$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft File: pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft (raw, json) Hash identifier: w0i/akC9os143E6TP/H4NnYW8Dn+KUEH83bjpxFidoA= Subject key identifier: A1:1B:6F:F2:29:FD:87:57:0E:21:05:20:3C:7E:71:4E:B1:FD:8A:A4 Authority key identifier: A5:9D:83:6E:1C:31:62:3C:C5:86:44:8A:A7:52:B7:46:85:3B:84:1D Certificate issuer: /CN=A91D1E4C/serialNumber=A59D836E1C31623CC586448AA752B746853B841D Certificate serial: 0803 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft Manifest number: 0AD4 Signing time: Sat 26 Apr 2025 20:36:27 +0000 Manifest this update: Sat 26 Apr 2025 20:36:27 +0000 Manifest next update: Sat 03 May 2025 20:36:27 +0000 Files and hashes: 1: pZ2DbhwxYjzFhkSKp1K3RoU7hB0.crl (hash: k6uf2Wt9tTPMEROjoc+EoH6l2IKlR1xexsSBj2IPDsE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.crl rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2051 (0x803) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1E4C, serialNumber=A59D836E1C31623CC586448AA752B746853B841D Validity Not Before: Apr 26 20:36:27 2025 GMT Not After : May 3 20:36:27 2025 GMT Subject: CN=680d43cb-bda4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f3:af:76:e5:9c:b5:e6:65:6f:eb:e9:c2:3e: e5:3d:cf:62:69:23:71:4d:99:d6:b2:fa:50:4c:c4: 2c:ac:5a:17:c9:0f:60:1a:e1:6b:da:49:ee:44:31: 3f:0d:15:cd:80:3e:6e:f4:4b:87:1d:94:a3:c1:e5: 73:42:80:31:09:2a:40:be:94:c3:32:9e:0e:cb:46: c8:bc:cd:70:56:46:93:b4:70:60:51:64:93:2b:76: a9:b5:ea:96:c4:ef:bd:99:ea:6b:01:c1:4f:27:6c: e5:3a:dc:98:a7:85:50:11:8a:f0:f3:04:38:5f:22: 02:c1:04:10:8b:ed:f0:70:0d:c3:a1:a0:93:e9:b7: 73:2c:dc:d3:a8:d7:21:f4:40:33:ac:d4:aa:67:1d: f1:99:f7:ba:5d:83:00:ea:ff:0d:37:a6:19:98:fc: 60:a5:41:1c:c0:c6:25:8c:5f:32:d1:ec:9f:8a:08: 7a:f2:d1:0c:09:04:4e:5e:82:40:4b:b0:d9:ec:8e: ac:6c:c4:ff:da:85:2c:15:29:94:71:a6:31:9a:fb: d6:55:60:fb:bc:fb:85:12:5d:1a:68:de:db:eb:c0: 9d:ea:fe:b3:72:3d:cc:08:a9:13:ee:5a:55:81:ff: be:e5:36:fb:46:11:a6:30:ef:37:d9:81:9b:b2:e3: 5f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:1B:6F:F2:29:FD:87:57:0E:21:05:20:3C:7E:71:4E:B1:FD:8A:A4 X509v3 Authority Key Identifier: keyid:A5:9D:83:6E:1C:31:62:3C:C5:86:44:8A:A7:52:B7:46:85:3B:84:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:3a:59:7f:d9:e0:6f:3c:c1:32:d3:8e:9c:68:0c:42:34:36: cb:02:e3:d6:bc:27:da:09:93:71:be:6e:a2:10:96:b0:a7:27: 