$ rpki-client -vvf rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft File: 3obmXuoeCzDk_Y2SRYft9XI9UH0.mft (raw, json) Hash identifier: 8A8MwYOoG7JslXjwK0UDP1sYKN/etChV3RiYeMZ9u2o= Subject key identifier: BA:FD:58:CC:90:01:3B:E2:FF:81:89:06:05:DA:6D:44:C3:BD:18:A7 Authority key identifier: DE:86:E6:5E:EA:1E:0B:30:E4:FD:8D:92:45:87:ED:F5:72:3D:50:7D Certificate issuer: /CN=A91E00A5/serialNumber=DE86E65EEA1E0B30E4FD8D924587EDF5723D507D Certificate serial: 73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft Manifest number: 71 Signing time: Sun 27 Apr 2025 05:40:14 +0000 Manifest this update: Sun 27 Apr 2025 05:40:14 +0000 Manifest next update: Sun 04 May 2025 05:40:14 +0000 Files and hashes: 1: 3obmXuoeCzDk_Y2SRYft9XI9UH0.crl (hash: BZTwz0ZYDTKLcnn8qB+qsxM8YgdrnP1fDvIDlQlMQ4o=) 2: 1F63E4347ABC11EF9E53E753C4F9AE02.roa (hash: HKA4VosuvqKj93QksjNsBERDuKRgYc9/Nd6hWkYBCUw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.crl rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E00A5, serialNumber=DE86E65EEA1E0B30E4FD8D924587EDF5723D507D Validity Not Before: Apr 27 05:40:14 2025 GMT Not After : May 4 05:40:14 2025 GMT Subject: CN=680dc33e-a86e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d4:0c:98:11:0c:4a:92:a7:37:a5:ed:4a:55: 18:44:e8:5f:ba:45:45:e7:c4:81:03:f5:f5:52:b6: ec:8a:16:35:ec:dd:a6:76:92:32:c4:ca:37:81:a4: dd:0b:b9:97:7f:a6:fb:ae:96:e5:76:97:b9:80:04: 7f:29:72:03:1a:02:f3:f8:bc:02:ba:e3:ba:b8:dd: 1f:cd:78:99:79:4e:0f:01:da:c2:68:16:cf:c2:07: 9c:39:cd:d5:d4:3a:ed:52:8f:0f:75:40:23:e9:19: a5:14:ae:e4:20:13:8d:50:78:cf:09:f5:a6:35:51: 44:d3:b2:3b:17:62:72:01:0d:43:2a:bf:ba:a7:37: 29:cd:b5:51:13:e8:94:6a:2c:8e:fe:58:7e:0b:20: cc:6a:ac:8e:9b:26:66:65:3c:71:89:5e:7b:e2:14: 5e:47:80:29:1c:ce:59:09:b4:7f:43:8e:9f:83:9e: 00:0a:52:25:12:8d:c5:a4:4e:08:8f:ef:18:d2:52: ef:3a:e9:fe:b3:7e:2f:00:67:cc:8a:ea:e0:87:f5: f1:db:f3:67:fb:bf:20:21:22:06:ff:20:36:c4:1d: bd:93:d1:74:1c:1f:87:6a:24:50:8a:ef:aa:34:a6: 5d:2e:3e:a3:6b:a8:6b:df:12:c0:29:e4:09:48:82: 02:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:FD:58:CC:90:01:3B:E2:FF:81:89:06:05:DA:6D:44:C3:BD:18:A7 X509v3 Authority Key Identifier: keyid:DE:86:E6:5E:EA:1E:0B:30:E4:FD:8D:92:45:87:ED:F5:72:3D:50:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:a1:9f:43:6f:9e:d7:26:db:7c:0c:14:9a:ec:32:e5:de:98: 