$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft File: 0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft (raw, json) Hash identifier: wcIROVIjTqFtITuhNuWbAMovfLutRPeO64Somlo60is= Subject key identifier: 23:D6:6D:E4:18:6B:7F:8D:2D:FA:75:88:55:4D:39:C9:83:DB:14:DB Authority key identifier: D1:47:9E:F6:03:41:E3:9E:CA:17:2E:43:76:44:3A:47:19:75:CB:EF Certificate issuer: /CN=A91D1691/serialNumber=D1479EF60341E39ECA172E4376443A471975CBEF Certificate serial: 1881 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Uee9gNB457KFy5DdkQ6Rxl1y-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft Manifest number: 187B Signing time: Mon 28 Apr 2025 15:54:35 +0000 Manifest this update: Mon 28 Apr 2025 15:54:34 +0000 Manifest next update: Mon 05 May 2025 15:54:34 +0000 Files and hashes: 1: 0Uee9gNB457KFy5DdkQ6Rxl1y-8.crl (hash: O09TYZMzeC7fHu70/o9HVnqlG14tA7Dc6Q88cjmD/qU=) 2: AE21A9C6818911EA81577016C4F9AE02.roa (hash: 7SxWILLdTrzJpYEt8Y/6XTCMP3sdZqZUyA4GDfqu88g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.crl rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Uee9gNB457KFy5DdkQ6Rxl1y-8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 14:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6273 (0x1881) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1691, serialNumber=D1479EF60341E39ECA172E4376443A471975CBEF Validity Not Before: Apr 28 15:54:34 2025 GMT Not After : May 5 15:54:34 2025 GMT Subject: CN=680fa4bb-1831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:bc:a5:0c:55:3c:f1:3f:7c:e0:65:9e:e4:ff: ff:af:1c:dd:78:65:ec:8b:d2:cf:08:ae:8c:da:bb: 57:a0:0e:1f:cf:f7:83:d6:69:99:a0:f2:28:d2:46: 4d:86:40:b2:ef:22:ad:0b:e8:c1:79:08:26:45:6a: 5a:48:a3:35:ca:04:e5:78:9e:7b:e9:9f:f6:cc:4b: 00:7f:d7:e8:83:69:5e:d4:df:77:52:7e:85:d5:b5: c9:4e:19:2a:5c:7f:ba:7a:d9:25:53:7d:b7:7d:39: b0:e6:3d:2e:ce:cb:84:64:ac:99:02:df:cf:7a:14: 5e:9b:a0:54:bd:1f:5e:cb:9d:ff:4e:70:dc:e0:80: 65:b5:7a:41:a8:79:56:3c:8e:d1:07:f9:73:ef:dc: 73:67:18:dd:d7:02:6b:51:b4:31:5d:ef:f3:35:cb: d5:6a:98:9e:c5:fc:84:fb:c3:d4:67:a9:72:dc:b3: d6:01:eb:96:5b:d4:c0:35:c9:a1:00:9e:da:b8:47: f2:b7:9d:35:6d:39:d0:67:ba:1a:35:72:ab:71:ac: 3f:4c:7b:8c:0c:9f:7e:af:e3:b8:19:a8:dd:8f:38: fd:ba:80:bb:e5:c5:1f:0b:31:19:7c:48:d1:41:bd: e8:0d:f6:0f:70:87:e9:eb:05:ed:a3:bd:2f:7d:55: 22:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:D6:6D:E4:18:6B:7F:8D:2D:FA:75:88:55:4D:39:C9:83:DB:14:DB X509v3 Authority Key Identifier: keyid:D1:47:9E:F6:03:41:E3:9E:CA:17:2E:43:76:44:3A:47:19:75:CB:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Uee9gNB457KFy5DdkQ6Rxl1y-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption df:f2:5c:be:ba:a2:13:32:48:25:0a:29:1f:82:96:00:14:c9: c0:74:1c:90:96:d8:23:14:ec:94:f6:bb:2d:c6:98:bc:96:35: 6b:9b:b6:04:0f:28:f3:d0:32:5a:c1:2b:08:ca:69:c2:36:d0: d7:72:78:ba:54:5c:b0:84:03:b7:dc:a8:44:6e:57:8d:62:26: 4f:82:44:39:96:59:e7:60:9e:88:70:01:3e:00:cb:89:1d:1f: bb:87:8e:9e:3e:41:13:c0:39:52:36:58:9e:1a:71:a9:1b:fc: 99:a8:60:88:14:6b:92:f3:80:cb:88:d9:1e:b8:94:0f:02:50: 22:a6:87:ac:fd:eb:ff:d6:c9:dc:71:26:1e:0f:d1:59:e2:e4: c3:64:70:4e:60:d1:f9:b2:81:cd:01:c5:fb:36:ff:05:78:dc: a7:db:c7:a4:ae:2e:0b:2b:f5:76:94:0c:cc:69:35:eb:52:86: 5d:29:8e:01:90:fb:c4:d9:3d:73:7d:d8:fc:f7:d0:8e:1d:94: 68:65:15:93:d3:51:0a:b4:dd:b8:22:f1:17:27:07:78:58:2f: 17:56:3f:b4:50:aa:59:17:d2:bc:70:32:65:a9:4e:0e:f9:b8: 33:73:d8:fb:33:0f:d2:58:43:44:84:b1:ad:4c:f0:f3:13:a1: 88:82:c3:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE2OTExMTAvBgNVBAUTKEQxNDc5RUY2MDM0MUUzOUVDQTE3MkU0Mzc2NDQzQTQ3 MTk3NUNCRUYwHhcNMjUwNDI4MTU1NDM0WhcNMjUwNTA1MTU1NDM0WjAYMRYwFAYD VQQDEw02ODBmYTRiYi0xODMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxLylDFU88T984GWe5P//rxzdeGXsi9LPCK6M2rtXoA4fz/eD1mmZoPIo0kZN hkCy7yKtC+jBeQgmRWpaSKM1ygTleJ576Z/2zEsAf9fog2le1N93Un6F1bXJThkq XH+6etklU323fTmw5j0uzsuEZKyZAt/PehRem6BUvR9ey53/TnDc4IBltXpBqHlW PI7RB/lz79xzZxjd1wJrUbQxXe/zNcvVapiexfyE+8PUZ6ly3LPWAeuWW9TANcmh AJ7auEfyt501bTnQZ7oaNXKrcaw/THuMDJ9+r+O4Gajdjzj9uoC75cUfCzEZfEjR Qb3oDfYPcIfp6wXto70vfVUiQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCPWbeQY a3+NLfp1iFVNOcmD2xTbMB8GA1UdIwQYMBaAFNFHnvYDQeOeyhcuQ3ZEOkcZdcvv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTY5MS80ODJCQTE3MjlE MjQxMUU3ODYxQTIyNkJDNEY5QUUwMi8wVWVlOWdOQjQ1N0tGeTVEZGtRNlJ4bDF5 LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBVZWU5Z05CNDU3S0Z5NURka1E2UnhsMXktOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTY5MS80ODJCQTE3MjlEMjQxMUU3ODYxQTIyNkJDNEY5QUUwMi8wVWVlOWdOQjQ1 N0tGeTVEZGtRNlJ4bDF5LTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDf8ly+uqITMkglCikfgpYAFMnAdByQltgjFOyU9rstxpi8ljVrm7YE Dyjz0DJawSsIymnCNtDXcni6VFywhAO33KhEbleNYiZPgkQ5llnnYJ6IcAE+AMuJ HR+7h46ePkETwDlSNlieGnGpG/yZqGCIFGuS84DLiNkeuJQPAlAipoes/ev/1snc cSYeD9FZ4uTDZHBOYNH5soHNAcX7Nv8FeNyn28ekri4LK/V2lAzMaTXrUoZdKY4B kPvE2T1zfdj899COHZRoZRWT01EKtN24IvEXJwd4WC8XVj+0UKpZF9K8cDJlqU4O +bgzc9j7Mw/SWENEhLGtTPDzE6GIgsOw -----END CERTIFICATE-----Generated at Mon Apr 28 17:46:02 2025 by rpki-client on console.sobornost.net