$ rpki-client -vvf rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft File: eTdmCE78BiUGUPD9ydvFU8DOyjI.mft (raw, json) Hash identifier: /GZDXC3FEDzR31lOPWGRblNsQGZBxc5MFQIDWGhJW1Q= Subject key identifier: F9:67:FC:5F:54:B8:9C:BC:37:05:32:E4:DC:3C:34:72:E8:49:BE:E6 Authority key identifier: 79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32 Certificate issuer: /CN=A91D16A3/serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32 Certificate serial: 1136 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft Manifest number: 10B5 Signing time: Sat 26 Apr 2025 17:18:41 +0000 Manifest this update: Sat 26 Apr 2025 17:18:40 +0000 Manifest next update: Sat 03 May 2025 17:18:40 +0000 Files and hashes: 1: eTdmCE78BiUGUPD9ydvFU8DOyjI.crl (hash: ZMAnz8ATsgJK71c12cb1HomA3Y8J+rOdQtiyu1PWtoA=) 2: 7D670EA8F67A11EC92B5670FC4F9AE02.roa (hash: 9Odh9o3TlIW60dRdjsxDVQV+3vyhn2H48fPAT6vn3+M=) 3: 6E6485328C6211E9A888A528C4F9AE02.roa (hash: UR2Z7oMUzbnedaI2LVS9uGRBFC7eB54GSgDAmYPW63Q=) 4: B8F67148DC6611ED89F0804EC4F9AE02.roa (hash: W0JFS6tmn8XTuKql8AHkVwyZGDrJTsFtDN1V3+Sy2tA=) 5: C39DD1EAB2AE11EDBF6E4032C4F9AE02.roa (hash: +tn7Z6fq6avHjQp2bglrCkd8E2Sa27UKrn3GOMUj6b8=) 6: B662717ADC6611ED89F0804EC4F9AE02.roa (hash: MLOX+4zM45smBurkZaVj3Oi8atSTyoZEzmqXwXoi1VA=) 7: CB1303A4A28F11EBA97D6163C4F9AE02.roa (hash: KQfpgqTCm38R9/gLkZZKqv0IIflUZ1N/AO5E6KaW3hc=) 8: 7C39022AF67A11EC92B5670FC4F9AE02.roa (hash: hyfl49PKKB2ONDtyk43wvbgkIsmowZKGDNVFA1XCOPA=) 9: CE0122802D4211EA907A566EC4F9AE02.roa (hash: Av4l0HsggCXslSxN1XLmPQb/NQp3V/CmXQCgKkE+IxE=) 10: 93F95BE673C711E98CD6D335C4F9AE02.roa (hash: 2+EzbP/f4S7Jeaq3EYQS0mWwY430dyRIPuynNaHcMvc=) 11: 315EA0CCA9B111EC9C177A56C4F9AE02.roa (hash: Za7LOD1x/AWq47LZxakqACtbC+NnfwEUEJeBoexu1ug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 17:18:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4406 (0x1136) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D16A3, serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32 Validity Not Before: Apr 26 17:18:40 2025 GMT Not After : May 3 17:18:40 2025 GMT Subject: CN=680d1571-6936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:97:73:2e:0f:c8:9e:5b:a8:33:89:61:3d:7a: 5d:d8:de:ea:ec:44:52:e5:b5:0a:90:1e:1d:b2:05: ec:f0:03:a5:c5:a3:5f:94:40:b7:71:2c:a6:21:63: 98:7f:e0:d4:82:8a:70:22:07:35:68:72:cb:ca:63: 4d:6e:60:d3:8f:c8:40:7f:ee:0a:f2:30:a6:7a:86: a6:31:ac:c9:c3:fd:9a:56:10:0b:b6:53:6a:18:cc: 89:7d:93:cf:b2:dc:9d:32:f2:40:15:ac:13:c3:19: 5e:0e:05:fe:dc:27:bf:37:1d:53:d6:ee:b5:91:7b: 94:8f:7f:da:c7:4e:e2:ba:32:fb:df:7d:a4:fc:6a: 63:60:05:54:29:84:c7:2b:6f:dc:3b:02:84:f4:fb: 98:c5:cf:b5:a8:c6:78:78:8d:34:20:0a:85:5a:4b: 07:4f:cf:3b:58:91:90:8a:a7:48:81:63:04:e2:37: 9d:3e:5c:91:64:97:2a:05:2e:82:08:63:53:9f:24: d8:b9:00:b9:c8:4b:63:8a:7d:c3:4c:0b:42:5d:dd: e5:ba:a4:8a:02:07:75:48:35:0d:43:87:76:63:cf: ba:da:0c:0b:68:27:1b:8e:04:be:f8:ad:7f:1b:40: be:dd:80:98:a3:62:9f:6f:5c:59:89:81:9f:70:87: 9e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:67:FC:5F:54:B8:9C:BC:37:05:32:E4:DC:3C:34:72:E8:49:BE:E6 X509v3 Authority Key Identifier: keyid:79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:06:12:2d:a9:94:31:60:72:0b:46:b3:7e:e8:d2:7a:2f:ab: 30:e4:74:b5:6a:02:ea:c0:43:67:8f:e1:02:7e:f5:ef:23:97: d7:40:71:f4:ca:f5:ad:d3:a8:05:7f:d3:12:c4:9e:a7:83:a6: ee:b5:e6:b3:cc:d8:d4:98:5b:08:d3:44:a9:a7:7b:4d:a5:50: d4:ea:27:9c:40:36:9f:c7:ca:21:26:3f:cd:ad:24:5c:ad:dd: 7e:17:aa:9e:09:f0:89:87:2c:1a:55:cf:d6:54:0f:81:cb:0b: 59:f1:9a:06:a4:ad:a9:35:49:1c:55:d5:1f:50:3d:51:86:51: 4b:98:5e:d9:f2:4d:ed:4e:83:42:db:5b:df:67:3d:bc:eb:cd: ec:8c:5a:52:70:bc:92:00:ff:47:98:f2:e7:27:15:ab:d6:28: b5:32:44:0c:a2:49:c5:f1:94:d0:e0:f3:1b:fe:f3:0d:6e:ba: 91:99:a5:fd:e7:01:ef:08:21:89:3f:9f:d0:aa:07:46:34:da: 32:7d:ff:bd:93:f9:10:da:63:52:15:7e:7d:8c:30:ab:8f:2b: e8:4c:d0:24:33:76:db:05:cf:61:cd:bc:07:d7:a8:b4:2f:69: 6a:34:e7:19:24:e3:83:e3:a5:e3:9a:d8:f7:2f:b3:57:1e:82: 3e:54:2e:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICETYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE2QTMxMTAvBgNVBAUTKDc5Mzc2NjA4NEVGQzA2MjUwNjUwRjBGREM5REJDNTUz QzBDRUNBMzIwHhcNMjUwNDI2MTcxODQwWhcNMjUwNTAzMTcxODQwWjAYMRYwFAYD VQQDEw02ODBkMTU3MS02OTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxpdzLg/InluoM4lhPXpd2N7q7ERS5bUKkB4dsgXs8AOlxaNflEC3cSymIWOY f+DUgopwIgc1aHLLymNNbmDTj8hAf+4K8jCmeoamMazJw/2aVhALtlNqGMyJfZPP stydMvJAFawTwxleDgX+3Ce/Nx1T1u61kXuUj3/ax07iujL7332k/GpjYAVUKYTH K2/cOwKE9PuYxc+1qMZ4eI00IAqFWksHT887WJGQiqdIgWME4jedPlyRZJcqBS6C CGNTnyTYuQC5yEtjin3DTAtCXd3luqSKAgd1SDUNQ4d2Y8+62gwLaCcbjgS++K1/ G0C+3YCYo2Kfb1xZiYGfcIeeWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPln/F9U uJy8NwUy5Nw8NHLoSb7mMB8GA1UdIwQYMBaAFHk3ZghO/AYlBlDw/cnbxVPAzsoy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTZBMy83NzI3Q0U1QzM4 QzcxMUU5QTdCNUMyMzNDNEY5QUUwMi9lVGRtQ0U3OEJpVUdVUEQ5eWR2RlU4RE95 akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VUZG1DRTc4QmlVR1VQRDl5ZHZGVThET3lqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTZBMy83NzI3Q0U1QzM4QzcxMUU5QTdCNUMyMzNDNEY5QUUwMi9lVGRtQ0U3OEJp VUdVUEQ5eWR2RlU4RE95akkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2BhItqZQxYHILRrN+6NJ6L6sw5HS1agLqwENnj+ECfvXvI5fXQHH0 yvWt06gFf9MSxJ6ng6buteazzNjUmFsI00Spp3tNpVDU6iecQDafx8ohJj/NrSRc rd1+F6qeCfCJhywaVc/WVA+BywtZ8ZoGpK2pNUkcVdUfUD1RhlFLmF7Z8k3tToNC 21vfZz28683sjFpScLySAP9HmPLnJxWr1ii1MkQMoknF8ZTQ4PMb/vMNbrqRmaX9 5wHvCCGJP5/QqgdGNNoyff+9k/kQ2mNSFX59jDCrjyvoTNAkM3bbBc9hzbwH16i0 L2lqNOcZJOOD46Xjmtj3L7NXHoI+VC7S -----END CERTIFICATE-----Generated at Sat Apr 26 21:02:02 2025 by rpki-client on console.sobornost.net