$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.mft File: xhVwDXyIi-a6dQrezZTYhkaC42E.mft (raw, json) Hash identifier: knuP3CMR4iofTMGsGD3/Nc86omNfPU97qGiK0IUSTAY= Subject key identifier: F5:47:EF:49:04:E2:85:B4:3D:41:02:C7:65:8E:4E:22:A5:97:42:0D Authority key identifier: C6:15:70:0D:7C:88:8B:E6:BA:75:0A:DE:CD:94:D8:86:46:82:E3:61 Certificate issuer: /CN=A91D0C14/serialNumber=C615700D7C888BE6BA750ADECD94D8864682E361 Certificate serial: 7C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xhVwDXyIi-a6dQrezZTYhkaC42E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.mft Manifest number: 7C Signing time: Sun 27 Apr 2025 01:47:38 +0000 Manifest this update: Sun 27 Apr 2025 01:47:37 +0000 Manifest next update: Sun 04 May 2025 01:47:37 +0000 Files and hashes: 1: xhVwDXyIi-a6dQrezZTYhkaC42E.crl (hash: Ox48jlKMSiHX36Jm0tN485XOGh62HH02N1iGzSS+kcs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.crl rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xhVwDXyIi-a6dQrezZTYhkaC42E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 01:47:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 124 (0x7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0C14, serialNumber=C615700D7C888BE6BA750ADECD94D8864682E361 Validity Not Before: Apr 27 01:47:37 2025 GMT Not After : May 4 01:47:37 2025 GMT Subject: CN=680d8cba-0499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2e:77:82:e4:f1:16:6b:d7:d1:e7:32:ad:26: 76:69:5a:05:4c:5e:a7:d0:c2:64:60:54:e2:82:1f: 6c:d3:3d:e9:63:4b:d2:f5:8d:9e:d3:ea:6f:d9:c7: 6c:3c:df:62:b4:4d:8e:7e:39:78:0d:4d:db:fd:62: aa:ef:25:1b:a1:a7:1c:21:e3:9d:45:ea:8a:df:cb: 04:1c:a9:d1:07:43:8f:df:cc:0d:ac:10:43:e4:f0: c7:d1:3e:b1:6c:cf:da:6d:71:8d:c3:0d:6e:16:63: 1f:db:29:54:ff:1c:46:85:1c:53:cd:00:c0:5a:26: 04:13:58:e1:4a:e7:3f:99:10:71:2f:9a:4e:27:7c: 24:06:62:75:96:3b:75:0c:75:0a:5a:ed:8b:75:d8: 20:8f:da:24:18:27:9d:bd:7a:b9:23:4c:02:cb:96: c5:33:7e:c2:1e:9e:ce:e6:70:80:33:b1:5b:83:e9: 74:d4:cd:cf:cb:d1:f9:e9:74:a8:56:07:92:19:3a: 31:9a:24:47:7a:37:e5:04:33:f0:08:fb:a9:51:87: d3:b3:d4:bc:12:57:28:35:80:de:41:e4:d5:f5:2f: f6:45:9e:c4:71:2d:49:a3:b0:4f:bc:78:0e:5d:d2: 74:dc:cd:43:55:14:fd:d6:57:23:e5:cf:03:21:ba: 1e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:47:EF:49:04:E2:85:B4:3D:41:02:C7:65:8E:4E:22:A5:97:42:0D X509v3 Authority Key Identifier: keyid:C6:15:70:0D:7C:88:8B:E6:BA:75:0A:DE:CD:94:D8:86:46:82:E3:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xhVwDXyIi-a6dQrezZTYhkaC42E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:19:8f:c0:9b:64:1f:6b:59:38:34:5c:58:b5:0c:92:5a:12: