$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.mft File: XvXhpYXEjivEULpy9MMTRoDlKw0.mft (raw, json) Hash identifier: HY6HKuAKdR1e7GT+9K3OQ1b7IOCMcYc18JY2Iyh67tU= Subject key identifier: D6:90:48:5C:90:EE:71:10:21:78:3E:DC:E7:D4:4E:B0:6D:F4:83:EE Authority key identifier: 5E:F5:E1:A5:85:C4:8E:2B:C4:50:BA:72:F4:C3:13:46:80:E5:2B:0D Certificate issuer: /CN=A91E0855/serialNumber=5EF5E1A585C48E2BC450BA72F4C3134680E52B0D Certificate serial: 4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XvXhpYXEjivEULpy9MMTRoDlKw0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.mft Manifest number: 4B Signing time: Sun 27 Apr 2025 05:13:33 +0000 Manifest this update: Sun 27 Apr 2025 05:13:33 +0000 Manifest next update: Sun 04 May 2025 05:13:33 +0000 Files and hashes: 1: XvXhpYXEjivEULpy9MMTRoDlKw0.crl (hash: QCgbQe9DwJZmDyf8syOZLvJjE8PY5q5s5RP2OfHvWw8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.crl rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XvXhpYXEjivEULpy9MMTRoDlKw0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0855, serialNumber=5EF5E1A585C48E2BC450BA72F4C3134680E52B0D Validity Not Before: Apr 27 05:13:33 2025 GMT Not After : May 4 05:13:33 2025 GMT Subject: CN=680dbcfd-97e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c9:d3:9a:ce:0a:b5:4c:c9:ef:ae:d5:d0:fd: 92:9a:f7:8a:be:de:97:4a:43:c8:6d:24:10:60:f9: 17:ab:73:9c:aa:18:12:36:57:74:f5:08:c5:7e:ac: 2f:e6:8e:3b:4c:a1:30:5f:6b:51:82:cf:f4:d3:67: 17:98:33:d2:e1:73:8d:b3:e4:e6:ab:24:77:0d:5f: 7d:4e:01:45:40:50:10:ea:fd:78:25:c9:f9:34:36: f2:d7:92:dc:61:3a:79:e5:12:75:ba:70:24:ff:d0: f3:1a:0d:02:c6:76:48:87:e1:c9:af:9b:2c:07:55: 59:a9:95:ff:63:8b:de:30:95:1f:c3:cf:01:07:68: ac:d1:ed:1e:6c:d7:d1:13:49:3f:f4:e6:f5:a8:5b: 8b:c6:6a:c3:d7:90:48:5a:87:4f:bc:72:2c:58:03: 90:f8:ff:a9:26:04:ee:b0:ae:d8:db:c5:8f:c4:c0: 0d:33:6b:91:35:45:e9:09:ae:a7:10:a3:de:a3:97: 99:db:21:3d:f7:6f:8d:41:88:e1:a6:70:10:ce:79: db:9c:fd:29:e7:13:92:71:9d:db:01:cb:fc:8e:5a: 94:1c:25:02:11:f3:e2:d4:2d:77:14:a2:84:6d:1c: 9f:29:ed:46:cd:b4:af:ef:55:b5:73:6c:72:94:72: 32:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:90:48:5C:90:EE:71:10:21:78:3E:DC:E7:D4:4E:B0:6D:F4:83:EE X509v3 Authority Key Identifier: keyid:5E:F5:E1:A5:85:C4:8E:2B:C4:50:BA:72:F4:C3:13:46:80:E5:2B:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XvXhpYXEjivEULpy9MMTRoDlKw0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:28:85:bd:95:21:a9:71:01:8c:dc:61:e0:09:e0:31:76:04: 