$ rpki-client -vvf rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.mft File: 0ptk5jRGWrQTIFS7foPJ1fGDSfc.mft (raw, json) Hash identifier: 3+XzZuJye5csyAcCqcFrJ5iaCzwZE7/sX1QAyxBmsZ0= Subject key identifier: 8E:C7:71:86:9B:96:0C:42:F3:9B:22:7C:61:89:40:0C:69:BF:6D:D8 Authority key identifier: D2:9B:64:E6:34:46:5A:B4:13:20:54:BB:7E:83:C9:D5:F1:83:49:F7 Certificate issuer: /CN=A91D26C6/serialNumber=D29B64E634465AB4132054BB7E83C9D5F18349F7 Certificate serial: 06AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ptk5jRGWrQTIFS7foPJ1fGDSfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.mft Manifest number: 068E Signing time: Sat 26 Apr 2025 21:56:45 +0000 Manifest this update: Sat 26 Apr 2025 21:56:44 +0000 Manifest next update: Sat 03 May 2025 21:56:44 +0000 Files and hashes: 1: 0ptk5jRGWrQTIFS7foPJ1fGDSfc.crl (hash: K9rVDOnzNF1PVvUgIVB8uucU4zp+K8IdCkArY7CA0ZY=) 2: 3B03239684CE11EF9D90A966C4F9AE02.roa (hash: 0+CvQqBA1GWK9uAje6YI9ltQjscAcIJ8/LtX4JAvJgQ=) 3: 6A8A22841DCE11EF85CAC83EC4F9AE02.roa (hash: BifS2RiKJAeyaao2xahiTEJyhWsX4uSdQw3ik4lZCoM=) 4: DD3C61621DCD11EF88E9EE3DC4F9AE02.roa (hash: qv769QTOuxRY2vZMEitP1PhQNGQQJL1+VWV0CsKcicw=) 5: 178E201EA51911EDB711B90AC4F9AE02.roa (hash: Fk3FD4AcHMukexgYcFy6H4xmHyHDGU1VOrgDQ2JaHQ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.crl rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ptk5jRGWrQTIFS7foPJ1fGDSfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 21:56:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1707 (0x6ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D26C6, serialNumber=D29B64E634465AB4132054BB7E83C9D5F18349F7 Validity Not Before: Apr 26 21:56:44 2025 GMT Not After : May 3 21:56:44 2025 GMT Subject: CN=680d569d-3eeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:cf:f1:93:4b:5c:1b:2b:1f:3a:9c:29:01:1a: eb:6b:72:5a:4d:f7:8b:ee:82:fc:9f:e0:f2:ba:26: 39:c8:23:bf:5a:c1:0f:e3:82:7e:dd:d0:c7:c1:5b: 9c:63:9a:5c:30:56:bc:f7:59:c6:dc:6e:58:08:59: 82:a5:ed:51:a8:b6:53:09:db:88:e0:1f:a8:32:59: 2a:50:d9:0f:5a:5e:95:b8:32:89:4f:04:de:1d:17: 14:61:4a:8f:16:c5:e8:b3:6b:8f:9e:54:5f:de:98: d1:6d:cf:99:86:bc:c8:1e:8c:cb:e2:bd:3d:6c:51: 56:c7:05:01:6e:b6:ee:29:66:3e:c0:cf:bd:69:eb: 6e:ef:ed:36:10:10:f3:99:28:7d:66:1b:50:9f:33: a2:54:cb:57:a6:2b:bb:34:01:43:10:ad:14:42:90: eb:ae:b5:ee:05:a1:07:bf:79:98:55:c2:72:64:05: c5:b6:f2:13:55:92:bf:e8:ab:3e:d1:4d:c9:15:71: 77:94:46:54:3d:19:ad:33:43:9a:60:d3:03:cb:c8: 88:42:67:47:6e:27:d5:7b:f2:19:ed:9a:10:da:e9: cf:07:96:96:22:a1:88:bc:43:e5:13:2d:b4:d8:9b: e0:ee:ef:73:b0:41:5b:2e:38:bb:13:98:cf:fd:97: 79:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:C7:71:86:9B:96:0C:42:F3:9B:22:7C:61:89:40:0C:69:BF:6D:D8 