$ rpki-client -vvf rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft File: 4OynvFsloMo3TZqDzEz5DdbPIgk.mft (raw, json) Hash identifier: ex1Pfv+g2iAAeupieBdR1f9Bw8OMUa1cYuQpyZh0z9w= Subject key identifier: 11:E9:3D:25:A9:D7:EE:00:F8:C9:E3:08:99:C6:99:12:CB:8F:BD:38 Authority key identifier: E0:EC:A7:BC:5B:25:A0:CA:37:4D:9A:83:CC:4C:F9:0D:D6:CF:22:09 Certificate issuer: /CN=A91C74B5/serialNumber=E0ECA7BC5B25A0CA374D9A83CC4CF90DD6CF2209 Certificate serial: 0156 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft Manifest number: 0148 Signing time: Sun 27 Apr 2025 03:15:08 +0000 Manifest this update: Sun 27 Apr 2025 03:15:08 +0000 Manifest next update: Sun 04 May 2025 03:15:08 +0000 Files and hashes: 1: 4OynvFsloMo3TZqDzEz5DdbPIgk.crl (hash: SPqRh6p+Q2LvO0IwWwD1XnTmPf3lX4SglR6mAU0eHpc=) 2: FBCA5E628A4E11EE8EFFA44BC4F9AE02.roa (hash: n7d+wfVovpgFh/VPuHK0Be+tZJiAokXkxVBH6z58Cdo=) 3: 23E0203034AF11EE90E6263DC4F9AE02.roa (hash: qRwojUTlxnLhuw/Mk800h2tw73R4wHeoNMLoVaIWLSQ=) 4: FE53F0DE34AA11EE85FF0735C4F9AE02.roa (hash: FSryM40tOFsx9/9SakfMh/QfDHk+qmxC9WGqNR/nxQA=) 5: 2343647034AF11EE90E6263DC4F9AE02.roa (hash: O7wU5uPOsDFh8TlK1r/cSTqhuO+kftwlxz4zNibCfJw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.crl rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 342 (0x156) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C74B5, serialNumber=E0ECA7BC5B25A0CA374D9A83CC4CF90DD6CF2209 Validity Not Before: Apr 27 03:15:08 2025 GMT Not After : May 4 03:15:08 2025 GMT Subject: CN=680da13c-b1fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:da:e6:53:fb:16:2d:98:56:e5:4d:22:d4:55: 7b:c2:7e:14:a1:47:e9:1a:04:c8:18:76:9d:0f:86: 65:64:a3:5a:14:0e:f1:19:78:d7:20:2f:36:ba:82: 4b:72:60:d7:75:72:62:6f:18:6b:18:3b:17:8b:14: 95:a4:a0:cf:8e:2c:73:0f:ac:d7:f2:44:cb:2c:28: 0c:61:32:17:7a:86:bd:82:48:2d:bc:53:eb:79:1a: 93:5b:9a:67:23:26:e2:55:b6:88:f3:c2:8e:8b:96: 69:db:99:25:38:d2:e9:9b:34:3f:8a:dc:dc:78:73: 6b:bc:1c:f0:81:89:67:fa:08:ad:8e:d3:0c:b0:db: de:f6:a0:11:ee:11:ec:30:d6:50:21:6f:d3:8c:a7: 26:ba:a8:55:1a:42:19:2b:d6:df:8b:23:6a:8f:22: 3c:0b:b8:d6:f7:b2:29:3f:3d:7a:c7:28:de:14:a9: 6c:a4:46:7d:f9:73:29:18:76:f9:36:ea:5a:29:c2: 2c:e4:e4:29:ca:48:3f:a4:bf:84:f1:8d:e6:f2:41: 1e:7f:18:e8:31:18:5d:c1:d1:e1:6e:c1:52:45:c3: 7c:b6:3a:7b:f9:62:5b:7c:01:4d:f7:12:d2:13:23: 5f:a1:0c:d2:e9:7e:d8:28:6e:5d:f6:71:48:48:38: 69:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:E9:3D:25:A9:D7:EE:00:F8:C9:E3:08:99:C6:99:12:CB:8F:BD:38 X509v3 Authority Key Identifier: keyid:E0:EC:A7:BC:5B:25:A0:CA:37:4D:9A:83:CC:4C:F9:0D:D6:CF:22:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:12:6f:04:20:3a:0f:76:47:72:33:99:0f:a8:36:d6:b5:e6: 28:b0:94:f7:44:1e:52:4f:68:03:6c:0f:f8:11:d2:3a:99:c4: 4c:24:96:10:c6:48:4d:e2:cb:47:0a:9d:3a:5d:5f:cd:d3:9b: f5:76:b4:c6:d0:ab:71:07:d0:3a:b5:2c:1b:0f:33:27:b9:ce: a4:76:30:06:af:39:f3:73:9e:21:de:df:48:1d:87:34:9e:b9: 8e:6b:83:1d:67:84:0c:34:81:4e:8e:4d:6b:a5:29:9d:4f:39: e8:ba:ec:ee:9d:b3:25:5e:f0:eb:d9:e0:0e:e1:2b:f3:af:c0: d7:69:92:70:b6:ca:02:78:84:09:64:bf:90:23:9e:45:b6:fb: ae:9b:99:f9:9d:9b:c2:be:ca:5b:b3:cf:11:a9:d7:66:1b:dd: 1c:12:70:1e:b0:8f:5f:43:a9:78:88:95:d0:1b:46:24:05:b6: 46:ac:c3:5d:f5:55:59:ad:03:24:28:0e:58:c6:88:87:27:83: f0:a8:e0:cb:9d:4d:69:fd:ab:f3:4c:db:a9:cb:b8:6f:ee:c3: e6:3c:1c:7c:f9:08:8e:41:9b:45:8d:f0:10:e9:18:9e:4a:a7: 44:61:26:d3:c9:51:e5:3c:4b:d5:f4:ae:e6:30:5d:b7:78:25: 42:a0:f8:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc0QjUxMTAvBgNVBAUTKEUwRUNBN0JDNUIyNUEwQ0EzNzREOUE4M0NDNENGOTBE RDZDRjIyMDkwHhcNMjUwNDI3MDMxNTA4WhcNMjUwNTA0MDMxNTA4WjAYMRYwFAYD VQQDEw02ODBkYTEzYy1iMWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAztrmU/sWLZhW5U0i1FV7wn4UoUfpGgTIGHadD4ZlZKNaFA7xGXjXIC82uoJL cmDXdXJibxhrGDsXixSVpKDPjixzD6zX8kTLLCgMYTIXeoa9gkgtvFPreRqTW5pn IybiVbaI88KOi5Zp25klONLpmzQ/itzceHNrvBzwgYln+gitjtMMsNve9qAR7hHs MNZQIW/TjKcmuqhVGkIZK9bfiyNqjyI8C7jW97IpPz16xyjeFKlspEZ9+XMpGHb5 NupaKcIs5OQpykg/pL+E8Y3m8kEefxjoMRhdwdHhbsFSRcN8tjp7+WJbfAFN9xLS EyNfoQzS6X7YKG5d9nFISDhp7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBHpPSWp 1+4A+MnjCJnGmRLLj704MB8GA1UdIwQYMBaAFODsp7xbJaDKN02ag8xM+Q3WzyIJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzRCNS85ODA0MzU2RTM0 QUExMUVFQTA2QUUxMzNDNEY5QUUwMi80T3ludkZzbG9NbzNUWnFEekV6NURkYlBJ Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRPeW52RnNsb01vM1RacUR6RXo1RGRiUElnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzRCNS85ODA0MzU2RTM0QUExMUVFQTA2QUUxMzNDNEY5QUUwMi80T3ludkZzbG9N bzNUWnFEekV6NURkYlBJZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFEm8EIDoPdkdyM5kPqDbWteYosJT3RB5ST2gDbA/4EdI6mcRMJJYQ xkhN4stHCp06XV/N05v1drTG0KtxB9A6tSwbDzMnuc6kdjAGrznzc54h3t9IHYc0 nrmOa4MdZ4QMNIFOjk1rpSmdTznouuzunbMlXvDr2eAO4Svzr8DXaZJwtsoCeIQJ ZL+QI55Ftvuum5n5nZvCvspbs88RqddmG90cEnAesI9fQ6l4iJXQG0YkBbZGrMNd 9VVZrQMkKA5YxoiHJ4PwqODLnU1p/avzTNupy7hv7sPmPBx8+QiOQZtFjfAQ6Rie SqdEYSbTyVHlPEvV9K7mMF23eCVCoPgP -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:10 2025 by rpki-client on console.sobornost.net