94:57:f8:07:4f:25:77:3c:18:bb:28:c3:74:0f:1d:5e:55:cc: f7:eb:6d:b6:c6:0e:fc:84:df:d9:1c:a8:bf:f9:b9:2b:96:8a: 12:e1:9c:ec:ed:ba:70:4e:96:6d:e4:00:9b:ff:02:13:4d:d1: c5:91:c8:ed:36:40:d6:ad:e5:04:17:24:63:bb:08:f8:88:6f: ed:3e:02:83:a0:78:fa:2e:89:2c:a9:06:84:27:6e:c5:0e:08: f5:83:12:16:75:7c:9a:f2:d1:ac:27:2a:13:3d:96:8e:93:b6: dd:4c:32:ee:65:86:f6:04:53:55:d7:91:b9:c0:1c:bf:25:4e: ea:3b:a7:43:c7:3c:b8:1b:bd:89:a2:bf:b6:3f:06:2b:06:19: a8:4a:dd:c3:47:1a:c6:67:d8:ac:24:4d:d5:c0:95:3a:8c:87: a9:4a:41:c8:fe:a2:39:6f:4e:3c:81:0c:20:2d:fb:08:53:56: 29:64:bb:fd:4a:91:53:af:ff:10:31:3b:d0:98:e8:6a:67:47: 9f:d6:34:85:1a:8d:b6:f0:2f:0a:a6:b7:fd:f2:32:76:2d:f1: af:85:1f:ba:66:e0:cc:2e:32:f8:da:7f:85:fb:be:5f:d3:d7: ba:66:b1:5e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MDg1NTExMC8GA1UEBRMoNUVGNUUxQTU4NUM0OEUyQkM0NTBCQTcyRjRDMzEzNDY4 MEU1MkIwRDAeFw0yNTA0MjcwNTEzMzNaFw0yNTA1MDQwNTEzMzNaMBgxFjAUBgNV BAMTDTY4MGRiY2ZkLTk3ZTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfydOazgq1TMnvrtXQ/ZKa94q+3pdKQ8htJBBg+Rerc5yqGBI2V3T1CMV+rC/m jjtMoTBfa1GCz/TTZxeYM9Lhc42z5OarJHcNX31OAUVAUBDq/Xglyfk0NvLXktxh OnnlEnW6cCT/0PMaDQLGdkiH4cmvmywHVVmplf9ji94wlR/DzwEHaKzR7R5s19ET ST/05vWoW4vGasPXkEhah0+8cixYA5D4/6kmBO6wrtjbxY/EwA0za5E1RekJrqcQ o96jl5nbIT33b41BiOGmcBDOeduc/SnnE5JxndsBy/yOWpQcJQIR8+LULXcUooRt HJ8p7UbNtK/vVbVzbHKUcjKrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1pBIXJDu cRAheD7c59ROsG30g+4wHwYDVR0jBBgwFoAUXvXhpYXEjivEULpy9MMTRoDlKw0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUwODU1L0UxQUU1NDdDQjEz ODExRUY5QjUwMzMxMkM0RjlBRTAyL1h2WGhwWVhFaml2RVVMcHk5TU1UUm9EbEt3 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWHZYaHBZWEVqaXZFVUxweTlNTVRSb0RsS3cwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUw ODU1L0UxQUU1NDdDQjEzODExRUY5QjUwMzMxMkM0RjlBRTAyL1h2WGhwWVhFaml2 RVVMcHk5TU1UUm9EbEt3MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFwohb2VIalxAYzcYeAJ4DF2BJRX+AdPJXc8GLsow3QPHV5VzPfrbbbG DvyE39kcqL/5uSuWihLhnOztunBOlm3kAJv/AhNN0cWRyO02QNat5QQXJGO7CPiI b+0+AoOgePouiSypBoQnbsUOCPWDEhZ1fJry0awnKhM9lo6Ttt1MMu5lhvYEU1XX kbnAHL8lTuo7p0PHPLgbvYmiv7Y/BisGGahK3cNHGsZn2KwkTdXAlTqMh6lKQcj+ ojlvTjyBDCAt+whTVilku/1KkVOv/xAxO9CY6GpnR5/WNIUajbbwLwqmt/3yMnYt 8a+FH7pm4MwuMvjaf4X7vl/T17pmsV4= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:57 2025 by rpki-client on console.sobornost.net