$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.mft File: rsioMoH-iyda7gQb4zzN2Ek7rAA.mft (raw, json) Hash identifier: Ab6v7BYWLH7DA/Ur28vcDyjrk6diZzA1wXch1jMYbg8= Subject key identifier: 75:A6:7C:F3:D6:FA:51:63:60:8B:D6:D4:09:BF:4F:61:56:B6:E0:A9 Authority key identifier: AE:C8:A8:32:81:FE:8B:27:5A:EE:04:1B:E3:3C:CD:D8:49:3B:AC:00 Certificate issuer: /CN=A91E6D5D/serialNumber=AEC8A83281FE8B275AEE041BE33CCDD8493BAC00 Certificate serial: 2AF7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rsioMoH-iyda7gQb4zzN2Ek7rAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.mft Manifest number: 9F01 Signing time: Mon 28 Apr 2025 14:32:30 +0000 Manifest this update: Mon 28 Apr 2025 14:32:29 +0000 Manifest next update: Mon 05 May 2025 14:32:29 +0000 Files and hashes: 1: rsioMoH-iyda7gQb4zzN2Ek7rAA.crl (hash: uWgveQ2cEgF22D4gYffrFjLdwddlbRbZcHDHQpGYP9Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.crl rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rsioMoH-iyda7gQb4zzN2Ek7rAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 14:32:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10999 (0x2af7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6D5D, serialNumber=AEC8A83281FE8B275AEE041BE33CCDD8493BAC00 Validity Not Before: Apr 28 14:32:29 2025 GMT Not After : May 5 14:32:29 2025 GMT Subject: CN=680f917d-ed0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:14:40:88:22:34:0b:61:bf:40:28:e6:fb:49: 12:4e:62:92:21:77:29:40:5a:45:94:eb:b0:d2:b8: 52:53:6a:d7:fa:88:68:23:33:a2:94:4a:1e:50:40: de:16:6f:ac:f8:a1:de:74:3b:c7:da:0a:ee:35:ce: bc:ee:d6:36:77:2d:94:66:d5:21:4c:c9:f4:aa:7d: 92:56:fc:54:48:42:fb:c1:99:11:a1:b2:28:be:0a: 8b:cf:5f:61:85:fa:b8:3e:11:4e:1a:9d:ff:5e:9a: a0:fc:b6:5c:69:39:f2:27:1b:32:78:3b:58:a0:17: a7:bd:0d:40:b1:a6:ab:59:96:f9:5d:a5:d4:da:51: d1:e5:ef:30:21:b3:71:93:37:36:da:48:ec:ae:de: 9d:65:a2:5f:78:83:31:3f:6a:27:a1:f9:e6:31:f7: ec:ef:d2:b0:8b:4d:de:e9:07:0e:4b:68:1b:44:7e: f7:9a:71:01:a2:9a:7f:83:f0:a4:ce:d9:62:f3:dc: f5:2c:bd:3d:69:a5:51:2b:90:cc:93:9b:db:b4:5f: ad:99:c9:b0:63:c1:01:6e:9c:39:49:9d:c9:6f:0b: d3:27:60:ac:56:9a:18:22:2e:e0:13:cc:bf:9f:47: c9:a2:62:5b:3c:39:59:8c:3f:1c:81:3d:cb:4e:51: 5a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:A6:7C:F3:D6:FA:51:63:60:8B:D6:D4:09:BF:4F:61:56:B6:E0:A9 X509v3 Authority Key Identifier: keyid:AE:C8:A8:32:81:FE:8B:27:5A:EE:04:1B:E3:3C:CD:D8:49:3B:AC:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rsioMoH-iyda7gQb4zzN2Ek7rAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:34:f0:ca:14:59:8b:13:a2:54:79:7a:8c:82:31:d8:c7:6c: 