$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.mft File: o1D687bxS8juGymW7tSOJwIOEIM.mft (raw, json) Hash identifier: Clwl9DRtzqj509a4l/TGbD3LqdxzwO7AzD+dvGB1KLM= Subject key identifier: 46:34:6F:74:75:B7:10:25:61:F3:B2:5B:0F:8D:F3:8B:05:87:46:B9 Authority key identifier: A3:50:FA:F3:B6:F1:4B:C8:EE:1B:29:96:EE:D4:8E:27:02:0E:10:83 Certificate issuer: /CN=A91D4834/serialNumber=A350FAF3B6F14BC8EE1B2996EED48E27020E1083 Certificate serial: 084C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.mft Manifest number: 083B Signing time: Sat 26 Apr 2025 20:31:52 +0000 Manifest this update: Sat 26 Apr 2025 20:31:52 +0000 Manifest next update: Sat 03 May 2025 20:31:52 +0000 Files and hashes: 1: o1D687bxS8juGymW7tSOJwIOEIM.crl (hash: nIETAZ8DkrSJtNqnR+TCrJrTopfCE5JrSSPkCN+4oWQ=) 2: C286BE40C4C711EDAFA9AF17C4F9AE02.roa (hash: wm0PciNiC4cbLFQcb4SHn/OMRIvkGpQeYyT8rS6bdpU=) 3: 032132A0E0D011ECAF88A30DC4F9AE02.roa (hash: Oqme3hgS+ErgCZrhOMJFY6E0bgLfBlO2jysH8V+HitY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.crl rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2124 (0x84c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4834, serialNumber=A350FAF3B6F14BC8EE1B2996EED48E27020E1083 Validity Not Before: Apr 26 20:31:52 2025 GMT Not After : May 3 20:31:52 2025 GMT Subject: CN=680d42b8-a263 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:29:25:31:fc:4a:2a:2b:4a:da:16:8e:48:c7: 60:22:50:d0:7d:70:d2:a4:5f:03:07:a5:c7:23:ac: 51:2c:4e:75:8c:f2:df:81:99:0a:f1:8e:ca:88:2a: d5:d5:b5:bf:6d:e7:1e:ae:f9:1d:af:30:02:74:d4: 92:63:f1:a8:a1:bb:63:df:e0:6c:7e:ba:3c:98:14: a9:34:b0:97:3d:8b:8c:38:ab:74:8e:c9:0d:01:ad: 76:95:1c:90:96:8e:38:bc:3f:40:1a:6f:bd:a2:ed: a1:b5:09:2b:f5:f6:db:82:3a:06:c7:2e:19:e1:27: 22:19:b6:33:c0:71:1d:a0:30:c6:30:67:05:a9:01: 1d:0d:37:6e:c6:d0:7e:be:ff:9a:9f:dc:65:62:b7: ee:41:a5:f8:cc:6e:61:05:f4:33:14:c1:c1:53:92: 14:90:49:36:4c:95:da:f1:d8:cd:b0:0d:fa:80:07: e8:65:3e:6d:5c:cf:aa:65:01:f7:58:37:51:69:c0: 0c:a5:62:44:c0:0c:3d:d0:64:cf:78:a3:3c:b5:ae: d7:1a:6c:f5:6e:99:74:ff:7d:fe:98:22:ff:83:ab: 8d:d6:e6:97:29:1a:5d:c6:b4:3b:47:bc:f9:b2:75: 39:29:09:3d:db:32:10:f4:e2:45:2e:bf:3d:6f:26: 1b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:34:6F:74:75:B7:10:25:61:F3:B2:5B:0F:8D:F3:8B:05:87:46:B9 X509v3 Authority Key Identifier: keyid:A3:50:FA:F3:B6:F1:4B:C8:EE:1B:29:96:EE:D4:8E:27:02:0E:10:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:11:f6:6c:11:7a:97:39:73:4b:b5:45:36:48:df:9b:18:26: 