X509v3 Authority Key Identifier: keyid:D2:9B:64:E6:34:46:5A:B4:13:20:54:BB:7E:83:C9:D5:F1:83:49:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ptk5jRGWrQTIFS7foPJ1fGDSfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:68:31:7a:32:c5:c6:7d:00:63:54:68:82:19:59:89:a0:c7: e7:bf:ec:5f:bc:28:95:52:2a:99:4f:8d:ef:3d:9d:b8:cc:79: 46:39:f8:61:e4:c3:06:56:02:70:11:b6:a3:0c:4c:89:1a:ef: a8:6f:4b:a1:25:76:12:77:d0:f3:b7:32:f4:02:c3:d3:d7:71: 6e:83:c4:86:22:8c:1a:a7:63:7f:aa:4d:23:9f:33:52:3b:8d: e0:29:a0:61:13:24:f4:8b:84:94:1b:92:f0:76:50:04:ac:ca: f1:0d:a2:2b:e2:4b:76:6b:5b:42:46:60:12:76:ee:25:ac:d0: b7:3a:41:ab:93:f3:83:94:12:50:5e:9b:19:a7:ea:aa:83:ab: 61:13:b5:8d:33:a8:08:c6:23:83:ce:4a:99:f0:3c:c0:0c:5c: 89:bb:f4:d9:45:80:24:47:44:db:36:f3:0e:dc:00:fd:3b:5b: e5:0c:30:92:82:1a:53:44:2d:91:d0:e2:76:76:3a:c6:89:56: b7:22:9a:7c:cd:1f:ca:02:24:c0:c1:89:d2:b5:82:cb:c2:ad: bc:59:f7:f4:37:d8:16:0e:96:e2:50:c8:e3:d2:f6:05:0d:c6: 61:94:26:fa:3d:8d:48:49:f5:50:43:f2:7e:b6:3c:8d:7f:ca: 74:67:fe:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI2QzYxMTAvBgNVBAUTKEQyOUI2NEU2MzQ0NjVBQjQxMzIwNTRCQjdFODNDOUQ1 RjE4MzQ5RjcwHhcNMjUwNDI2MjE1NjQ0WhcNMjUwNTAzMjE1NjQ0WjAYMRYwFAYD VQQDEw02ODBkNTY5ZC0zZWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7c/xk0tcGysfOpwpARrra3JaTfeL7oL8n+DyuiY5yCO/WsEP44J+3dDHwVuc Y5pcMFa891nG3G5YCFmCpe1RqLZTCduI4B+oMlkqUNkPWl6VuDKJTwTeHRcUYUqP FsXos2uPnlRf3pjRbc+ZhrzIHozL4r09bFFWxwUBbrbuKWY+wM+9aetu7+02EBDz mSh9ZhtQnzOiVMtXpiu7NAFDEK0UQpDrrrXuBaEHv3mYVcJyZAXFtvITVZK/6Ks+ 0U3JFXF3lEZUPRmtM0OaYNMDy8iIQmdHbifVe/IZ7ZoQ2unPB5aWIqGIvEPlEy20 2Jvg7u9zsEFbLji7E5jP/Zd5MwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI7HcYab lgxC85sifGGJQAxpv23YMB8GA1UdIwQYMBaAFNKbZOY0Rlq0EyBUu36DydXxg0n3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjZDNi81OEU5OUU5NDZG NzkxMUVCQTREMjIyODdDNEY5QUUwMi8wcHRrNWpSR1dyUVRJRlM3Zm9QSjFmR0RT ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBwdGs1alJHV3JRVElGUzdmb1BKMWZHRFNmYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjZDNi81OEU5OUU5NDZGNzkxMUVCQTREMjIyODdDNEY5QUUwMi8wcHRrNWpSR1dy UVRJRlM3Zm9QSjFmR0RTZmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcaDF6MsXGfQBjVGiCGVmJoMfnv+xfvCiVUiqZT43vPZ24zHlGOfhh 5MMGVgJwEbajDEyJGu+ob0uhJXYSd9DztzL0AsPT13Fug8SGIowap2N/qk0jnzNS O43gKaBhEyT0i4SUG5LwdlAErMrxDaIr4kt2a1tCRmASdu4lrNC3OkGrk/ODlBJQ XpsZp+qqg6thE7WNM6gIxiODzkqZ8DzADFyJu/TZRYAkR0TbNvMO3AD9O1vlDDCS ghpTRC2R0OJ2djrGiVa3Ipp8zR/KAiTAwYnStYLLwq28Wff0N9gWDpbiUMjj0vYF DcZhlCb6PY1ISfVQQ/J+tjyNf8p0Z/6T -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:12 2025 by rpki-client on console.sobornost.net