$ rpki-client -vvf rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.mft File: 5OTCQkd4XDQv81kH9-EcSrs5i4M.mft (raw, json) Hash identifier: vMF8aDho7y4k2+88RHVLSKPjWQDKYeO9NEnrldV/Lug= Subject key identifier: 32:61:62:E9:63:4A:6A:2B:6C:C4:55:59:5E:36:D2:B3:74:8D:08:73 Authority key identifier: E4:E4:C2:42:47:78:5C:34:2F:F3:59:07:F7:E1:1C:4A:BB:39:8B:83 Certificate issuer: /CN=A91E85F1/serialNumber=E4E4C24247785C342FF35907F7E11C4ABB398B83 Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5OTCQkd4XDQv81kH9-EcSrs5i4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.mft Manifest number: 13 Signing time: Sun 27 Apr 2025 06:53:20 +0000 Manifest this update: Sun 27 Apr 2025 06:53:19 +0000 Manifest next update: Sun 04 May 2025 06:53:19 +0000 Files and hashes: 1: 5OTCQkd4XDQv81kH9-EcSrs5i4M.crl (hash: zOxjxDThMODx95UVcbwfV4lsduOXOuFUV1axLoL8w8g=) 2: 212E0B520DFE11F0B266963AC4F9AE02.roa (hash: 44vHU0H/9/bs4kOPReZOgC2D0Y7H1F8Nu3vr76cFkxs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.crl rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5OTCQkd4XDQv81kH9-EcSrs5i4M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E85F1, serialNumber=E4E4C24247785C342FF35907F7E11C4ABB398B83 Validity Not Before: Apr 27 06:53:19 2025 GMT Not After : May 4 06:53:19 2025 GMT Subject: CN=680dd45f-5879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5c:fa:9a:69:cb:58:0d:f6:8f:93:84:25:b6: 16:66:fc:02:c5:dc:02:a3:28:79:5d:30:25:ad:16: 9d:98:6a:a9:5f:09:78:85:9b:16:b4:be:6c:28:7e: 2e:54:4d:fd:0c:8a:fa:65:80:95:91:60:b4:41:82: db:0b:1f:fa:1a:be:22:8d:4f:da:ea:9f:40:93:6c: 61:3d:d9:62:f0:f8:1f:6b:5d:0f:48:37:01:87:cb: 95:10:b1:ef:43:2f:d9:02:6f:db:0f:cc:76:91:82: d9:a3:cb:a4:93:13:51:99:55:ca:e0:0e:de:35:19: 97:ab:a4:1e:1c:7b:b3:6d:2d:86:64:42:b1:22:82: d6:6d:70:e6:82:1e:15:f9:51:6d:5e:1d:32:e4:80: 8e:80:ea:6b:27:66:fd:be:ae:97:ae:78:f0:f2:0a: 3a:81:99:d5:0a:79:0e:0e:58:1e:fe:28:5b:04:00: 03:10:f2:32:7b:34:be:96:d6:5c:d1:a7:db:d1:fc: 23:dd:41:6e:53:48:d9:29:48:da:4a:38:2b:7d:07: ad:aa:da:fc:82:f8:54:8e:d8:0e:9f:2b:41:3b:55: 93:fe:a5:18:d9:a9:48:59:05:8c:23:2c:a5:20:26: 4b:f5:d1:13:64:c0:6a:d7:76:f7:81:d2:ad:5c:92: ef:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:61:62:E9:63:4A:6A:2B:6C:C4:55:59:5E:36:D2:B3:74:8D:08:73 X509v3 Authority Key Identifier: keyid:E4:E4:C2:42:47:78:5C:34:2F:F3:59:07:F7:E1:1C:4A:BB:39:8B:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5OTCQkd4XDQv81kH9-EcSrs5i4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:f4:6a:24:14:dc:d1:ba:a6:84:75:9c:13:cd:54:db:40:a4: