$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.mft File: woS6ioigIRa-5DQQ4DnpCeMCnQ0.mft (raw, json) Hash identifier: 3kD7KExBaO4RBvE0yZ8aXCLPsMRC42LeIAZBqJk2DS8= Subject key identifier: BE:C4:C2:9F:38:5D:E7:51:F5:E9:BD:1A:77:67:5D:62:3E:CF:EE:CD Authority key identifier: C2:84:BA:8A:88:A0:21:16:BE:E4:34:10:E0:39:E9:09:E3:02:9D:0D Certificate issuer: /CN=A91C7B68/serialNumber=C284BA8A88A02116BEE43410E039E909E3029D0D Certificate serial: 0900 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woS6ioigIRa-5DQQ4DnpCeMCnQ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.mft Manifest number: 09B5 Signing time: Sat 26 Apr 2025 20:14:36 +0000 Manifest this update: Sat 26 Apr 2025 20:14:35 +0000 Manifest next update: Sat 03 May 2025 20:14:35 +0000 Files and hashes: 1: woS6ioigIRa-5DQQ4DnpCeMCnQ0.crl (hash: 28RXRmTI6jKVJcdhLBDyCqaWP0r9TRMnQ1eLxsItvcE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.crl rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woS6ioigIRa-5DQQ4DnpCeMCnQ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2304 (0x900) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7B68, serialNumber=C284BA8A88A02116BEE43410E039E909E3029D0D Validity Not Before: Apr 26 20:14:35 2025 GMT Not After : May 3 20:14:35 2025 GMT Subject: CN=680d3eac-6814 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:43:8c:78:a6:9d:cd:a1:6f:74:38:2d:c8:35: eb:b1:92:86:25:d3:54:fc:7c:fb:d8:ec:42:ed:26: 88:b3:ca:bf:0a:e7:00:aa:ba:ee:0d:18:7e:b4:55: 76:61:b2:a0:68:e4:ca:1e:b9:03:1c:7a:f4:17:65: 4a:63:a7:8f:cd:2e:6a:26:13:4a:fd:72:64:10:7d: 8a:54:63:32:43:5b:65:cd:87:a6:9e:48:ed:22:1e: dc:9f:21:72:3c:90:8f:01:75:42:29:42:59:dd:e2: 0d:e7:41:3b:81:ad:16:01:b1:59:a9:a5:97:38:22: 74:9a:aa:73:84:9a:4a:bc:1c:35:06:f3:06:d4:9c: ed:af:28:d9:21:07:09:43:cd:4c:93:6f:02:4b:1d: 82:e9:83:f8:2d:82:59:01:e7:f6:95:a3:37:11:b5: 91:20:4d:57:ab:f2:1f:aa:01:31:3d:b2:05:a2:84: 31:08:d6:d6:fc:e4:ad:b4:34:d1:5d:6d:87:5a:21: 16:5a:6e:7d:b9:5a:38:28:2b:82:0b:49:98:10:71: fd:8e:46:e7:66:53:55:b2:0b:30:7f:28:6d:bd:fb: 26:9b:2e:79:8b:bf:ae:86:cf:2f:d4:1c:2b:d8:5e: 6c:f0:9b:fd:20:d2:94:38:8c:ee:bf:2b:71:f2:8c: b6:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:C4:C2:9F:38:5D:E7:51:F5:E9:BD:1A:77:67:5D:62:3E:CF:EE:CD X509v3 Authority Key Identifier: keyid:C2:84:BA:8A:88:A0:21:16:BE:E4:34:10:E0:39:E9:09:E3:02:9D:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woS6ioigIRa-5DQQ4DnpCeMCnQ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:89:5b:6b:9d:ba:14:6f:d1:a4:94:e1:96:75:22:ab:67:ec: 