$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft File: cz1KHp8pnM0_jnJKteer9Ci7GV0.mft (raw, json) Hash identifier: B7kgMy8DkZNFrGZVEB4doEfv8kWutYJS6iosZRXOCFk= Subject key identifier: D0:A7:E9:02:D6:AB:53:B4:53:5C:C9:FC:65:12:7C:80:77:2A:50:51 Authority key identifier: 73:3D:4A:1E:9F:29:9C:CD:3F:8E:72:4A:B5:E7:AB:F4:28:BB:19:5D Certificate issuer: /CN=A91DE500/serialNumber=733D4A1E9F299CCD3F8E724AB5E7ABF428BB195D Certificate serial: EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cz1KHp8pnM0_jnJKteer9Ci7GV0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft Manifest number: EB Signing time: Sun 27 Apr 2025 04:20:15 +0000 Manifest this update: Sun 27 Apr 2025 04:20:15 +0000 Manifest next update: Sun 04 May 2025 04:20:15 +0000 Files and hashes: 1: cz1KHp8pnM0_jnJKteer9Ci7GV0.crl (hash: MsP1BMFFvxpyC2tDdmwjJqtoHWVwdXji/klNFq6Q7+U=) 2: 0C897F3EE84111EFA819A335C4F9AE02.roa (hash: 5gQHbtykFLXuasC1zPt+ul7Apydf3ObCnPPOkuixA6c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.crl rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cz1KHp8pnM0_jnJKteer9Ci7GV0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 238 (0xee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE500, serialNumber=733D4A1E9F299CCD3F8E724AB5E7ABF428BB195D Validity Not Before: Apr 27 04:20:15 2025 GMT Not After : May 4 04:20:15 2025 GMT Subject: CN=680db07f-156e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:00:54:4e:0c:2f:df:e3:d9:05:ef:59:52:c6: 0a:8e:d4:06:d0:ce:68:e6:09:48:41:89:fc:ed:bd: d9:c9:f1:a5:30:fa:66:7f:2c:b2:1f:ab:a0:64:8a: 07:c0:0d:30:69:48:10:ba:4c:56:71:20:f0:75:86: 32:df:d3:6b:cd:b3:79:ef:be:3e:64:d1:f9:09:e2: 79:0f:ef:b2:8d:3d:c5:88:cc:e8:32:12:26:2e:1c: 28:09:1a:92:df:b6:a7:a1:e6:dd:0a:24:3a:75:e9: 1c:b6:88:d5:7f:8a:ad:1e:74:a2:8d:71:7a:11:cc: 38:cb:20:f2:c5:0d:8a:75:11:c3:63:f1:5f:6e:50: f6:fd:5a:80:11:d3:2a:12:57:76:5e:b0:46:96:e3: ea:28:76:f8:2d:57:d0:d7:7b:1c:52:d6:d2:79:b5: 7b:aa:ed:7f:23:fd:61:91:23:8d:37:aa:d3:f0:a1: 13:10:a1:e7:7b:af:d4:07:fc:1f:82:00:56:97:98: 12:37:18:99:c7:c5:93:da:7d:65:e8:ba:c2:53:18: 83:1e:d0:ef:65:f3:26:2d:e4:f9:c3:dd:f1:95:85: 88:70:c6:56:e4:fb:0f:96:97:ad:97:fa:07:df:bc: b4:eb:88:5d:49:23:9e:ef:93:00:2b:32:ad:13:79: c0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:A7:E9:02:D6:AB:53:B4:53:5C:C9:FC:65:12:7C:80:77:2A:50:51 X509v3 Authority Key Identifier: keyid:73:3D:4A:1E:9F:29:9C:CD:3F:8E:72:4A:B5:E7:AB:F4:28:BB:19:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cz1KHp8pnM0_jnJKteer9Ci7GV0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:db:ee:f8:68:8d:3d:70:95:48:c0:56:41:dd:ed:7c:a0:4c: b9:47:b2:82:7f:60:b2:3d:56:af:10:fb:4c:62:ba:0a:8b:a7: d8:f9:f8:ef:49:68:a2:b8:19:e2:00:86:bb:dd:30:10:bd:6d: 8a:55:a0:98:cb:e4:b5:8f:20:dd:2b:2a:33:56:c0:fa:29:d6: 81:5b:f1:e8:7e:3b:ab:00:6f:1d:bc:f8:f5:cc:20:94:fc:1d: 0c:7b:54:2e:c9:53:39:61:00:e1:04:84:ca:0e:1e:23:88:19: e7:86:20:88:55:31:ba:c9:e7:a8:66:c1:81:07:db:11:d0:8c: 1b:3d:76:da:a1:aa:da:9a:8f:ff:35:10:8e:09:5d:70:e1:e1: 0b:39:6e:6e:9f:fb:a0:9d:41:49:8c:db:64:a7:70:64:7c:7b: 26:be:16:90:f0:8d:e3:64:00:eb:09:79:52:a4:76:b8:b2:52: 21:2b:e9:7f:51:83:16:29:aa:fd:e5:6e:7a:84:e4:49:af:67: c6:3f:a3:01:3c:0c:43:1c:64:51:70:0d:cd:bf:dd:79:d8:b9: f0:ac:b3:f9:72:bd:bd:ca:50:cd:06:ab:0d:19:2a:f3:66:8b: e9:15:61:9f:e1:9e:ad:57:5c:01:f0:3b:59:48:bb:bd:35:30: 4d:32:be:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU1MDAxMTAvBgNVBAUTKDczM0Q0QTFFOUYyOTlDQ0QzRjhFNzI0QUI1RTdBQkY0 MjhCQjE5NUQwHhcNMjUwNDI3MDQyMDE1WhcNMjUwNTA0MDQyMDE1WjAYMRYwFAYD VQQDEw02ODBkYjA3Zi0xNTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtwBUTgwv3+PZBe9ZUsYKjtQG0M5o5glIQYn87b3ZyfGlMPpmfyyyH6ugZIoH wA0waUgQukxWcSDwdYYy39NrzbN5774+ZNH5CeJ5D++yjT3FiMzoMhImLhwoCRqS 37anoebdCiQ6dekctojVf4qtHnSijXF6Ecw4yyDyxQ2KdRHDY/FfblD2/VqAEdMq Eld2XrBGluPqKHb4LVfQ13scUtbSebV7qu1/I/1hkSONN6rT8KETEKHne6/UB/wf ggBWl5gSNxiZx8WT2n1l6LrCUxiDHtDvZfMmLeT5w93xlYWIcMZW5PsPlpetl/oH 37y064hdSSOe75MAKzKtE3nAnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNCn6QLW q1O0U1zJ/GUSfIB3KlBRMB8GA1UdIwQYMBaAFHM9Sh6fKZzNP45ySrXnq/Qouxld MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTUwMC80OUU2RkU0NkM3 MkQxMUVFOUM3QzM1MURDNEY5QUUwMi9jejFLSHA4cG5NMF9qbkpLdGVlcjlDaTdH VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N6MUtIcDhwbk0wX2puSkt0ZWVyOUNpN0dWMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTUwMC80OUU2RkU0NkM3MkQxMUVFOUM3QzM1MURDNEY5QUUwMi9jejFLSHA4cG5N MF9qbkpLdGVlcjlDaTdHVjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBN2+74aI09cJVIwFZB3e18oEy5R7KCf2CyPVavEPtMYroKi6fY+fjv SWiiuBniAIa73TAQvW2KVaCYy+S1jyDdKyozVsD6KdaBW/HofjurAG8dvPj1zCCU /B0Me1QuyVM5YQDhBITKDh4jiBnnhiCIVTG6yeeoZsGBB9sR0IwbPXbaoaramo// NRCOCV1w4eELOW5un/ugnUFJjNtkp3BkfHsmvhaQ8I3jZADrCXlSpHa4slIhK+l/ UYMWKar95W56hORJr2fGP6MBPAxDHGRRcA3Nv9152LnwrLP5cr29ylDNBqsNGSrz ZovpFWGf4Z6tV1wB8DtZSLu9NTBNMr48 -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:57 2025 by rpki-client on console.sobornost.net