLJ4uGQlmLvA9KOK Gy1RsY4j1twQPR2MwJq1NFBzdjwsIgQz -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:09 2025 by rpki-client on console.sobornost.net