$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft File: cBtV7SDYPjSNgjfON1l5WevAGCQ.mft (raw, json) Hash identifier: wKTGQnJsC/41n9d0OcwzFIl7vnp+MMQ1XlDnrlJrbIc= Subject key identifier: A0:DD:5D:7D:B5:F6:91:E0:7B:72:00:4D:A5:63:63:24:93:47:35:58 Authority key identifier: 70:1B:55:ED:20:D8:3E:34:8D:82:37:CE:37:59:79:59:EB:C0:18:24 Certificate issuer: /CN=A91E5D61/serialNumber=701B55ED20D83E348D8237CE37597959EBC01824 Certificate serial: 127D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBtV7SDYPjSNgjfON1l5WevAGCQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft Manifest number: 470D Signing time: Sat 26 Apr 2025 14:20:54 +0000 Manifest this update: Sat 26 Apr 2025 14:20:53 +0000 Manifest next update: Sat 03 May 2025 14:20:53 +0000 Files and hashes: 1: cBtV7SDYPjSNgjfON1l5WevAGCQ.crl (hash: 3d7GwpDZ7HiEFyo9s9a7TkZ+pGLZ0nRy84vLOoB6WH8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.crl rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBtV7SDYPjSNgjfON1l5WevAGCQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4733 (0x127d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D61, serialNumber=701B55ED20D83E348D8237CE37597959EBC01824 Validity Not Before: Apr 26 14:20:53 2025 GMT Not After : May 3 14:20:53 2025 GMT Subject: CN=680cebc5-695b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:51:20:40:49:8c:85:07:b7:1f:7d:06:63:b2: 2e:0e:61:b5:fe:83:46:3d:40:33:28:af:7b:69:06: 41:f1:3d:cf:ab:03:d5:6d:3c:81:69:af:01:db:76: 52:09:eb:c6:b5:23:c8:66:cd:43:01:da:5c:fc:07: 20:0a:f5:66:d0:a6:53:83:e2:ef:af:ba:5a:3d:fd: 0d:22:66:ed:68:ce:fb:f3:cd:b8:61:12:3d:16:21: 3c:94:91:0b:3b:18:b7:7d:6d:6e:0a:f2:2b:e6:04: 50:fc:c7:ec:5e:9c:ce:8b:7c:d5:f0:52:f6:02:08: da:25:77:d1:7f:a9:88:f6:a3:04:14:eb:9d:1e:53: d7:51:b3:9d:c3:c2:f2:52:90:f3:0d:81:ed:3f:76: 4e:97:f7:a7:f0:37:42:21:00:f8:66:b8:8b:bb:5e: d7:f9:88:5a:b6:ce:ef:70:a8:c1:82:a3:39:b1:e1: 02:2e:cd:d6:a5:12:b0:1e:ce:2b:b6:62:9b:aa:f9: 1e:e2:78:1e:ac:29:9e:22:94:60:cf:b4:7e:8f:d5: ad:52:a9:12:5b:9f:9a:28:a0:df:6b:07:b0:0f:fe: 9b:82:43:da:7e:7d:10:32:42:86:99:ae:b0:5c:87: 12:fe:4b:4a:0a:1e:08:57:02:3d:9b:ab:96:d4:f9: 0a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:DD:5D:7D:B5:F6:91:E0:7B:72:00:4D:A5:63:63:24:93:47:35:58 X509v3 Authority Key Identifier: keyid:70:1B:55:ED:20:D8:3E:34:8D:82:37:CE:37:59:79:59:EB:C0:18:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBtV7SDYPjSNgjfON1l5WevAGCQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:49:62:be:28:4c:55:66:bf:e0:01:b6:e7:15:6c:db:b5:4c: 