$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.mft File: HteCvmLXEBdmiyijJonkcO2iAfg.mft (raw, json) Hash identifier: +Uh9t432qobOsY7VVO+VDgbFTSabRpphvc10c/lZLGI= Subject key identifier: 6D:DC:49:D2:00:C8:E0:1A:36:F5:55:A9:71:F2:1F:24:73:BF:83:47 Authority key identifier: 1E:D7:82:BE:62:D7:10:17:66:8B:28:A3:26:89:E4:70:ED:A2:01:F8 Certificate issuer: /CN=A91E1257/serialNumber=1ED782BE62D71017668B28A32689E470EDA201F8 Certificate serial: 06FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HteCvmLXEBdmiyijJonkcO2iAfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.mft Manifest number: 06F3 Signing time: Sat 26 Apr 2025 21:39:28 +0000 Manifest this update: Sat 26 Apr 2025 21:39:27 +0000 Manifest next update: Sat 03 May 2025 21:39:27 +0000 Files and hashes: 1: HteCvmLXEBdmiyijJonkcO2iAfg.crl (hash: Kep/pTfBcz4OcOTqjMR47pOLxXSZ2FdTPvCuJvoodPw=) 2: D41A1814442211EBBF7D9D65C4F9AE02.roa (hash: hsjXTWdh2kRzdeWF4Q+QGn60PDeZ8kmbCtOiIhRsRRM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.crl rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HteCvmLXEBdmiyijJonkcO2iAfg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1787 (0x6fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1257, serialNumber=1ED782BE62D71017668B28A32689E470EDA201F8 Validity Not Before: Apr 26 21:39:27 2025 GMT Not After : May 3 21:39:27 2025 GMT Subject: CN=680d528f-44cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:db:3b:be:49:d4:66:54:93:9e:50:2d:91:69: 60:95:bb:c4:e8:e8:93:58:04:ea:27:a5:5f:6f:03: 75:6e:e8:a7:8c:25:74:31:cd:8c:ab:88:ef:75:5c: 21:2a:a3:f4:2b:1a:9b:52:59:61:84:e1:eb:6c:5b: 1e:9d:21:d4:fe:d1:37:55:41:e1:14:aa:df:f4:f6: e3:01:85:04:e2:d3:b6:d6:3e:05:25:ba:31:33:c7: 66:c2:1c:35:b7:d0:f7:bd:10:d6:cb:f9:d8:70:cb: 40:3b:ca:07:88:bb:11:8c:b3:98:d8:df:6f:93:1e: e8:63:c2:05:61:3e:a8:35:58:f6:13:cb:9f:33:3d: 5e:48:d5:98:5c:f5:5d:b8:e6:ee:01:4d:78:7a:12: 57:45:ab:43:a4:89:52:f9:25:82:6c:05:43:7e:89: 31:14:5a:79:ac:eb:d5:45:7d:41:32:97:70:8e:bd: c1:dc:13:8c:ba:87:12:3d:80:89:0f:cc:cf:56:9d: f6:1a:3c:36:54:ee:d4:14:bd:e7:13:21:26:6d:4d: c9:e6:b8:f2:57:94:3a:10:0c:b3:d0:fa:e0:a0:66: a7:18:b0:65:3e:55:3a:39:4d:bc:aa:d4:cc:b2:98: b5:d1:00:e0:5f:54:85:e0:88:1f:02:6d:45:07:09: 0a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:DC:49:D2:00:C8:E0:1A:36:F5:55:A9:71:F2:1F:24:73:BF:83:47 X509v3 Authority Key Identifier: keyid:1E:D7:82:BE:62:D7:10:17:66:8B:28:A3:26:89:E4:70:ED:A2:01:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HteCvmLXEBdmiyijJonkcO2iAfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:7a:de:2d:89:d8:42:cb:c3:ed:26:94:4a:83:a1:59:93:23: 20:cf:81:02:84:e2:4f:5f:a3:44:c5:f7:75:6a:3b:8f:3e:fb: db:9a:88:28:ee:51:a7:fd:d5:c0:59:cf:f1:ca:86:92:5c:44: f5:a7:45:3f:03:aa:ce:60:5c:cf:51:b9:7a:4c:2c:03:ce:c7: e0:33:f1:2c:1c:19:50:97:24:67:1f:a2:25:8f:c6:fb:c6:23: 93:6a:86:a6:94:75:80:7f:32:3e:6f:b8:c8:a9:d2:45:dc:6e: c5:67:eb:7b:8d:77:90:b2:65:eb:fe:28:42:79:f5:45:c6:f7: 8f:bb:8f:5f:97:30:ec:44:bf:02:f7:9a:f2:77:17:dd:7d:24: 2c:28:7a:38:4d:fa:9c:41:0c:d6:ea:f5:08:b4:1a:44:bb:38: d1:18:28:c5:55:6d:d5:40:2c:f7:d7:79:87:23:d7:a2:aa:28: 45:21:8c:51:ba:9f:b4:3f:1a:a8:cd:01:eb:8f:4b:b6:8d:b4: 8f:68:7e:d4:69:84:d9:10:2e:01:db:f6:6f:f6:b0:17:18:46: a4:1f:18:54:01:22:d5:7e:4d:18:7b:eb:dd:da:81:2a:52:4b: df:4d:4f:c0:1b:c0:d3:d9:e1:0a:61:8d:c1:d3:fc:2e:2e:ad: de:67:cb:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTEyNTcxMTAvBgNVBAUTKDFFRDc4MkJFNjJENzEwMTc2NjhCMjhBMzI2ODlFNDcw RURBMjAxRjgwHhcNMjUwNDI2MjEzOTI3WhcNMjUwNTAzMjEzOTI3WjAYMRYwFAYD VQQDEw02ODBkNTI4Zi00NGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ds7vknUZlSTnlAtkWlglbvE6OiTWATqJ6VfbwN1buinjCV0Mc2Mq4jvdVwh KqP0KxqbUllhhOHrbFsenSHU/tE3VUHhFKrf9PbjAYUE4tO21j4FJboxM8dmwhw1 t9D3vRDWy/nYcMtAO8oHiLsRjLOY2N9vkx7oY8IFYT6oNVj2E8ufMz1eSNWYXPVd uObuAU14ehJXRatDpIlS+SWCbAVDfokxFFp5rOvVRX1BMpdwjr3B3BOMuocSPYCJ D8zPVp32Gjw2VO7UFL3nEyEmbU3J5rjyV5Q6EAyz0PrgoGanGLBlPlU6OU28qtTM spi10QDgX1SF4IgfAm1FBwkKZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG3cSdIA yOAaNvVVqXHyHyRzv4NHMB8GA1UdIwQYMBaAFB7Xgr5i1xAXZosooyaJ5HDtogH4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTI1Ny9BOTBGMUVFNjQ0 MjAxMUVCODU2Q0QxNjJDNEY5QUUwMi9IdGVDdm1MWEVCZG1peWlqSm9ua2NPMmlB ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h0ZUN2bUxYRUJkbWl5aWpKb25rY08yaUFmZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTI1Ny9BOTBGMUVFNjQ0MjAxMUVCODU2Q0QxNjJDNEY5QUUwMi9IdGVDdm1MWEVC ZG1peWlqSm9ua2NPMmlBZmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/et4tidhCy8PtJpRKg6FZkyMgz4EChOJPX6NExfd1ajuPPvvbmogo 7lGn/dXAWc/xyoaSXET1p0U/A6rOYFzPUbl6TCwDzsfgM/EsHBlQlyRnH6Ilj8b7 xiOTaoamlHWAfzI+b7jIqdJF3G7FZ+t7jXeQsmXr/ihCefVFxvePu49flzDsRL8C 95rydxfdfSQsKHo4TfqcQQzW6vUItBpEuzjRGCjFVW3VQCz313mHI9eiqihFIYxR up+0PxqozQHrj0u2jbSPaH7UaYTZEC4B2/Zv9rAXGEakHxhUASLVfk0Ye+vd2oEq UkvfTU/AG8DT2eEKYY3B0/wuLq3eZ8uX -----END CERTIFICATE-----Generated at Sun Apr 27 00:14:12 2025 by rpki-client on console.sobornost.net