c1:0b:39:d4:04:31:90:c1:ec:a5:94:74:fc:7e:53:96:f2:d3: 93:de:93:56:a2:e4:5e:b0:3f:54:b1:7b:74:8b:3b:90:9d:7d: d9:5e:0b:9c:08:62:c7:3d:00:2b:bf:4d:ed:9e:bb:b3:57:48: b3:d0:03:a7:4f:cc:f4:f7:24:81:5f:30:bb:0a:25:78:5c:e3: f6:2b:ce:95:57:41:4c:8e:36:60:87:5f:2b:97:d1:f0:79:49: 85:0a:ff:a6:85:ea:b7:37:30:53:90:28:cb:32:04:45:e0:44: 6e:2a:9e:86:e5:e8:33:ae:d7:26:0b:95:63:10:33:36:c1:8e: 4a:93:d4:16:4e:6a:93:af:24:57:84:b1:d1:e0:2e:2f:c7:80: 32:31:a4:1b:f8:69:0f:f6:8f:c2:f9:32:79:93:49:c8:34:72: 64:74:17:17:92:74:e8:b3:2e:63:44:4f:86:b6:6a:33:3d:dd: 06:3f:d9:28:22:45:2f:4b:7c:d1:00:24:b7:81:2f:7f:20:b0: 63:24:f0:59:81:26:ec:2c:ae:fb:2d:8d:c0:23:f5:1a:03:44: 2d:a7:22:6b:14:ce:ac:12:4e:b2:e4:a5:6d:9c:92:df:5b:19: cd:bb:46:47 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF ODVGMTExMC8GA1UEBRMoRTRFNEMyNDI0Nzc4NUMzNDJGRjM1OTA3RjdFMTFDNEFC QjM5OEI4MzAeFw0yNTA0MjcwNjUzMTlaFw0yNTA1MDQwNjUzMTlaMBgxFjAUBgNV BAMTDTY4MGRkNDVmLTU4NzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNXPqaactYDfaPk4QlthZm/ALF3AKjKHldMCWtFp2YaqlfCXiFmxa0vmwofi5U Tf0MivplgJWRYLRBgtsLH/oaviKNT9rqn0CTbGE92WLw+B9rXQ9INwGHy5UQse9D L9kCb9sPzHaRgtmjy6STE1GZVcrgDt41GZerpB4ce7NtLYZkQrEigtZtcOaCHhX5 UW1eHTLkgI6A6msnZv2+rpeuePDyCjqBmdUKeQ4OWB7+KFsEAAMQ8jJ7NL6W1lzR p9vR/CPdQW5TSNkpSNpKOCt9B62q2vyC+FSO2A6fK0E7VZP+pRjZqUhZBYwjLKUg Jkv10RNkwGrXdveB0q1cku/dAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMmFi6WNK aitsxFVZXjbSs3SNCHMwHwYDVR0jBBgwFoAU5OTCQkd4XDQv81kH9+EcSrs5i4Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4NUYxLzYyMjA2MzNDMERG QzExRjBBMUQ5ODA1M0M0RjlBRTAyLzVPVENRa2Q0WERRdjgxa0g5LUVjU3JzNWk0 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNU9UQ1FrZDRYRFF2ODFrSDktRWNTcnM1aTRNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4 NUYxLzYyMjA2MzNDMERGQzExRjBBMUQ5ODA1M0M0RjlBRTAyLzVPVENRa2Q0WERR djgxa0g5LUVjU3JzNWk0TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB70aiQU3NG6poR1nBPNVNtApMELOdQEMZDB7KWUdPx+U5by05Pek1ai 5F6wP1Sxe3SLO5CdfdleC5wIYsc9ACu/Te2eu7NXSLPQA6dPzPT3JIFfMLsKJXhc 4/YrzpVXQUyONmCHXyuX0fB5SYUK/6aF6rc3MFOQKMsyBEXgRG4qnobl6DOu1yYL lWMQMzbBjkqT1BZOapOvJFeEsdHgLi/HgDIxpBv4aQ/2j8L5MnmTScg0cmR0FxeS dOizLmNET4a2ajM93QY/2SgiRS9LfNEAJLeBL38gsGMk8FmBJuwsrvstjcAj9RoD RC2nImsUzqwSTrLkpW2ckt9bGc27Rkc= -----END CERTIFICATE-----Generated at Sun Apr 27 10:27:19 2025 by rpki-client on console.sobornost.net