$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/ho7LZCXagzKIkuV7sN9kThrrc7M.mft File: ho7LZCXagzKIkuV7sN9kThrrc7M.mft (raw, json) Hash identifier: omKd/7e1NLISSQlAAmeIFQBUYzG8m0cYZvEdsZDmOiM= Subject key identifier: 4D:AF:51:8F:49:A1:AC:49:56:C7:E4:A1:4A:1B:AE:92:71:76:EE:8A Authority key identifier: 86:8E:CB:64:25:DA:83:32:88:92:E5:7B:B0:DF:64:4E:1A:EB:73:B3 Certificate issuer: /CN=A91C9945/serialNumber=868ECB6425DA83328892E57BB0DF644E1AEB73B3 Certificate serial: 02EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho7LZCXagzKIkuV7sN9kThrrc7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/ho7LZCXagzKIkuV7sN9kThrrc7M.mft Manifest number: 02C8 Signing time: Sun 27 Apr 2025 01:05:57 +0000 Manifest this update: Sun 27 Apr 2025 01:05:57 +0000 Manifest next update: Sun 04 May 2025 01:05:57 +0000 Files and hashes: 1: ho7LZCXagzKIkuV7sN9kThrrc7M.crl (hash: 3VjbuKS8wgzG/uOMy2cq1AqIyWQohA9EpXu+zHJjL0w=) 2: 5C7085CA929811ED9C3F4163C4F9AE02.roa (hash: jre2vqEbptB4xJwOL59Axq+r7br5KETLkmyJEM9TLFk=) 3: 2E73B40089CA11EF9D45F344C4F9AE02.roa (hash: AC9qL1JmCHG5dg0vjJNKY7KJG1pWhEheRkBl8uBeh7M=) 4: D40753E8F6C411EEAFF62079C4F9AE02.roa (hash: 7rGtfoGtmNjkgpBebj5AN23TDyFs8EyElxm7Ay6opxU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/ho7LZCXagzKIkuV7sN9kThrrc7M.crl rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/ho7LZCXagzKIkuV7sN9kThrrc7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho7LZCXagzKIkuV7sN9kThrrc7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 01:05:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 746 (0x2ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9945, serialNumber=868ECB6425DA83328892E57BB0DF644E1AEB73B3 Validity Not Before: Apr 27 01:05:57 2025 GMT Not After : May 4 01:05:57 2025 GMT Subject: CN=680d82f5-5b82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:de:8f:ca:9d:97:db:46:3d:04:40:64:a2:36: 41:6e:6e:d7:95:a0:04:55:87:d0:20:b1:dd:0e:2f: 9c:2c:0c:c2:6d:d1:23:f2:54:2f:64:6c:22:48:61: 6b:60:04:79:66:b4:04:c0:be:3d:06:d6:f7:2f:c9: 2a:5d:ed:64:1f:5f:22:9d:61:d7:54:92:0c:a2:45: d5:17:94:a9:93:e9:63:6b:9b:51:81:7c:81:fe:31: 99:7f:1e:08:90:71:00:0a:2c:2b:ce:31:76:f3:ef: ed:c0:81:f0:30:dc:0e:9e:33:c4:ed:24:d0:6f:40: d9:0c:31:44:81:3a:e1:7e:6c:b8:84:59:48:75:ac: aa:24:16:5f:91:43:97:de:6a:ce:76:58:21:a4:4a: 9c:67:5c:a5:70:7b:50:06:6a:e0:bb:82:09:b4:b9: a5:39:9e:5e:0a:af:57:54:ab:55:cc:ff:ea:e0:1a: 12:aa:0c:15:87:45:d9:69:6b:3c:e7:51:c3:25:af: 84:3b:61:a2:67:45:c0:63:b4:5c:45:e8:e4:6a:da: 2d:d3:4c:c3:ba:7c:85:33:8b:4e:f9:bd:b7:f9:64: 3d:fe:42:4a:ac:ae:28:5b:51:bd:f4:a9:f3:26:ef: ce:a8:87:4d:3d:2b:55:36:14:c4:bc:e3:4c:84:b9: eb:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:AF:51:8F:49:A1:AC:49:56:C7:E4:A1:4A:1B:AE:92:71:76:EE:8A X509v3 Authority Key Identifier: keyid:86:8E:CB:64:25:DA:83:32:88:92:E5:7B:B0:DF:64:4E:1A:EB:73:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/ho7LZCXagzKIkuV7sN9kThrrc7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho7LZCXagzKIkuV7sN9kThrrc7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/ho7LZCXagzKIkuV7sN9kThrrc7M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:e3:3b:b0:4d:43:81:45:52:85:a5:bb:aa:4d:0d:70:79:a2: ad:9d:f1:15:36:14:d0:67:6c:ec:82:9c:2a:6d:2c:8b:45:a0: 6b:f4:b3:f8:ff:0f:b4:86:04:03:06:9e:e4:dd:65:02:d4:c3: ed:52:84:49:d2:a1:73:31:33:11:3e:09:a2:70:e6:60:4b:02: ec:f8:ba:0a:18:c2:97:6c:c9:28:1f:b6:be:20:17:c6:d0:3f: 7c:5a:5f:09:cd:1f:08:d5:86:15:2e:d5:50:0c:da:d4:90:db: 82:ba:3f:03:ba:0e:3f:35:7e:89:e5:d5:58:37:eb:77:fb:45: ac:c7:d0:45:c8:e5:ce:05:b9:f5:30:d8:6f:9f:38:3d:e4:ff: 2e:e9:fa:8d:03:d9:e7:29:ac:2a:8d:29:22:cd:22:dc:6d:e8: 92:60:77:54:0e:bb:33:b3:d7:de:bb:2a:6e:6b:82:ec:73:80: 6b:b3:65:62:db:b8:b3:e3:b9:6f:ef:64:6c:00:7e:48:f5:30: 2c:03:85:0e:5c:78:7f:61:87:fe:66:d1:58:a1:6d:85:e5:9f: 89:5e:e2:96:d0:7f:ee:72:41:7d:ba:c3:5e:52:00:7b:4d:b7: da:c9:69:6c:79:c4:f1:5f:5e:ad:32:4f:c1:dd:4d:4e:b0:07: 73:01:08:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAuowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk5NDUxMTAvBgNVBAUTKDg2OEVDQjY0MjVEQTgzMzI4ODkyRTU3QkIwREY2NDRF MUFFQjczQjMwHhcNMjUwNDI3MDEwNTU3WhcNMjUwNTA0MDEwNTU3WjAYMRYwFAYD VQQDEw02ODBkODJmNS01YjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5N6Pyp2X20Y9BEBkojZBbm7XlaAEVYfQILHdDi+cLAzCbdEj8lQvZGwiSGFr YAR5ZrQEwL49Btb3L8kqXe1kH18inWHXVJIMokXVF5Spk+lja5tRgXyB/jGZfx4I kHEACiwrzjF28+/twIHwMNwOnjPE7STQb0DZDDFEgTrhfmy4hFlIdayqJBZfkUOX 3mrOdlghpEqcZ1ylcHtQBmrgu4IJtLmlOZ5eCq9XVKtVzP/q4BoSqgwVh0XZaWs8 51HDJa+EO2GiZ0XAY7RcRejkatot00zDunyFM4tO+b23+WQ9/kJKrK4oW1G99Knz Ju/OqIdNPStVNhTEvONMhLnrIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE2vUY9J oaxJVsfkoUobrpJxdu6KMB8GA1UdIwQYMBaAFIaOy2Ql2oMyiJLle7DfZE4a63Oz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTk0NS9CQzAwQzhGMkYw OUUxMUVDQUVFNzNFMTlDNEY5QUUwMi9obzdMWkNYYWd6S0lrdVY3c045a1RocnJj N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hvN0xaQ1hhZ3pLSWt1VjdzTjlrVGhycmM3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTk0NS9CQzAwQzhGMkYwOUUxMUVDQUVFNzNFMTlDNEY5QUUwMi9obzdMWkNYYWd6 S0lrdVY3c045a1RocnJjN00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBd4zuwTUOBRVKFpbuqTQ1weaKtnfEVNhTQZ2zsgpwqbSyLRaBr9LP4 /w+0hgQDBp7k3WUC1MPtUoRJ0qFzMTMRPgmicOZgSwLs+LoKGMKXbMkoH7a+IBfG 0D98Wl8JzR8I1YYVLtVQDNrUkNuCuj8Dug4/NX6J5dVYN+t3+0Wsx9BFyOXOBbn1 MNhvnzg95P8u6fqNA9nnKawqjSkizSLcbeiSYHdUDrszs9feuypua4Lsc4Brs2Vi 27iz47lv72RsAH5I9TAsA4UOXHh/YYf+ZtFYoW2F5Z+JXuKW0H/uckF9usNeUgB7 TbfayWlsecTxX16tMk/B3U1OsAdzAQhp -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:11 2025 by rpki-client on console.sobornost.net