21:20:b9:e4:2a:da:d0:f3:dd:03:bb:b6:97:6b:c7:3c:90:18: 7d:f1:25:c0:d8:be:c2:ef:10:73:49:fe:ef:3a:99:b5:92:bb: a6:8a:67:41:2a:b1:aa:6e:04:87:51:89:30:99:72:35:61:54: ef:b0:fa:47:f9:4e:1e:de:d2:3f:05:78:25:83:43:c9:3b:e9: 0f:83:48:c1:1f:b8:0d:d0:96:84:41:df:33:47:f9:6f:62:3e: 6d:41:82:99:ff:9e:c3:43:5e:db:5f:3a:ba:0d:18:b3:8c:21: 47:0d:ed:d6:8b:01:8c:56:32:d1:fa:59:01:68:f8:41:38:0e: 7e:2d:76:0a:2d:9f:00:a3:07:5b:ec:0b:a3:75:e6:3f:43:34: f3:90:90:35:a4:5c:41:18:67:1d:9c:5b:9f:58:28:f1:d2:96: ff:02:ff:b0:a4:67:c8:bc:b7:2b:33:ba:ef:02:dc:d0:44:30: df:92:86:e1:08:2b:1c:68:91:50:96:ba:b3:59:3d:ca:ba:9c: 61:9e:bc:90:a5:1b:1c:5e:de:18:6f:2f:1e:2d:e5:15:2e:ee: f1:a9:d4:0d:35:09:9c:81:67:4c:da:96:12:54:76:f1:68:fa: 64:1d:21:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdCNjgxMTAvBgNVBAUTKEMyODRCQThBODhBMDIxMTZCRUU0MzQxMEUwMzlFOTA5 RTMwMjlEMEQwHhcNMjUwNDI2MjAxNDM1WhcNMjUwNTAzMjAxNDM1WjAYMRYwFAYD VQQDEw02ODBkM2VhYy02ODE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6EOMeKadzaFvdDgtyDXrsZKGJdNU/Hz72OxC7SaIs8q/CucAqrruDRh+tFV2 YbKgaOTKHrkDHHr0F2VKY6ePzS5qJhNK/XJkEH2KVGMyQ1tlzYemnkjtIh7cnyFy PJCPAXVCKUJZ3eIN50E7ga0WAbFZqaWXOCJ0mqpzhJpKvBw1BvMG1JztryjZIQcJ Q81Mk28CSx2C6YP4LYJZAef2laM3EbWRIE1Xq/IfqgExPbIFooQxCNbW/OSttDTR XW2HWiEWWm59uVo4KCuCC0mYEHH9jkbnZlNVsgswfyhtvfsmmy55i7+uhs8v1Bwr 2F5s8Jv9INKUOIzuvytx8oy2xQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL7Ewp84 XedR9em9GndnXWI+z+7NMB8GA1UdIwQYMBaAFMKEuoqIoCEWvuQ0EOA56QnjAp0N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0I2OC81M0E3QjkyQ0Iw QTUxMUVBOEY5MkVEMTdDNEY5QUUwMi93b1M2aW9pZ0lSYS01RFFRNERucENlTUNu UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dvUzZpb2lnSVJhLTVEUVE0RG5wQ2VNQ25RMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0I2OC81M0E3QjkyQ0IwQTUxMUVBOEY5MkVEMTdDNEY5QUUwMi93b1M2aW9pZ0lS YS01RFFRNERucENlTUNuUTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxiVtrnboUb9GklOGWdSKrZ+whILnkKtrQ890Du7aXa8c8kBh98SXA 2L7C7xBzSf7vOpm1krumimdBKrGqbgSHUYkwmXI1YVTvsPpH+U4e3tI/BXglg0PJ O+kPg0jBH7gN0JaEQd8zR/lvYj5tQYKZ/57DQ17bXzq6DRizjCFHDe3WiwGMVjLR +lkBaPhBOA5+LXYKLZ8Aowdb7AujdeY/QzTzkJA1pFxBGGcdnFufWCjx0pb/Av+w pGfIvLcrM7rvAtzQRDDfkobhCCscaJFQlrqzWT3KupxhnryQpRscXt4Yby8eLeUV Lu7xqdQNNQmcgWdM2pYSVHbxaPpkHSEB -----END CERTIFICATE-----Generated at Sun Apr 27 00:14:10 2025 by rpki-client on console.sobornost.net