$ rpki-client -vvf rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.mft File: U5TlfShXd_11FCjRXLD7L8WSx6Y.mft (raw, json) Hash identifier: Uknsm3HvWRBUDyZIEp2iCIxIC9VSogbq32x4E858gdI= Subject key identifier: 49:5F:79:8C:9E:BF:3A:D1:A1:C9:77:92:72:97:43:A7:1A:B0:37:F1 Authority key identifier: 53:94:E5:7D:28:57:77:FD:75:14:28:D1:5C:B0:FB:2F:C5:92:C7:A6 Certificate issuer: /CN=A91C17A9/serialNumber=5394E57D285777FD751428D15CB0FB2FC592C7A6 Certificate serial: 0538 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5TlfShXd_11FCjRXLD7L8WSx6Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.mft Manifest number: 0525 Signing time: Sat 26 Apr 2025 23:13:15 +0000 Manifest this update: Sat 26 Apr 2025 23:13:14 +0000 Manifest next update: Sat 03 May 2025 23:13:14 +0000 Files and hashes: 1: U5TlfShXd_11FCjRXLD7L8WSx6Y.crl (hash: ZdQdwUXSMXLbC2WgsccUm6VmAiXdBy9/nGlcZ5tz1i8=) 2: E19B6AD6D5BE11ECA8BE4666C4F9AE02.roa (hash: Tcq182MtoqsdyOozDsgfHLvUMXaT5QP5utPDgkahfpk=) 3: C2CAC16E5C9D11EC99F7D10BC4F9AE02.roa (hash: 3aOOVCELLHnIfGs7sXEbEZF8NuxhRTtgWUNx37B19jo=) 4: C25659465C9D11EC99F7D10BC4F9AE02.roa (hash: V7oi3Gg2bJeyB31QQcYvbv2j/BrInSgpAZM4b3T1xkU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.crl rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5TlfShXd_11FCjRXLD7L8WSx6Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 23:13:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1336 (0x538) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C17A9, serialNumber=5394E57D285777FD751428D15CB0FB2FC592C7A6 Validity Not Before: Apr 26 23:13:14 2025 GMT Not After : May 3 23:13:14 2025 GMT Subject: CN=680d688a-c56d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:bb:da:d5:4b:81:34:24:2e:32:0a:64:38:03: dd:5a:f8:b7:6e:cf:bd:3d:3b:53:45:c2:6a:75:e1: 9d:a8:08:2d:af:db:12:8c:47:61:d7:cd:ad:44:11: f3:31:35:77:5a:0a:be:d0:93:64:6a:41:ef:43:dc: 19:b8:76:88:1c:1b:b5:10:5a:df:28:6d:65:ec:a8: 1d:e8:f8:65:fd:b7:a5:05:fa:97:9e:bc:44:16:ad: 20:61:70:45:bb:e7:02:86:38:50:e0:c8:05:90:10: f4:81:39:45:13:77:5b:e2:76:45:44:75:b3:4e:ff: b1:9f:48:88:e2:2d:c5:2d:9a:fb:f7:f2:a0:00:94: 09:3b:6b:d5:2e:3c:5d:cc:88:88:17:b8:d8:a6:67: d6:ff:a6:97:ee:7c:31:53:ba:28:a8:60:02:cc:b6: 48:bc:39:9b:4a:06:93:54:e1:37:f9:ce:70:4c:53: df:51:0a:22:f9:77:09:de:34:ce:f6:85:20:82:f7: 19:e9:29:52:84:0a:88:ed:43:bf:2a:df:9d:10:7b: 6b:40:2a:04:ed:25:ba:44:b4:07:a6:c9:33:d1:19: b4:2f:46:be:cb:d3:d1:44:74:da:ba:15:1a:76:3d: 42:0a:6b:69:23:1b:cc:6d:d5:5b:0b:7d:7d:10:27: be:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:5F:79:8C:9E:BF:3A:D1:A1:C9:77:92:72:97:43:A7:1A:B0:37:F1 X509v3 