$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft File: XKcmhHc2ig8SXvQrkg12wnEpzCs.mft (raw, json) Hash identifier: jAMFh2sgpzvtWCce8G8D84R3F4XKiZFneDqhWfN4Hvo= Subject key identifier: 29:ED:F4:FF:C3:07:7D:9C:C4:05:64:D1:37:D8:99:27:ED:D0:D3:C1 Authority key identifier: 5C:A7:26:84:77:36:8A:0F:12:5E:F4:2B:92:0D:76:C2:71:29:CC:2B Certificate issuer: /CN=A91EA742/serialNumber=5CA7268477368A0F125EF42B920D76C27129CC2B Certificate serial: E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKcmhHc2ig8SXvQrkg12wnEpzCs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft Manifest number: E7 Signing time: Sun 27 Apr 2025 04:17:23 +0000 Manifest this update: Sun 27 Apr 2025 04:17:23 +0000 Manifest next update: Sun 04 May 2025 04:17:23 +0000 Files and hashes: 1: XKcmhHc2ig8SXvQrkg12wnEpzCs.crl (hash: Qp7YK3CHzNEpVMckOugaAceOWAvMHbPgSpEu5aiaxdg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.crl rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKcmhHc2ig8SXvQrkg12wnEpzCs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 231 (0xe7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA742, serialNumber=5CA7268477368A0F125EF42B920D76C27129CC2B Validity Not Before: Apr 27 04:17:23 2025 GMT Not After : May 4 04:17:23 2025 GMT Subject: CN=680dafd3-fe1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b2:67:d9:06:81:b0:9f:3a:55:81:c1:0f:a9: 71:f8:80:3f:61:17:1a:c9:82:2e:a1:9a:fa:4a:8a: a6:d1:37:0e:e4:95:47:ef:75:18:c5:03:fc:37:76: d9:6e:60:5e:da:93:1d:56:22:2d:c4:a5:de:bf:48: 9a:7d:37:0a:57:64:eb:21:a5:98:4c:52:b3:ab:bd: 7a:f2:76:57:c6:98:29:1d:a4:ac:65:ab:c8:c0:50: 87:44:40:26:a2:69:83:c2:50:93:84:a5:17:74:dc: 5d:2d:c8:64:00:bd:48:82:39:85:be:bc:6d:0e:26: 9d:9f:49:a4:e5:b9:63:0f:e1:38:cf:bd:fd:e1:5a: af:af:00:5f:1b:2b:a3:39:9a:8c:2c:68:66:ed:4e: ce:70:37:10:6b:18:c6:37:37:9c:34:f9:a8:76:d2: 8e:4e:23:c4:70:bf:d2:27:f9:55:1a:2e:69:79:f6: 34:61:8e:e6:98:e9:26:94:fc:f2:99:80:b3:70:ce: f1:ce:ef:c5:10:4a:ee:15:39:83:e4:9e:c7:e8:e6: 3f:88:98:ed:6a:48:11:03:70:1d:cc:13:05:d4:4a: f2:41:6e:97:aa:03:86:db:73:4b:60:6f:24:21:26: 0b:ab:fe:1b:61:c7:4e:be:2e:21:35:3d:5c:30:8a: 60:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:ED:F4:FF:C3:07:7D:9C:C4:05:64:D1:37:D8:99:27:ED:D0:D3:C1 X509v3 Authority Key Identifier: keyid:5C:A7:26:84:77:36:8A:0F:12:5E:F4:2B:92:0D:76:C2:71:29:CC:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKcmhHc2ig8SXvQrkg12wnEpzCs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption