$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft File: _0lSk8tfFeXRS6zC2xBSsuLIJcg.mft (raw, json) Hash identifier: OPIb1uqa643TQ7K38DP3OS7ZPuWN8vkJ3niU9CnlOqo= Subject key identifier: 1B:19:B3:84:D2:78:31:57:BD:11:85:01:EE:B7:03:26:C4:5D:95:BD Authority key identifier: FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8 Certificate issuer: /CN=A91CEAA2/serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8 Certificate serial: 34A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft Manifest number: 348D Signing time: Thu 24 Apr 2025 14:55:01 +0000 Manifest this update: Thu 24 Apr 2025 14:55:01 +0000 Manifest next update: Thu 01 May 2025 14:55:01 +0000 Files and hashes: 1: _0lSk8tfFeXRS6zC2xBSsuLIJcg.crl (hash: btC71qpsP3aN/ITNxli8rDzn9AzLF/+h63r0xXoHrrg=) 2: 767E7B3CA60211EFBFCDB65FC4F9AE02.roa (hash: sDAVT78GpTIvV3Pk7DGbULa+i4kn7uu7qVMnxNmpH28=) 3: B2306182F3F911EAB9D11D26C4F9AE02.roa (hash: XuAw72l1y8+xZhjG02bLa91Tpql6DxMPw1rT8RJ+tTY=) 4: 0DEF13D4FC1711EC919B6757C4F9AE02.roa (hash: ZplEo/zP0jHGZr0dLBLSTaxCxcoclbSDg8qfGUwBkSQ=) 5: 75906378FC1F11ECAD09AF21C4F9AE02.roa (hash: KUnun5lZEQw4kuW5EOrvbt/fHn0giqX+CGkWFRK4Ts8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:55:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13479 (0x34a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEAA2, serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8 Validity Not Before: Apr 24 14:55:01 2025 GMT Not After : May 1 14:55:01 2025 GMT Subject: CN=680a50c5-fc3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:87:15:f0:d3:d1:07:74:e0:7d:cf:22:86:c4: a1:02:e6:7a:cf:82:9f:f1:9f:c9:1b:6b:95:ba:bc: 69:54:7c:43:a0:e8:36:97:5d:22:99:b7:e7:ca:21: 37:12:d0:70:11:1f:88:38:b7:cd:aa:6b:37:d8:0f: 2f:8a:46:e1:d7:df:db:3f:27:85:6e:f4:c2:fc:d5: d9:b7:9d:c2:44:d9:f9:f9:79:47:bb:bf:c2:f1:d7: 2a:63:46:2f:5f:6d:77:cb:fd:99:02:6b:c4:07:07: ef:d7:5b:12:cf:00:72:fc:28:c5:6a:1d:1a:96:90: c7:21:e0:a4:f5:57:b6:f4:e3:a4:3b:21:f4:4d:aa: 13:c0:e2:a3:1c:fb:df:91:7c:c4:92:82:c4:ae:e3: 0e:af:e8:4c:f6:35:28:e7:02:aa:b5:3d:53:db:cb: d7:fb:71:96:a4:98:44:3b:7d:8e:8e:0e:ef:d1:58: fa:68:36:5d:68:ea:f5:2c:73:07:21:55:da:b0:0e: 4a:2c:15:4b:cb:54:7d:99:2a:58:53:cd:1f:79:38: 80:b2:3f:ec:02:35:0b:35:5d:b8:c4:df:67:74:69: f2:11:13:f2:c6:f2:a5:5a:34:42:f3:b6:dd:9d:98: ea:f5:af:12:36:f4:13:ee:00:60:fc:5f:fd:95:4a: 0e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:19:B3:84:D2:78:31:57:BD:11:85:01:EE:B7:03:26:C4:5D:95:BD X509v3 Authority