$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft File: aaMtc-A4ow1HrKzrgc1zEq91Ork.mft (raw, json) Hash identifier: chKz0gcjegt/1rvDwt157rdrrUjfL6utKW/YXLTsyBM= Subject key identifier: 3E:3D:7D:E9:BF:D4:EA:78:95:DB:8B:53:FE:38:DB:81:AF:D3:01:42 Authority key identifier: 69:A3:2D:73:E0:38:A3:0D:47:AC:AC:EB:81:CD:73:12:AF:75:3A:B9 Certificate issuer: /CN=A91E1F31/serialNumber=69A32D73E038A30D47ACACEB81CD7312AF753AB9 Certificate serial: E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft Manifest number: DA Signing time: Sun 27 Apr 2025 04:30:43 +0000 Manifest this update: Sun 27 Apr 2025 04:30:43 +0000 Manifest next update: Sun 04 May 2025 04:30:43 +0000 Files and hashes: 1: aaMtc-A4ow1HrKzrgc1zEq91Ork.crl (hash: KS9XySQWSyVsfKO6HcGFVMtHKCY9FeT+8qqpgwL4Wjk=) 2: 2F734D2E860111EFB49EB20DC4F9AE02.roa (hash: lyH5OR1VxxfoorFwC9xWARZrZEWyPMAlZT0c6Gt7rg0=) 3: 43441626860111EF8B4DF50DC4F9AE02.roa (hash: mfBAlHBLtaChfMT6zfmbBV23T4d13rPLxjMmrWBPL0E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.crl rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 226 (0xe2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1F31, serialNumber=69A32D73E038A30D47ACACEB81CD7312AF753AB9 Validity Not Before: Apr 27 04:30:43 2025 GMT Not After : May 4 04:30:43 2025 GMT Subject: CN=680db2f3-b097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a3:9c:e4:7c:4d:1a:01:4c:b5:9f:db:9b:12: 1d:b1:45:3d:ff:80:6e:45:e5:77:41:c6:d6:7d:fe: 1b:8d:64:24:d7:33:77:9c:ef:4c:ac:92:5b:39:68: 71:c3:de:cf:4e:6e:15:a3:52:83:a1:0f:12:0e:2a: 4a:a6:75:52:5f:52:c8:c2:8b:dd:d3:da:df:f5:75: fe:ad:e3:3d:80:53:18:58:f6:42:b8:cf:85:1e:b4: ac:55:df:a6:ae:3a:87:b6:8d:bb:b9:ec:1f:03:42: dd:9c:dd:61:32:c4:84:4d:04:ec:64:80:2c:9c:5a: a9:4a:bc:6f:f2:dc:2d:e7:93:db:1d:7d:7c:5e:83: 8a:b7:e1:2d:7f:ab:94:e1:5e:53:48:6c:8b:29:49: 55:15:f7:68:ea:01:09:29:e2:66:f2:e9:00:0d:ab: 1b:77:54:21:68:83:8b:35:cb:cf:f5:cd:6f:21:4a: 80:8d:2e:3f:c7:98:2b:a7:76:5e:3a:0f:cc:61:8e: 39:aa:0b:bc:22:b3:a8:fe:42:e8:89:8b:58:4d:a1: 19:68:ce:ba:e3:7f:f4:12:ab:97:b9:aa:5d:ac:91: 58:15:d3:b6:fa:5d:18:01:09:fb:33:f7:d4:33:3a: 2e:8d:65:7a:f7:49:54:65:75:93:82:56:31:21:02: 10:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:3D:7D:E9:BF:D4:EA:78:95:DB:8B:53:FE:38:DB:81:AF:D3:01:42 X509v3 Authority Key Identifier: keyid:69:A3:2D:73:E0:38:A3:0D:47:AC:AC:EB:81:CD:73:12:AF:75:3A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:be:b5:b4:32:90:53:b3:f7:e1:32:5f:ca:3c:33:d1:8b:42: f6:36:a4:0d:15:26:88:c8:b0:cb:3f:de:9b:16:19:0a:f3:5f: 2a:8e:a7:bb:28:4c:59:29:a5:fa:eb:80:6c:9c:08:e6:97:cf: a1:23:a3:1c:b7:3a:08:cf:f5:16:a4:f1:5b:14:fb:e0:c1:ec: 7e:4a:b4:b1:44:f1:ee:d8:4a:23:2f:17:8d:a4:59:68:bd:35: 13:04:04:e4:cd:cc:46:38:bf:5b:bf:31:ec:84:cd:85:68:58: c4:7f:ce:ff:74:5a:89:52:ff:12:6d:90:86:87:89:f5:3c:a2: f7:b4:34:f2:65:72:19:54:d9:f4:c1:a6:f1:9f:18:f1:7e:0f: f7:85:dc:1c:fd:bb:56:1f:60:99:88:6a:35:4e:ee:ec:53:83: bf:ae:19:c6:f4:3c:60:f3:7b:21:34:e7:a8:36:80:3c:4e:b2: 28:8b:ab:72:f1:69:3a:1d:d1:b2:40:16:cb:ff:29:70:6f:2c: c7:50:ce:1f:64:50:18:0f:36:b3:6b:ab:2d:9e:4e:e2:c8:0c: 80:cb:fa:72:01:98:77:48:9e:f1:b8:2b:af:00:0e:85:c9:f6: 4b:c4:20:bd:49:e2:79:b7:a0:1a:31:3b:dd:7e:39:4f:3c:04: 06:47:4c:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFGMzExMTAvBgNVBAUTKDY5QTMyRDczRTAzOEEzMEQ0N0FDQUNFQjgxQ0Q3MzEy QUY3NTNBQjkwHhcNMjUwNDI3MDQzMDQzWhcNMjUwNTA0MDQzMDQzWjAYMRYwFAYD VQQDEw02ODBkYjJmMy1iMDk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv6Oc5HxNGgFMtZ/bmxIdsUU9/4BuReV3QcbWff4bjWQk1zN3nO9MrJJbOWhx w97PTm4Vo1KDoQ8SDipKpnVSX1LIwovd09rf9XX+reM9gFMYWPZCuM+FHrSsVd+m rjqHto27uewfA0LdnN1hMsSETQTsZIAsnFqpSrxv8twt55PbHX18XoOKt+Etf6uU 4V5TSGyLKUlVFfdo6gEJKeJm8ukADasbd1QhaIOLNcvP9c1vIUqAjS4/x5grp3Ze Og/MYY45qgu8IrOo/kLoiYtYTaEZaM6643/0EquXuapdrJFYFdO2+l0YAQn7M/fU MzoujWV690lUZXWTglYxIQIQ4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD49fem/ 1Op4lduLU/4424Gv0wFCMB8GA1UdIwQYMBaAFGmjLXPgOKMNR6ys64HNcxKvdTq5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUYzMS9BMEY0RTBEMEUx QkUxMUVFQjA0NUVCMjZDNEY5QUUwMi9hYU10Yy1BNG93MUhyS3pyZ2MxekVxOTFP cmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FhTXRjLUE0b3cxSHJLenJnYzF6RXE5MU9yay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUYzMS9BMEY0RTBEMEUxQkUxMUVFQjA0NUVCMjZDNEY5QUUwMi9hYU10Yy1BNG93 MUhyS3pyZ2MxekVxOTFPcmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmvrW0MpBTs/fhMl/KPDPRi0L2NqQNFSaIyLDLP96bFhkK818qjqe7 KExZKaX664BsnAjml8+hI6MctzoIz/UWpPFbFPvgwex+SrSxRPHu2EojLxeNpFlo vTUTBATkzcxGOL9bvzHshM2FaFjEf87/dFqJUv8SbZCGh4n1PKL3tDTyZXIZVNn0 wabxnxjxfg/3hdwc/btWH2CZiGo1Tu7sU4O/rhnG9Dxg83shNOeoNoA8TrIoi6ty 8Wk6HdGyQBbL/ylwbyzHUM4fZFAYDzaza6stnk7iyAyAy/pyAZh3SJ7xuCuvAA6F yfZLxCC9SeJ5t6AaMTvdfjlPPAQGR0yW -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:57 2025 by rpki-client on console.sobornost.net