09:a2:40:fe:e1:56:6a:a8:1c:e6:2f:14:d6:c4:7c:68:10:4a: 3b:64:19:42:07:eb:f8:9b:b6:ac:f6:0c:5b:d7:6d:d1:ba:e8: c9:ae:d1:61:64:e4:02:32:f6:bf:5a:11:6b:7f:24:21:12:8c: 5b:6c:dd:af:1c:cb:8f:f6:ad:3d:ab:c5:db:6f:c0:24:b9:77: 9e:3f:48:8e:25:0d:32:a4:1a:f7:09:97:c8:34:79:71:9a:6d: 3b:78:4b:4c:82:b2:09:97:8e:b8:6e:1c:6b:f6:f7:b1:01:fd: fa:44:87:ac:e4:55:09:c6:eb:52:5a:60:aa:8a:8d:d0:30:0f: f6:11:5c:fc:b4:7c:ae:79:86:f4:c4:bb:b1:08:c4:c9:3e:96: d7:14:a6:d5:08:54:1f:38:57:53:bd:29:f3:46:3e:9c:57:d6: c0:9e:89:15:4e:fc:22:20:44:8c:40:fe:fc:ac:82:7c:33:c1: 0a:37:1d:d8:ac:5b:b2:67:05:1d:55:b1:78:6b:ba:36:98:0f: c6:7c:28:b7:72:bd:55:20:b0:2a:84:9e:00:2f:e9:ce:19:c0: 16:74:75:6e:30:4e:18:ee:57:9a:4d:3b:99:6e:47:ff:52:0f: 64:ff:85:f0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MDBBNTExMC8GA1UEBRMoREU4NkU2NUVFQTFFMEIzMEU0RkQ4RDkyNDU4N0VERjU3 MjNENTA3RDAeFw0yNTA0MjcwNTQwMTRaFw0yNTA1MDQwNTQwMTRaMBgxFjAUBgNV BAMTDTY4MGRjMzNlLWE4NmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDA1AyYEQxKkqc3pe1KVRhE6F+6RUXnxIED9fVStuyKFjXs3aZ2kjLEyjeBpN0L uZd/pvuuluV2l7mABH8pcgMaAvP4vAK647q43R/NeJl5Tg8B2sJoFs/CB5w5zdXU Ou1Sjw91QCPpGaUUruQgE41QeM8J9aY1UUTTsjsXYnIBDUMqv7qnNynNtVET6JRq LI7+WH4LIMxqrI6bJmZlPHGJXnviFF5HgCkczlkJtH9Djp+DngAKUiUSjcWkTgiP 7xjSUu866f6zfi8AZ8yK6uCH9fHb82f7vyAhIgb/IDbEHb2T0XQcH4dqJFCK76o0 pl0uPqNrqGvfEsAp5AlIggL3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUuv1YzJAB O+L/gYkGBdptRMO9GKcwHwYDVR0jBBgwFoAU3obmXuoeCzDk/Y2SRYft9XI9UH0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUwMEE1L0E2NDgzQTNDN0FC QjExRUY5Mzc5QUU1MkM0RjlBRTAyLzNvYm1YdW9lQ3pEa19ZMlNSWWZ0OVhJOVVI MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM29ibVh1b2VDekRrX1kyU1JZZnQ5WEk5VUgwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUw MEE1L0E2NDgzQTNDN0FCQjExRUY5Mzc5QUU1MkM0RjlBRTAyLzNvYm1YdW9lQ3pE a19ZMlNSWWZ0OVhJOVVIMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAL6hn0Nvntcm23wMFJrsMuXemAmiQP7hVmqoHOYvFNbEfGgQSjtkGUIH 6/ibtqz2DFvXbdG66Mmu0WFk5AIy9r9aEWt/JCESjFts3a8cy4/2rT2rxdtvwCS5 d54/SI4lDTKkGvcJl8g0eXGabTt4S0yCsgmXjrhuHGv297EB/fpEh6zkVQnG61Ja YKqKjdAwD/YRXPy0fK55hvTEu7EIxMk+ltcUptUIVB84V1O9KfNGPpxX1sCeiRVO /CIgRIxA/vysgnwzwQo3HdisW7JnBR1VsXhrujaYD8Z8KLdyvVUgsCqEngAv6c4Z wBZ0dW4wThjuV5pNO5luR/9SD2T/hfA= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:57 2025 by rpki-client on console.sobornost.net