$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.mft File: DldBdtqmrGyXcGxmecfiTnC6rVc.mft (raw, json) Hash identifier: Xvj3+pCfgKdHUjHiP2zzbJ9FfsjlhAOwdRWcfjugCAI= Subject key identifier: C8:68:2E:76:A8:EB:BA:C1:F1:01:A6:72:D7:2C:7B:FE:8E:6B:79:30 Authority key identifier: 0E:57:41:76:DA:A6:AC:6C:97:70:6C:66:79:C7:E2:4E:70:BA:AD:57 Certificate issuer: /CN=A91C0BDE/serialNumber=0E574176DAA6AC6C97706C6679C7E24E70BAAD57 Certificate serial: 098C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DldBdtqmrGyXcGxmecfiTnC6rVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.mft Manifest number: 1251 Signing time: Mon 28 Apr 2025 20:31:14 +0000 Manifest this update: Mon 28 Apr 2025 20:31:14 +0000 Manifest next update: Mon 05 May 2025 20:31:14 +0000 Files and hashes: 1: DldBdtqmrGyXcGxmecfiTnC6rVc.crl (hash: DQequMrXMrxyt5QYjibgdlLTqvzdUaAXMGpyKXO+sG4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.crl rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DldBdtqmrGyXcGxmecfiTnC6rVc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:31:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2444 (0x98c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0BDE, serialNumber=0E574176DAA6AC6C97706C6679C7E24E70BAAD57 Validity Not Before: Apr 28 20:31:14 2025 GMT Not After : May 5 20:31:14 2025 GMT Subject: CN=680fe592-f5a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:60:97:76:17:be:57:9e:84:b7:6e:b4:18:53: ae:c7:8c:db:45:5a:1e:0c:f2:06:e9:65:ea:92:ee: 33:42:65:31:f6:f4:fd:63:d1:ee:80:b0:cc:85:16: ed:f2:36:c0:96:34:a2:7e:4e:99:f6:22:74:05:29: 18:78:89:9f:b5:5a:55:30:5b:66:6a:28:91:fc:27: f4:07:52:be:35:58:d4:73:7e:e6:d0:fc:ed:16:3f: 6e:de:29:90:71:29:28:5b:b0:b2:56:ba:e9:1e:78: 67:83:c1:07:26:ab:bc:0e:55:74:3e:38:f7:2a:9c: 57:38:d8:4a:18:4f:bd:19:33:60:35:8f:f5:9e:6c: 82:3c:f5:9b:6d:d6:49:42:b6:01:f8:a9:76:4f:66: 49:ff:04:30:f5:aa:0d:48:05:7d:1d:f7:88:00:7f: 31:0a:dc:13:f0:b4:c1:6d:c0:fd:86:b8:22:df:60: b2:3d:89:3f:9b:74:18:c3:26:99:d6:3d:c4:38:8a: ca:4a:cc:46:79:1d:f1:17:6a:ea:c3:f5:5f:d0:c0: be:07:e3:4b:53:f8:1d:13:8b:5d:46:7b:e4:e0:25: dd:c3:20:4e:5b:ae:19:53:60:0a:e7:9d:0c:72:86: db:22:ce:3c:d4:19:59:d4:49:5a:19:34:5c:35:74: 08:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:68:2E:76:A8:EB:BA:C1:F1:01:A6:72:D7:2C:7B:FE:8E:6B:79:30 X509v3 Authority Key Identifier: keyid:0E:57:41:76:DA:A6:AC:6C:97:70:6C:66:79:C7:E2:4E:70:BA:AD:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DldBdtqmrGyXcGxmecfiTnC6rVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:33:6b:c4:b7:6f:09:58:f0:cf:8f:93:ca:de:53:9c:ea:ff: ab:10:aa:0d:7f:d5:29:fc:37:9a:b5:69:f7:e1:61:32:f3:38: cb:5d:7f:56:f6:b6:3c:76:07:71:eb:4f:fc:c6:92:9a:09:a5: 06:af:b6:d6:a1:bc:31:80:e8:7a:95:51:c6:9f:83:35:a7:de: 33:d2:54:fd:08:92:3a:9a:27:51:c0:d8:5f:55:1f:83:88:71: e1:bc:4d:4b:70:38:3e:32:92:57:cd:b7:31:2a:0f:2d:d9:0d: a5:25:9a:6f:0b:eb:53:5b:42:77:40:90:3d:98:8e:e1:52:7e: 5f:29:c9:4c:21:bf:ab:04:11:8f:13:45:b5:f3:f7:95:94:39: 61:ca:d9:2e:a0:a7:0a:ba:f1:d9:43:b6:11:ff:94:79:94:01: 5c:5b:06:a4:25:f3:0c:8f:75:33:65:4e:44:dd:80:fe:8d:b5: 57:a9:20:98:e6:99:52:ff:97:87:1e:0c:a9:bc:d4:dc:48:68: c7:90:73:bd:89:5b:e8:30:f3:31:47:21:59:b1:22:71:e5:c1: 42:3a:1b:03:00:0c:8b:b3:d6:42:3d:36:2e:91:25:e8:e4:7b: 6a:bd:ed:9d:cd:e7:03:b4:f5:b3:2a:fa:fb:52:b4:6a:0c:17: d4:69:48:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBCREUxMTAvBgNVBAUTKDBFNTc0MTc2REFBNkFDNkM5NzcwNkM2Njc5QzdFMjRF NzBCQUFENTcwHhcNMjUwNDI4MjAzMTE0WhcNMjUwNTA1MjAzMTE0WjAYMRYwFAYD VQQDEw02ODBmZTU5Mi1mNWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuGCXdhe+V56Et260GFOux4zbRVoeDPIG6WXqku4zQmUx9vT9Y9HugLDMhRbt 8jbAljSifk6Z9iJ0BSkYeImftVpVMFtmaiiR/Cf0B1K+NVjUc37m0PztFj9u3imQ cSkoW7CyVrrpHnhng8EHJqu8DlV0Pjj3KpxXONhKGE+9GTNgNY/1nmyCPPWbbdZJ QrYB+Kl2T2ZJ/wQw9aoNSAV9HfeIAH8xCtwT8LTBbcD9hrgi32CyPYk/m3QYwyaZ 1j3EOIrKSsxGeR3xF2rqw/Vf0MC+B+NLU/gdE4tdRnvk4CXdwyBOW64ZU2AK550M cobbIs481BlZ1ElaGTRcNXQI2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMhoLnao 67rB8QGmctcse/6Oa3kwMB8GA1UdIwQYMBaAFA5XQXbapqxsl3BsZnnH4k5wuq1X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEJERS83RTVBQzNFMDg5 NzExMUVBOTI0MDJBMEFDNEY5QUUwMi9EbGRCZHRxbXJHeVhjR3htZWNmaVRuQzZy VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RsZEJkdHFtckd5WGNHeG1lY2ZpVG5DNnJWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEJERS83RTVBQzNFMDg5NzExMUVBOTI0MDJBMEFDNEY5QUUwMi9EbGRCZHRxbXJH eVhjR3htZWNmaVRuQzZyVmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUM2vEt28JWPDPj5PK3lOc6v+rEKoNf9Up/DeatWn34WEy8zjLXX9W 9rY8dgdx60/8xpKaCaUGr7bWobwxgOh6lVHGn4M1p94z0lT9CJI6midRwNhfVR+D iHHhvE1LcDg+MpJXzbcxKg8t2Q2lJZpvC+tTW0J3QJA9mI7hUn5fKclMIb+rBBGP E0W18/eVlDlhytkuoKcKuvHZQ7YR/5R5lAFcWwakJfMMj3UzZU5E3YD+jbVXqSCY 5plS/5eHHgypvNTcSGjHkHO9iVvoMPMxRyFZsSJx5cFCOhsDAAyLs9ZCPTYukSXo 5Htqve2dzecDtPWzKvr7UrRqDBfUaUiZ -----END CERTIFICATE-----Generated at Mon Apr 28 23:05:53 2025 by rpki-client on console.sobornost.net