$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft File: we5pqmqhrLoy4Wdk2oG_ekFopg0.mft (raw, json) Hash identifier: qajoPJ2XIVw2RIJu9Liz614/st8PsDQzUg+SVFeJEYQ= Subject key identifier: D1:1A:C3:33:DD:12:B8:DA:5E:EC:3F:A7:33:2B:95:6F:EA:2E:A7:57 Authority key identifier: C1:EE:69:AA:6A:A1:AC:BA:32:E1:67:64:DA:81:BF:7A:41:68:A6:0D Certificate issuer: /CN=A91D0B6B/serialNumber=C1EE69AA6AA1ACBA32E16764DA81BF7A4168A60D Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/we5pqmqhrLoy4Wdk2oG_ekFopg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft Manifest number: 19 Signing time: Fri 25 Apr 2025 06:56:40 +0000 Manifest this update: Fri 25 Apr 2025 06:56:39 +0000 Manifest next update: Fri 02 May 2025 06:56:39 +0000 Files and hashes: 1: we5pqmqhrLoy4Wdk2oG_ekFopg0.crl (hash: XiesvGL6jRGfnPPZolp7qrUGkR7+VkjwqNLgh96jMi0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.crl rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/we5pqmqhrLoy4Wdk2oG_ekFopg0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0B6B, serialNumber=C1EE69AA6AA1ACBA32E16764DA81BF7A4168A60D Validity Not Before: Apr 25 06:56:39 2025 GMT Not After : May 2 06:56:39 2025 GMT Subject: CN=680b3227-e4ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:32:b9:29:5b:f4:20:3d:57:cc:92:db:f6:75: 50:b1:e8:da:8a:3d:35:92:3d:ef:c9:d4:09:9c:b2: 73:26:6b:1e:f4:36:20:09:00:af:04:01:a9:58:13: 21:e2:a3:5f:9e:b2:8f:f4:e3:9a:6c:68:34:bf:ea: 5f:0d:2d:82:fc:86:80:e8:e8:0e:b0:eb:2a:d7:11: e4:9b:9f:a1:75:a8:b8:d1:f0:30:cb:d7:65:d7:e7: e4:96:d3:f5:59:b9:5e:62:a3:e4:a0:bd:20:a4:89: 5e:1e:24:63:4b:3a:c7:0d:fb:b7:d8:cb:45:4a:aa: 8f:60:54:d0:8e:9e:56:ef:e4:ad:0e:dd:cb:d3:29: 49:8a:f9:d8:4f:4f:6b:3f:af:eb:b4:63:0a:30:2e: 7e:ab:04:f1:5d:48:3c:5d:c4:c4:d3:45:7b:c7:2a: 2f:36:98:e3:79:ed:33:63:27:29:0d:91:3c:a2:e6: c7:36:fd:66:6b:9c:85:1e:38:50:ae:fa:b2:e2:50: 36:de:93:c3:07:e2:a9:2f:fd:2d:f4:cd:66:96:21: d5:45:cc:db:e4:6f:79:81:a5:aa:e8:87:63:67:87: bd:f2:27:8d:ac:c1:1b:4d:80:13:a1:78:26:f8:a7: 03:2f:2e:77:0f:bd:42:7b:2b:7b:51:5e:27:6c:4e: 46:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:1A:C3:33:DD:12:B8:DA:5E:EC:3F:A7:33:2B:95:6F:EA:2E:A7:57 X509v3 Authority Key Identifier: keyid:C1:EE:69:AA:6A:A1:AC:BA:32:E1:67:64:DA:81:BF:7A:41:68:A6:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/we5pqmqhrLoy4Wdk2oG_ekFopg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:96:53:74:47:0d:fc:b7:3c:f4:e4:d4:d8:d8:ee:db:40:73: