$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF856/EFF2A0A01C4111F0A9821F3EC4F9AE02/X2mRhqLrzUWx_2oKSvYGBvOz0I0.mft File: X2mRhqLrzUWx_2oKSvYGBvOz0I0.mft (raw, json) Hash identifier: oK2ceqdTLOkFHZm/J6HtAGpBTvTMvFe8WQxOjRBdn/A= Subject key identifier: 66:CF:EF:75:26:78:31:2E:F5:E9:66:57:9C:B9:0F:92:8C:96:54:01 Authority key identifier: 5F:69:91:86:A2:EB:CD:45:B1:FF:6A:0A:4A:F6:06:06:F3:B3:D0:8D Certificate issuer: /CN=A91DF856/serialNumber=5F699186A2EBCD45B1FF6A0A4AF60606F3B3D08D Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mRhqLrzUWx_2oKSvYGBvOz0I0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF856/EFF2A0A01C4111F0A9821F3EC4F9AE02/X2mRhqLrzUWx_2oKSvYGBvOz0I0.mft Manifest number: 07 Signing time: Sun 27 Apr 2025 06:59:18 +0000 Manifest this update: Sun 27 Apr 2025 06:59:17 +0000 Manifest next update: Sun 04 May 2025 06:59:17 +0000 Files and hashes: 1: X2mRhqLrzUWx_2oKSvYGBvOz0I0.crl (hash: ennHksHKDdpI9kObNemfZjC4ImqvUa5/jTlxXSDyDRE=) 2: B245BA601C4311F08254DE40C4F9AE02.roa (hash: cR1hA1Kx4PPiBeW49KPuxZm4E1WoNdgwAMLfYPZP980=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF856/EFF2A0A01C4111F0A9821F3EC4F9AE02/X2mRhqLrzUWx_2oKSvYGBvOz0I0.crl rsync://rpki.apnic.net/member_repository/A91DF856/EFF2A0A01C4111F0A9821F3EC4F9AE02/X2mRhqLrzUWx_2oKSvYGBvOz0I0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mRhqLrzUWx_2oKSvYGBvOz0I0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF856, serialNumber=5F699186A2EBCD45B1FF6A0A4AF60606F3B3D08D Validity Not Before: Apr 27 06:59:17 2025 GMT Not After : May 4 06:59:17 2025 GMT Subject: CN=680dd5c5-8524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:71:0a:02:cb:7b:fb:6c:20:e3:fe:8a:99:1a: 7c:b6:a1:f4:57:f3:f4:94:0c:20:32:9b:a0:17:54: 28:c8:9c:33:9a:25:52:4e:e8:81:4a:2a:49:f0:06: 0f:68:0a:e3:5f:62:63:94:97:c1:a2:9c:53:e6:c1: ca:fd:e7:dd:fd:98:5e:c5:34:60:0d:31:b7:bd:67: 6b:27:c3:89:54:67:0d:a4:4f:c2:ac:23:01:cf:54: cd:13:b6:d2:c1:bc:43:d8:73:e2:93:2b:0b:b3:a9: 16:92:ab:f5:3e:84:f4:99:e5:d4:f4:55:11:6d:89: e2:70:c7:7a:40:ec:0d:b2:c3:7c:11:2e:46:8b:dc: 89:3d:cc:65:71:be:7a:e7:32:66:f3:95:85:47:2a: 11:89:fc:39:99:d7:ee:b1:65:1c:f7:60:3e:44:6d: 8f:6f:71:ed:e6:7e:8a:c6:73:53:74:b6:a3:54:2e: c9:ae:a3:41:3d:4a:4a:c7:0a:7a:eb:d9:ca:a0:3d: 1b:17:f3:25:3d:8e:13:94:93:05:9a:77:74:99:4d: 53:6d:ab:05:f1:f6:9d:9b:78:5f:d7:b7:ca:46:56: 24:b1:ce:b1:23:05:67:73:a7:8d:24:66:b3:bf:85: 2e:26:75:6d:b4:36:0f:c1:90:db:16:b7:d2:18:57: 3e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:CF:EF:75:26:78:31:2E:F5:E9:66:57:9C:B9:0F:92:8C:96:54:01 X509v3 Authority Key Identifier: keyid:5F:69:91:86:A2:EB:CD:45:B1:FF:6A:0A:4A:F6:06:06:F3:B3:D0:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF856/EFF2A0A01C4111F0A9821F3EC4F9AE02/X2mRhqLrzUWx_2oKSvYGBvOz0I0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mRhqLrzUWx_2oKSvYGBvOz0I0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF856/EFF2A0A01C4111F0A9821F3EC4F9AE02/X2mRhqLrzUWx_2oKSvYGBvOz0I0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:4f:e2:6e:21:df:73:26:4a:3e:f8:22:5e:43:fb:52:c2:a4: c5:9f:ab:07:b7:73:11:f6:e6:da:75:81:d9:cd:d6:b4:5f:6e: e6:1b:35:4c:4e:6a:9c:42:3e:d1:10:cf:e6:04:98:64:6e:62: 09:bf:d3:be:be:f9:45:e0:d6:19:2b:49:2a:5b:cc:77:56:27: 73:5d:bb:d2:57:3a:a5:bf:86:67:dd:a8:1f:ad:85:2d:02:00: 5c:49:a3:50:3f:82:88:a8:3e:40:4c:26:71:47:39:0b:e4:f8: e1:bf:01:b2:1b:2d:d9:d7:97:e1:ae:c9:ab:cc:83:a2:52:92: af:09:b6:3d:dc:9b:5b:d0:97:57:d9:ae:8f:c9:5c:a2:0c:f2: cf:b6:7c:3d:98:83:ab:25:b0:95:36:85:46:8d:10:b9:1f:10: 3f:17:d5:d5:16:ed:9b:b4:04:91:19:ec:03:b7:e9:4d:4f:d8: 4d:51:12:c6:32:a1:92:cf:3a:dd:69:73:f0:07:55:50:c9:6c: ac:1e:83:0b:b7:8c:7b:34:76:c7:f4:b5:0a:94:d9:08:30:60: 8d:91:18:d7:a6:c8:28:a8:91:db:0c:b4:d7:7d:e1:58:4c:32: 62:23:a4:34:7c:47:69:61:c7:ae:6b:9f:14:c9:42:09:79:36: 64:4c:71:0c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE Rjg1NjExMC8GA1UEBRMoNUY2OTkxODZBMkVCQ0Q0NUIxRkY2QTBBNEFGNjA2MDZG M0IzRDA4RDAeFw0yNTA0MjcwNjU5MTdaFw0yNTA1MDQwNjU5MTdaMBgxFjAUBgNV BAMTDTY4MGRkNWM1LTg1MjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDdcQoCy3v7bCDj/oqZGny2ofRX8/SUDCAym6AXVCjInDOaJVJO6IFKKknwBg9o CuNfYmOUl8GinFPmwcr95939mF7FNGANMbe9Z2snw4lUZw2kT8KsIwHPVM0TttLB vEPYc+KTKwuzqRaSq/U+hPSZ5dT0VRFtieJwx3pA7A2yw3wRLkaL3Ik9zGVxvnrn MmbzlYVHKhGJ/DmZ1+6xZRz3YD5EbY9vce3mforGc1N0tqNULsmuo0E9SkrHCnrr 2cqgPRsX8yU9jhOUkwWad3SZTVNtqwXx9p2beF/Xt8pGViSxzrEjBWdzp40kZrO/ hS4mdW20Ng/BkNsWt9IYVz6FAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZs/vdSZ4 MS716WZXnLkPkoyWVAEwHwYDVR0jBBgwFoAUX2mRhqLrzUWx/2oKSvYGBvOz0I0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURGODU2L0VGRjJBMEEwMUM0 MTExRjBBOTgyMUYzRUM0RjlBRTAyL1gybVJocUxyelVXeF8yb0tTdllHQnZPejBJ MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWDJtUmhxTHJ6VVd4XzJvS1N2WUdCdk96MEkwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURG ODU2L0VGRjJBMEEwMUM0MTExRjBBOTgyMUYzRUM0RjlBRTAyL1gybVJocUxyelVX eF8yb0tTdllHQnZPejBJMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJdP4m4h33MmSj74Il5D+1LCpMWfqwe3cxH25tp1gdnN1rRfbuYbNUxO apxCPtEQz+YEmGRuYgm/076++UXg1hkrSSpbzHdWJ3Ndu9JXOqW/hmfdqB+thS0C AFxJo1A/goioPkBMJnFHOQvk+OG/AbIbLdnXl+GuyavMg6JSkq8Jtj3cm1vQl1fZ ro/JXKIM8s+2fD2Yg6slsJU2hUaNELkfED8X1dUW7Zu0BJEZ7AO36U1P2E1REsYy oZLPOt1pc/AHVVDJbKwegwu3jHs0dsf0tQqU2QgwYI2RGNemyCiokdsMtNd94VhM MmIjpDR8R2lhx65rnxTJQgl5NmRMcQw= -----END CERTIFICATE-----Generated at Sun Apr 27 10:27:19 2025 by rpki-client on console.sobornost.net