$ rpki-client -vvf rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.mft File: 15aZWndnWcQmQxeAAofr7u-0umo.mft (raw, json) Hash identifier: KeDBHpNCgQEAZzTVMHz2+IiiztI4raPKNdxi2zpU8Qo= Subject key identifier: 28:2E:6D:53:59:55:13:F7:01:C6:D6:BA:1C:44:29:FA:DB:DD:94:5C Authority key identifier: D7:96:99:5A:77:67:59:C4:26:43:17:80:02:87:EB:EE:EF:B4:BA:6A Certificate issuer: /CN=A91C022C/serialNumber=D796995A776759C4264317800287EBEEEFB4BA6A Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15aZWndnWcQmQxeAAofr7u-0umo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.mft Manifest number: 3B Signing time: Sun 27 Apr 2025 06:25:43 +0000 Manifest this update: Sun 27 Apr 2025 06:25:42 +0000 Manifest next update: Sun 04 May 2025 06:25:42 +0000 Files and hashes: 1: 15aZWndnWcQmQxeAAofr7u-0umo.crl (hash: UaNlyugSnXZySJJoyUevmnd5wb5YCzUQWo1sjyYyNzU=) 2: 90405CE2D5DD11EF99075D78C4F9AE02.roa (hash: hTL1z9/ySOlu0XaviOinYnMnBTyzcwAp4EbODVpERNU=) 3: B6CFF1B2D5F911EFB9B1055CC4F9AE02.roa (hash: ZxCbb7cdq/LewtopQIPSnB7gN2Ydt1y4TyGzN7hgTr4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.crl rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15aZWndnWcQmQxeAAofr7u-0umo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C022C, serialNumber=D796995A776759C4264317800287EBEEEFB4BA6A Validity Not Before: Apr 27 06:25:42 2025 GMT Not After : May 4 06:25:42 2025 GMT Subject: CN=680dcde7-4608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:70:d0:ce:23:26:c0:e8:8a:31:e7:d2:17:b8: d5:e1:1e:e6:35:b8:15:bb:1f:ec:c3:43:b6:e4:93: e6:c2:bc:94:8c:75:22:94:21:7f:25:10:dc:59:ab: f7:e0:d4:75:11:5a:a5:b4:7e:ed:93:af:04:82:2e: 79:9f:a1:06:e0:e1:75:c1:c6:22:d4:a8:20:5e:f4: ec:47:1b:34:f4:29:a8:f9:d4:7e:c5:77:1a:86:a9: 0e:41:9a:59:b3:84:45:45:45:0a:d9:a4:aa:fb:3e: 3e:7d:c0:12:02:c9:32:62:51:52:40:3c:35:3a:24: 7b:8d:23:b5:13:d3:8c:23:5e:5b:63:ea:84:05:56: ee:c3:80:0c:10:7c:3b:3c:0d:85:fd:64:da:bb:e0: 58:3b:33:e1:93:83:77:03:b4:5c:a8:66:69:65:35: 54:14:0d:7b:e8:94:72:3a:a2:a1:9f:6c:00:1a:f2: c5:be:73:74:77:56:07:d4:a2:07:3a:95:c3:09:6f: 07:ff:6a:bb:4e:6e:16:6e:86:68:7a:20:79:86:91: 43:ae:31:2e:7f:30:2c:d6:7c:ed:78:dd:5c:d3:57: 2a:be:20:be:29:4b:91:06:dc:fe:e8:d4:01:be:9b: 0d:75:55:81:68:e8:1d:f8:a9:c6:3b:5e:6c:40:15: b3:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:2E:6D:53:59:55:13:F7:01:C6:D6:BA:1C:44:29:FA:DB:DD:94:5C X509v3 Authority Key Identifier: keyid:D7:96:99:5A:77:67:59:C4:26:43:17:80:02:87:EB:EE:EF:B4:BA:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15aZWndnWcQmQxeAAofr7u-0umo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:c3:8b:2c:19:89:ba:e4:45:5d:48:67:72:87:31:3a:7d:95: 98:47:95:43:7e:db:f4:7f:6a:3c:02:b6:cd:65:59:68:48:51: 29:84:03:87:59:ee:90:ff:ad:46:da:ad:5b:3d:22:71:1d:7d: 0f:e4:74:a1:37:1f:75:3b:14:00:f3:3c:83:01:58:ae:04:9c: a1:be:80:3b:f1:80:db:08:29:d8:fc:03:d2:a6:50:fd:20:37: 1d:b6:c0:ee:c5:a9:e2:43:b7:fa:07:97:15:50:7f:8b:ce:13: f1:e1:15:fb:1c:24:d5:f9:a9:44:a7:00:b6:28:c5:f7:34:50: 6f:bf:b8:1d:03:bb:bf:13:81:52:89:0c:e0:57:b0:22:e4:a7: 67:53:08:9d:06:09:07:9c:69:0d:12:4a:df:e6:db:0a:66:cc: 28:fa:82:3a:d6:9a:83:9b:34:f3:79:13:30:c2:84:c9:85:cd: c9:11:23:3a:14:50:38:d2:ed:b6:02:55:20:74:7f:a6:ae:a8: b0:b4:4a:f9:3f:4e:ad:a8:99:1b:62:db:e8:9b:b8:e1:74:e9: 94:a0:e3:49:1f:8d:23:b2:a5:1f:6b:6e:c5:9e:92:0a:2e:6a: c2:d0:ae:47:17:bb:17:9c:49:e8:b4:e6:95:4d:8b:4d:d9:e0: 9f:57:8c:5f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MDIyQzExMC8GA1UEBRMoRDc5Njk5NUE3NzY3NTlDNDI2NDMxNzgwMDI4N0VCRUVF RkI0QkE2QTAeFw0yNTA0MjcwNjI1NDJaFw0yNTA1MDQwNjI1NDJaMBgxFjAUBgNV BAMTDTY4MGRjZGU3LTQ2MDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUcNDOIybA6Iox59IXuNXhHuY1uBW7H+zDQ7bkk+bCvJSMdSKUIX8lENxZq/fg 1HURWqW0fu2TrwSCLnmfoQbg4XXBxiLUqCBe9OxHGzT0Kaj51H7FdxqGqQ5Bmlmz hEVFRQrZpKr7Pj59wBICyTJiUVJAPDU6JHuNI7UT04wjXltj6oQFVu7DgAwQfDs8 DYX9ZNq74Fg7M+GTg3cDtFyoZmllNVQUDXvolHI6oqGfbAAa8sW+c3R3VgfUogc6 lcMJbwf/artObhZuhmh6IHmGkUOuMS5/MCzWfO143VzTVyq+IL4pS5EG3P7o1AG+ mw11VYFo6B34qcY7XmxAFbNHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKC5tU1lV E/cBxta6HEQp+tvdlFwwHwYDVR0jBBgwFoAU15aZWndnWcQmQxeAAofr7u+0umow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMwMjJDL0JBMEYyREYyRDRC OTExRUY5RkE4RTI0RkM0RjlBRTAyLzE1YVpXbmRuV2NRbVF4ZUFBb2ZyN3UtMHVt by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMTVhWlduZG5XY1FtUXhlQUFvZnI3dS0wdW1vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMw MjJDL0JBMEYyREYyRDRCOTExRUY5RkE4RTI0RkM0RjlBRTAyLzE1YVpXbmRuV2NR bVF4ZUFBb2ZyN3UtMHVtby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEPDiywZibrkRV1IZ3KHMTp9lZhHlUN+2/R/ajwCts1lWWhIUSmEA4dZ 7pD/rUbarVs9InEdfQ/kdKE3H3U7FADzPIMBWK4EnKG+gDvxgNsIKdj8A9KmUP0g Nx22wO7FqeJDt/oHlxVQf4vOE/HhFfscJNX5qUSnALYoxfc0UG+/uB0Du78TgVKJ DOBXsCLkp2dTCJ0GCQecaQ0SSt/m2wpmzCj6gjrWmoObNPN5EzDChMmFzckRIzoU UDjS7bYCVSB0f6auqLC0Svk/Tq2omRti2+ibuOF06ZSg40kfjSOypR9rbsWekgou asLQrkcXuxecSei05pVNi03Z4J9XjF8= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:55 2025 by rpki-client on console.sobornost.net