$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/oCcZWkgg89cmSk1X7pqdTCoQySM.mft File: oCcZWkgg89cmSk1X7pqdTCoQySM.mft (raw, json) Hash identifier: +UXpQWJMcy05Aq6nNyuxFJzAgUDLHg7nztnYOD7Sa1A= Subject key identifier: E5:8F:1F:7F:6A:B3:DB:70:BC:78:AC:1D:4B:FB:3C:87:D1:9C:15:1E Authority key identifier: A0:27:19:5A:48:20:F3:D7:26:4A:4D:57:EE:9A:9D:4C:2A:10:C9:23 Certificate issuer: /CN=A91C1621/serialNumber=A027195A4820F3D7264A4D57EE9A9D4C2A10C923 Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oCcZWkgg89cmSk1X7pqdTCoQySM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/oCcZWkgg89cmSk1X7pqdTCoQySM.mft Manifest number: 3D Signing time: Mon 28 Apr 2025 14:16:16 +0000 Manifest this update: Mon 28 Apr 2025 14:16:15 +0000 Manifest next update: Mon 05 May 2025 14:16:15 +0000 Files and hashes: 1: oCcZWkgg89cmSk1X7pqdTCoQySM.crl (hash: Ik3w5pWM5NEEJbIh8pN/hKWKJDXw+D9v8BmEFH0NROs=) 2: 81E4D4A2053011F09C73001FC4F9AE02.roa (hash: cA2l4Bz4w9KwEr1hYRA0GBgp3+TMBDk54SQcEyXzSVQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/oCcZWkgg89cmSk1X7pqdTCoQySM.crl rsync://rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/oCcZWkgg89cmSk1X7pqdTCoQySM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oCcZWkgg89cmSk1X7pqdTCoQySM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 14:16:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1621, serialNumber=A027195A4820F3D7264A4D57EE9A9D4C2A10C923 Validity Not Before: Apr 28 14:16:15 2025 GMT Not After : May 5 14:16:15 2025 GMT Subject: CN=680f8daf-558e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0a:28:e3:de:fd:65:4d:0f:e4:02:af:e3:d3: b5:6f:8f:ba:3e:69:0e:ed:cf:6a:29:26:5e:00:3a: 1c:c0:7a:98:73:35:53:f6:1e:83:d1:bd:ca:a3:70: d9:2a:c4:f8:15:aa:2f:c1:69:c5:2b:b4:a2:1d:c3: a7:50:79:84:33:72:61:f8:fd:5a:1e:68:65:3d:8c: 86:2c:5d:cd:5c:c5:f6:88:53:df:f9:1b:78:6d:b3: f6:a9:34:19:5c:90:cf:83:35:1d:f9:72:66:d1:d9: 8f:2f:6b:de:b7:e7:c5:1a:03:54:08:7d:c3:52:af: 5c:17:70:f3:95:c9:2a:36:c2:99:22:aa:77:0d:2f: 6e:77:af:65:38:74:33:70:b5:2e:6f:1d:f5:12:22: d6:ce:63:4d:59:85:1a:e1:1a:8c:0b:06:52:b7:64: 75:1c:cc:0a:df:b4:11:ea:eb:bb:33:8a:e6:67:cd: f7:32:62:22:3a:ee:f5:12:3d:12:f9:ad:98:98:e0: 96:c2:22:d7:08:66:fb:96:60:fa:8e:38:ad:d2:4a: a9:cf:38:36:41:9b:86:7b:20:47:3c:77:f6:c4:f3: b0:0c:0c:9d:ba:b9:5f:5f:28:d7:58:81:5f:f9:18: 67:e8:4e:a7:f9:be:58:f1:fe:80:60:05:65:e3:ca: 3b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:8F:1F:7F:6A:B3:DB:70:BC:78:AC:1D:4B:FB:3C:87:D1:9C:15:1E X509v3 Authority Key Identifier: keyid:A0:27:19:5A:48:20:F3:D7:26:4A:4D:57:EE:9A:9D:4C:2A:10:C9:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/oCcZWkgg89cmSk1X7pqdTCoQySM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oCcZWkgg89cmSk1X7pqdTCoQySM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/oCcZWkgg89cmSk1X7pqdTCoQySM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:fa:74:ca:f9:94:e2:4c:d4:ad:5f:62:f2:8e:ec:1b:4b:8f: 0b:d0:fb:1b:1a:1e:07:8d:bd:2e:44:57:2a:37:03:3f:ba:5e: 4a:83:97:90:f4:99:1a:02:eb:ed:42:85:1e:e6:2b:46:5d:43: d3:88:e8:13:89:c6:70:76:26:d7:ca:04:d7:87:c5:75:f8:b7: 5a:0f:72:14:1c:66:16:9e:52:74:d0:d8:5a:ae:01:26:f1:55: 52:d6:80:c8:af:70:5a:ee:c7:d6:f8:34:c4:7b:04:cb:73:6e: c4:df:67:e0:ff:48:cd:9f:8f:c9:28:f4:7a:69:42:d5:9d:f3: 09:0f:a5:0a:33:07:32:5c:cd:7a:90:8f:f6:01:28:4a:f6:43: 6c:6a:b5:54:bd:cf:d9:40:d0:bf:5f:e9:4d:55:83:2f:d9:38: cd:e8:22:0f:90:10:fa:17:8b:42:a9:b0:3f:96:fd:45:8c:e4: 89:88:9b:a8:e2:d0:54:65:cd:9d:b1:b7:02:05:97:78:23:c7: 36:58:f0:e5:a0:49:b1:56:1e:bf:94:0f:f3:3d:64:1a:bb:1d: 12:5c:1c:7e:51:1b:f2:2e:65:f3:c9:05:d0:9a:5a:3f:e0:37: 7a:54:18:08:f9:d7:c6:68:9e:d1:0c:73:a3:09:2f:5d:73:b9: e8:32:7e:b0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MTYyMTExMC8GA1UEBRMoQTAyNzE5NUE0ODIwRjNENzI2NEE0RDU3RUU5QTlENEMy QTEwQzkyMzAeFw0yNTA0MjgxNDE2MTVaFw0yNTA1MDUxNDE2MTVaMBgxFjAUBgNV BAMTDTY4MGY4ZGFmLTU1OGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2Cijj3v1lTQ/kAq/j07Vvj7o+aQ7tz2opJl4AOhzAephzNVP2HoPRvcqjcNkq xPgVqi/BacUrtKIdw6dQeYQzcmH4/VoeaGU9jIYsXc1cxfaIU9/5G3hts/apNBlc kM+DNR35cmbR2Y8va96358UaA1QIfcNSr1wXcPOVySo2wpkiqncNL253r2U4dDNw tS5vHfUSItbOY01ZhRrhGowLBlK3ZHUczArftBHq67sziuZnzfcyYiI67vUSPRL5 rZiY4JbCItcIZvuWYPqOOK3SSqnPODZBm4Z7IEc8d/bE87AMDJ26uV9fKNdYgV/5 GGfoTqf5vljx/oBgBWXjyjupAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5Y8ff2qz 23C8eKwdS/s8h9GcFR4wHwYDVR0jBBgwFoAUoCcZWkgg89cmSk1X7pqdTCoQySMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMxNjIxLzM1RURBOTJFQ0Yw RDExRUY5MkYxRUMzNkM0RjlBRTAyL29DY1pXa2dnODljbVNrMVg3cHFkVENvUXlT TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvb0NjWldrZ2c4OWNtU2sxWDdwcWRUQ29ReVNNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMx NjIxLzM1RURBOTJFQ0YwRDExRUY5MkYxRUMzNkM0RjlBRTAyL29DY1pXa2dnODlj bVNrMVg3cHFkVENvUXlTTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADT6dMr5lOJM1K1fYvKO7BtLjwvQ+xsaHgeNvS5EVyo3Az+6XkqDl5D0 mRoC6+1ChR7mK0ZdQ9OI6BOJxnB2JtfKBNeHxXX4t1oPchQcZhaeUnTQ2FquASbx VVLWgMivcFrux9b4NMR7BMtzbsTfZ+D/SM2fj8ko9HppQtWd8wkPpQozBzJczXqQ j/YBKEr2Q2xqtVS9z9lA0L9f6U1Vgy/ZOM3oIg+QEPoXi0KpsD+W/UWM5ImIm6ji 0FRlzZ2xtwIFl3gjxzZY8OWgSbFWHr+UD/M9ZBq7HRJcHH5RG/IuZfPJBdCaWj/g N3pUGAj518ZontEMc6MJL11zuegyfrA= -----END CERTIFICATE-----Generated at Mon Apr 28 17:46:02 2025 by rpki-client on console.sobornost.net