$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.mft File: rg5L7FaP5v7kkvcuTTrLko2cHk8.mft (raw, json) Hash identifier: xlBt+bP8QfDsmCt7MSjLOt0jVn85SEDzkIoY26VxSts= Subject key identifier: BE:7F:EC:59:9A:48:01:F4:9F:D4:70:4E:EB:36:B7:2D:6F:E4:01:A0 Authority key identifier: AE:0E:4B:EC:56:8F:E6:FE:E4:92:F7:2E:4D:3A:CB:92:8D:9C:1E:4F Certificate issuer: /CN=A91DBF0C/serialNumber=AE0E4BEC568FE6FEE492F72E4D3ACB928D9C1E4F Certificate serial: 6A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rg5L7FaP5v7kkvcuTTrLko2cHk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.mft Manifest number: 67 Signing time: Fri 25 Apr 2025 06:00:44 +0000 Manifest this update: Fri 25 Apr 2025 06:00:43 +0000 Manifest next update: Fri 02 May 2025 06:00:43 +0000 Files and hashes: 1: rg5L7FaP5v7kkvcuTTrLko2cHk8.crl (hash: 3++GKud2huCLzJlxt2hW4AV4YjkEPwzjo5hGv8WRS4M=) 2: 9E4987668C7F11EFB4290976C4F9AE02.roa (hash: cHJy1BLtElHS3p1bo+4QsrHmfc/col4vczERE1sjyMs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.crl rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rg5L7FaP5v7kkvcuTTrLko2cHk8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 106 (0x6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBF0C, serialNumber=AE0E4BEC568FE6FEE492F72E4D3ACB928D9C1E4F Validity Not Before: Apr 25 06:00:43 2025 GMT Not After : May 2 06:00:43 2025 GMT Subject: CN=680b250b-2cdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:0c:b6:de:d6:ed:db:b9:78:2b:51:55:21:d2: 91:da:23:7a:22:6f:36:13:67:0c:78:e4:13:9e:37: d1:95:66:3d:47:88:d6:71:fa:76:e0:d2:c6:d5:1e: d9:be:57:37:8e:a6:a5:60:4d:de:04:ae:05:17:af: 12:15:d2:4f:44:ef:c2:e9:6c:21:84:3b:a4:2a:e9: 29:c9:f4:be:98:b3:22:28:17:db:f3:bb:ad:95:cc: 06:dc:63:fe:e7:8d:a3:76:ce:6c:8e:54:97:72:ee: be:1a:df:59:54:08:e4:3e:64:49:ca:c5:fa:99:c7: bb:b9:72:5f:a4:ba:d4:19:09:fa:61:71:7e:df:42: c4:78:87:40:6e:ef:d7:fb:c1:6f:b6:f8:03:e5:2c: 6c:76:4e:53:7a:4b:d6:7e:c9:4e:ab:58:09:a9:c0: cd:17:96:ff:db:7e:10:d4:55:d7:dc:ab:dd:b9:e8: 12:db:91:c6:59:54:b6:d9:4a:ef:65:67:ff:35:69: 18:64:2e:df:55:a9:dc:3a:14:fe:11:b9:55:47:ad: 2a:4b:56:41:36:b2:b1:f6:1e:70:af:b1:d3:38:3c: 38:19:02:0c:65:aa:54:41:89:2c:4c:d2:fa:3f:45: d0:06:e6:f9:2f:02:6e:25:fa:86:f6:cb:ce:00:27: 97:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:7F:EC:59:9A:48:01:F4:9F:D4:70:4E:EB:36:B7:2D:6F:E4:01:A0 X509v3 Authority Key Identifier: keyid:AE:0E:4B:EC:56:8F:E6:FE:E4:92:F7:2E:4D:3A:CB:92:8D:9C:1E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rg5L7FaP5v7kkvcuTTrLko2cHk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:f1:23:3b:0d:b8:03:dc:9f:a4:10:4b:4b:04:f2:48:9c:71: 