df:4b:ce:fa:f4:c6:1e:67:54:ae:09:75:6d:03:5d:86:3a:17: e7:4f:f4:aa:93:bb:94:1e:1b:13:33:98:5f:03:44:86:55:92: 4f:dc:02:a1:fd:48:f3:f9:eb:1e:8f:6d:18:42:a6:c4:07:13: af:90:e1:c4:c1:fe:83:87:0c:f7:87:53:08:ea:1f:9e:eb:5f: e7:1e:f4:01:3d:3f:c0:81:b9:b0:be:91:48:bc:34:b3:0f:c4: fa:bd:ef:36:fd:fb:88:d0:61:91:d7:aa:b9:06:0f:87:03:64: bf:f2:23:4f:9b:38:68:9f:a2:cf:dd:af:b7:26:28:1e:5a:f6: 96:e3:52:e3:bc:38:32:bd:f5:36:d9:47:34:8a:8d:de:ee:d6: cc:1d:49:f3:5f:6a:bb:11:0e:77:43:f4:f5:d7:07:4f:d7:42: 75:48:77:49:8a:6a:65:e1:19:f4:45:04:7b:2b:1f:3e:f3:86: b0:0a:d5:a3:77:09:e1:98:de:04:4b:52:30:11:2e:77:fe:42: ef:c2:b5:ff:d7:e7:56:05:48:a8:a3:ab:7f:c1:1f:17:4e:e4: 8d:0a:c0:68:d7:85:f7:c0:91:57:cd:34:d9:12:08:e4:01:e5: 1f:86:86:74:da:4c:9f:6c:6c:56:26:ba:cf:4e:94:a3:40:52: 98:8a:dd:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE3NDIxMTAvBgNVBAUTKDVDQTcyNjg0NzczNjhBMEYxMjVFRjQyQjkyMEQ3NkMy NzEyOUNDMkIwHhcNMjUwNDI3MDQxNzIzWhcNMjUwNTA0MDQxNzIzWjAYMRYwFAYD VQQDEw02ODBkYWZkMy1mZTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxrJn2QaBsJ86VYHBD6lx+IA/YRcayYIuoZr6Soqm0TcO5JVH73UYxQP8N3bZ bmBe2pMdViItxKXev0iafTcKV2TrIaWYTFKzq7168nZXxpgpHaSsZavIwFCHREAm ommDwlCThKUXdNxdLchkAL1IgjmFvrxtDiadn0mk5bljD+E4z7394VqvrwBfGyuj OZqMLGhm7U7OcDcQaxjGNzecNPmodtKOTiPEcL/SJ/lVGi5pefY0YY7mmOkmlPzy mYCzcM7xzu/FEEruFTmD5J7H6OY/iJjtakgRA3AdzBMF1EryQW6XqgOG23NLYG8k ISYLq/4bYcdOvi4hNT1cMIpgbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCnt9P/D B32cxAVk0TfYmSft0NPBMB8GA1UdIwQYMBaAFFynJoR3NooPEl70K5INdsJxKcwr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTc0Mi9EQkE4QTVFMkMw NTYxMUVFOTcxNTc4MTBDNEY5QUUwMi9YS2NtaEhjMmlnOFNYdlFya2cxMnduRXB6 Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hLY21oSGMyaWc4U1h2UXJrZzEyd25FcHpDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTc0Mi9EQkE4QTVFMkMwNTYxMUVFOTcxNTc4MTBDNEY5QUUwMi9YS2NtaEhjMmln OFNYdlFya2cxMnduRXB6Q3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDfS8769MYeZ1SuCXVtA12GOhfnT/Sqk7uUHhsTM5hfA0SGVZJP3AKh /Ujz+esej20YQqbEBxOvkOHEwf6Dhwz3h1MI6h+e61/nHvQBPT/AgbmwvpFIvDSz D8T6ve82/fuI0GGR16q5Bg+HA2S/8iNPmzhon6LP3a+3JigeWvaW41LjvDgyvfU2 2Uc0io3e7tbMHUnzX2q7EQ53Q/T11wdP10J1SHdJimpl4Rn0RQR7Kx8+84awCtWj dwnhmN4ES1IwES53/kLvwrX/1+dWBUioo6t/wR8XTuSNCsBo14X3wJFXzTTZEgjk AeUfhoZ02kyfbGxWJrrPTpSjQFKYit3d -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:58 2025 by rpki-client on console.sobornost.net