$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.mft File: eFqwsi3OWhJmUAwQZrT2sF91ysA.mft (raw, json) Hash identifier: t9IXWiW+9FNvelBsP0DnKv00ehhATnUOVb6O9fwXoBA= Subject key identifier: 59:5A:7D:43:53:EC:9F:AD:EE:8F:9C:68:45:7D:0C:AF:99:71:DB:FC Authority key identifier: 78:5A:B0:B2:2D:CE:5A:12:66:50:0C:10:66:B4:F6:B0:5F:75:CA:C0 Certificate issuer: /CN=A91C2CE9/serialNumber=785AB0B22DCE5A1266500C1066B4F6B05F75CAC0 Certificate serial: 10AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFqwsi3OWhJmUAwQZrT2sF91ysA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.mft Manifest number: 10A1 Signing time: Mon 28 Apr 2025 17:34:12 +0000 Manifest this update: Mon 28 Apr 2025 17:34:11 +0000 Manifest next update: Mon 05 May 2025 17:34:11 +0000 Files and hashes: 1: eFqwsi3OWhJmUAwQZrT2sF91ysA.crl (hash: 7rpaXY4D2ApKtyXJGt0SKtpdD0rUpebmUHYg1DtH1Ws=) 2: B3250BC6307B11E989188B3BC4F9AE02.roa (hash: i5f3IsLQcqkFQbLcTMdHVFZRfy5na+MUmyuuokwDYXo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.crl rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFqwsi3OWhJmUAwQZrT2sF91ysA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 17:34:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4268 (0x10ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2CE9, serialNumber=785AB0B22DCE5A1266500C1066B4F6B05F75CAC0 Validity Not Before: Apr 28 17:34:11 2025 GMT Not After : May 5 17:34:11 2025 GMT Subject: CN=680fbc13-83cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:8f:dc:86:aa:86:11:d6:57:b9:52:ff:65:69: a3:ec:ed:88:5b:55:13:af:b7:64:6d:6a:d8:15:c6: b0:2a:a2:c1:d3:32:c7:72:43:6d:f0:f5:96:ea:5c: 99:6c:6b:82:99:87:68:88:e1:d1:61:f3:a5:dd:e1: 9e:83:94:ae:05:7a:fc:16:eb:1f:1a:38:3d:5b:92: 50:eb:8d:02:4e:bd:50:fe:7c:24:25:07:b0:03:e5: 2f:74:42:3a:28:fa:5a:23:b7:54:2a:8e:12:07:b5: fc:5d:2c:97:28:8c:2c:d6:8f:a6:c1:9e:5a:c0:0d: 8d:76:d5:20:51:b3:5e:ad:ba:16:13:9b:bb:93:1f: 29:2c:d7:b8:67:37:61:37:64:cc:7b:c9:9c:00:65: 1a:06:ae:73:a0:17:bc:48:32:e6:18:44:e6:43:5f: 6b:73:6e:80:05:3b:fe:8d:21:b4:7f:24:f3:06:27: ef:fa:2c:61:a2:be:69:76:18:5e:79:86:07:b6:07: 61:fc:43:b8:db:03:43:04:fd:0d:a0:88:aa:8d:73: 6e:26:1b:f0:a5:75:fd:5b:a1:7f:c3:f1:5e:1e:9c: ca:0f:df:0f:68:dc:62:3d:e3:21:36:90:e8:d0:78: c5:74:e5:2c:30:8b:55:70:c1:38:c7:5e:ad:e4:91: 61:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:5A:7D:43:53:EC:9F:AD:EE:8F:9C:68:45:7D:0C:AF:99:71:DB:FC X509v3 Authority Key Identifier: keyid:78:5A:B0:B2:2D:CE:5A:12:66:50:0C:10:66:B4:F6:B0:5F:75:CA:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFqwsi3OWhJmUAwQZrT2sF91ysA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:31:ee:0a:76:71:e8:ff:6d:85:9e:cb:c1:6f:ea:99:f5:d8: 0c:94:ff:fb:f5:63:c3:39:71:90:ce:ea:15:3c:83:6c:f7:16: ac:db:93:f7:99:cf:d8:38:eb:c7:17:a5:b6:8f:19:9b:02:e3: 3c:44:fb:0c:c6:8d:6b:af:5f:9c:25:01:7d:ab:c5:7d:d2:6a: 05:62:eb:4d:09:39:fe:8d:a5:7c:b5:e6:fc:a8:24:a6:3e:4b: a7:24:d6:22:60:ab:10:a0:40:61:0b:82:9a:d0:d9:d4:12:a7: 98:2a:af:aa:40:ca:c9:9e:79:dd:8d:bb:eb:1a:49:91:b4:3c: 3f:ef:8e:7a:db:13:f8:60:49:14:e0:c5:0f:af:88:c9:e9:4c: d5:7b:6e:9a:82:28:2d:82:32:ae:d1:d7:72:c1:3a:39:13:1f: 4b:89:e4:df:1e:74:de:2e:d7:3e:db:3a:d4:b4:71:73:a1:71: 33:08:52:0f:a9:f6:ce:d4:92:a4:70:3d:4e:70:d6:bc:75:56: 4e:22:9e:43:9d:de:ee:ca:91:45:41:ea:13:67:b5:3f:e3:ec: cc:5c:5f:3b:a1:07:4d:32:30:08:ea:d6:e2:5a:5f:9b:a7:c8: 01:2f:93:49:4d:43:f5:cf:29:d5:53:a0:75:2b:eb:85:1d:b8: 45:e0:a5:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJDRTkxMTAvBgNVBAUTKDc4NUFCMEIyMkRDRTVBMTI2NjUwMEMxMDY2QjRGNkIw NUY3NUNBQzAwHhcNMjUwNDI4MTczNDExWhcNMjUwNTA1MTczNDExWjAYMRYwFAYD VQQDEw02ODBmYmMxMy04M2NkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8Y/chqqGEdZXuVL/ZWmj7O2IW1UTr7dkbWrYFcawKqLB0zLHckNt8PWW6lyZ bGuCmYdoiOHRYfOl3eGeg5SuBXr8FusfGjg9W5JQ640CTr1Q/nwkJQewA+UvdEI6 KPpaI7dUKo4SB7X8XSyXKIws1o+mwZ5awA2NdtUgUbNerboWE5u7kx8pLNe4Zzdh N2TMe8mcAGUaBq5zoBe8SDLmGETmQ19rc26ABTv+jSG0fyTzBifv+ixhor5pdhhe eYYHtgdh/EO42wNDBP0NoIiqjXNuJhvwpXX9W6F/w/FeHpzKD98PaNxiPeMhNpDo 0HjFdOUsMItVcME4x16t5JFhLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFlafUNT 7J+t7o+caEV9DK+Zcdv8MB8GA1UdIwQYMBaAFHhasLItzloSZlAMEGa09rBfdcrA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkNFOS84NzEwNkQzRTI3 MDAxMUU5QTc3QjZFMkNDNEY5QUUwMi9lRnF3c2kzT1doSm1VQXdRWnJUMnNGOTF5 c0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VGcXdzaTNPV2hKbVVBd1FaclQyc0Y5MXlzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkNFOS84NzEwNkQzRTI3MDAxMUU5QTc3QjZFMkNDNEY5QUUwMi9lRnF3c2kzT1do Sm1VQXdRWnJUMnNGOTF5c0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeMe4KdnHo/22FnsvBb+qZ9dgMlP/79WPDOXGQzuoVPINs9xas25P3 mc/YOOvHF6W2jxmbAuM8RPsMxo1rr1+cJQF9q8V90moFYutNCTn+jaV8teb8qCSm PkunJNYiYKsQoEBhC4Ka0NnUEqeYKq+qQMrJnnndjbvrGkmRtDw/74562xP4YEkU 4MUPr4jJ6UzVe26agigtgjKu0ddywTo5Ex9LieTfHnTeLtc+2zrUtHFzoXEzCFIP qfbO1JKkcD1OcNa8dVZOIp5Dnd7uypFFQeoTZ7U/4+zMXF87oQdNMjAI6tbiWl+b p8gBL5NJTUP1zynVU6B1K+uFHbhF4KWE -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:57 2025 by rpki-client on console.sobornost.net