Key Identifier: keyid:FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:d8:4b:78:a1:3b:17:fc:be:e2:81:da:4e:0f:6a:7e:03:2e: 42:c9:52:64:df:50:a7:06:4a:66:da:cc:71:8a:cb:41:52:46: 21:61:dc:81:06:0b:a8:68:02:e6:17:0b:47:21:f9:27:36:9b: df:6a:8b:7c:a4:7f:97:30:ff:64:45:b8:36:29:43:81:8b:5b: 2f:47:3a:cc:34:40:e4:6e:24:c8:f4:d3:7a:33:ae:03:cd:e0: 8b:18:0c:25:46:ff:1a:6a:40:3d:b6:3a:e4:46:98:02:05:fc: 7c:f5:b4:64:a4:4f:87:5f:46:84:e5:34:72:74:d4:51:27:1f: 28:7e:8e:a8:30:f7:cd:46:8e:44:8e:60:d6:e6:42:e8:24:e3: 9b:6a:21:7f:7d:e7:6b:56:3e:80:60:18:a4:c6:44:5e:98:46: 18:db:f1:47:72:2b:0b:fc:4f:72:c6:dc:fc:ba:bf:cc:96:94: 27:b8:d9:0a:c8:b7:66:3c:f2:d5:4e:93:d7:4e:2a:72:ba:38: 1f:54:a7:64:fe:a7:1b:8f:08:02:af:be:b7:07:77:03:30:d2: b3:45:ab:d4:0a:24:5b:7f:2c:ea:00:c6:d7:e0:d0:ea:91:d7: c8:fe:02:bf:b5:83:48:5f:8d:2e:6e:f4:4f:0b:d9:e0:28:e2: 59:66:64:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VBQTIxMTAvBgNVBAUTKEZGNDk1MjkzQ0I1RjE1RTVEMTRCQUNDMkRCMTA1MkIy RTJDODI1QzgwHhcNMjUwNDI0MTQ1NTAxWhcNMjUwNTAxMTQ1NTAxWjAYMRYwFAYD VQQDEw02ODBhNTBjNS1mYzNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4IcV8NPRB3Tgfc8ihsShAuZ6z4Kf8Z/JG2uVurxpVHxDoOg2l10imbfnyiE3 EtBwER+IOLfNqms32A8vikbh19/bPyeFbvTC/NXZt53CRNn5+XlHu7/C8dcqY0Yv X213y/2ZAmvEBwfv11sSzwBy/CjFah0alpDHIeCk9Ve29OOkOyH0TaoTwOKjHPvf kXzEkoLEruMOr+hM9jUo5wKqtT1T28vX+3GWpJhEO32Ojg7v0Vj6aDZdaOr1LHMH IVXasA5KLBVLy1R9mSpYU80feTiAsj/sAjULNV24xN9ndGnyERPyxvKlWjRC87bd nZjq9a8SNvQT7gBg/F/9lUoO1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBsZs4TS eDFXvRGFAe63AybEXZW9MB8GA1UdIwQYMBaAFP9JUpPLXxXl0UuswtsQUrLiyCXI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUFBMi9EMkFCMjkyQzFE OTkxMUUyQkE1MjlBODYwOEIwMkNEMi9fMGxTazh0ZkZlWFJTNnpDMnhCU3N1TElK Y2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18wbFNrOHRmRmVYUlM2ekMyeEJTc3VMSUpjZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUFBMi9EMkFCMjkyQzFEOTkxMUUyQkE1MjlBODYwOEIwMkNEMi9fMGxTazh0ZkZl WFJTNnpDMnhCU3N1TElKY2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB42Et4oTsX/L7igdpOD2p+Ay5CyVJk31CnBkpm2sxxistBUkYhYdyB BguoaALmFwtHIfknNpvfaot8pH+XMP9kRbg2KUOBi1svRzrMNEDkbiTI9NN6M64D zeCLGAwlRv8aakA9tjrkRpgCBfx89bRkpE+HX0aE5TRydNRRJx8ofo6oMPfNRo5E jmDW5kLoJOObaiF/fedrVj6AYBikxkRemEYY2/FHcisL/E9yxtz8ur/MlpQnuNkK yLdmPPLVTpPXTipyujgfVKdk/qcbjwgCr763B3cDMNKzRavUCiRbfyzqAMbX4NDq kdfI/gK/tYNIX40ubvRPC9ngKOJZZmQv -----END CERTIFICATE-----Generated at Thu Apr 24 18:09:23 2025 by rpki-client on console.sobornost.net