19:90:ca:a3:db:22:c7:a7:a6:fd:de:a4:30:e1:87:5f:0e:23: e2:2f:e7:44:62:1e:95:d3:e4:6d:1a:24:5a:f7:f1:b2:d4:fb: ef:84:c6:33:e7:79:7a:18:b0:e0:d5:b8:de:90:4b:af:94:fd: ac:1a:d5:8f:d5:28:ba:9a:4d:3d:e9:69:c2:0e:03:4c:c5:79: 5a:25:ce:9b:05:66:f1:96:c2:c5:d3:85:9c:35:dd:dd:52:96: c9:9b:c6:3f:8a:a3:8c:8e:e7:9b:2c:b0:ea:c1:03:5f:7c:1f: 89:1a:47:cc:08:01:50:4a:82:15:2c:0f:57:80:d2:55:06:07: 77:cd:03:62:e0:dc:c9:37:1b:51:5c:08:b7:d4:e9:d2:7f:7d: ff:b1:ea:3a:01:cb:20:7c:5d:1c:d5:20:b5:37:73:bb:7e:de: 3d:cf:57:b0:90:8a:0e:24:18:a2:c8:9f:2e:1d:4e:b8:e6:ac: e0:62:79:af:b0:7f:ec:f0:aa:63:7d:ef:76:32:0a:53:89:9f: 77:00:e6:0f:6e:f8:5c:cf:0f:67:04:9c:df:08:45:52:48:f0: 2e:1e:4e:9e:32:7b:a7:05:83:3d:bb:4d:1d:89:17:e3:9e:9c: fc:bc:b7:cd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBajANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QkYwQzExMC8GA1UEBRMoQUUwRTRCRUM1NjhGRTZGRUU0OTJGNzJFNEQzQUNCOTI4 RDlDMUU0RjAeFw0yNTA0MjUwNjAwNDNaFw0yNTA1MDIwNjAwNDNaMBgxFjAUBgNV BAMTDTY4MGIyNTBiLTJjZGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRDLbe1u3buXgrUVUh0pHaI3oibzYTZwx45BOeN9GVZj1HiNZx+nbg0sbVHtm+ VzeOpqVgTd4ErgUXrxIV0k9E78LpbCGEO6Qq6SnJ9L6YsyIoF9vzu62VzAbcY/7n jaN2zmyOVJdy7r4a31lUCOQ+ZEnKxfqZx7u5cl+kutQZCfphcX7fQsR4h0Bu79f7 wW+2+APlLGx2TlN6S9Z+yU6rWAmpwM0Xlv/bfhDUVdfcq9256BLbkcZZVLbZSu9l Z/81aRhkLt9Vqdw6FP4RuVVHrSpLVkE2srH2HnCvsdM4PDgZAgxlqlRBiSxM0vo/ RdAG5vkvAm4l+ob2y84AJ5fZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvn/sWZpI AfSf1HBO6za3LW/kAaAwHwYDVR0jBBgwFoAUrg5L7FaP5v7kkvcuTTrLko2cHk8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURCRjBDLzQxNDg1MDcwOEM1 QjExRUZBNzA2NzU3RkM0RjlBRTAyL3JnNUw3RmFQNXY3a2t2Y3VUVHJMa28yY0hr OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcmc1TDdGYVA1djdra3ZjdVRUckxrbzJjSGs4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURC RjBDLzQxNDg1MDcwOEM1QjExRUZBNzA2NzU3RkM0RjlBRTAyL3JnNUw3RmFQNXY3 a2t2Y3VUVHJMa28yY0hrOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJDxIzsNuAPcn6QQS0sE8kiccRmQyqPbIsenpv3epDDhh18OI+Iv50Ri HpXT5G0aJFr38bLU+++ExjPneXoYsODVuN6QS6+U/awa1Y/VKLqaTT3pacIOA0zF eVolzpsFZvGWwsXThZw13d1Slsmbxj+Ko4yO55sssOrBA198H4kaR8wIAVBKghUs D1eA0lUGB3fNA2Lg3Mk3G1FcCLfU6dJ/ff+x6joByyB8XRzVILU3c7t+3j3PV7CQ ig4kGKLIny4dTrjmrOBiea+wf+zwqmN973YyClOJn3cA5g9u+FzPD2cEnN8IRVJI 8C4eTp4ye6cFgz27TR2JF+OenPy8t80= -----END CERTIFICATE-----Generated at Fri Apr 25 08:25:14 2025 by rpki-client on console.sobornost.net