$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.mft File: UlhBQeXpBP16_D4Noo2QCKGvkhI.mft (raw, json) Hash identifier: WU4kRAntchNTAQlyiKKIt/OJWksHARZFJy5wEHBm1RI= Subject key identifier: EA:E5:09:CC:C0:B9:4B:4D:5B:A5:41:2A:2C:6A:78:2D:77:20:3E:2F Authority key identifier: 52:58:41:41:E5:E9:04:FD:7A:FC:3E:0D:A2:8D:90:08:A1:AF:92:12 Certificate issuer: /CN=A91C2CCD/serialNumber=52584141E5E904FD7AFC3E0DA28D9008A1AF9212 Certificate serial: 014B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UlhBQeXpBP16_D4Noo2QCKGvkhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.mft Manifest number: 0149 Signing time: Sun 27 Apr 2025 03:09:48 +0000 Manifest this update: Sun 27 Apr 2025 03:09:48 +0000 Manifest next update: Sun 04 May 2025 03:09:48 +0000 Files and hashes: 1: UlhBQeXpBP16_D4Noo2QCKGvkhI.crl (hash: IIu/kBojy2WjtKWRa1lOe3c1tkmHvUGB1CUNsVotWNY=) 2: 41D133CC2B5911EE85AD762BC4F9AE02.roa (hash: jQ/0lCjJIMkOJNGjS+k508Q8Du2UjlHI8yBfLB/rzdQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.crl rsync://rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UlhBQeXpBP16_D4Noo2QCKGvkhI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 331 (0x14b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2CCD, serialNumber=52584141E5E904FD7AFC3E0DA28D9008A1AF9212 Validity Not Before: Apr 27 03:09:48 2025 GMT Not After : May 4 03:09:48 2025 GMT Subject: CN=680d9ffc-2d05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8c:e7:d2:50:99:13:6b:a2:0e:78:5e:8b:10: c8:ed:de:57:04:3f:31:a6:a3:33:c2:d9:ed:60:4c: 3d:ed:77:08:b5:7d:b3:82:74:35:78:79:ad:1e:a6: da:62:cb:c4:b7:a4:6c:a4:67:5c:6d:0a:e3:5c:97: 59:c4:c9:18:0b:c4:e0:80:71:a0:8d:6e:2f:e7:28: f9:5f:f4:46:17:48:fa:d5:b8:6a:dd:ed:11:61:a2: 3a:af:c1:f3:cd:27:94:75:d7:87:e3:c4:07:a8:b5: 28:fc:a1:df:fc:9e:0a:44:c8:e3:e4:61:da:e7:85: 5f:38:78:01:c6:ed:fb:5e:81:62:79:47:34:c3:92: 20:94:17:37:53:12:b3:25:46:f4:df:54:e7:5e:06: d4:a6:03:16:30:67:a8:a5:45:78:b1:0c:c0:37:62: 6b:75:41:32:da:fa:d7:dc:0c:f1:f0:50:d1:73:2a: 40:b1:d5:b8:e2:8d:97:0a:f6:28:ab:13:27:77:99: 80:ee:49:2a:8d:45:61:30:4d:db:e3:a2:cd:20:8c: 73:56:96:52:bc:72:5b:ca:49:8a:b3:c5:b2:9c:53: 44:32:cd:e6:e2:c3:7c:04:bc:a9:e1:9e:e2:ff:15: b9:a2:a2:f1:21:03:e7:a5:c3:d3:e3:6f:60:66:df: 16:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:E5:09:CC:C0:B9:4B:4D:5B:A5:41:2A:2C:6A:78:2D:77:20:3E:2F X509v3 Authority Key Identifier: keyid:52:58:41:41:E5:E9:04:FD:7A:FC:3E:0D:A2:8D:90:08:A1:AF:92:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UlhBQeXpBP16_D4Noo2QCKGvkhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:01:82:ba:77:b7:37:bd:8c:93:89:b0:19:dc:4a:1f:be:8b: d5:e6:a2:6c:16:a7:32:8c:60:f0:b9:92:04:b4:b5:83:5d:99: 3f:1b:37:6a:d6:17:eb:0e:ed:12:05:41:65:7c:57:e3:cc:e4: 77:61:07:af:01:06:a2:bd:79:87:44:6a:79:7c:7c:44:cc:4e: d9:24:19:c1:6a:3b:df:c5:85:10:1d:75:d7:38:18:22:cb:4a: ac:7e:46:39:45:c1:13:bf:20:73:38:75:fa:30:b6:32:24:18: b5:24:55:30:30:5f:38:1e:85:76:d0:52:bb:0e:92:04:73:43: 5f:2f:64:05:13:77:bd:5b:6d:5d:00:25:a2:03:fb:c1:96:06: 5e:a2:ab:20:ea:04:e6:fc:ec:00:1d:e1:a3:02:8c:eb:cf:bd: 66:79:fb:96:63:56:ac:14:95:db:63:69:5c:c2:87:8b:c8:ff: 24:a9:b2:45:b4:85:ac:1d:c8:f7:09:42:8f:d1:36:83:aa:37: 8b:75:92:c6:72:a5:76:e1:d0:e9:21:01:3e:fa:6c:a7:94:fa: 71:4e:d8:28:39:df:6a:0e:fb:ab:d1:3c:d0:01:52:bf:ab:55: ff:bf:6d:53:0b:17:6f:e6:f7:a1:4b:67:cc:e0:1e:5f:ff:a6: e8:1d:5c:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJDQ0QxMTAvBgNVBAUTKDUyNTg0MTQxRTVFOTA0RkQ3QUZDM0UwREEyOEQ5MDA4 QTFBRjkyMTIwHhcNMjUwNDI3MDMwOTQ4WhcNMjUwNTA0MDMwOTQ4WjAYMRYwFAYD VQQDEw02ODBkOWZmYy0yZDA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw4zn0lCZE2uiDnheixDI7d5XBD8xpqMzwtntYEw97XcItX2zgnQ1eHmtHqba YsvEt6RspGdcbQrjXJdZxMkYC8TggHGgjW4v5yj5X/RGF0j61bhq3e0RYaI6r8Hz zSeUddeH48QHqLUo/KHf/J4KRMjj5GHa54VfOHgBxu37XoFieUc0w5IglBc3UxKz JUb031TnXgbUpgMWMGeopUV4sQzAN2JrdUEy2vrX3Azx8FDRcypAsdW44o2XCvYo qxMnd5mA7kkqjUVhME3b46LNIIxzVpZSvHJbykmKs8WynFNEMs3m4sN8BLyp4Z7i /xW5oqLxIQPnpcPT429gZt8WbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOrlCczA uUtNW6VBKixqeC13ID4vMB8GA1UdIwQYMBaAFFJYQUHl6QT9evw+DaKNkAihr5IS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkNDRC9EQzM1MkI1RTJC NTgxMUVFQjdDMkRFMkFDNEY5QUUwMi9VbGhCUWVYcEJQMTZfRDROb28yUUNLR3Zr aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VsaEJRZVhwQlAxNl9ENE5vbzJRQ0tHdmtoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkNDRC9EQzM1MkI1RTJCNTgxMUVFQjdDMkRFMkFDNEY5QUUwMi9VbGhCUWVYcEJQ MTZfRDROb28yUUNLR3ZraEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgAYK6d7c3vYyTibAZ3EofvovV5qJsFqcyjGDwuZIEtLWDXZk/Gzdq 1hfrDu0SBUFlfFfjzOR3YQevAQaivXmHRGp5fHxEzE7ZJBnBajvfxYUQHXXXOBgi y0qsfkY5RcETvyBzOHX6MLYyJBi1JFUwMF84HoV20FK7DpIEc0NfL2QFE3e9W21d ACWiA/vBlgZeoqsg6gTm/OwAHeGjAozrz71mefuWY1asFJXbY2lcwoeLyP8kqbJF tIWsHcj3CUKP0TaDqjeLdZLGcqV24dDpIQE++mynlPpxTtgoOd9qDvur0TzQAVK/ q1X/v21TCxdv5vehS2fM4B5f/6boHVwJ -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:10 2025 by rpki-client on console.sobornost.net