$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft File: 5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft (raw, json) Hash identifier: ZgPEKFGxyYJe/UwTyOrXC2NOwb74AzzThmLYR8o+jfU= Subject key identifier: DE:01:5E:E9:89:63:0A:E9:A2:1F:37:14:DB:7D:65:01:67:0E:C3:DC Authority key identifier: E5:B1:CE:1D:45:39:18:19:5B:EB:5C:D9:0F:6D:87:9E:FE:99:10:A2 Certificate issuer: /CN=A91DE5E8/serialNumber=E5B1CE1D453918195BEB5CD90F6D879EFE9910A2 Certificate serial: 01A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5bHOHUU5GBlb61zZD22Hnv6ZEKI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft Manifest number: 01A3 Signing time: Sun 27 Apr 2025 02:19:37 +0000 Manifest this update: Sun 27 Apr 2025 02:19:37 +0000 Manifest next update: Sun 04 May 2025 02:19:37 +0000 Files and hashes: 1: 5bHOHUU5GBlb61zZD22Hnv6ZEKI.crl (hash: y215m51G4JM8YUnfM+CwNHtymge1md4ElK2gO9hUeUA=) 2: 785B44D6F2AF11EF97443030C4F9AE02.roa (hash: 3X8JQRJ56NXF/A25OQxe1Q8xkJiOt4/FMaPtZ+BwKik=) 3: B264EB66A30911ED99A82087C4F9AE02.roa (hash: tZEzhiKfHDteKh17cCbwci/tZYnVymPaW90yd5ZJ1q4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.crl rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5bHOHUU5GBlb61zZD22Hnv6ZEKI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:19:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 425 (0x1a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE5E8, serialNumber=E5B1CE1D453918195BEB5CD90F6D879EFE9910A2 Validity Not Before: Apr 27 02:19:37 2025 GMT Not After : May 4 02:19:37 2025 GMT Subject: CN=680d9439-a3dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:8f:47:47:40:b8:99:6c:d6:c7:70:0e:92:d2: 1f:49:81:e8:92:c0:e8:36:b7:3e:37:7b:46:66:7b: 5e:46:c8:05:c6:28:2b:22:1a:31:78:c4:5b:e9:95: 72:d4:0a:05:1e:fa:8c:0e:d4:56:ad:a1:e7:d1:1a: 23:82:cb:7a:0c:23:cb:f9:b2:bd:1b:53:29:c3:46: 63:fd:34:e6:19:21:e9:1c:6f:cc:d5:53:90:fd:f5: cf:98:fe:79:d5:20:90:89:14:35:56:60:d6:6b:1c: fc:33:98:b1:3b:1c:22:3c:11:ba:de:3c:28:b2:66: e4:92:74:4b:81:23:d6:f1:5e:d1:0b:81:ac:4d:46: 85:02:a0:69:64:90:2e:fe:c7:3d:fb:59:f8:3c:21: 66:93:96:24:93:7d:3e:94:10:02:58:ba:4b:20:d0: 2e:a7:48:32:19:3f:e2:ba:ce:c0:d1:72:f9:aa:2e: 74:f9:26:10:04:fb:b2:b3:aa:76:15:8e:e7:b3:ea: 32:82:24:e3:65:2f:74:ca:39:b3:09:5f:4e:3f:83: fc:2f:e2:0a:f0:33:c8:8e:40:b8:73:ff:1d:da:74: d4:66:fa:14:d3:5f:76:17:17:2f:f7:76:3a:cc:44: 22:d3:39:84:3c:2d:9c:38:f6:d5:bd:42:96:6c:af: d3:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:01:5E:E9:89:63:0A:E9:A2:1F:37:14:DB:7D:65:01:67:0E:C3:DC X509v3 Authority Key Identifier: keyid:E5:B1:CE:1D:45:39:18:19:5B:EB:5C:D9:0F:6D:87:9E:FE:99:10:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5bHOHUU5GBlb61zZD22Hnv6ZEKI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:00:b1:20:2d:4d:41:23:6c:46:67:75:8f:a3:7c:84:59:2c: 98:5a:65:2c:91:de:bb:e3:20:76:00:0a:2c:dd:79:a4:3c:e7: 90:15:3f:ee:29:d8:66:e5:04:b1:63:44:b6:f9:44:3e:51:35: 7c:d7:62:98:bf:b4:c8:8b:ca:e4:3e:54:ab:05:d7:0b:f5:9a: a3:95:a2:c6:f3:37:e1:0d:71:71:50:cc:3f:b6:2d:ee:55:0b: dd:58:1a:2c:82:0a:6a:e8:a6:ec:4a:35:44:29:30:ab:0b:ff: 1b:18:6b:b6:83:b1:9d:0f:29:24:f9:52:24:7e:fd:c5:8c:c3: bf:bf:3e:fb:d5:fd:53:3f:b3:5f:12:6f:ed:a6:77:be:c6:70: fb:1e:ad:b1:4f:19:94:ab:74:c8:15:8d:78:8e:63:34:29:96: 61:29:0b:96:c2:78:5f:b7:3f:eb:b7:47:a8:f7:17:00:f5:ce: 8b:9b:40:ea:26:2f:ca:32:6e:38:16:69:ec:b7:d3:fa:1f:32: f7:2e:bb:57:cc:bd:57:d2:4b:fd:15:13:0d:8d:92:d2:b5:f9: aa:54:9d:9f:18:bf:e1:28:57:87:3c:10:31:a3:bf:29:e1:e5: 7b:8c:d8:5a:36:55:50:4e:20:ba:f1:93:1b:59:36:72:a6:8a: bf:b1:22:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU1RTgxMTAvBgNVBAUTKEU1QjFDRTFENDUzOTE4MTk1QkVCNUNEOTBGNkQ4NzlF RkU5OTEwQTIwHhcNMjUwNDI3MDIxOTM3WhcNMjUwNTA0MDIxOTM3WjAYMRYwFAYD VQQDEw02ODBkOTQzOS1hM2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1o9HR0C4mWzWx3AOktIfSYHoksDoNrc+N3tGZnteRsgFxigrIhoxeMRb6ZVy 1AoFHvqMDtRWraHn0Rojgst6DCPL+bK9G1Mpw0Zj/TTmGSHpHG/M1VOQ/fXPmP55 1SCQiRQ1VmDWaxz8M5ixOxwiPBG63jwosmbkknRLgSPW8V7RC4GsTUaFAqBpZJAu /sc9+1n4PCFmk5Ykk30+lBACWLpLINAup0gyGT/ius7A0XL5qi50+SYQBPuys6p2 FY7ns+oygiTjZS90yjmzCV9OP4P8L+IK8DPIjkC4c/8d2nTUZvoU0192Fxcv93Y6 zEQi0zmEPC2cOPbVvUKWbK/TZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN4BXumJ Ywrpoh83FNt9ZQFnDsPcMB8GA1UdIwQYMBaAFOWxzh1FORgZW+tc2Q9th57+mRCi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTVFOC9FOUUxQkYyOEEz MDUxMUVEQUMxNEVFNkNDNEY5QUUwMi81YkhPSFVVNUdCbGI2MXpaRDIySG52NlpF S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzViSE9IVVU1R0JsYjYxelpEMjJIbnY2WkVLSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTVFOC9FOUUxQkYyOEEzMDUxMUVEQUMxNEVFNkNDNEY5QUUwMi81YkhPSFVVNUdC bGI2MXpaRDIySG52NlpFS0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrALEgLU1BI2xGZ3WPo3yEWSyYWmUskd674yB2AAos3XmkPOeQFT/u Kdhm5QSxY0S2+UQ+UTV812KYv7TIi8rkPlSrBdcL9ZqjlaLG8zfhDXFxUMw/ti3u VQvdWBosggpq6KbsSjVEKTCrC/8bGGu2g7GdDykk+VIkfv3FjMO/vz771f1TP7Nf Em/tpne+xnD7Hq2xTxmUq3TIFY14jmM0KZZhKQuWwnhftz/rt0eo9xcA9c6Lm0Dq Ji/KMm44Fmnst9P6HzL3LrtXzL1X0kv9FRMNjZLStfmqVJ2fGL/hKFeHPBAxo78p 4eV7jNhaNlVQTiC68ZMbWTZypoq/sSLA -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:14 2025 by rpki-client on console.sobornost.net