e5:b6:30:60:6c:d2:9e:ee:46:ae:7c:94:32:db:32:fb:6c:28: 26:4f:9d:c6:68:25:36:fb:98:2d:af:e7:40:2a:09:0a:84:35: 70:42:0f:da:90:a2:ae:8a:ad:a1:14:65:be:e5:cf:c8:73:39: 79:6c:cf:9b:9d:15:9b:9f:69:73:7b:85:97:bb:27:82:8c:97: cf:bb:e2:ae:a7:86:ef:8a:97:33:67:90:97:f2:9d:df:32:9a: 42:45:0a:12:b6:e3:df:d9:10:c8:d8:2c:0c:cd:47:7c:2e:5d: ec:1e:13:d6:64:3e:5f:f8:fe:2e:c3:1c:58:58:e9:ed:a0:65: b1:df:e0:cb:4c:24:51:93:5f:65:7a:4a:60:7d:d5:a2:fd:08: 98:48:f1:27:ac:4e:7d:6c:22:89:63:bb:c5:a8:fd:6a:71:57: dc:4b:12:de:9f:4e:9d:11:ab:ed:e6:dc:9e:8d:c3:08:14:c4: 83:16:d5:8c:89:ed:05:be:f3:f0:17:c3:d4:1f:e8:1c:01:e2: f1:67:98:66:6e:52:ed:5f:a0:c8:96:22:76:90:d1:5d:68:af: 31:e2:d8:97:35:71:58:5a:fc:ac:c3:99:66:09:d7:7b:ec:f2: 9e:14:7d:15 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MEMxNDExMC8GA1UEBRMoQzYxNTcwMEQ3Qzg4OEJFNkJBNzUwQURFQ0Q5NEQ4ODY0 NjgyRTM2MTAeFw0yNTA0MjcwMTQ3MzdaFw0yNTA1MDQwMTQ3MzdaMBgxFjAUBgNV BAMTDTY4MGQ4Y2JhLTA0OTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuLneC5PEWa9fR5zKtJnZpWgVMXqfQwmRgVOKCH2zTPeljS9L1jZ7T6m/Zx2w8 32K0TY5+OXgNTdv9YqrvJRuhpxwh451F6orfywQcqdEHQ4/fzA2sEEPk8MfRPrFs z9ptcY3DDW4WYx/bKVT/HEaFHFPNAMBaJgQTWOFK5z+ZEHEvmk4nfCQGYnWWO3UM dQpa7Yt12CCP2iQYJ529erkjTALLlsUzfsIens7mcIAzsVuD6XTUzc/L0fnpdKhW B5IZOjGaJEd6N+UEM/AI+6lRh9Oz1LwSVyg1gN5B5NX1L/ZFnsRxLUmjsE+8eA5d 0nTczUNVFP3WVyPlzwMhuh6TAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9UfvSQTi hbQ9QQLHZY5OIqWXQg0wHwYDVR0jBBgwFoAUxhVwDXyIi+a6dQrezZTYhkaC42Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQwQzE0LzhGMzM5OTk2NkJG QjExRUY4NDYzMjYzNUM0RjlBRTAyL3hoVndEWHlJaS1hNmRRcmV6WlRZaGthQzQy RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIveGhWd0RYeUlpLWE2ZFFyZXpaVFloa2FDNDJFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQw QzE0LzhGMzM5OTk2NkJGQjExRUY4NDYzMjYzNUM0RjlBRTAyL3hoVndEWHlJaS1h NmRRcmV6WlRZaGthQzQyRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJQZj8CbZB9rWTg0XFi1DJJaEuW2MGBs0p7uRq58lDLbMvtsKCZPncZo JTb7mC2v50AqCQqENXBCD9qQoq6KraEUZb7lz8hzOXlsz5udFZufaXN7hZe7J4KM l8+74q6nhu+KlzNnkJfynd8ymkJFChK249/ZEMjYLAzNR3wuXeweE9ZkPl/4/i7D HFhY6e2gZbHf4MtMJFGTX2V6SmB91aL9CJhI8SesTn1sIolju8Wo/WpxV9xLEt6f Tp0Rq+3m3J6NwwgUxIMW1YyJ7QW+8/AXw9Qf6BwB4vFnmGZuUu1foMiWInaQ0V1o rzHi2Jc1cVha/KzDmWYJ13vs8p4UfRU= -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:12 2025 by rpki-client on console.sobornost.net