$ rpki-client -vvf rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft File: o_JydS7F2eEp5N_KCAuI05t5SUQ.mft (raw, json) Hash identifier: qFr/GpA1AQL7uMljlOIa86IR2bg5uQAlsN4dRHefPPI= Subject key identifier: 04:02:83:48:4D:F1:36:93:EA:29:A6:D6:65:2D:CF:A1:00:C9:7D:5F Authority key identifier: A3:F2:72:75:2E:C5:D9:E1:29:E4:DF:CA:08:0B:88:D3:9B:79:49:44 Certificate issuer: /CN=A91E504E/serialNumber=A3F272752EC5D9E129E4DFCA080B88D39B794944 Certificate serial: 03AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft Manifest number: 03A0 Signing time: Sun 27 Apr 2025 00:25:26 +0000 Manifest this update: Sun 27 Apr 2025 00:25:26 +0000 Manifest next update: Sun 04 May 2025 00:25:26 +0000 Files and hashes: 1: o_JydS7F2eEp5N_KCAuI05t5SUQ.crl (hash: OGwQ9urCDtihHs54QW2Ehdk6IIRZbeG9lZnpm7k9USw=) 2: 60523BEA0CA411ED96936D79C4F9AE02.roa (hash: 53okBBihrVod9gd5c53/fKO2EZYSA4Bon9/JWGkN+Rg=) 3: 39574A98960D11ECAAC81D60C4F9AE02.roa (hash: 2N56kFgApjf7qIYT6IwxnOYom7Jlq6/P84ID+wKdJxY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.crl rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 00:25:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 939 (0x3ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E504E, serialNumber=A3F272752EC5D9E129E4DFCA080B88D39B794944 Validity Not Before: Apr 27 00:25:26 2025 GMT Not After : May 4 00:25:26 2025 GMT Subject: CN=680d7976-1e01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:0c:fb:98:18:44:68:28:86:20:2a:fc:07:1b: af:0f:2c:09:3b:87:75:41:d3:62:e5:b7:a7:07:ef: b8:cb:a0:a9:3e:2a:6f:cb:38:7e:17:42:ff:34:6d: 3e:07:20:08:2c:52:41:ee:f8:f7:e3:ef:30:d9:57: 2c:1c:89:f6:90:48:c5:be:7d:96:7e:d5:fb:1c:e4: 65:cb:66:33:23:89:04:ed:85:f6:61:13:98:15:c6: 68:bd:10:a9:5f:eb:96:25:5d:6a:62:09:b9:c1:12: 4d:a1:81:69:61:53:9a:d0:fa:62:20:21:cc:f7:43: ce:71:94:10:9f:2e:69:fa:e2:ff:91:9b:09:21:2a: d9:71:f2:9f:ae:57:4e:c4:1d:6f:75:dc:7a:df:dc: 54:c8:e5:6d:48:e4:ca:0a:49:51:d5:3f:8d:4c:3b: fd:34:f1:40:a8:ab:d3:ef:b3:a3:dc:e5:bd:9a:2f: d6:f7:4e:30:54:27:42:02:56:aa:bf:ff:8a:47:bb: c9:59:11:c2:49:1d:07:1d:3f:ce:82:61:e5:82:8a: 57:e7:31:f2:69:5b:b0:2d:95:47:10:f7:f4:cb:07: 4b:be:1c:f9:fd:8a:93:b6:92:bf:68:0e:27:2e:35: 36:67:21:f6:b8:9f:9f:5d:9e:4a:a8:7b:21:d0:b1: 56:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:02:83:48:4D:F1:36:93:EA:29:A6:D6:65:2D:CF:A1:00:C9:7D:5F X509v3 Authority Key Identifier: keyid:A3:F2:72:75:2E:C5:D9:E1:29:E4:DF:CA:08:0B:88:D3:9B:79:49:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:4e:eb:9d:18:5f:e5:3f:83:e8:fb:d9:79:74:93:cc:e9:f1: eb:ca:2d:50:8f:ad:eb:bf:f6:a4:db:7b:60:70:e5:4b:29:dd: cf:7a:57:21:64:ed:1e:e8:70:88:81:6b:8e:5e:2d:1a:87:d1: e8:b6:97:c2:37:2f:75:b0:e5:70:57:14:66:86:8e:3c:1c:e4: f0:90:79:d2:b1:53:95:7f:73:6a:64:c1:a2:51:66:80:f5:4a: 00:cc:39:e0:90:66:ad:4d:69:ab:84:f8:ca:fe:8f:f1:cc:5b: 71:6e:75:57:49:52:0e:2f:9c:56:58:37:d5:ed:d1:b6:57:28: 3e:d6:55:da:84:6e:35:42:e9:2d:2f:74:11:16:38:5a:2b:cc: 04:78:76:4d:c9:db:c9:61:4b:e0:32:22:be:8d:b4:a8:03:fe: 69:5f:16:16:13:fa:7c:f3:72:b2:01:50:ca:cd:10:20:84:68: ff:d0:e3:4b:45:bd:2e:8d:53:49:5d:52:bf:d5:29:6b:33:93: 27:13:94:fb:ee:15:db:20:55:d4:3b:c2:3f:28:e1:44:28:b9: 2d:fe:f5:67:01:e3:47:66:e1:30:e5:13:a1:d5:ff:28:dc:30: ff:45:92:92:d9:49:69:4f:f3:e9:ba:22:cd:42:11:bf:ef:c4: c8:80:41:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTUwNEUxMTAvBgNVBAUTKEEzRjI3Mjc1MkVDNUQ5RTEyOUU0REZDQTA4MEI4OEQz OUI3OTQ5NDQwHhcNMjUwNDI3MDAyNTI2WhcNMjUwNTA0MDAyNTI2WjAYMRYwFAYD VQQDEw02ODBkNzk3Ni0xZTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmQz7mBhEaCiGICr8BxuvDywJO4d1QdNi5benB++4y6CpPipvyzh+F0L/NG0+ ByAILFJB7vj34+8w2VcsHIn2kEjFvn2WftX7HORly2YzI4kE7YX2YROYFcZovRCp X+uWJV1qYgm5wRJNoYFpYVOa0PpiICHM90POcZQQny5p+uL/kZsJISrZcfKfrldO xB1vddx639xUyOVtSOTKCklR1T+NTDv9NPFAqKvT77Oj3OW9mi/W904wVCdCAlaq v/+KR7vJWRHCSR0HHT/OgmHlgopX5zHyaVuwLZVHEPf0ywdLvhz5/YqTtpK/aA4n LjU2ZyH2uJ+fXZ5KqHsh0LFWZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAQCg0hN 8TaT6imm1mUtz6EAyX1fMB8GA1UdIwQYMBaAFKPycnUuxdnhKeTfyggLiNObeUlE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTA0RS81OTA5NDk5MDk2 MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9vX0p5ZFM3RjJlRXA1Tl9LQ0F1STA1dDVT VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29fSnlkUzdGMmVFcDVOX0tDQXVJMDV0NVNVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTA0RS81OTA5NDk5MDk2MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9vX0p5ZFM3RjJl RXA1Tl9LQ0F1STA1dDVTVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4TuudGF/lP4Po+9l5dJPM6fHryi1Qj63rv/ak23tgcOVLKd3Pelch ZO0e6HCIgWuOXi0ah9HotpfCNy91sOVwVxRmho48HOTwkHnSsVOVf3NqZMGiUWaA 9UoAzDngkGatTWmrhPjK/o/xzFtxbnVXSVIOL5xWWDfV7dG2Vyg+1lXahG41Qukt L3QRFjhaK8wEeHZNydvJYUvgMiK+jbSoA/5pXxYWE/p883KyAVDKzRAghGj/0ONL Rb0ujVNJXVK/1SlrM5MnE5T77hXbIFXUO8I/KOFEKLkt/vVnAeNHZuEw5ROh1f8o 3DD/RZKS2UlpT/PpuiLNQhG/78TIgEHW -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:15 2025 by rpki-client on console.sobornost.net