$ rpki-client -vvf rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft File: baE3ApweGgauD6j3W7iPLKV4-Fo.mft (raw, json) Hash identifier: CChWYz+Nv4avT+DQ6piirziC9tXRBqx+pjhktlV00zY= Subject key identifier: AB:5C:6D:87:93:5E:ED:27:26:D4:3D:4F:55:8F:01:62:E1:26:50:AD Authority key identifier: 6D:A1:37:02:9C:1E:1A:06:AE:0F:A8:F7:5B:B8:8F:2C:A5:78:F8:5A Certificate issuer: /CN=A91C46FC/serialNumber=6DA137029C1E1A06AE0FA8F75BB88F2CA578F85A Certificate serial: 0A70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft Manifest number: 0A5B Signing time: Mon 28 Apr 2025 20:03:17 +0000 Manifest this update: Mon 28 Apr 2025 20:03:16 +0000 Manifest next update: Mon 05 May 2025 20:03:16 +0000 Files and hashes: 1: baE3ApweGgauD6j3W7iPLKV4-Fo.crl (hash: Ms+dIU/sxXNHkvVIJ+MGbbqQmze4jlc6uhnBNXgdYRU=) 2: F450F110AAFE11EAAF572C5EC4F9AE02.roa (hash: z5ES9QnxCtUmMGb5rTePskEShI6wqlkuHRSuLJa+HEo=) 3: FB648B80F9DD11EC85C44880C4F9AE02.roa (hash: Sq5YLnrI6niWLMeWLjro3RFtUrBz6mhWVJH2BrDvMPI=) 4: 04D48448620C11EA9F85A781C4F9AE02.roa (hash: QgJRfFH6YN7lRNZNVoON5AcD6zI0xlKC/pPKsOyjCXg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.crl rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:03:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2672 (0xa70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C46FC, serialNumber=6DA137029C1E1A06AE0FA8F75BB88F2CA578F85A Validity Not Before: Apr 28 20:03:16 2025 GMT Not After : May 5 20:03:16 2025 GMT Subject: CN=680fdf05-f839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:80:d7:4e:47:29:bc:f6:d5:20:77:15:06:86: 03:d4:f8:e8:b8:7a:85:64:5c:c9:06:8d:e3:b1:5c: 6c:f0:7e:e7:9d:8b:85:3d:c3:29:49:34:3f:15:37: 68:e3:01:2d:03:7a:fa:3f:84:38:65:c4:d9:1f:68: 41:79:7e:67:b0:7d:50:d2:6d:36:01:6a:f4:61:08: 30:04:7e:6f:2f:9f:e4:8d:5e:96:49:12:9a:55:08: 90:9a:be:5a:cb:fb:ec:84:cc:35:c2:4a:c6:32:d0: fe:a6:07:d6:2d:37:76:c9:ac:36:e0:01:7d:46:6a: 66:42:de:62:74:64:ad:fe:97:5b:1b:ff:b7:9f:a0: f1:92:40:6c:d3:71:3b:25:ae:e0:7d:1f:c1:e9:af: 2d:39:c0:9c:35:73:6b:fe:7a:f6:07:f6:5a:c2:eb: 79:7d:cb:41:37:89:88:a6:47:64:7b:85:68:23:01: 26:bf:9a:46:60:4d:85:6c:34:81:f8:06:04:be:cc: 41:c9:01:35:ca:de:e3:81:40:9b:9b:20:ab:1f:0e: 1c:65:bc:59:04:d1:b0:9b:e8:b3:a4:71:00:a3:ae: bc:bc:21:03:40:e8:12:03:3d:ef:dd:90:ff:b6:b1: a5:2f:41:75:b0:01:27:b5:5d:a2:e1:9c:b9:ea:bd: 35:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:5C:6D:87:93:5E:ED:27:26:D4:3D:4F:55:8F:01:62:E1:26:50:AD X509v3 Authority Key Identifier: keyid:6D:A1:37:02:9C:1E:1A:06:AE:0F:A8:F7:5B:B8:8F:2C:A5:78:F8:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:73:ec:f6:c4:52:78:0c:4f:ec:11:36:e3:3e:02:3d:af:bd: 18:ea:4e:14:63:04:cb:b4:cc:2a:92:56:99:09:13:8c:60:bc: c0:c0:f5:95:16:09:fd:f7:0f:b9:2a:91:47:09:ad:96:25:0f: 40:23:a3:ba:32:aa:26:c9:3e:15:82:2c:39:8a:38:dc:25:12: ab:77:18:1a:ac:43:ca:21:d7:4f:a5:c7:a5:8a:a9:40:05:38: f1:11:66:5b:f9:27:0a:5d:08:45:38:68:c4:e5:6b:74:36:f5: 8e:05:dc:c6:1f:21:7f:8e:c5:c8:f6:01:f8:ae:f9:20:c7:1c: 91:90:0b:83:5e:7e:bc:47:b3:fd:17:1a:e0:f5:eb:1f:46:be: c0:22:b2:10:e4:b0:e4:a0:70:01:b4:48:0e:49:88:48:6c:24: e8:9f:8e:2a:d2:62:ca:fb:3a:c0:10:ed:a4:41:b0:5e:b5:43: df:ff:43:0a:d3:8c:5c:41:f2:02:47:e2:e1:bb:ca:76:41:42: f8:ea:6c:29:6c:17:4f:79:62:79:8e:c3:07:a5:c3:c8:d2:07: 88:f5:00:c6:51:9d:92:53:9e:ee:9f:56:85:33:e6:fa:b9:d9: e0:15:db:50:81:04:e1:02:ae:87:45:81:33:3c:5d:7f:5a:cb: bd:11:dd:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCnAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ2RkMxMTAvBgNVBAUTKDZEQTEzNzAyOUMxRTFBMDZBRTBGQThGNzVCQjg4RjJD QTU3OEY4NUEwHhcNMjUwNDI4MjAwMzE2WhcNMjUwNTA1MjAwMzE2WjAYMRYwFAYD VQQDEw02ODBmZGYwNS1mODM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA14DXTkcpvPbVIHcVBoYD1PjouHqFZFzJBo3jsVxs8H7nnYuFPcMpSTQ/FTdo 4wEtA3r6P4Q4ZcTZH2hBeX5nsH1Q0m02AWr0YQgwBH5vL5/kjV6WSRKaVQiQmr5a y/vshMw1wkrGMtD+pgfWLTd2yaw24AF9RmpmQt5idGSt/pdbG/+3n6DxkkBs03E7 Ja7gfR/B6a8tOcCcNXNr/nr2B/Zawut5fctBN4mIpkdke4VoIwEmv5pGYE2FbDSB +AYEvsxByQE1yt7jgUCbmyCrHw4cZbxZBNGwm+izpHEAo668vCEDQOgSAz3v3ZD/ trGlL0F1sAEntV2i4Zy56r01AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKtcbYeT Xu0nJtQ9T1WPAWLhJlCtMB8GA1UdIwQYMBaAFG2hNwKcHhoGrg+o91u4jyylePha MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDZGQy8wRTg1MDVGMDYy MDUxMUVBQkFGRkUxNkJDNEY5QUUwMi9iYUUzQXB3ZUdnYXVENmozVzdpUExLVjQt Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JhRTNBcHdlR2dhdUQ2ajNXN2lQTEtWNC1Gby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDZGQy8wRTg1MDVGMDYyMDUxMUVBQkFGRkUxNkJDNEY5QUUwMi9iYUUzQXB3ZUdn YXVENmozVzdpUExLVjQtRm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzc+z2xFJ4DE/sETbjPgI9r70Y6k4UYwTLtMwqklaZCROMYLzAwPWV Fgn99w+5KpFHCa2WJQ9AI6O6MqomyT4Vgiw5ijjcJRKrdxgarEPKIddPpceliqlA BTjxEWZb+ScKXQhFOGjE5Wt0NvWOBdzGHyF/jsXI9gH4rvkgxxyRkAuDXn68R7P9 Fxrg9esfRr7AIrIQ5LDkoHABtEgOSYhIbCTon44q0mLK+zrAEO2kQbBetUPf/0MK 04xcQfICR+Lhu8p2QUL46mwpbBdPeWJ5jsMHpcPI0geI9QDGUZ2SU57un1aFM+b6 udngFdtQgQThAq6HRYEzPF1/Wsu9Ed3R -----END CERTIFICATE-----Generated at Mon Apr 28 23:05:54 2025 by rpki-client on console.sobornost.net