0b:9f:e4:5d:b0:11:70:5e:d7:f5:dd:13:bc:e1:d9:a2:7b:5a: 6d:4a:be:e5:58:e4:fa:39:46:17:88:54:a5:21:2b:93:dd:9d: 62:31:53:30:73:96:c2:03:cb:e4:c1:f1:61:7c:13:22:c9:3c: db:d7:d2:88:7c:6c:0e:af:da:22:85:f4:ae:27:5b:e1:e8:02: f7:57:4c:98:14:ac:1e:a4:24:6d:ef:6c:4a:71:1e:fb:28:88: 7e:7e:e2:87:09:0d:51:e9:1e:65:5f:27:53:72:ee:74:a6:61: 43:40:31:40:c9:18:43:fa:83:ba:65:e3:0e:c2:d9:ed:d8:45: 2a:d0:44:3d:14:a2:f7:5e:1e:cb:54:e7:de:ab:d9:aa:c0:07: 6d:4e:00:be:e6:3c:48:b4:7f:f8:06:bf:8f:03:4f:de:72:1f: 1a:f4:0c:c8:ad:36:c1:1f:cf:68:2b:b9:cd:b7:85:60:b2:00: 0d:70:13:c1:4f:70:45:35:84:81:2c:71:b7:9d:68:be:1e:58: d1:d8:be:e0:c1:8d:57:1f:86:55:f8:d1:f1:d4:bc:29:5e:20: 8f:82:8b:99:c4:9e:7d:e5:62:e3:8f:e4:fa:8a:a6:84:2e:89: 2d:c8:aa:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEn0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVENjExMTAvBgNVBAUTKDcwMUI1NUVEMjBEODNFMzQ4RDgyMzdDRTM3NTk3OTU5 RUJDMDE4MjQwHhcNMjUwNDI2MTQyMDUzWhcNMjUwNTAzMTQyMDUzWjAYMRYwFAYD VQQDEw02ODBjZWJjNS02OTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAplEgQEmMhQe3H30GY7IuDmG1/oNGPUAzKK97aQZB8T3PqwPVbTyBaa8B23ZS CevGtSPIZs1DAdpc/AcgCvVm0KZTg+Lvr7paPf0NImbtaM778824YRI9FiE8lJEL Oxi3fW1uCvIr5gRQ/MfsXpzOi3zV8FL2AgjaJXfRf6mI9qMEFOudHlPXUbOdw8Ly UpDzDYHtP3ZOl/en8DdCIQD4ZriLu17X+Yhats7vcKjBgqM5seECLs3WpRKwHs4r tmKbqvke4ngerCmeIpRgz7R+j9WtUqkSW5+aKKDfawewD/6bgkPafn0QMkKGma6w XIcS/ktKCh4IVwI9m6uW1PkKQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKDdXX21 9pHge3IATaVjYySTRzVYMB8GA1UdIwQYMBaAFHAbVe0g2D40jYI3zjdZeVnrwBgk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQ2MS9FRTY3RDhDMDFE NzgxMUUyODc5RTM4QzUwOEIwMkNEMi9jQnRWN1NEWVBqU05namZPTjFsNVdldkFH Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2NCdFY3U0RZUGpTTmdqZk9OMWw1V2V2QUdDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUQ2MS9FRTY3RDhDMDFENzgxMUUyODc5RTM4QzUwOEIwMkNEMi9jQnRWN1NEWVBq U05namZPTjFsNVdldkFHQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkSWK+KExVZr/gAbbnFWzbtUwLn+RdsBFwXtf13RO84dmie1ptSr7l WOT6OUYXiFSlISuT3Z1iMVMwc5bCA8vkwfFhfBMiyTzb19KIfGwOr9oihfSuJ1vh 6AL3V0yYFKwepCRt72xKcR77KIh+fuKHCQ1R6R5lXydTcu50pmFDQDFAyRhD+oO6 ZeMOwtnt2EUq0EQ9FKL3Xh7LVOfeq9mqwAdtTgC+5jxItH/4Br+PA0/ech8a9AzI rTbBH89oK7nNt4VgsgANcBPBT3BFNYSBLHG3nWi+HljR2L7gwY1XH4ZV+NHx1Lwp XiCPgouZxJ595WLjj+T6iqaELoktyKpu -----END CERTIFICATE-----Generated at Sat Apr 26 15:55:42 2025 by rpki-client on console.sobornost.net