$ rpki-client -vvf rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft File: o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft (raw, json) Hash identifier: X+Ce2IPJHyfJs/GWgZ7PauJWQ5V2Lsh4bF2ufbv8YZM= Subject key identifier: 7F:F1:A2:11:F2:55:EF:27:8F:37:EF:E1:13:3A:4A:C2:25:D5:D5:CB Authority key identifier: A3:47:1C:31:53:3B:88:D1:BF:8A:40:A3:2A:7D:DE:3B:A0:BB:1C:BF Certificate issuer: /CN=A91C913E/serialNumber=A3471C31533B88D1BF8A40A32A7DDE3BA0BB1CBF Certificate serial: 0321 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft Manifest number: 031C Signing time: Sun 27 Apr 2025 00:48:39 +0000 Manifest this update: Sun 27 Apr 2025 00:48:38 +0000 Manifest next update: Sun 04 May 2025 00:48:38 +0000 Files and hashes: 1: o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl (hash: He+Dn7lqCb+wGRSqFOTxO9MLTuyM6b6o1l/XJgpdImE=) 2: 24578ECED56A11EFB764F716C4F9AE02.roa (hash: t5WMcFCD2OO+gp845WzQi07gNbar1uWW5UXsijptYhw=) 3: 1445557CC6C011EC9D09EF1DC4F9AE02.roa (hash: JL3deikXqirsZKv5Pglr4MkJVud4y4Ww4HTgjluu/lA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 00:48:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 801 (0x321) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C913E, serialNumber=A3471C31533B88D1BF8A40A32A7DDE3BA0BB1CBF Validity Not Before: Apr 27 00:48:38 2025 GMT Not After : May 4 00:48:38 2025 GMT Subject: CN=680d7ee7-c12b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:87:c3:92:64:73:40:ed:47:c6:0e:61:0b:72: 63:f9:5e:f6:1a:9e:07:df:b1:e5:0a:ee:83:47:cc: 09:1f:47:85:4e:1d:79:4f:55:c3:d1:c0:bc:21:11: fa:5f:b0:23:df:80:87:24:49:29:67:dd:15:6f:f3: f4:8e:72:d6:3a:01:a1:4d:d9:f3:88:c4:87:70:6c: 5a:2c:67:6d:a2:90:14:63:5f:ce:f2:31:e5:46:22: 64:6d:6f:4e:89:2b:88:29:e9:e4:e6:6f:3c:3e:64: f1:0e:9f:b4:9c:b0:5c:01:03:ec:76:40:4f:48:b5: c0:3b:0f:ca:77:ea:53:8a:e4:3a:eb:f4:05:e2:91: 5c:eb:05:99:ba:b8:91:aa:2f:ec:a2:b0:d4:37:3b: 86:ef:13:a2:96:37:84:6a:56:0b:d5:c3:84:1a:b0: de:f7:1e:05:87:b3:94:54:45:22:69:22:26:d5:90: 9b:80:2b:76:eb:11:2f:ea:d7:c5:65:63:ac:3c:ac: cf:af:3a:09:0c:12:cb:c8:35:02:8f:09:fe:ab:50: 71:e7:8e:2e:e2:01:33:03:38:b4:c2:60:3c:b1:2c: 42:ce:fb:cc:fe:73:fd:7f:4d:46:d6:d2:aa:7f:82: 5a:b3:a9:e7:e6:2a:86:65:14:4b:b3:cb:ea:42:29: 44:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:F1:A2:11:F2:55:EF:27:8F:37:EF:E1:13:3A:4A:C2:25:D5:D5:CB X509v3 Authority Key Identifier: