$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.mft File: dxt4h8SJvZsXs87YMWTvRNxWTvU.mft (raw, json) Hash identifier: PWTszFg5jwONCZY+UByQ0r2wcMau3zl1TqcZtIP45s4= Subject key identifier: 56:EF:55:0C:82:55:B7:84:19:D0:1A:B7:95:D3:F2:D9:17:B3:98:EF Authority key identifier: 77:1B:78:87:C4:89:BD:9B:17:B3:CE:D8:31:64:EF:44:DC:56:4E:F5 Certificate issuer: /CN=A91E9641/serialNumber=771B7887C489BD9B17B3CED83164EF44DC564EF5 Certificate serial: 0159 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxt4h8SJvZsXs87YMWTvRNxWTvU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.mft Manifest number: 0155 Signing time: Sun 27 Apr 2025 03:02:52 +0000 Manifest this update: Sun 27 Apr 2025 03:02:52 +0000 Manifest next update: Sun 04 May 2025 03:02:52 +0000 Files and hashes: 1: dxt4h8SJvZsXs87YMWTvRNxWTvU.crl (hash: 55yYt9q1M10iFlt/mxo5oDwcx5jD+FO9/mFkrn1l42c=) 2: 5D432F98177711EEAB396D1CC4F9AE02.roa (hash: CB6qYtIMERSezwGUEUv4T/r/K/tC4CWAUjSVJHYQH28=) 3: 5CB1666C177711EEAB396D1CC4F9AE02.roa (hash: wqZWqZ8fa4R6eMrcXZq1r/urB8kEflCs9S9caDMISYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.crl rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxt4h8SJvZsXs87YMWTvRNxWTvU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 345 (0x159) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9641, serialNumber=771B7887C489BD9B17B3CED83164EF44DC564EF5 Validity Not Before: Apr 27 03:02:52 2025 GMT Not After : May 4 03:02:52 2025 GMT Subject: CN=680d9e5c-7b17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:79:bf:88:62:60:21:9e:b2:3a:f0:04:14:1c: 48:bd:68:81:1b:6e:80:07:aa:90:45:9d:56:a4:76: dd:ce:c1:74:cf:f5:62:19:90:3b:e3:a6:c2:e3:d5: 25:84:51:56:92:6b:1e:27:b1:8c:9c:56:2c:a8:18: b8:b3:24:63:c4:38:25:11:8a:49:8c:d1:30:d9:d1: 9a:39:d4:3c:8e:e4:a7:67:39:1e:2c:53:48:ea:90: be:55:ae:cd:ec:b9:5b:5d:08:f0:32:d3:be:a7:41: 39:5f:60:55:5d:bd:db:b8:2d:6d:b1:30:61:d9:25: 10:4e:53:b6:6b:45:58:4e:3b:c2:9c:0a:a0:d0:11: bc:8d:d4:d9:1b:6e:3c:46:e7:12:72:c3:84:6e:96: fc:0d:8f:1c:61:5f:8c:62:70:d0:34:65:23:cc:22: e4:e9:3c:55:8e:88:18:fc:49:e1:29:7d:fd:f9:dd: ad:ac:1d:b2:13:fd:a5:4e:49:96:5e:b4:78:4f:62: 9b:6e:e5:25:8a:71:07:29:ec:3a:0b:50:1d:62:b7: a2:f1:6a:34:27:66:9c:ce:d3:6b:60:20:7b:55:42: cf:30:f2:9d:68:88:79:8b:64:e1:f8:90:51:96:6f: ce:be:9d:5e:5d:64:c3:fd:03:74:14:81:79:e7:b8: 5e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:EF:55:0C:82:55:B7:84:19:D0:1A:B7:95:D3:F2:D9:17:B3:98:EF X509v3 Authority Key Identifier: