$ rpki-client -vvf rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.mft File: OochbBWSc79Rk0f8H-5wYZXMKuY.mft (raw, json) Hash identifier: JDbKbBvJjOgHwL/olwS7bNXkxUFtN2O1fk41aC+SwmU= Subject key identifier: 15:E7:B7:0E:5C:D0:E5:A3:14:CF:AB:5C:C1:FB:7C:27:93:44:EE:FE Authority key identifier: 3A:87:21:6C:15:92:73:BF:51:93:47:FC:1F:EE:70:61:95:CC:2A:E6 Certificate issuer: /CN=A91C661C/serialNumber=3A87216C159273BF519347FC1FEE706195CC2AE6 Certificate serial: 068A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OochbBWSc79Rk0f8H-5wYZXMKuY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.mft Manifest number: 067F Signing time: Sat 26 Apr 2025 21:58:38 +0000 Manifest this update: Sat 26 Apr 2025 21:58:38 +0000 Manifest next update: Sat 03 May 2025 21:58:38 +0000 Files and hashes: 1: OochbBWSc79Rk0f8H-5wYZXMKuY.crl (hash: pSymE+DBN+GCisfbkC2dwHnnB0zVh3m+RvuOA48JcbM=) 2: AABC79100EC411EF858B5255C4F9AE02.roa (hash: xd+kZGDM6lidBL503M6KRPrbZpmB555muvLLsOdJRog=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.crl rsync://rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OochbBWSc79Rk0f8H-5wYZXMKuY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 21:58:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1674 (0x68a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C661C, serialNumber=3A87216C159273BF519347FC1FEE706195CC2AE6 Validity Not Before: Apr 26 21:58:38 2025 GMT Not After : May 3 21:58:38 2025 GMT Subject: CN=680d570e-61d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:02:99:88:15:9a:14:8f:58:ed:df:f1:1a:db: 81:bb:9f:88:83:c4:2b:64:07:31:c0:19:a9:4d:34: 61:24:82:27:13:76:53:53:ba:ae:24:67:ad:18:85: 66:55:2f:0c:58:27:32:0c:13:2d:ac:3c:ec:58:4f: e4:f9:54:66:fb:cd:8c:8f:99:0c:85:55:fd:a4:cb: 5b:4d:a9:29:f0:46:fb:92:ae:4e:a4:24:1a:6f:15: d3:94:ac:16:fa:ab:e2:23:2f:0c:9f:08:ad:11:4f: 63:5e:a1:66:c5:c7:0b:de:90:2c:ac:f9:26:b9:ea: 73:3f:d3:66:6a:2d:e0:d9:0c:dd:da:90:c5:25:73: 88:47:81:cf:5d:60:63:3a:a9:94:a8:fc:b2:e0:1d: 8e:a1:48:47:dc:8c:80:d7:0f:a6:a0:f5:13:bf:cc: f4:1f:60:3d:66:16:f2:f3:6d:27:6d:a9:47:0a:4b: 10:0f:e3:99:85:a2:5c:df:a6:46:cd:12:93:3f:5f: e3:d8:bc:f3:68:e1:f2:60:27:3e:50:50:64:f4:6e: 45:a7:4b:48:4c:a3:b1:21:aa:b2:51:a7:7d:9b:ea: 35:5a:ba:58:18:37:8e:c8:48:e0:e9:0e:18:82:b5: 3b:8c:60:70:6e:43:03:6c:a3:30:95:1c:ce:b3:93: 81:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:E7:B7:0E:5C:D0:E5:A3:14:CF:AB:5C:C1:FB:7C:27:93:44:EE:FE X509v3 Authority Key Identifier: keyid:3A:87:21:6C:15:92:73:BF:51:93:47:FC:1F:EE:70:61:95:CC:2A:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OochbBWSc79Rk0f8H-5wYZXMKuY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:8c:61:ad:63:d5:3b:ba:58:d3:fb:55:f8:35:4b:9d:99:ba: 9e:f7:81:e9:c2:ba:bd:a0:37:13:1d:b5:c1:3a:ed:54:c4:33: 2a:70:be:e6:91:b4:bf:4f:a0:0e:3f:7c:6f:ff:54:a8:43:cd: bc:7d:7f:04:29:ff:28:a7:99:a1:13:fa:16:c4:e5:29:c0:b2: 7a:7e:91:98:b7:fb:78:81:84:18:e6:37:f0:24:d1:f5:a5:fb: 5a:ba:94:7e:80:2e:fa:e9:72:2e:4c:55:17:48:16:c5:17:a7: 40:f4:4a:d2:35:c3:f6:98:a8:cb:24:72:85:71:65:7b:9f:13: 80:e9:31:a4:8b:1b:e0:58:36:62:4b:56:33:d2:11:5a:40:f4: f0:46:c4:93:fc:36:1f:02:b7:1e:1a:75:23:8a:b9:f1:99:e8: 6d:64:6b:ed:31:c8:65:19:22:8a:b7:d0:77:9d:9a:a6:ad:c6: 15:81:df:c8:c2:2d:b5:7f:c4:01:cc:f3:4a:f5:c1:a6:4c:0b: ca:43:d9:4b:32:32:fb:42:c5:c1:7e:d5:18:e2:66:7d:21:5e: 1f:c4:d0:40:d0:10:f2:a3:b9:d8:af:6c:64:6e:90:e2:18:23: 45:16:b9:68:5d:eb:a5:69:eb:f4:af:37:e4:e2:5d:98:a1:44: 8a:38:17:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY2MUMxMTAvBgNVBAUTKDNBODcyMTZDMTU5MjczQkY1MTkzNDdGQzFGRUU3MDYx OTVDQzJBRTYwHhcNMjUwNDI2MjE1ODM4WhcNMjUwNTAzMjE1ODM4WjAYMRYwFAYD VQQDEw02ODBkNTcwZS02MWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvwKZiBWaFI9Y7d/xGtuBu5+Ig8QrZAcxwBmpTTRhJIInE3ZTU7quJGetGIVm VS8MWCcyDBMtrDzsWE/k+VRm+82Mj5kMhVX9pMtbTakp8Eb7kq5OpCQabxXTlKwW +qviIy8MnwitEU9jXqFmxccL3pAsrPkmuepzP9Nmai3g2Qzd2pDFJXOIR4HPXWBj OqmUqPyy4B2OoUhH3IyA1w+moPUTv8z0H2A9Zhby820nbalHCksQD+OZhaJc36ZG zRKTP1/j2LzzaOHyYCc+UFBk9G5Fp0tITKOxIaqyUad9m+o1WrpYGDeOyEjg6Q4Y grU7jGBwbkMDbKMwlRzOs5OBvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBXntw5c 0OWjFM+rXMH7fCeTRO7+MB8GA1UdIwQYMBaAFDqHIWwVknO/UZNH/B/ucGGVzCrm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjYxQy9GNDU5Mjk5Mjcz NzIxMUVCOTQ3NUNBNURDNEY5QUUwMi9Pb2NoYkJXU2M3OVJrMGY4SC01d1laWE1L dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09vY2hiQldTYzc5UmswZjhILTV3WVpYTUt1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjYxQy9GNDU5Mjk5MjczNzIxMUVCOTQ3NUNBNURDNEY5QUUwMi9Pb2NoYkJXU2M3 OVJrMGY4SC01d1laWE1LdVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2jGGtY9U7uljT+1X4NUudmbqe94Hpwrq9oDcTHbXBOu1UxDMqcL7m kbS/T6AOP3xv/1SoQ828fX8EKf8op5mhE/oWxOUpwLJ6fpGYt/t4gYQY5jfwJNH1 pftaupR+gC766XIuTFUXSBbFF6dA9ErSNcP2mKjLJHKFcWV7nxOA6TGkixvgWDZi S1Yz0hFaQPTwRsST/DYfArceGnUjirnxmehtZGvtMchlGSKKt9B3nZqmrcYVgd/I wi21f8QBzPNK9cGmTAvKQ9lLMjL7QsXBftUY4mZ9IV4fxNBA0BDyo7nYr2xkbpDi GCNFFrloXeulaev0rzfk4l2YoUSKOBcf -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:10 2025 by rpki-client on console.sobornost.net