keyid:A3:47:1C:31:53:3B:88:D1:BF:8A:40:A3:2A:7D:DE:3B:A0:BB:1C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:24:8e:84:48:08:f6:98:f6:87:58:e7:10:da:2a:12:da:f6: d4:cb:ba:79:41:f2:ac:9b:20:02:c4:e0:76:2f:bf:cd:85:ab: b4:cb:98:06:90:d3:59:65:9b:48:80:e8:d6:68:d9:23:57:1e: dd:f4:bd:0c:66:56:a8:6d:67:b6:32:4a:e5:af:37:56:6b:a6: 08:6e:05:68:b8:4f:47:7d:c1:54:a2:97:83:1f:1f:a5:bc:d8: c7:20:d4:89:ea:9c:f9:50:ae:6c:2c:31:ed:20:2f:d6:35:c3: cc:ae:62:b9:91:d6:a1:e1:11:3b:dd:24:1c:e7:7d:65:e1:db: 8d:74:44:e1:a2:c8:96:c3:b8:a1:33:47:d9:fe:da:7e:0f:05: 77:1f:4f:84:27:d1:c2:b9:52:44:33:34:78:71:6c:17:13:dd: a9:44:3e:66:47:6e:ac:88:2e:c1:05:ba:c5:b2:de:57:79:97: fa:9c:44:95:0d:7b:5b:56:05:85:85:90:2c:b1:a3:1e:d6:d2: 23:50:af:f7:b0:5c:08:b5:47:08:d9:29:ec:c7:2f:9a:26:53: 66:53:48:42:04:8f:0a:cf:e0:03:60:77:a5:fd:4b:de:2a:5c: 79:c1:e8:2a:eb:73:c2:e4:0c:29:e4:76:70:3d:4d:2c:7d:2b: 77:f2:17:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkxM0UxMTAvBgNVBAUTKEEzNDcxQzMxNTMzQjg4RDFCRjhBNDBBMzJBN0RERTNC QTBCQjFDQkYwHhcNMjUwNDI3MDA0ODM4WhcNMjUwNTA0MDA0ODM4WjAYMRYwFAYD VQQDEw02ODBkN2VlNy1jMTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmIfDkmRzQO1Hxg5hC3Jj+V72Gp4H37HlCu6DR8wJH0eFTh15T1XD0cC8IRH6 X7Aj34CHJEkpZ90Vb/P0jnLWOgGhTdnziMSHcGxaLGdtopAUY1/O8jHlRiJkbW9O iSuIKenk5m88PmTxDp+0nLBcAQPsdkBPSLXAOw/Kd+pTiuQ66/QF4pFc6wWZuriR qi/sorDUNzuG7xOiljeEalYL1cOEGrDe9x4Fh7OUVEUiaSIm1ZCbgCt26xEv6tfF ZWOsPKzPrzoJDBLLyDUCjwn+q1Bx544u4gEzAzi0wmA8sSxCzvvM/nP9f01G1tKq f4Jas6nn5iqGZRRLs8vqQilEUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH/xohHy Ve8njzfv4RM6SsIl1dXLMB8GA1UdIwQYMBaAFKNHHDFTO4jRv4pAoyp93juguxy/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTEzRS9ERDA4OThGMEM2 QkQxMUVDODk2Mzc0MURDNEY5QUUwMi9vMGNjTVZNN2lOR19pa0NqS24zZU82QzdI TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28wY2NNVk03aU5HX2lrQ2pLbjNlTzZDN0hMOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTEzRS9ERDA4OThGMEM2QkQxMUVDODk2Mzc0MURDNEY5QUUwMi9vMGNjTVZNN2lO R19pa0NqS24zZU82QzdITDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+JI6ESAj2mPaHWOcQ2ioS2vbUy7p5QfKsmyACxOB2L7/Nhau0y5gG kNNZZZtIgOjWaNkjVx7d9L0MZlaobWe2MkrlrzdWa6YIbgVouE9HfcFUopeDHx+l vNjHINSJ6pz5UK5sLDHtIC/WNcPMrmK5kdah4RE73SQc531l4duNdEThosiWw7ih M0fZ/tp+DwV3H0+EJ9HCuVJEMzR4cWwXE92pRD5mR26siC7BBbrFst5XeZf6nESV DXtbVgWFhZAssaMe1tIjUK/3sFwItUcI2Snsxy+aJlNmU0hCBI8Kz+ADYHel/Uve Klx5wegq63PC5Awp5HZwPU0sfSt38hc4 -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:11 2025 by rpki-client on console.sobornost.net