c4:ff:a3:7f:3c:f2:5f:ce:b6:23:4f:87:4a:fd:2a:6d:68:b3: 4a:b4:44:8f:bb:74:00:8a:29:c9:10:81:e3:ac:d8:76:44:49: 36:2c:d3:ed:de:a8:fa:f3:0e:fe:63:c1:e4:c4:da:96:cb:aa: 71:80:3c:97:7e:2a:3a:17:a8:47:f3:0b:e4:21:78:f6:96:9b: f8:0c:d2:5d:49:d5:a3:48:8e:73:a4:64:82:ca:e0:36:4e:f4: a0:11:c2:ac:c5:bb:53:31:82:48:04:0c:df:4a:82:d6:df:44: 1e:f2:7d:55:e0:06:ed:33:fe:bd:a5:0c:af:d0:5f:9f:67:47: 10:52:ed:e1:98:eb:b6:82:82:e9:44:16:97:4f:d5:33:61:fb: c6:85:01:69:6a:59:b1:be:38:9d:e7:be:2f:a7:94:90:a3:fa: ee:5d:0a:ed:cc:f1:d4:2b:2b:1e:c6:14:10:96:07:45:61:c1: b3:51:09:fb:7c:f8:b2:d8:b5:55:5c:1c:54:d9:b3:47:d9:eb: 47:0b:ac:49:b4:c5:a0:6c:b3:29:00:8d:47:fa:74:fe:6f:bd: 47:4b:8a:74:2f:1c:ee:20:46:db:4b:04:16:6e:6d:a4:50:61: 59:4d:88:61 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MEI2QjExMC8GA1UEBRMoQzFFRTY5QUE2QUExQUNCQTMyRTE2NzY0REE4MUJGN0E0 MTY4QTYwRDAeFw0yNTA0MjUwNjU2MzlaFw0yNTA1MDIwNjU2MzlaMBgxFjAUBgNV BAMTDTY4MGIzMjI3LWU0ZWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4MrkpW/QgPVfMktv2dVCx6NqKPTWSPe/J1AmcsnMmax70NiAJAK8EAalYEyHi o1+eso/045psaDS/6l8NLYL8hoDo6A6w6yrXEeSbn6F1qLjR8DDL12XX5+SW0/VZ uV5io+SgvSCkiV4eJGNLOscN+7fYy0VKqo9gVNCOnlbv5K0O3cvTKUmK+dhPT2s/ r+u0YwowLn6rBPFdSDxdxMTTRXvHKi82mON57TNjJykNkTyi5sc2/WZrnIUeOFCu +rLiUDbek8MH4qkv/S30zWaWIdVFzNvkb3mBparoh2Nnh73yJ42swRtNgBOheCb4 pwMvLncPvUJ7K3tRXidsTkbvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0RrDM90S uNpe7D+nMyuVb+oup1cwHwYDVR0jBBgwFoAUwe5pqmqhrLoy4Wdk2oG/ekFopg0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQwQjZCLzc1QTkyMjMwRkUz RjExRUY4RkEyNzc1MkM0RjlBRTAyL3dlNXBxbXFockxveTRXZGsyb0dfZWtGb3Bn MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvd2U1cHFtcWhyTG95NFdkazJvR19la0ZvcGcwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQw QjZCLzc1QTkyMjMwRkUzRjExRUY4RkEyNzc1MkM0RjlBRTAyL3dlNXBxbXFockxv eTRXZGsyb0dfZWtGb3BnMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADGWU3RHDfy3PPTk1NjY7ttAc8T/o3888l/OtiNPh0r9Km1os0q0RI+7 dACKKckQgeOs2HZESTYs0+3eqPrzDv5jweTE2pbLqnGAPJd+KjoXqEfzC+QhePaW m/gM0l1J1aNIjnOkZILK4DZO9KARwqzFu1MxgkgEDN9KgtbfRB7yfVXgBu0z/r2l DK/QX59nRxBS7eGY67aCgulEFpdP1TNh+8aFAWlqWbG+OJ3nvi+nlJCj+u5dCu3M 8dQrKx7GFBCWB0VhwbNRCft8+LLYtVVcHFTZs0fZ60cLrEm0xaBssykAjUf6dP5v vUdLinQvHO4gRttLBBZubaRQYVlNiGE= -----END CERTIFICATE-----Generated at Fri Apr 25 10:44:27 2025 by rpki-client on console.sobornost.net