88:7d:0e:a6:7d:62:7c:be:33:01:1f:3e:9b:40:4e:d6:3a:b2: 6a:8f:22:38:f9:cd:d5:6c:29:ed:2c:4b:86:f8:6f:43:4e:8a: b6:a9:7b:cb:71:02:aa:37:e7:dc:0c:7c:bd:d8:16:bd:b4:0d: 03:aa:22:8e:db:e1:21:2c:bb:9a:1d:ea:d2:5c:ad:27:6e:ad: a7:64:09:cb:28:77:eb:64:2c:d1:69:a3:cf:02:28:58:e5:1c: 25:f4:83:94:1c:11:01:62:44:db:12:95:9b:f7:70:01:fe:7d: 59:c4:e7:78:02:ca:c9:8a:02:a5:4b:34:10:a1:0b:8a:77:45: 93:f7:9d:65:49:fc:a9:44:e4:4b:8d:bf:07:d2:b0:7c:17:a6: 53:55:a5:6c:48:71:88:ac:98:93:3b:ef:57:03:a4:d8:fc:ee: 79:c0:d8:0f:b1:b5:e2:1b:09:2b:ec:2c:10:c4:d4:73:18:a2: cb:e2:3f:a7:51:ef:6b:46:06:c0:d7:6f:cc:c1:44:d4:e1:61: 2b:63:b0:9c:cf:b8:94:05:6f:b9:38:11:e6:d1:6c:85:c2:a2: fe:ac:38:3f:07:18:b4:5b:59:51:c6:a2:36:72:59:90:51:43: 74:b7:a2:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKvcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZENUQxMTAvBgNVBAUTKEFFQzhBODMyODFGRThCMjc1QUVFMDQxQkUzM0NDREQ4 NDkzQkFDMDAwHhcNMjUwNDI4MTQzMjI5WhcNMjUwNTA1MTQzMjI5WjAYMRYwFAYD VQQDEw02ODBmOTE3ZC1lZDBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArBRAiCI0C2G/QCjm+0kSTmKSIXcpQFpFlOuw0rhSU2rX+ohoIzOilEoeUEDe Fm+s+KHedDvH2gruNc687tY2dy2UZtUhTMn0qn2SVvxUSEL7wZkRobIovgqLz19h hfq4PhFOGp3/Xpqg/LZcaTnyJxsyeDtYoBenvQ1AsaarWZb5XaXU2lHR5e8wIbNx kzc22kjsrt6dZaJfeIMxP2onofnmMffs79Kwi03e6QcOS2gbRH73mnEBopp/g/Ck ztli89z1LL09aaVRK5DMk5vbtF+tmcmwY8EBbpw5SZ3JbwvTJ2CsVpoYIi7gE8y/ n0fJomJbPDlZjD8cgT3LTlFacQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHWmfPPW +lFjYIvW1Am/T2FWtuCpMB8GA1UdIwQYMBaAFK7IqDKB/osnWu4EG+M8zdhJO6wA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkQ1RC85RENCNjhFMDFE ODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9yc2lvTW9ILWl5ZGE3Z1FiNHp6TjJFazdy QUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JzaW9Nb0gtaXlkYTdnUWI0enpOMkVrN3JBQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkQ1RC85RENCNjhFMDFEODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9yc2lvTW9ILWl5 ZGE3Z1FiNHp6TjJFazdyQUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAENPDKFFmLE6JUeXqMgjHYx2yIfQ6mfWJ8vjMBHz6bQE7WOrJqjyI4 +c3VbCntLEuG+G9DToq2qXvLcQKqN+fcDHy92Ba9tA0DqiKO2+EhLLuaHerSXK0n bq2nZAnLKHfrZCzRaaPPAihY5Rwl9IOUHBEBYkTbEpWb93AB/n1ZxOd4AsrJigKl SzQQoQuKd0WT951lSfypRORLjb8H0rB8F6ZTVaVsSHGIrJiTO+9XA6TY/O55wNgP sbXiGwkr7CwQxNRzGKLL4j+nUe9rRgbA12/MwUTU4WErY7Ccz7iUBW+5OBHm0WyF wqL+rDg/Bxi0W1lRxqI2clmQUUN0t6K9 -----END CERTIFICATE-----Generated at Mon Apr 28 17:46:03 2025 by rpki-client on console.sobornost.net