$ rpki-client -vvf rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft File: CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft (raw, json) Hash identifier: Vv6OAqWNgdVDvRMHMWLMlxWS8ySd3NutGVb1C58kgg0= Subject key identifier: 72:BD:3D:14:65:80:6E:C8:3E:5D:46:CF:08:DD:47:F5:EA:2C:81:CF Authority key identifier: 0B:02:2B:1E:A3:4C:03:7C:51:F6:57:FC:3E:0D:84:A3:C6:18:68:22 Certificate issuer: /CN=A91D890E/serialNumber=0B022B1EA34C037C51F657FC3E0D84A3C6186822 Certificate serial: 0916 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft Manifest number: 0910 Signing time: Mon 28 Apr 2025 20:47:27 +0000 Manifest this update: Mon 28 Apr 2025 20:47:26 +0000 Manifest next update: Mon 05 May 2025 20:47:26 +0000 Files and hashes: 1: CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.crl (hash: EUksxtiEK6+fdoAs3A96xNdl/1FwtKZlrfUtolvhe1s=) 2: FDAEEFB0A12A11EAB063A548C4F9AE02.roa (hash: jfGEyrs8irz34ZW5qDRzJ5sduiRp3kjnfVg2NZqBN9E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.crl rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2326 (0x916) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D890E, serialNumber=0B022B1EA34C037C51F657FC3E0D84A3C6186822 Validity Not Before: Apr 28 20:47:26 2025 GMT Not After : May 5 20:47:26 2025 GMT Subject: CN=680fe95e-9279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:eb:12:30:be:c4:e8:99:4f:48:98:d0:d0:ab: 8d:01:4b:f8:98:8a:46:e6:00:88:74:44:16:74:5d: 8d:3b:72:d3:9d:8f:c3:79:e7:42:55:d6:17:97:c5: 82:62:e6:ca:6a:1f:41:42:dc:d3:f4:ec:3e:06:b3: a4:83:a7:e9:5a:7e:43:d8:bf:5b:4f:79:d6:cb:5b: 13:36:47:3c:78:fa:f5:b6:9e:de:2a:8e:d5:a2:cd: 6b:3d:15:ee:48:85:94:13:21:41:b7:8e:67:04:d5: bf:30:b6:1f:5b:76:74:72:cb:8f:24:55:1a:52:be: 27:dc:2b:2e:d8:8e:4e:b7:26:64:e5:f9:c8:b3:85: c8:0b:39:41:13:68:95:3d:8b:e7:8f:ca:86:00:4c: a7:8d:2b:f8:b3:bb:18:de:d5:c9:b3:be:f7:38:ca: 74:16:b2:3c:64:4a:c5:42:a9:50:19:8a:de:83:e2: 1e:a1:86:d1:4b:53:c2:84:11:90:2f:2b:4a:af:2b: a8:b8:69:8f:dc:0f:61:b7:47:c0:09:b4:58:36:fe: 43:e5:b3:bd:a7:59:19:43:8f:8a:b9:f7:08:3b:97: ff:5a:84:a3:36:49:cd:69:b3:0f:f8:c2:1a:4d:9d: 49:fb:22:f3:90:8f:00:68:0d:3c:d6:69:ad:0f:da: 1f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:BD:3D:14:65:80:6E:C8:3E:5D:46:CF:08:DD:47:F5:EA:2C:81:CF X509v3 Authority Key Identifier: keyid:0B:02:2B:1E:A3:4C:03:7C:51:F6:57:FC:3E:0D:84:A3:C6:18:68:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:22:3f:17:cc:fc:6f:88:be:61:b4:22:eb:e8:a2:3b:6a:a7: 