$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft File: 5CANRK2dbstocvZTqVhD-yfYR6Q.mft (raw, json) Hash identifier: TTpQL20JmqLTJC78NTRUWGulRdmys8Je6ATCtI9ht+Y= Subject key identifier: 6C:CC:3A:82:AA:50:60:1F:BC:C9:92:CC:5B:A1:61:E8:E4:1C:39:55 Authority key identifier: E4:20:0D:44:AD:9D:6E:CB:68:72:F6:53:A9:58:43:FB:27:D8:47:A4 Certificate issuer: /CN=A91C0D37/serialNumber=E4200D44AD9D6ECB6872F653A95843FB27D847A4 Certificate serial: 0135 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft Manifest number: 0130 Signing time: Fri 25 Apr 2025 03:38:43 +0000 Manifest this update: Fri 25 Apr 2025 03:38:42 +0000 Manifest next update: Fri 02 May 2025 03:38:42 +0000 Files and hashes: 1: 5CANRK2dbstocvZTqVhD-yfYR6Q.crl (hash: PtZEIwpNVxc7gEbFKOSCGuIjGvyeBelJ2RgDHW8h3/4=) 2: 0099AE56536911EE8594503BC4F9AE02.roa (hash: AOPC9WbNcZUf3rw4IBXy2gFnwozs8jTrPTS3eOn6dJw=) 3: C7C45DD643F611EF84151D6FC4F9AE02.roa (hash: SfS9ZnMJ4K7BL+m5tPbXXtGeAg5+tE+/js3vJ/6kex8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.crl rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 309 (0x135) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0D37, serialNumber=E4200D44AD9D6ECB6872F653A95843FB27D847A4 Validity Not Before: Apr 25 03:38:42 2025 GMT Not After : May 2 03:38:42 2025 GMT Subject: CN=680b03c2-77ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7c:a8:ee:8c:dc:c7:dc:7b:6e:51:56:32:0d: 8a:72:9e:fe:d0:52:45:0e:04:3f:7c:81:80:16:17: 73:e5:36:eb:6a:da:2e:e3:1a:c8:72:5c:6f:92:84: 4e:7f:b1:a7:ef:27:a7:03:78:58:3d:f1:52:d1:31: 60:71:6a:25:88:9a:f0:f1:9c:d5:7b:26:bc:7b:31: 57:05:4a:32:97:e2:8b:5d:45:ba:40:45:04:81:62: 30:d6:de:7f:3f:72:c6:e9:51:bb:e9:56:36:69:17: 42:e1:c3:bb:8f:d5:8c:06:02:2e:c4:ca:59:57:89: b7:f9:fb:ea:07:b4:46:4d:38:56:b5:10:17:30:e3: 7e:8f:93:9a:05:41:b1:df:9b:1b:1b:c2:3a:89:db: a0:bf:54:8e:8e:80:49:e2:86:54:22:fc:bc:5c:62: c7:34:9d:bb:c4:2a:41:8f:c3:83:f4:8a:e1:cb:e9: e7:e2:d2:15:1e:fc:5b:11:75:d5:b8:4c:bf:76:53: ed:7b:2b:0a:4d:c9:20:73:29:93:2c:50:a2:54:4c: 75:0a:02:70:ad:ea:45:bf:24:11:3a:09:02:de:3b: 98:44:b5:59:5c:aa:5b:8e:44:d4:ec:1a:15:62:28: 2c:53:41:23:7e:d9:dd:c1:24:5f:a9:fd:b5:24:af: b2:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:CC:3A:82:AA:50:60:1F:BC:C9:92:CC:5B:A1:61:E8:E4:1C:39:55 X509v3 Authority Key Identifier: keyid:E4:20:0D:44:AD:9D:6E:CB:68:72:F6:53:A9:58:43:FB:27:D8:47:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:52:48:b3:fc:c7:3a:cc:da:d9:43:92:fb:31:8a:bf:37:38: d9:d7:f5:8b:cb:61:ff:c4:7f:59:27:8c:b4:53:5f:29:be:1b: c2:d4:46:28:9f:ec:9a:fc:19:a0:e1:bd:17:d5:ef:8c:29:cb: 3f:b6:1d:67:f3:6e:8e:9a:54:0c:53:a8:f1:34:2d:b5:89:c8: 00:f1:eb:6c:00:6a:b6:2c:5a:46:43:d8:7d:5e:95:b0:a3:87: 39:de:cb:29:a5:bf:f7:8b:45:ab:df:87:93:5e:32:06:5e:e5: 78:5e:f0:73:d7:64:92:19:53:7a:8c:1e:01:45:62:1a:bc:71: a2:36:8a:7e:be:6c:06:ae:05:a7:93:a7:03:f7:cb:7e:b0:b5: 13:47:f4:83:71:c2:a8:df:74:1d:f3:35:c7:6a:ee:62:db:41: ee:ea:d3:1a:d2:98:ff:d9:e5:06:2b:dd:27:3c:f7:ec:70:38: 73:88:d2:6c:2c:22:25:ca:ae:24:2d:e4:0d:85:75:8a:cb:f5: dc:dd:cf:b6:6a:6f:94:c4:e5:eb:fc:5b:30:8f:15:8f:8a:e2: 16:95:af:bd:78:a1:9f:6b:7f:72:b8:79:ef:a8:14:de:c7:e3: 50:07:fb:43:43:16:3d:9e:4f:cc:c7:22:32:ea:b8:67:27:1f: 47:b6:bf:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBEMzcxMTAvBgNVBAUTKEU0MjAwRDQ0QUQ5RDZFQ0I2ODcyRjY1M0E5NTg0M0ZC MjdEODQ3QTQwHhcNMjUwNDI1MDMzODQyWhcNMjUwNTAyMDMzODQyWjAYMRYwFAYD VQQDEw02ODBiMDNjMi03N2VjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwXyo7ozcx9x7blFWMg2Kcp7+0FJFDgQ/fIGAFhdz5Tbratou4xrIclxvkoRO f7Gn7yenA3hYPfFS0TFgcWoliJrw8ZzVeya8ezFXBUoyl+KLXUW6QEUEgWIw1t5/ P3LG6VG76VY2aRdC4cO7j9WMBgIuxMpZV4m3+fvqB7RGTThWtRAXMON+j5OaBUGx 35sbG8I6idugv1SOjoBJ4oZUIvy8XGLHNJ27xCpBj8OD9Irhy+nn4tIVHvxbEXXV uEy/dlPteysKTckgcymTLFCiVEx1CgJwrepFvyQROgkC3juYRLVZXKpbjkTU7BoV YigsU0EjftndwSRfqf21JK+yjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGzMOoKq UGAfvMmSzFuhYejkHDlVMB8GA1UdIwQYMBaAFOQgDUStnW7LaHL2U6lYQ/sn2Eek MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEQzNy8wNUVFQ0Q4NjUz NUIxMUVFOUJGMjBBNkJDNEY5QUUwMi81Q0FOUksyZGJzdG9jdlpUcVZoRC15ZllS NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzVDQU5SSzJkYnN0b2N2WlRxVmhELXlmWVI2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEQzNy8wNUVFQ0Q4NjUzNUIxMUVFOUJGMjBBNkJDNEY5QUUwMi81Q0FOUksyZGJz dG9jdlpUcVZoRC15ZllSNlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDKUkiz/Mc6zNrZQ5L7MYq/NzjZ1/WLy2H/xH9ZJ4y0U18pvhvC1EYo n+ya/Bmg4b0X1e+MKcs/th1n826OmlQMU6jxNC21icgA8etsAGq2LFpGQ9h9XpWw o4c53ssppb/3i0Wr34eTXjIGXuV4XvBz12SSGVN6jB4BRWIavHGiNop+vmwGrgWn k6cD98t+sLUTR/SDccKo33Qd8zXHau5i20Hu6tMa0pj/2eUGK90nPPfscDhziNJs LCIlyq4kLeQNhXWKy/Xc3c+2am+UxOXr/FswjxWPiuIWla+9eKGfa39yuHnvqBTe x+NQB/tDQxY9nk/MxyIy6rhnJx9Htr/w -----END CERTIFICATE-----Generated at Fri Apr 25 08:25:08 2025 by rpki-client on console.sobornost.net