77:5b:b3:c6:a7:29:7f:b2:82:06:8f:2c:b5:fc:33:9c:98:df: f0:1f:79:4f:54:a0:91:34:e1:c7:3e:6c:c7:12:38:d0:d6:59: 34:56:2d:ff:0e:05:02:87:af:46:03:9f:10:24:33:56:5a:c8: 9f:43:16:f4:11:d5:45:19:20:91:4b:2e:38:a0:65:2b:3a:6e: fe:ad:12:e3:49:f1:c1:e0:8d:90:18:a3:70:d7:09:82:bd:20: b2:03:8c:ec:73:6a:96:f5:5e:28:4a:22:48:7e:c9:d6:b3:8c: d8:fa:79:a8:e6:22:c1:71:6c:64:2c:8d:5e:e0:5a:c5:98:4c: d8:aa:85:f6:fa:72:c9:c1:e6:85:74:d4:35:b4:cb:74:70:74: 20:5f:75:24:36:9c:5a:3f:e6:ba:17:34:ed:04:fd:7f:2e:cd: c4:df:de:97:ff:b2:3c:91:21:4e:12:10:7b:c0:30:59:ee:89: b3:e8:fc:e3:1c:20:72:aa:4e:40:c8:4b:35:d7:40:63:26:89: dc:fa:76:76:93:54:20:9d:87:c2:01:d1:6f:00:96:3b:79:55: cf:e9:81:e0:c9:b3:0a:1b:a0:22:53:4f:94:30:e3:4d:1a:9b: 6a:ed:31:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ4MzQxMTAvBgNVBAUTKEEzNTBGQUYzQjZGMTRCQzhFRTFCMjk5NkVFRDQ4RTI3 MDIwRTEwODMwHhcNMjUwNDI2MjAzMTUyWhcNMjUwNTAzMjAzMTUyWjAYMRYwFAYD VQQDEw02ODBkNDJiOC1hMjYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyCklMfxKKitK2haOSMdgIlDQfXDSpF8DB6XHI6xRLE51jPLfgZkK8Y7KiCrV 1bW/becervkdrzACdNSSY/Goobtj3+Bsfro8mBSpNLCXPYuMOKt0jskNAa12lRyQ lo44vD9AGm+9ou2htQkr9fbbgjoGxy4Z4SciGbYzwHEdoDDGMGcFqQEdDTduxtB+ vv+an9xlYrfuQaX4zG5hBfQzFMHBU5IUkEk2TJXa8djNsA36gAfoZT5tXM+qZQH3 WDdRacAMpWJEwAw90GTPeKM8ta7XGmz1bpl0/33+mCL/g6uN1uaXKRpdxrQ7R7z5 snU5KQk92zIQ9OJFLr89byYb1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEY0b3R1 txAlYfOyWw+N84sFh0a5MB8GA1UdIwQYMBaAFKNQ+vO28UvI7hsplu7UjicCDhCD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDgzNC81MUJFREZDNEND OEQxMUVBQUZGRURCMzZDNEY5QUUwMi9vMUQ2ODdieFM4anVHeW1XN3RTT0p3SU9F SU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28xRDY4N2J4UzhqdUd5bVc3dFNPSndJT0VJTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDgzNC81MUJFREZDNENDOEQxMUVBQUZGRURCMzZDNEY5QUUwMi9vMUQ2ODdieFM4 anVHeW1XN3RTT0p3SU9FSU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4EfZsEXqXOXNLtUU2SN+bGCZ3W7PGpyl/soIGjyy1/DOcmN/wH3lP VKCRNOHHPmzHEjjQ1lk0Vi3/DgUCh69GA58QJDNWWsifQxb0EdVFGSCRSy44oGUr Om7+rRLjSfHB4I2QGKNw1wmCvSCyA4zsc2qW9V4oSiJIfsnWs4zY+nmo5iLBcWxk LI1e4FrFmEzYqoX2+nLJweaFdNQ1tMt0cHQgX3UkNpxaP+a6FzTtBP1/Ls3E396X /7I8kSFOEhB7wDBZ7omz6PzjHCByqk5AyEs110BjJonc+nZ2k1QgnYfCAdFvAJY7 eVXP6YHgybMKG6AiU0+UMONNGptq7THl -----END CERTIFICATE-----Generated at Sun Apr 27 00:14:11 2025 by rpki-client on console.sobornost.net