3c:b8:c0:dd:8a:fd:6a:97:9d:cc:d7:03:d0:c3:c4:e9:3c:5f: e8:3d:f2:b0:99:cb:5b:74:c0:41:9b:30:fb:cf:1e:b8:03:af: e2:a4:b8:61:ac:27:34:c1:9c:0a:f0:32:98:0e:a6:1c:1a:c9: f9:1b:d6:c8:49:50:9e:b3:09:26:de:8d:cb:61:1d:e9:b8:81: 51:08:34:d6:9b:b6:9a:2b:59:1a:9c:65:b9:52:9b:ad:6b:f9: 57:25:47:fc:66:6c:8d:a1:f6:ce:ab:0f:45:e5:1d:8e:a6:f8: f4:d0:56:f9:f4:6a:f9:e2:ca:ee:10:45:3d:a8:56:61:b7:d9: c4:08:16:e5:89:db:08:62:07:d5:1d:2f:08:43:cb:ff:ad:81: 2e:ae:d2:30:cf:d2:b4:0a:01:a9:27:cd:98:6c:8c:cf:06:8b: cc:25:8e:fa:e9:c4:e6:b9:9f:a1:b2:f2:7a:7a:ea:9d:7b:3f: 0f:92:1a:33:94:97:26:33:13:d2:68:de:5c:29:3c:e3:bd:e2: 28:4a:af:09:a5:d1:f3:02:5f:2e:e7:92:39:e6:b8:9c:cf:b3: da:33:83:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFFNEMxMTAvBgNVBAUTKEE1OUQ4MzZFMUMzMTYyM0NDNTg2NDQ4QUE3NTJCNzQ2 ODUzQjg0MUQwHhcNMjUwNDI2MjAzNjI3WhcNMjUwNTAzMjAzNjI3WjAYMRYwFAYD VQQDEw02ODBkNDNjYi1iZGE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvPOvduWcteZlb+vpwj7lPc9iaSNxTZnWsvpQTMQsrFoXyQ9gGuFr2knuRDE/ DRXNgD5u9EuHHZSjweVzQoAxCSpAvpTDMp4Oy0bIvM1wVkaTtHBgUWSTK3apteqW xO+9meprAcFPJ2zlOtyYp4VQEYrw8wQ4XyICwQQQi+3wcA3DoaCT6bdzLNzTqNch 9EAzrNSqZx3xmfe6XYMA6v8NN6YZmPxgpUEcwMYljF8y0eyfigh68tEMCQROXoJA S7DZ7I6sbMT/2oUsFSmUcaYxmvvWVWD7vPuFEl0aaN7b68Cd6v6zcj3MCKkT7lpV gf++5Tb7RhGmMO832YGbsuNfzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKEbb/Ip /YdXDiEFIDx+cU6x/YqkMB8GA1UdIwQYMBaAFKWdg24cMWI8xYZEiqdSt0aFO4Qd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUU0Qy83REFEQTU2Q0Q5 NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9wWjJEYmh3eFlqekZoa1NLcDFLM1JvVTdo QjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BaMkRiaHd4WWp6RmhrU0twMUszUm9VN2hCMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUU0Qy83REFEQTU2Q0Q5NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9wWjJEYmh3eFlq ekZoa1NLcDFLM1JvVTdoQjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBOll/2eBvPMEy046caAxCNDbLAuPWvCfaCZNxvm6iEJawpyc8uMDd iv1ql53M1wPQw8TpPF/oPfKwmctbdMBBmzD7zx64A6/ipLhhrCc0wZwK8DKYDqYc Gsn5G9bISVCeswkm3o3LYR3puIFRCDTWm7aaK1kanGW5Uputa/lXJUf8ZmyNofbO qw9F5R2Opvj00Fb59Gr54sruEEU9qFZht9nECBblidsIYgfVHS8IQ8v/rYEurtIw z9K0CgGpJ82YbIzPBovMJY766cTmuZ+hsvJ6euqdez8PkhozlJcmMxPSaN5cKTzj veIoSq8JpdHzAl8u55I55ricz7PaM4MN -----END CERTIFICATE-----Generated at Sun Apr 27 00:14:11 2025 by rpki-client on console.sobornost.net