$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.mft File: dxIwqC7bwncWqz3GqC_FrsRe72c.mft (raw, json) Hash identifier: dhdGepj/xm8NfvAMtbRr2t6tbxfldeUD1wUa9jJizPI= Subject key identifier: 57:ED:80:4F:4B:3E:79:5D:1C:6E:A7:A1:B9:F0:03:A5:9E:ED:22:7B Authority key identifier: 77:12:30:A8:2E:DB:C2:77:16:AB:3D:C6:A8:2F:C5:AE:C4:5E:EF:67 Certificate issuer: /CN=A91E4463/serialNumber=771230A82EDBC27716AB3DC6A82FC5AEC45EEF67 Certificate serial: 0C38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxIwqC7bwncWqz3GqC_FrsRe72c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.mft Manifest number: 0C0E Signing time: Mon 28 Apr 2025 19:08:24 +0000 Manifest this update: Mon 28 Apr 2025 19:08:24 +0000 Manifest next update: Mon 05 May 2025 19:08:24 +0000 Files and hashes: 1: dxIwqC7bwncWqz3GqC_FrsRe72c.crl (hash: pEEZ0P2tbw6o5wzuidGrH6SJKdrKk3v7t+muse3wfG4=) 2: 6EBD0E788EAA11EFA6C1D33AC4F9AE02.roa (hash: DROTwTMk5DUvv23krOsjnKxfQT0TAHld0vTq/cxjBfM=) 3: AF625B0680FA11EC96280855C4F9AE02.roa (hash: z4WcPtmsy3sGBTXhyRrnZ77SzocIV0s6o5lPO+EbUAY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.crl rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxIwqC7bwncWqz3GqC_FrsRe72c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 19:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3128 (0xc38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4463, serialNumber=771230A82EDBC27716AB3DC6A82FC5AEC45EEF67 Validity Not Before: Apr 28 19:08:24 2025 GMT Not After : May 5 19:08:24 2025 GMT Subject: CN=680fd228-8f01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fc:b2:24:e0:59:a7:0c:45:0e:d4:b6:65:5c: 4b:94:1c:24:8a:ac:ff:31:f2:3f:44:56:e0:7f:75: 74:d0:b3:f3:fb:9c:3e:04:05:db:52:03:1f:31:ab: 43:70:c6:16:1d:7e:f1:81:d2:cf:80:78:35:21:a7: a2:28:82:e1:4b:a2:d3:d4:19:bb:7e:c3:73:d4:f8: 81:fa:5f:39:1a:09:ee:51:53:ac:25:c4:38:35:1e: 50:e6:5c:a0:0b:72:50:71:5e:4d:66:85:d1:8e:7a: 1a:d7:aa:1b:4b:3f:44:df:65:be:e6:cd:f4:ef:ee: 39:3f:af:49:fd:b6:e2:b2:78:d4:d2:30:f5:61:1c: 06:92:56:a6:6a:cb:9a:61:a6:b3:0e:37:b2:07:cf: c4:44:29:fb:ba:8a:f4:5f:0e:fb:88:65:6e:ee:ff: c2:0e:b7:1d:07:d0:7b:ac:ab:14:3b:49:9d:1d:cd: 0d:8c:8f:9c:c1:96:9f:7c:07:7a:43:e2:4f:c5:3d: 1b:95:b2:91:70:ee:29:ca:59:c5:ac:2e:8d:be:95: e7:29:ab:da:25:8a:66:ba:f2:dc:2c:77:69:29:d8: b3:ba:bc:88:f0:eb:b9:22:2a:3d:53:71:e6:8a:47: 83:8b:51:a0:dd:23:80:8e:f2:f1:c2:c5:2c:d6:44: 04:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:ED:80:4F:4B:3E:79:5D:1C:6E:A7:A1:B9:F0:03:A5:9E:ED:22:7B X509v3 Authority Key Identifier: keyid:77:12:30:A8:2E:DB:C2:77:16:AB:3D:C6:A8:2F:C5:AE:C4:5E:EF:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxIwqC7bwncWqz3GqC_FrsRe72c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:de:8d:91:a2:17:20:90:a5:0e:fa:1c:0c:b3:d7:4d:41:0b: e5:6b:e6:72:a7:a7:99:15:8e:fd:bb:6a:8a:c1:8a:5e:b8:59: 12:ee:2b:84:79:93:0a:96:12:ac:3a:85:96:9a:a4:54:77:5f: d7:b7:7d:f4:06:2b:6d:60:4b:b5:e2:ff:5d:6a:bc:a6:7c:77: 64:ea:b1:dd:f2:c0:e7:98:aa:d6:91:67:3b:af:8a:e5:2b:c4: 38:99:ca:d5:cd:40:5b:8b:27:93:c0:41:2e:ac:5a:74:9b:09: 93:7e:08:95:3c:eb:b1:3f:9c:d6:f9:df:40:79:cb:dd:5d:fe: d3:38:40:83:d6:e4:76:54:f2:b5:a3:b8:46:b6:90:21:8b:c2: ce:4b:7d:81:cc:af:e3:37:88:66:bc:12:0f:98:7f:46:fb:65: 04:0e:1e:ed:86:b3:62:50:46:e5:1f:9e:f6:cd:7c:05:1b:ec: dc:87:f6:0f:eb:69:48:65:1d:e0:e8:f3:c2:56:07:06:e9:a7: 33:2d:c4:a9:81:a9:ff:d9:d9:40:25:51:28:18:e3:fa:4c:6e: a0:56:fa:07:d5:b9:bd:f9:00:e7:30:c8:6c:77:d0:f8:58:15: e7:4c:ca:35:c7:b4:21:57:d7:a0:ed:ea:1f:3b:f5:50:6c:98: 6c:51:86:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ0NjMxMTAvBgNVBAUTKDc3MTIzMEE4MkVEQkMyNzcxNkFCM0RDNkE4MkZDNUFF QzQ1RUVGNjcwHhcNMjUwNDI4MTkwODI0WhcNMjUwNTA1MTkwODI0WjAYMRYwFAYD VQQDEw02ODBmZDIyOC04ZjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvvyyJOBZpwxFDtS2ZVxLlBwkiqz/MfI/RFbgf3V00LPz+5w+BAXbUgMfMatD cMYWHX7xgdLPgHg1IaeiKILhS6LT1Bm7fsNz1PiB+l85GgnuUVOsJcQ4NR5Q5lyg C3JQcV5NZoXRjnoa16obSz9E32W+5s307+45P69J/bbisnjU0jD1YRwGklamasua YaazDjeyB8/ERCn7uor0Xw77iGVu7v/CDrcdB9B7rKsUO0mdHc0NjI+cwZaffAd6 Q+JPxT0blbKRcO4pylnFrC6NvpXnKavaJYpmuvLcLHdpKdizuryI8Ou5Iio9U3Hm ikeDi1Gg3SOAjvLxwsUs1kQEGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFftgE9L PnldHG6nobnwA6We7SJ7MB8GA1UdIwQYMBaAFHcSMKgu28J3Fqs9xqgvxa7EXu9n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDQ2My9BNEQ0NDAwQzEz OUYxMUVBQTY1ODI4NjBDNEY5QUUwMi9keEl3cUM3YnduY1dxejNHcUNfRnJzUmU3 MmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R4SXdxQzdid25jV3F6M0dxQ19GcnNSZTcyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDQ2My9BNEQ0NDAwQzEzOUYxMUVBQTY1ODI4NjBDNEY5QUUwMi9keEl3cUM3Yndu Y1dxejNHcUNfRnJzUmU3MmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA53o2RohcgkKUO+hwMs9dNQQvla+Zyp6eZFY79u2qKwYpeuFkS7iuE eZMKlhKsOoWWmqRUd1/Xt330BittYEu14v9darymfHdk6rHd8sDnmKrWkWc7r4rl K8Q4mcrVzUBbiyeTwEEurFp0mwmTfgiVPOuxP5zW+d9AecvdXf7TOECD1uR2VPK1 o7hGtpAhi8LOS32BzK/jN4hmvBIPmH9G+2UEDh7thrNiUEblH572zXwFG+zch/YP 62lIZR3g6PPCVgcG6aczLcSpgan/2dlAJVEoGOP6TG6gVvoH1bm9+QDnMMhsd9D4 WBXnTMo1x7QhV9eg7eofO/VQbJhsUYaZ -----END CERTIFICATE-----Generated at Mon Apr 28 23:05:57 2025 by rpki-client on console.sobornost.net