17:da:18:53:11:e6:a9:66:2c:54:f3:b1:8a:55:cd:1a:cd:b4: 6f:1d:b4:a9:5d:72:2c:22:0c:93:dc:7d:7f:7a:f2:7b:5c:98: c2:ed:8b:89:a3:44:1e:6d:48:0e:de:c6:77:40:42:9d:e2:eb: 1e:7e:d0:ee:ed:dd:1f:95:35:50:91:d2:65:f3:6a:50:6b:87: 7c:05:5b:86:05:b5:6d:47:95:82:49:50:ef:4e:43:7b:62:93: 26:d6:60:76:88:04:d1:d1:33:ec:ee:25:2f:68:16:c5:99:1f: 3d:89:6c:5c:6f:f0:0b:86:ff:b4:31:b7:dd:06:2e:bd:79:3a: d8:53:b8:be:b1:62:fe:c2:6c:75:45:54:0d:d7:8d:30:c0:79: ce:54:df:24:56:ca:dc:7f:ed:c2:f3:f0:6b:d9:44:00:b8:fb: 20:18:cd:d0:7e:d8:b2:7a:3c:88:cb:f5:15:4c:bf:ba:88:b8: 67:f3:69:7d:f4:06:ae:58:84:dc:5f:06:f7:64:1a:2b:df:e5: 8a:83:22:b2:1a:f6:da:27:76:44:f1:ea:d8:bd:67:6d:d9:05: 68:1c:6f:5b:e4:ac:b5:f9:5d:4d:cb:93:c8:29:97:bc:1b:c1: 8e:08:68:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCRYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg5MEUxMTAvBgNVBAUTKDBCMDIyQjFFQTM0QzAzN0M1MUY2NTdGQzNFMEQ4NEEz QzYxODY4MjIwHhcNMjUwNDI4MjA0NzI2WhcNMjUwNTA1MjA0NzI2WjAYMRYwFAYD VQQDEw02ODBmZTk1ZS05Mjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw+sSML7E6JlPSJjQ0KuNAUv4mIpG5gCIdEQWdF2NO3LTnY/DeedCVdYXl8WC YubKah9BQtzT9Ow+BrOkg6fpWn5D2L9bT3nWy1sTNkc8ePr1tp7eKo7Vos1rPRXu SIWUEyFBt45nBNW/MLYfW3Z0csuPJFUaUr4n3Csu2I5OtyZk5fnIs4XICzlBE2iV PYvnj8qGAEynjSv4s7sY3tXJs773OMp0FrI8ZErFQqlQGYreg+IeoYbRS1PChBGQ LytKryuouGmP3A9ht0fACbRYNv5D5bO9p1kZQ4+KufcIO5f/WoSjNknNabMP+MIa TZ1J+yLzkI8AaA081mmtD9ofsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHK9PRRl gG7IPl1GzwjdR/XqLIHPMB8GA1UdIwQYMBaAFAsCKx6jTAN8UfZX/D4NhKPGGGgi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODkwRS84RDQxMzVGRUEx MjkxMUVBQTAyMjc3NDZDNEY5QUUwMi9Dd0lySHFOTUEzeFI5bGY4UGcyRW84WVlh Q0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N3SXJIcU5NQTN4UjlsZjhQZzJFbzhZWWFDSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODkwRS84RDQxMzVGRUExMjkxMUVBQTAyMjc3NDZDNEY5QUUwMi9Dd0lySHFOTUEz eFI5bGY4UGcyRW84WVlhQ0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkIj8XzPxviL5htCLr6KI7aqcX2hhTEeapZixU87GKVc0azbRvHbSp XXIsIgyT3H1/evJ7XJjC7YuJo0QebUgO3sZ3QEKd4useftDu7d0flTVQkdJl82pQ a4d8BVuGBbVtR5WCSVDvTkN7YpMm1mB2iATR0TPs7iUvaBbFmR89iWxcb/ALhv+0 MbfdBi69eTrYU7i+sWL+wmx1RVQN140wwHnOVN8kVsrcf+3C8/Br2UQAuPsgGM3Q ftiyejyIy/UVTL+6iLhn82l99AauWITcXwb3ZBor3+WKgyKyGvbaJ3ZE8erYvWdt 2QVoHG9b5Ky1+V1Ny5PIKZe8G8GOCGgA -----END CERTIFICATE-----Generated at Mon Apr 28 23:05:56 2025 by rpki-client on console.sobornost.net