$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6856/2DDB426E486311EEBC0BD213C4F9AE02/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.mft File: OmgjoQ8Dv6ykBo0zmERPNkEIVIU.mft (raw, json) Hash identifier: Y6gcTBfNVBRvG78NRnAKx+5eLmIPHEev7OQ6BkF1sBQ= Subject key identifier: 50:E9:FF:CD:4E:2F:CA:06:ED:96:87:5C:D8:4A:F0:52:2B:CF:56:18 Authority key identifier: 3A:68:23:A1:0F:03:BF:AC:A4:06:8D:33:98:44:4F:36:41:08:54:85 Certificate issuer: /CN=A91E6856/serialNumber=3A6823A10F03BFACA4068D3398444F3641085485 Certificate serial: 013E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6856/2DDB426E486311EEBC0BD213C4F9AE02/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.mft Manifest number: 013B Signing time: Mon 28 Apr 2025 17:59:29 +0000 Manifest this update: Mon 28 Apr 2025 17:59:28 +0000 Manifest next update: Mon 05 May 2025 17:59:28 +0000 Files and hashes: 1: OmgjoQ8Dv6ykBo0zmERPNkEIVIU.crl (hash: ZpghkwppdjS9TM2dcY9vQMkY+UYWbKZyxFvOwBaZj/0=) 2: B2C9B10A881311EE8CFB5C43C4F9AE02.roa (hash: 6Te+3VLS/O5qxRt8jv/bM33nUlqEem+47I9pmRS4Z7o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6856/2DDB426E486311EEBC0BD213C4F9AE02/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.crl rsync://rpki.apnic.net/member_repository/A91E6856/2DDB426E486311EEBC0BD213C4F9AE02/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 14:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 318 (0x13e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6856, serialNumber=3A6823A10F03BFACA4068D3398444F3641085485 Validity Not Before: Apr 28 17:59:28 2025 GMT Not After : May 5 17:59:28 2025 GMT Subject: CN=680fc200-4a46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b0:49:d6:4d:89:b7:76:7f:ac:31:be:c6:27: 93:b8:0e:6d:5f:30:8d:d5:5f:71:15:8f:90:6c:c1: 05:48:dd:88:19:de:c8:31:70:c4:1d:89:0a:90:9a: 3c:9e:11:61:e2:da:bb:25:be:37:97:00:97:5c:28: 36:fc:c1:9b:fb:ad:e8:c5:40:c7:4b:48:e1:57:32: 0b:ca:6a:01:7c:c0:1f:59:bf:c6:7e:24:91:33:db: 6b:c2:13:1a:a7:6e:88:ac:1a:5d:02:ce:03:18:82: c4:59:b5:d0:4f:ee:f8:c3:23:f4:ec:e6:91:42:44: 2c:72:05:f5:ea:f5:d5:ec:ef:97:ff:c8:20:a6:97: 94:59:56:bf:07:4c:52:3a:d2:68:50:ed:b7:73:32: c3:ab:91:ee:5b:dd:f1:8f:f0:b3:68:74:63:1a:cf: 31:57:cd:1d:2a:b4:d7:e5:0b:da:eb:29:c8:d3:49: 33:03:eb:bb:7a:32:8c:e6:88:3b:ac:0f:17:7c:cf: 1f:28:db:59:ed:95:38:d1:96:cc:ed:31:22:b2:16: 63:a0:01:c0:9e:74:6c:ab:55:fd:ce:25:f3:ed:68: 86:3e:b4:cb:f0:75:56:e0:75:f5:a6:53:bd:c4:95: bc:cc:f2:d4:a0:e9:c2:f7:1d:76:f7:fe:32:36:62: d2:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:E9:FF:CD:4E:2F:CA:06:ED:96:87:5C:D8:4A:F0:52:2B:CF:56:18 X509v3 Authority Key Identifier: keyid:3A:68:23:A1:0F:03:BF:AC:A4:06:8D:33:98:44:4F:36:41:08:54:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6856/2DDB426E486311EEBC0BD213C4F9AE02/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6856/2DDB426E486311EEBC0BD213C4F9AE02/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:9a:ca:e5:d1:c6:61:1f:6e:85:51:84:73:85:3f:f1:85:9d: 1d:27:cb:70:62:58:9a:2a:c6:1c:9e:19:08:c3:68:16:a2:2a: a1:13:29:7c:47:a2:16:02:88:3a:16:40:4c:c4:54:e7:90:0c: d4:55:21:46:7b:9c:4a:a5:7b:33:de:e7:39:a6:9b:7b:18:40: 45:15:11:4a:6e:93:c4:8d:ea:49:7a:b7:ff:8e:27:53:f5:a5: 5a:df:aa:ac:b4:b8:fe:ae:f7:fa:88:67:f7:67:2b:d6:8c:cd: d9:0e:13:0a:13:37:77:36:97:79:8d:cf:d4:04:06:a3:39:7c: dc:6f:a7:f3:03:35:bb:d9:54:ab:f3:aa:16:38:38:35:aa:65: 7c:e2:86:26:30:c8:a4:c9:28:a0:fd:51:97:69:e6:60:06:f2: 72:ca:bd:09:49:44:ba:10:0d:03:cc:e1:cd:6a:27:aa:6e:d5: 9c:01:65:b1:87:d5:f5:2d:1f:73:3e:8e:e7:53:47:ec:8b:a0: f8:52:94:c2:af:ac:09:9e:ae:6c:28:c4:56:f8:32:8a:4c:57: c1:d8:32:fd:4f:a0:b0:a9:98:11:af:35:eb:07:d7:17:9a:9d: dd:d8:60:fd:e2:76:15:55:74:1f:78:c3:b4:31:cd:6c:69:eb: a2:e3:af:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY4NTYxMTAvBgNVBAUTKDNBNjgyM0ExMEYwM0JGQUNBNDA2OEQzMzk4NDQ0RjM2 NDEwODU0ODUwHhcNMjUwNDI4MTc1OTI4WhcNMjUwNTA1MTc1OTI4WjAYMRYwFAYD VQQDEw02ODBmYzIwMC00YTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzbBJ1k2Jt3Z/rDG+xieTuA5tXzCN1V9xFY+QbMEFSN2IGd7IMXDEHYkKkJo8 nhFh4tq7Jb43lwCXXCg2/MGb+63oxUDHS0jhVzILymoBfMAfWb/GfiSRM9trwhMa p26IrBpdAs4DGILEWbXQT+74wyP07OaRQkQscgX16vXV7O+X/8ggppeUWVa/B0xS OtJoUO23czLDq5HuW93xj/CzaHRjGs8xV80dKrTX5Qva6ynI00kzA+u7ejKM5og7 rA8XfM8fKNtZ7ZU40ZbM7TEishZjoAHAnnRsq1X9ziXz7WiGPrTL8HVW4HX1plO9 xJW8zPLUoOnC9x129/4yNmLSLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFDp/81O L8oG7ZaHXNhK8FIrz1YYMB8GA1UdIwQYMBaAFDpoI6EPA7+spAaNM5hETzZBCFSF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjg1Ni8yRERCNDI2RTQ4 NjMxMUVFQkMwQkQyMTNDNEY5QUUwMi9PbWdqb1E4RHY2eWtCbzB6bUVSUE5rRUlW SVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL09tZ2pvUThEdjZ5a0JvMHptRVJQTmtFSVZJVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Njg1Ni8yRERCNDI2RTQ4NjMxMUVFQkMwQkQyMTNDNEY5QUUwMi9PbWdqb1E4RHY2 eWtCbzB6bUVSUE5rRUlWSVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHmsrl0cZhH26FUYRzhT/xhZ0dJ8twYliaKsYcnhkIw2gWoiqhEyl8 R6IWAog6FkBMxFTnkAzUVSFGe5xKpXsz3uc5ppt7GEBFFRFKbpPEjepJerf/jidT 9aVa36qstLj+rvf6iGf3ZyvWjM3ZDhMKEzd3Npd5jc/UBAajOXzcb6fzAzW72VSr 86oWODg1qmV84oYmMMikySig/VGXaeZgBvJyyr0JSUS6EA0DzOHNaieqbtWcAWWx h9X1LR9zPo7nU0fsi6D4UpTCr6wJnq5sKMRW+DKKTFfB2DL9T6CwqZgRrzXrB9cX mp3d2GD94nYVVXQfeMO0Mc1saeui46/F -----END CERTIFICATE-----Generated at Mon Apr 28 20:11:13 2025 by rpki-client on console.sobornost.net