keyid:77:1B:78:87:C4:89:BD:9B:17:B3:CE:D8:31:64:EF:44:DC:56:4E:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxt4h8SJvZsXs87YMWTvRNxWTvU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:7f:1f:7b:3f:7b:5e:94:31:fe:16:7a:05:fd:4f:6d:d9:fa: d0:c5:33:61:be:b7:5b:73:bb:34:21:b7:93:3f:e3:73:80:14: 29:3a:c1:73:6c:c6:03:2d:e2:37:c6:f5:75:56:3d:db:bc:e4: 80:32:a2:4b:56:d8:52:5f:84:17:83:c9:36:fc:7b:4b:0e:aa: bd:5f:6a:05:09:e6:63:ad:8d:28:48:4d:57:39:61:35:61:a4: 1b:df:22:37:86:75:fd:8d:85:aa:59:33:1d:33:d9:7c:97:2a: 73:6f:a9:60:3e:49:14:59:00:5b:f3:56:73:91:60:cc:ca:a4: 7f:dd:24:a6:9c:45:1f:de:2e:0a:cd:d4:70:1b:58:af:10:9b: e8:72:de:6a:db:b5:c0:30:36:eb:c3:c8:27:66:b3:82:3b:d4: 6c:89:6d:48:74:b7:33:c5:15:73:26:8a:66:b9:76:3e:39:46: 52:77:75:a3:96:e2:6e:27:22:60:c1:24:5e:04:39:10:a2:05: 25:28:3d:a6:58:45:2c:8c:75:9b:ed:26:2a:a3:59:74:9f:91: 20:17:ac:7b:84:ad:24:a2:c1:b7:95:be:38:e3:ac:4e:5a:c5: 7e:83:6d:b0:39:e0:71:88:ac:99:fa:a6:01:4d:36:11:46:6f: 80:8d:b1:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk2NDExMTAvBgNVBAUTKDc3MUI3ODg3QzQ4OUJEOUIxN0IzQ0VEODMxNjRFRjQ0 REM1NjRFRjUwHhcNMjUwNDI3MDMwMjUyWhcNMjUwNTA0MDMwMjUyWjAYMRYwFAYD VQQDEw02ODBkOWU1Yy03YjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA53m/iGJgIZ6yOvAEFBxIvWiBG26AB6qQRZ1WpHbdzsF0z/ViGZA746bC49Ul hFFWkmseJ7GMnFYsqBi4syRjxDglEYpJjNEw2dGaOdQ8juSnZzkeLFNI6pC+Va7N 7LlbXQjwMtO+p0E5X2BVXb3buC1tsTBh2SUQTlO2a0VYTjvCnAqg0BG8jdTZG248 RucScsOEbpb8DY8cYV+MYnDQNGUjzCLk6TxVjogY/EnhKX39+d2trB2yE/2lTkmW XrR4T2KbbuUlinEHKew6C1AdYrei8Wo0J2acztNrYCB7VULPMPKdaIh5i2Th+JBR lm/Ovp1eXWTD/QN0FIF557hezwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFbvVQyC VbeEGdAat5XT8tkXs5jvMB8GA1UdIwQYMBaAFHcbeIfEib2bF7PO2DFk70TcVk71 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTY0MS83RDAyODdFQTE3 NzAxMUVFOTQ1Q0Q4NTlDNEY5QUUwMi9keHQ0aDhTSnZac1hzODdZTVdUdlJOeFdU dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R4dDRoOFNKdlpzWHM4N1lNV1R2Uk54V1R2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTY0MS83RDAyODdFQTE3NzAxMUVFOTQ1Q0Q4NTlDNEY5QUUwMi9keHQ0aDhTSnZa c1hzODdZTVdUdlJOeFdUdlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEfx97P3telDH+FnoF/U9t2frQxTNhvrdbc7s0IbeTP+NzgBQpOsFz bMYDLeI3xvV1Vj3bvOSAMqJLVthSX4QXg8k2/HtLDqq9X2oFCeZjrY0oSE1XOWE1 YaQb3yI3hnX9jYWqWTMdM9l8lypzb6lgPkkUWQBb81ZzkWDMyqR/3SSmnEUf3i4K zdRwG1ivEJvoct5q27XAMDbrw8gnZrOCO9RsiW1IdLczxRVzJopmuXY+OUZSd3Wj luJuJyJgwSReBDkQogUlKD2mWEUsjHWb7SYqo1l0n5EgF6x7hK0kosG3lb4446xO WsV+g22wOeBxiKyZ+qYBTTYRRm+AjbEz -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:16 2025 by rpki-client on console.sobornost.net