$ rpki-client -vvf rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.mft File: oHrwzLKYNcx2QpdLrJ4VArnPgtA.mft (raw, json) Hash identifier: uk51M3pbFB/bEOT+MFXWK0qJBQoz3gb9dOb0OuOFzb8= Subject key identifier: F1:A9:B2:BB:E9:5C:7D:78:44:93:45:C2:16:54:4A:13:F7:9B:21:8B Authority key identifier: A0:7A:F0:CC:B2:98:35:CC:76:42:97:4B:AC:9E:15:02:B9:CF:82:D0 Certificate issuer: /CN=A91E29CB/serialNumber=A07AF0CCB29835CC7642974BAC9E1502B9CF82D0 Certificate serial: 0292 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oHrwzLKYNcx2QpdLrJ4VArnPgtA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.mft Manifest number: 0286 Signing time: Sun 27 Apr 2025 01:16:15 +0000 Manifest this update: Sun 27 Apr 2025 01:16:14 +0000 Manifest next update: Sun 04 May 2025 01:16:14 +0000 Files and hashes: 1: oHrwzLKYNcx2QpdLrJ4VArnPgtA.crl (hash: n+xKMQ98tDbc6D9OeO0egAF2TWkB6ApSFG6Xi7yAa3c=) 2: C08A3ED6E03C11EF991E147AC4F9AE02.roa (hash: Jn6Bcmff+jZyhjqGcyii8YjSmtOYYAInHon2VXcIz3U=) 3: C258B0D0E03C11EF991E147AC4F9AE02.roa (hash: EWbZQVxhL2vlkm+GzLLUuL3B+QzSpuEn2YQAxnXCEkI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.crl rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oHrwzLKYNcx2QpdLrJ4VArnPgtA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 01:16:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 658 (0x292) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E29CB, serialNumber=A07AF0CCB29835CC7642974BAC9E1502B9CF82D0 Validity Not Before: Apr 27 01:16:14 2025 GMT Not After : May 4 01:16:14 2025 GMT Subject: CN=680d855f-7afb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c8:71:f6:dc:59:6f:19:a2:51:1a:6c:4e:21: fc:33:c4:22:31:bf:77:d8:da:40:67:67:95:c2:12: 20:f5:9c:c5:57:07:21:34:30:e8:f2:be:26:ca:36: 4c:be:6e:16:16:ec:7d:95:ff:c8:60:92:25:f7:f5: e3:3f:67:bf:c7:c3:f4:df:ca:ad:00:42:5c:be:21: 3e:e7:9e:cd:96:f0:42:98:1a:dd:c5:ca:35:fd:ba: 27:0b:43:00:1d:f4:aa:df:db:d0:12:1d:e8:c0:ff: 36:93:9f:4e:79:44:85:b0:71:f1:3e:28:61:53:24: 7c:56:3f:f4:7c:a5:df:26:90:65:50:ed:6f:0b:5b: 05:f4:51:88:ea:eb:b4:db:bd:cf:bb:3b:8a:00:52: 9d:84:d4:af:7f:a3:9b:df:69:32:19:a0:4d:7f:6a: db:37:27:85:2b:4b:11:21:ad:48:52:f2:3b:9c:44: 3a:94:e0:ce:84:1e:ef:e0:a2:41:18:36:c3:6f:de: b6:72:4b:b5:13:97:24:38:7e:d3:5d:68:25:60:6e: 65:55:e9:ae:a8:95:3b:91:32:4f:be:50:93:28:65: 5d:2e:06:5c:32:29:50:3c:3b:15:45:35:75:97:a8: 94:c3:7c:12:ae:e4:af:ef:5b:13:12:c7:21:ed:a5: 82:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:A9:B2:BB:E9:5C:7D:78:44:93:45:C2:16:54:4A:13:F7:9B:21:8B X509v3 Authority Key Identifier: keyid:A0:7A:F0:CC:B2:98:35:CC:76:42:97:4B:AC:9E:15:02:B9:CF:82:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oHrwzLKYNcx2QpdLrJ4VArnPgtA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:8c:43:89:63:e9:c6:fe:17:58:39:d3:1a:a8:41:cb:15:29: ad:17:3f:78:92:6b:26:ef:a9:98:37:b7:3c:e8:45:c9:c4:1b: a3:66:ca:a5:6d:a0:0f:74:eb:c6:0b:da:91:52:d7:a3:96:10: d5:ab:de:3c:24:c4:3f:36:72:86:66:de:d8:90:a7:17:ed:a2: 8d:67:8c:fd:7c:c2:25:5a:a5:86:a7:fd:78:cc:f9:5e:cd:18: 00:29:81:3e:fa:6a:31:a1:5d:a4:7b:85:8f:02:52:46:fc:fe: d7:38:ec:73:16:24:1f:6e:6b:ce:15:3b:45:d2:39:f8:60:49: 44:7d:b2:f6:8f:82:bc:79:14:bf:ab:9c:9d:4d:72:49:7e:31: 09:df:d2:36:13:f1:b2:32:01:ba:02:01:55:fe:93:6b:21:fa: c6:56:32:d5:cb:10:a5:61:95:a3:07:6a:ce:35:76:04:75:40: b8:15:46:68:cc:34:1b:93:03:d0:95:15:7f:e4:8e:13:9f:8b: 94:57:9a:ef:bc:9a:c7:5a:d6:eb:35:7e:da:bf:f8:6f:98:bb: ce:2e:8d:22:e9:62:56:6f:5e:b9:d2:10:f3:d6:12:12:76:18: 33:a5:45:59:c8:95:16:f7:9b:29:93:b1:bc:ba:a7:c3:2c:74: e0:bd:33:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI5Q0IxMTAvBgNVBAUTKEEwN0FGMENDQjI5ODM1Q0M3NjQyOTc0QkFDOUUxNTAy QjlDRjgyRDAwHhcNMjUwNDI3MDExNjE0WhcNMjUwNTA0MDExNjE0WjAYMRYwFAYD VQQDEw02ODBkODU1Zi03YWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAschx9txZbxmiURpsTiH8M8QiMb932NpAZ2eVwhIg9ZzFVwchNDDo8r4myjZM vm4WFux9lf/IYJIl9/XjP2e/x8P038qtAEJcviE+557NlvBCmBrdxco1/bonC0MA HfSq39vQEh3owP82k59OeUSFsHHxPihhUyR8Vj/0fKXfJpBlUO1vC1sF9FGI6uu0 273PuzuKAFKdhNSvf6Ob32kyGaBNf2rbNyeFK0sRIa1IUvI7nEQ6lODOhB7v4KJB GDbDb962cku1E5ckOH7TXWglYG5lVemuqJU7kTJPvlCTKGVdLgZcMilQPDsVRTV1 l6iUw3wSruSv71sTEsch7aWC0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPGpsrvp XH14RJNFwhZUShP3myGLMB8GA1UdIwQYMBaAFKB68MyymDXMdkKXS6yeFQK5z4LQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjlDQi8xRjkwMkIwRTA1 QUYxMUVEQTcxNzY0MkJDNEY5QUUwMi9vSHJ3ekxLWU5jeDJRcGRMcko0VkFyblBn dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29Icnd6TEtZTmN4MlFwZExySjRWQXJuUGd0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjlDQi8xRjkwMkIwRTA1QUYxMUVEQTcxNzY0MkJDNEY5QUUwMi9vSHJ3ekxLWU5j eDJRcGRMcko0VkFyblBndEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLjEOJY+nG/hdYOdMaqEHLFSmtFz94kmsm76mYN7c86EXJxBujZsql baAPdOvGC9qRUtejlhDVq948JMQ/NnKGZt7YkKcX7aKNZ4z9fMIlWqWGp/14zPle zRgAKYE++moxoV2ke4WPAlJG/P7XOOxzFiQfbmvOFTtF0jn4YElEfbL2j4K8eRS/ q5ydTXJJfjEJ39I2E/GyMgG6AgFV/pNrIfrGVjLVyxClYZWjB2rONXYEdUC4FUZo zDQbkwPQlRV/5I4Tn4uUV5rvvJrHWtbrNX7av/hvmLvOLo0i6WJWb1650hDz1hIS dhgzpUVZyJUW95spk7G8uqfDLHTgvTPS -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:15 2025 by rpki-client on console.sobornost.net