Authority Key Identifier: keyid:53:94:E5:7D:28:57:77:FD:75:14:28:D1:5C:B0:FB:2F:C5:92:C7:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5TlfShXd_11FCjRXLD7L8WSx6Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:fc:53:24:64:c6:b7:72:f4:dc:4d:03:ec:c8:ec:77:ef:1b: a2:24:be:94:0f:ee:15:14:e5:89:ea:1d:14:8d:c9:e6:d9:2e: d7:3f:5c:e0:95:2f:d0:25:11:db:ad:f9:55:df:7e:c1:80:fc: 11:30:fa:e2:72:2c:f8:7b:d1:76:03:df:91:b7:19:79:ef:1a: 50:b7:84:d1:98:6f:49:38:1d:df:2c:34:f5:e1:f5:00:f5:85: a9:91:44:26:a7:44:12:f7:ca:00:fe:c3:ec:13:c3:ce:e6:95: 3d:d3:3f:eb:8e:a3:e2:69:df:bc:fb:0e:6e:30:fe:34:2f:fa: 8c:65:21:08:9e:7c:c8:7d:97:82:c8:bb:90:a5:bb:04:77:07: b1:9e:be:a3:36:54:51:c9:6d:40:70:aa:ed:30:72:43:36:53: e2:ec:c3:f5:c9:ea:82:b5:bd:ea:2f:1e:68:f5:45:c5:31:e5: cc:0f:8a:a8:3b:a4:2b:35:1b:e6:d1:cc:59:0d:52:ee:4b:ec: 2b:85:1e:c4:fc:3f:c5:49:62:a9:46:83:ff:9d:34:94:8a:25: 24:bf:f9:e8:fa:5b:bb:1c:72:76:89:70:7f:62:17:ef:ca:73: 0f:4d:12:47:c2:fc:ab:6f:eb:34:30:e2:1a:cf:b3:71:bc:5b: 1c:a9:f1:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE3QTkxMTAvBgNVBAUTKDUzOTRFNTdEMjg1Nzc3RkQ3NTE0MjhEMTVDQjBGQjJG QzU5MkM3QTYwHhcNMjUwNDI2MjMxMzE0WhcNMjUwNTAzMjMxMzE0WjAYMRYwFAYD VQQDEw02ODBkNjg4YS1jNTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo7va1UuBNCQuMgpkOAPdWvi3bs+9PTtTRcJqdeGdqAgtr9sSjEdh182tRBHz MTV3Wgq+0JNkakHvQ9wZuHaIHBu1EFrfKG1l7Kgd6Phl/belBfqXnrxEFq0gYXBF u+cChjhQ4MgFkBD0gTlFE3db4nZFRHWzTv+xn0iI4i3FLZr79/KgAJQJO2vVLjxd zIiIF7jYpmfW/6aX7nwxU7ooqGACzLZIvDmbSgaTVOE3+c5wTFPfUQoi+XcJ3jTO 9oUggvcZ6SlShAqI7UO/Kt+dEHtrQCoE7SW6RLQHpskz0Rm0L0a+y9PRRHTauhUa dj1CCmtpIxvMbdVbC319ECe+JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFElfeYye vzrRocl3knKXQ6casDfxMB8GA1UdIwQYMBaAFFOU5X0oV3f9dRQo0Vyw+y/Fksem MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTdBOS81Rjg5RjZFQ0ZC MzExMUVCOEZCRkE1NTlDNEY5QUUwMi9VNVRsZlNoWGRfMTFGQ2pSWExEN0w4V1N4 NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U1VGxmU2hYZF8xMUZDalJYTEQ3TDhXU3g2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTdBOS81Rjg5RjZFQ0ZCMzExMUVCOEZCRkE1NTlDNEY5QUUwMi9VNVRsZlNoWGRf MTFGQ2pSWExEN0w4V1N4NlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3/FMkZMa3cvTcTQPsyOx37xuiJL6UD+4VFOWJ6h0Ujcnm2S7XP1zg lS/QJRHbrflV337BgPwRMPriciz4e9F2A9+Rtxl57xpQt4TRmG9JOB3fLDT14fUA 9YWpkUQmp0QS98oA/sPsE8PO5pU90z/rjqPiad+8+w5uMP40L/qMZSEInnzIfZeC yLuQpbsEdwexnr6jNlRRyW1AcKrtMHJDNlPi7MP1yeqCtb3qLx5o9UXFMeXMD4qo O6QrNRvm0cxZDVLuS+wrhR7E/D/FSWKpRoP/nTSUiiUkv/no+lu7HHJ2iXB/Yhfv ynMPTRJHwvyrb+s0MOIaz7NxvFscqfFO -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:10 2025 by rpki-client on console.sobornost.net