$ rpki-client -vvf rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft File: ejg10bvhsbJcMWkZLSvc1xk6i8I.mft (raw, json) Hash identifier: Gege1Zy7FlkNBPOMFacpUSB2lrPcgzU1q0aaIgFj/GM= Subject key identifier: D9:EB:B3:E9:AD:F0:28:21:A2:06:95:5E:B4:5E:42:60:9C:9C:8C:5A Authority key identifier: 7A:38:35:D1:BB:E1:B1:B2:5C:31:69:19:2D:2B:DC:D7:19:3A:8B:C2 Certificate issuer: /CN=A91D03EE/serialNumber=7A3835D1BBE1B1B25C3169192D2BDCD7193A8BC2 Certificate serial: 0AE9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejg10bvhsbJcMWkZLSvc1xk6i8I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft Manifest number: 0ADA Signing time: Mon 28 Apr 2025 19:49:21 +0000 Manifest this update: Mon 28 Apr 2025 19:49:21 +0000 Manifest next update: Mon 05 May 2025 19:49:21 +0000 Files and hashes: 1: ejg10bvhsbJcMWkZLSvc1xk6i8I.crl (hash: VgLkoOZbH0Vepio8eyt7BsA9RR02KYmUxAHwGhm1CCc=) 2: 186A84C83A1811EBAF24B12EC4F9AE02.roa (hash: x6v+AqgjPFRVX68ne0JC+xRgXtO5WMJX4uQIZ5czHsE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.crl rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejg10bvhsbJcMWkZLSvc1xk6i8I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 19:49:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2793 (0xae9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D03EE, serialNumber=7A3835D1BBE1B1B25C3169192D2BDCD7193A8BC2 Validity Not Before: Apr 28 19:49:21 2025 GMT Not After : May 5 19:49:21 2025 GMT Subject: CN=680fdbc1-8180 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:47:bd:53:cf:b5:20:13:42:49:92:99:a1:a3: 8b:6d:59:ef:1a:87:76:9b:6a:04:b8:aa:97:10:22: db:08:5f:9e:22:45:28:8c:63:b7:1b:ae:b1:0a:17: e7:58:fc:2a:9a:12:d9:ec:64:c7:ed:cb:13:93:19: 1c:b4:ce:d8:e9:73:cf:b2:06:6e:98:8c:a3:09:00: 86:2b:06:aa:3a:0d:27:63:ac:6c:47:4a:4b:3b:2c: 2c:92:52:16:00:08:a6:89:e0:24:b1:5d:ce:8e:fc: 65:cc:ca:43:77:50:a4:c0:e3:d8:0f:e3:e1:c9:37: 89:f3:ac:fc:f1:b1:26:77:3a:98:8c:f7:01:5a:a1: e3:e2:d5:c7:8f:00:e5:b4:4c:dd:f3:3b:e2:95:04: cd:4f:13:6f:0e:1e:75:5f:1e:71:71:3d:5f:90:6c: fa:4d:0d:a8:e2:38:a9:56:1d:35:94:d3:fd:d6:d7: a5:62:9a:c9:d4:53:29:59:d6:94:ec:07:76:3b:7b: f4:0d:18:d9:7c:7b:9c:a9:b4:06:48:e5:d1:88:82: b7:4c:67:8e:db:e7:77:ee:9b:dc:c2:6f:e5:4a:63: e6:c9:a6:d5:b6:6f:5c:c0:7a:e2:44:b4:36:0c:78: af:82:94:5a:33:8e:94:c1:2e:05:a9:11:de:15:a7: bb:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:EB:B3:E9:AD:F0:28:21:A2:06:95:5E:B4:5E:42:60:9C:9C:8C:5A X509v3 Authority Key Identifier: keyid:7A:38:35:D1:BB:E1:B1:B2:5C:31:69:19:2D:2B:DC:D7:19:3A:8B:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejg10bvhsbJcMWkZLSvc1xk6i8I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:f9:3f:df:90:02:58:10:37:cd:c1:62:e8:3a:c3:8a:e6:90: 3e:9e:22:eb:dc:fb:ca:7f:c9:52:1b:de:af:15:fe:2a:3f:92: f1:58:21:3e:17:5f:fa:be:12:61:f9:fe:4c:ca:8f:b4:ff:ce: ea:13:08:22:d3:14:7c:00:f3:b4:71:a7:13:a0:60:97:4d:71: 9e:6b:80:d9:50:4d:7e:dd:97:fd:c8:08:23:42:26:53:7d:aa: b7:ed:f1:ea:35:dc:f2:12:81:73:35:b8:f2:5d:0e:0e:6a:6b: 30:bd:f9:a3:3d:84:89:bd:7c:30:71:41:0e:3d:af:11:85:2f: a0:3e:54:ce:19:09:75:e4:c7:24:7d:36:90:db:8c:a6:35:ff: 86:6e:23:04:8f:cc:6e:0c:4a:65:81:9b:bf:b5:0c:f8:e3:05: 51:2a:02:4c:fe:89:f6:43:f5:30:05:40:b7:b4:f7:17:30:9d: c3:75:44:8f:20:7c:38:b7:86:06:4c:36:9a:7b:8b:f4:7b:5e: e8:c6:cb:ff:3f:e6:73:52:b9:40:f3:cf:9e:c3:dc:a7:be:a3: 25:fb:2b:e0:e6:7b:f0:8c:27:23:30:71:3b:42:20:6f:b8:43: 2e:fc:06:ae:b4:95:94:07:04:94:a7:f7:00:17:97:a0:56:30: a5:b5:a8:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCukwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDAzRUUxMTAvBgNVBAUTKDdBMzgzNUQxQkJFMUIxQjI1QzMxNjkxOTJEMkJEQ0Q3 MTkzQThCQzIwHhcNMjUwNDI4MTk0OTIxWhcNMjUwNTA1MTk0OTIxWjAYMRYwFAYD VQQDEw02ODBmZGJjMS04MTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA20e9U8+1IBNCSZKZoaOLbVnvGod2m2oEuKqXECLbCF+eIkUojGO3G66xChfn WPwqmhLZ7GTH7csTkxkctM7Y6XPPsgZumIyjCQCGKwaqOg0nY6xsR0pLOywsklIW AAimieAksV3OjvxlzMpDd1CkwOPYD+PhyTeJ86z88bEmdzqYjPcBWqHj4tXHjwDl tEzd8zvilQTNTxNvDh51Xx5xcT1fkGz6TQ2o4jipVh01lNP91telYprJ1FMpWdaU 7Ad2O3v0DRjZfHucqbQGSOXRiIK3TGeO2+d37pvcwm/lSmPmyabVtm9cwHriRLQ2 DHivgpRaM46UwS4FqRHeFae7DQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNnrs+mt 8CghogaVXrReQmCcnIxaMB8GA1UdIwQYMBaAFHo4NdG74bGyXDFpGS0r3NcZOovC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDNFRS82NzI4MUNGNDQ5 N0YxMUVBOTY3QTJFMEJDNEY5QUUwMi9lamcxMGJ2aHNiSmNNV2taTFN2YzF4azZp OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VqZzEwYnZoc2JKY01Xa1pMU3ZjMXhrNmk4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDNFRS82NzI4MUNGNDQ5N0YxMUVBOTY3QTJFMEJDNEY5QUUwMi9lamcxMGJ2aHNi SmNNV2taTFN2YzF4azZpOEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3+T/fkAJYEDfNwWLoOsOK5pA+niLr3PvKf8lSG96vFf4qP5LxWCE+ F1/6vhJh+f5Myo+0/87qEwgi0xR8APO0cacToGCXTXGea4DZUE1+3Zf9yAgjQiZT faq37fHqNdzyEoFzNbjyXQ4OamswvfmjPYSJvXwwcUEOPa8RhS+gPlTOGQl15Mck fTaQ24ymNf+GbiMEj8xuDEplgZu/tQz44wVRKgJM/on2Q/UwBUC3tPcXMJ3DdUSP IHw4t4YGTDaae4v0e17oxsv/P+ZzUrlA88+ew9ynvqMl+yvg5nvwjCcjMHE7QiBv uEMu/AautJWUBwSUp/cAF5egVjCltaiV -----END CERTIFICATE-----Generated at Mon Apr 28 23:05:55 2025 by rpki-client on console.sobornost.net