$ rpki-client -vvf rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.mft File: t45_48stS1oeuSimkLxled-IG-k.mft (raw, json) Hash identifier: aToe+N8scYdSk+l1LRBHKxOwCDcQrLGHQT5QwjAU6EY= Subject key identifier: 97:17:F0:28:F2:11:D7:66:78:11:FF:9C:1A:07:5B:BB:1E:D7:F4:18 Authority key identifier: B7:8E:7F:E3:CB:2D:4B:5A:1E:B9:28:A6:90:BC:65:79:DF:88:1B:E9 Certificate issuer: /CN=A91E22E3/serialNumber=B78E7FE3CB2D4B5A1EB928A690BC6579DF881BE9 Certificate serial: B9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t45_48stS1oeuSimkLxled-IG-k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.mft Manifest number: B5 Signing time: Sun 27 Apr 2025 04:52:50 +0000 Manifest this update: Sun 27 Apr 2025 04:52:50 +0000 Manifest next update: Sun 04 May 2025 04:52:50 +0000 Files and hashes: 1: t45_48stS1oeuSimkLxled-IG-k.crl (hash: C1T83smtQoTEVq/RCpoTKwIFIsDXU/ug1USdVEDOPdw=) 2: 60E63D04171011EFA738EE2BC4F9AE02.roa (hash: 0tGMxqd+nrlGxUWseUpDWpwKJjNQ5GQu0j7Ro3HieYk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.crl rsync://rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t45_48stS1oeuSimkLxled-IG-k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 185 (0xb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E22E3, serialNumber=B78E7FE3CB2D4B5A1EB928A690BC6579DF881BE9 Validity Not Before: Apr 27 04:52:50 2025 GMT Not After : May 4 04:52:50 2025 GMT Subject: CN=680db822-115a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f5:e9:2a:8b:ce:60:15:9e:ca:f1:ce:53:76: d2:7a:64:70:13:23:77:07:79:e7:fa:ba:f2:2b:7f: e3:5b:5f:c9:73:51:2c:d7:52:92:31:18:10:fc:3d: 52:79:f1:ab:25:d6:e5:59:e6:b5:b9:53:01:9e:03: ba:c2:f2:fa:cd:7a:20:e0:7d:b0:fd:89:90:6d:30: c7:b6:43:6a:76:d7:05:eb:ba:1c:98:ca:7a:dd:af: b9:92:56:8c:7b:42:36:d1:30:79:86:03:05:e3:0f: 42:a0:74:d4:e9:df:43:c9:80:91:e1:ad:3b:cc:9b: 29:63:6c:9d:78:71:19:53:78:e3:5e:15:49:e0:fe: 7d:bc:33:f5:99:58:cb:f0:e2:05:10:a3:a6:5a:5f: 98:63:51:1e:1e:74:ec:1d:6f:88:9e:a1:77:f3:86: 38:d6:bc:ab:cf:36:89:f1:0f:37:f9:e7:72:27:88: 41:d8:f1:ca:48:8e:de:89:ea:62:a5:b4:eb:3b:ea: 88:27:76:38:11:6c:c1:c3:16:cb:1d:63:d2:db:bd: 0a:f5:e9:2e:95:f5:8c:99:d3:88:58:4f:e8:c9:fe: 15:b5:3a:8a:fd:5b:28:32:b9:9c:bd:c1:d1:63:47: a4:31:be:fc:f1:96:11:93:36:45:05:86:a8:59:67: e5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:17:F0:28:F2:11:D7:66:78:11:FF:9C:1A:07:5B:BB:1E:D7:F4:18 X509v3 Authority Key Identifier: keyid:B7:8E:7F:E3:CB:2D:4B:5A:1E:B9:28:A6:90:BC:65:79:DF:88:1B:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t45_48stS1oeuSimkLxled-IG-k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:8b:83:6b:6f:cc:e4:33:f7:a1:35:0a:79:f5:bb:80:d8:6f: 07:1d:e5:44:49:7d:af:f0:69:15:71:7b:bd:be:c9:77:b4:f9: d9:92:82:90:5d:02:ac:42:48:00:66:fd:d7:b0:9a:3b:59:d3: ea:d8:ac:4e:d4:4b:37:7b:18:4d:22:dd:16:87:9c:89:ca:52: ac:ff:13:5f:28:53:e7:37:f6:36:82:4c:d5:66:e1:42:f0:d8: 72:d1:80:c6:46:14:0e:d4:4c:ef:5a:e7:fc:f3:34:4d:85:58: 0e:d5:ab:9e:69:63:ab:44:1c:e7:85:57:3f:76:21:38:3a:ef: 66:e7:9e:3d:ae:8d:d3:cd:2f:2a:f8:73:c6:3f:10:0b:71:37: 4e:e1:81:41:35:06:55:f4:b7:c1:cc:e2:cf:b5:0f:8c:71:78: 50:e7:c4:6d:18:2f:7d:b0:41:19:58:35:c4:8d:83:82:8e:84: 3c:fb:4d:8a:44:cd:15:2d:6e:c5:6e:5b:68:41:a2:22:5b:b3: 50:52:b4:58:c8:3c:57:95:e2:c7:0d:60:da:a6:bc:f3:02:96: 7b:d6:f4:3d:36:7a:2d:3b:d9:8a:3e:b2:12:30:13:8e:ae:e2: b9:3a:f6:12:00:73:a1:ac:e5:0c:43:41:be:25:91:e8:fb:79: 5d:c0:6e:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIyRTMxMTAvBgNVBAUTKEI3OEU3RkUzQ0IyRDRCNUExRUI5MjhBNjkwQkM2NTc5 REY4ODFCRTkwHhcNMjUwNDI3MDQ1MjUwWhcNMjUwNTA0MDQ1MjUwWjAYMRYwFAYD VQQDEw02ODBkYjgyMi0xMTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw/XpKovOYBWeyvHOU3bSemRwEyN3B3nn+rryK3/jW1/Jc1Es11KSMRgQ/D1S efGrJdblWea1uVMBngO6wvL6zXog4H2w/YmQbTDHtkNqdtcF67ocmMp63a+5klaM e0I20TB5hgMF4w9CoHTU6d9DyYCR4a07zJspY2ydeHEZU3jjXhVJ4P59vDP1mVjL 8OIFEKOmWl+YY1EeHnTsHW+InqF384Y41ryrzzaJ8Q83+edyJ4hB2PHKSI7eiepi pbTrO+qIJ3Y4EWzBwxbLHWPS270K9ekulfWMmdOIWE/oyf4VtTqK/VsoMrmcvcHR Y0ekMb788ZYRkzZFBYaoWWflZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJcX8Cjy EddmeBH/nBoHW7se1/QYMB8GA1UdIwQYMBaAFLeOf+PLLUtaHrkoppC8ZXnfiBvp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjJFMy83QUE4OTQzRTE3 MEMxMUVGOTRGMTdDMTRDNEY5QUUwMi90NDVfNDhzdFMxb2V1U2lta0x4bGVkLUlH LWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3Q0NV80OHN0UzFvZXVTaW1rTHhsZWQtSUctay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjJFMy83QUE4OTQzRTE3MEMxMUVGOTRGMTdDMTRDNEY5QUUwMi90NDVfNDhzdFMx b2V1U2lta0x4bGVkLUlHLWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYi4Nrb8zkM/ehNQp59buA2G8HHeVESX2v8GkVcXu9vsl3tPnZkoKQ XQKsQkgAZv3XsJo7WdPq2KxO1Es3exhNIt0Wh5yJylKs/xNfKFPnN/Y2gkzVZuFC 8Nhy0YDGRhQO1EzvWuf88zRNhVgO1aueaWOrRBznhVc/diE4Ou9m5549ro3TzS8q +HPGPxALcTdO4YFBNQZV9LfBzOLPtQ+McXhQ58RtGC99sEEZWDXEjYOCjoQ8+02K RM0VLW7FbltoQaIiW7NQUrRYyDxXleLHDWDaprzzApZ71vQ9NnotO9mKPrISMBOO ruK5OvYSAHOhrOUMQ0G+JZHo+3ldwG7f -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:57 2025 by rpki-client on console.sobornost.net