$ rpki-client -vvf rpki.apnic.net/member_repository/A91E46E8/D4B8DA16B15A11EC8240B820C4F9AE02/CEz6nrwGwNaBBUiw7RzEfPjuDzE.mft File: CEz6nrwGwNaBBUiw7RzEfPjuDzE.mft (raw, json) Hash identifier: kELwIP7Noi2VhtPFrzTskUlEwJbgEP05K7i9qXQjdss= Subject key identifier: 90:B6:31:38:D4:9B:94:F2:9E:C4:7E:C6:3B:98:1C:01:C9:44:EA:B9 Authority key identifier: 08:4C:FA:9E:BC:06:C0:D6:81:05:48:B0:ED:1C:C4:7C:F8:EE:0F:31 Certificate issuer: /CN=A91E46E8/serialNumber=084CFA9EBC06C0D6810548B0ED1CC47CF8EE0F31 Certificate serial: 0359 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CEz6nrwGwNaBBUiw7RzEfPjuDzE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E46E8/D4B8DA16B15A11EC8240B820C4F9AE02/CEz6nrwGwNaBBUiw7RzEfPjuDzE.mft Manifest number: 0354 Signing time: Sun 27 Apr 2025 00:39:05 +0000 Manifest this update: Sun 27 Apr 2025 00:39:05 +0000 Manifest next update: Sun 04 May 2025 00:39:04 +0000 Files and hashes: 1: CEz6nrwGwNaBBUiw7RzEfPjuDzE.crl (hash: BtZAC7NCJhI01kVZLqb8ShjnyBbHseEOWSFqcRzsPWw=) 2: 97E05E58B15E11ECB6B31625C4F9AE02.roa (hash: 814gK30vRsw3f3GeLBYUI3A+K0FBKsWqCyMte+6ZS3M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E46E8/D4B8DA16B15A11EC8240B820C4F9AE02/CEz6nrwGwNaBBUiw7RzEfPjuDzE.crl rsync://rpki.apnic.net/member_repository/A91E46E8/D4B8DA16B15A11EC8240B820C4F9AE02/CEz6nrwGwNaBBUiw7RzEfPjuDzE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CEz6nrwGwNaBBUiw7RzEfPjuDzE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 00:39:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 857 (0x359) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E46E8, serialNumber=084CFA9EBC06C0D6810548B0ED1CC47CF8EE0F31 Validity Not Before: Apr 27 00:39:05 2025 GMT Not After : May 4 00:39:04 2025 GMT Subject: CN=680d7ca9-0d7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5f:ab:68:9e:f1:f5:dd:37:cc:91:5c:c8:6a: a0:d7:35:fc:eb:f2:3c:ef:03:b0:57:9f:de:fd:26: 63:09:54:bd:42:d6:bd:95:4a:72:fb:63:c1:c8:d3: 07:05:7c:0f:cf:00:6a:82:ca:86:5f:c8:6e:21:5e: 1d:cf:1d:38:91:e0:74:ba:74:e5:91:92:ff:d5:73: c8:2b:70:35:13:dd:c9:21:7b:3a:ab:33:fb:cb:31: 14:33:61:b0:be:ce:e0:22:ac:3e:c4:e8:e8:63:8c: ba:21:d4:07:4e:ee:14:91:9b:10:ee:56:63:2f:f9: 2b:9c:ce:42:f2:75:d8:b4:3a:04:37:0c:c8:22:8b: 4a:01:a0:00:f0:bb:f2:af:05:06:88:c7:a9:68:9b: 22:24:1f:6b:a2:69:ec:99:b6:74:58:10:eb:02:b5: 5e:a8:a5:e4:18:8b:d6:1a:2e:86:e4:c9:83:36:b9: b9:83:55:c0:34:d5:3c:f6:80:fc:73:c7:53:d1:16: 77:85:a3:43:4a:e8:a2:57:df:24:25:f8:ec:f2:20: c1:b7:73:6e:af:4a:a0:b0:87:90:5b:d1:31:57:9d: 6e:59:38:26:a5:a7:4b:e6:8c:4b:8c:f2:50:6f:78: 8a:2b:0f:17:19:5b:bf:7f:ce:0c:10:10:20:4c:d4: 18:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:B6:31:38:D4:9B:94:F2:9E:C4:7E:C6:3B:98:1C:01:C9:44:EA:B9 X509v3 Authority Key Identifier: keyid:08:4C:FA:9E:BC:06:C0:D6:81:05:48:B0:ED:1C:C4:7C:F8:EE:0F:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E46E8/D4B8DA16B15A11EC8240B820C4F9AE02/CEz6nrwGwNaBBUiw7RzEfPjuDzE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CEz6nrwGwNaBBUiw7RzEfPjuDzE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E46E8/D4B8DA16B15A11EC8240B820C4F9AE02/CEz6nrwGwNaBBUiw7RzEfPjuDzE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:48:c3:f4:ef:b3:6d:4c:c1:01:e4:a0:cc:cd:e8:53:08:72: f7:bd:e8:c1:6a:dc:97:f2:8b:1c:60:cd:83:d4:b6:ed:d7:25: 37:36:63:37:9b:c3:07:c7:54:27:cf:a6:32:ab:c3:d3:91:aa: f0:fd:17:75:85:60:df:d7:b2:27:a6:38:d6:59:93:41:60:1d: b6:5d:86:a7:fe:33:d2:fd:12:8f:81:b7:7c:21:04:16:38:30: 92:49:63:fe:d1:a8:1e:32:af:2c:04:00:a6:f6:a5:c3:8b:d7: 5d:a0:a8:e6:bd:55:ce:68:7f:84:ad:96:d7:9d:77:da:0a:a7: 49:1e:49:e3:b7:d2:b0:14:5a:7d:30:b7:1f:c4:fa:5c:f4:7f: 31:42:d4:6d:0b:ec:8d:42:29:9d:e1:ac:ef:b4:da:ac:c6:1a: 60:44:89:ca:fa:8f:42:7a:22:0f:a0:58:58:e7:98:b2:7f:fe: 73:b3:02:22:70:10:15:00:a3:f5:38:a9:1f:a6:4b:1f:d0:43: 57:ab:09:98:f3:44:b9:10:fc:19:4b:9c:2c:ed:5b:2f:7c:47: 6f:1f:93:86:6c:54:be:53:25:fc:34:9d:4e:f3:fe:41:48:40: 8b:08:33:58:ae:f0:76:13:53:56:de:4d:6a:71:eb:f4:f8:e4: 2e:a5:44:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ2RTgxMTAvBgNVBAUTKDA4NENGQTlFQkMwNkMwRDY4MTA1NDhCMEVEMUNDNDdD RjhFRTBGMzEwHhcNMjUwNDI3MDAzOTA1WhcNMjUwNTA0MDAzOTA0WjAYMRYwFAYD VQQDEw02ODBkN2NhOS0wZDdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvl+raJ7x9d03zJFcyGqg1zX86/I87wOwV5/e/SZjCVS9Qta9lUpy+2PByNMH BXwPzwBqgsqGX8huIV4dzx04keB0unTlkZL/1XPIK3A1E93JIXs6qzP7yzEUM2Gw vs7gIqw+xOjoY4y6IdQHTu4UkZsQ7lZjL/krnM5C8nXYtDoENwzIIotKAaAA8Lvy rwUGiMepaJsiJB9romnsmbZ0WBDrArVeqKXkGIvWGi6G5MmDNrm5g1XANNU89oD8 c8dT0RZ3haNDSuiiV98kJfjs8iDBt3Nur0qgsIeQW9ExV51uWTgmpadL5oxLjPJQ b3iKKw8XGVu/f84MEBAgTNQYQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJC2MTjU m5TynsR+xjuYHAHJROq5MB8GA1UdIwQYMBaAFAhM+p68BsDWgQVIsO0cxHz47g8x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDZFOC9ENEI4REExNkIx NUExMUVDODI0MEI4MjBDNEY5QUUwMi9DRXo2bnJ3R3dOYUJCVWl3N1J6RWZQanVE ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NFejZucndHd05hQkJVaXc3UnpFZlBqdUR6RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDZFOC9ENEI4REExNkIxNUExMUVDODI0MEI4MjBDNEY5QUUwMi9DRXo2bnJ3R3dO YUJCVWl3N1J6RWZQanVEekUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZSMP077NtTMEB5KDMzehTCHL3vejBatyX8oscYM2D1Lbt1yU3NmM3 m8MHx1Qnz6Yyq8PTkarw/Rd1hWDf17InpjjWWZNBYB22XYan/jPS/RKPgbd8IQQW ODCSSWP+0ageMq8sBACm9qXDi9ddoKjmvVXOaH+ErZbXnXfaCqdJHknjt9KwFFp9 MLcfxPpc9H8xQtRtC+yNQimd4azvtNqsxhpgRInK+o9CeiIPoFhY55iyf/5zswIi cBAVAKP1OKkfpksf0ENXqwmY80S5EPwZS5ws7VsvfEdvH5OGbFS+UyX8NJ1O8/5B SECLCDNYrvB2E1NW3k1qcev0+OQupUQi -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:15 2025 by rpki-client on console.sobornost.net