$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.mft File: 2OL6sVCi_VePZ-GbApZTmzdSyak.mft (raw, json) Hash identifier: TCbPeYGSWp6YMbe0J2ATwEiDmfHvD+W7RouRWCn8/WQ= Subject key identifier: 22:6A:E5:19:94:8F:AE:64:51:8E:00:1B:74:6B:B8:CA:34:A4:C7:0C Authority key identifier: D8:E2:FA:B1:50:A2:FD:57:8F:67:E1:9B:02:96:53:9B:37:52:C9:A9 Certificate issuer: /CN=A91EC225/serialNumber=D8E2FAB150A2FD578F67E19B0296539B3752C9A9 Certificate serial: 0E98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2OL6sVCi_VePZ-GbApZTmzdSyak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.mft Manifest number: 0E8F Signing time: Mon 28 Apr 2025 17:55:49 +0000 Manifest this update: Mon 28 Apr 2025 17:55:48 +0000 Manifest next update: Mon 05 May 2025 17:55:48 +0000 Files and hashes: 1: 2OL6sVCi_VePZ-GbApZTmzdSyak.crl (hash: MbMfeW3WBlkKaZWl0JISL9H4nqcJAd9WJOWyYsD4Lyw=) 2: 83974F92EF7C11EF9079DB1CC4F9AE02.roa (hash: yybAeEAc62kbf0vMICJ/T2r9CwvlPXBXXe+0zfXPjFk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.crl rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2OL6sVCi_VePZ-GbApZTmzdSyak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 17:55:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3736 (0xe98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC225, serialNumber=D8E2FAB150A2FD578F67E19B0296539B3752C9A9 Validity Not Before: Apr 28 17:55:48 2025 GMT Not After : May 5 17:55:48 2025 GMT Subject: CN=680fc124-e33d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0a:c6:ee:f2:7c:12:b8:24:71:8b:20:e2:02: 4f:cd:0b:fc:3b:67:dc:25:ed:0c:3f:08:25:9c:38: 1a:bf:96:a7:5e:91:b8:06:67:09:7d:5e:15:9b:bf: 75:20:38:66:9f:ae:fb:5c:f1:3c:a4:2b:1a:e8:e7: 9e:41:e7:e8:2e:96:5b:39:78:05:7f:54:b0:f3:af: 64:97:a3:d3:2f:15:c9:84:3b:d9:c0:23:fb:bd:b9: 44:42:23:52:8c:31:5c:1c:d5:5d:95:46:c9:f7:3b: d0:90:17:08:f3:3b:7d:e1:07:b4:94:16:ac:4c:ff: 0a:af:62:e3:16:b8:16:8e:da:b8:40:f8:87:00:a5: 75:0e:69:65:13:1d:86:29:68:7a:85:04:60:a0:b1: 5b:af:ca:1b:a1:f3:06:10:d6:be:66:3d:f1:05:89: 6f:3f:b1:4d:ab:54:ff:14:05:58:fe:99:c1:4e:c1: 53:74:e2:61:ad:8e:52:44:a6:5f:5c:fe:a4:ba:13: cb:f7:82:86:4a:db:86:ae:82:54:85:5a:6c:e3:cc: e7:6d:50:ea:57:c3:80:ab:8e:32:ce:3d:11:35:67: 24:25:91:b0:f7:28:c6:25:69:e8:ca:eb:03:1d:58: d9:6f:2a:96:90:be:bf:fc:74:dd:78:f6:a8:67:17: 90:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:6A:E5:19:94:8F:AE:64:51:8E:00:1B:74:6B:B8:CA:34:A4:C7:0C X509v3 Authority Key Identifier: keyid:D8:E2:FA:B1:50:A2:FD:57:8F:67:E1:9B:02:96:53:9B:37:52:C9:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2OL6sVCi_VePZ-GbApZTmzdSyak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:cb:8a:69:79:6b:78:40:96:58:5b:2a:e3:e7:52:b4:b2:40: 65:4f:83:da:6c:47:6c:68:dc:d0:f2:c1:78:e4:0d:f2:04:a2: 75:ce:c2:cd:97:aa:a2:56:c1:81:f3:2f:2a:98:62:57:7e:d7: 7a:ab:f8:00:96:7f:18:01:e5:84:39:3d:90:cf:5f:59:0e:64: 42:42:96:a3:cb:75:b1:1b:88:55:b8:6c:cb:2e:ae:93:2c:67: e9:d0:83:02:27:ea:f3:72:02:be:cd:6e:b2:22:21:8a:04:fa: 0e:60:db:36:15:f5:db:70:75:0a:4f:cd:bd:c5:19:32:c3:1e: 64:9b:51:74:77:10:b2:c2:85:3a:95:75:2c:fa:5a:71:d1:8d: c8:41:43:1e:bc:77:dd:83:49:fa:bb:92:de:af:8b:3d:86:79: e5:3e:bb:e8:02:52:52:38:c8:cb:34:66:4d:3a:e7:2d:56:00: 96:04:e4:84:8a:b4:5f:5e:d9:94:e4:63:22:67:55:bf:9d:9e: e5:35:2c:d3:10:be:1c:7e:fc:8c:92:d4:94:10:92:47:d3:8d: 89:6b:ed:80:b9:dc:82:1f:84:3a:0b:32:8d:05:7c:ac:ed:12: 65:14:d2:90:33:b1:4b:71:3f:2e:e4:d5:f4:60:26:2b:da:f2: 32:8d:eb:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDpgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUMyMjUxMTAvBgNVBAUTKEQ4RTJGQUIxNTBBMkZENTc4RjY3RTE5QjAyOTY1MzlC Mzc1MkM5QTkwHhcNMjUwNDI4MTc1NTQ4WhcNMjUwNTA1MTc1NTQ4WjAYMRYwFAYD VQQDEw02ODBmYzEyNC1lMzNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwQrG7vJ8ErgkcYsg4gJPzQv8O2fcJe0MPwglnDgav5anXpG4BmcJfV4Vm791 IDhmn677XPE8pCsa6OeeQefoLpZbOXgFf1Sw869kl6PTLxXJhDvZwCP7vblEQiNS jDFcHNVdlUbJ9zvQkBcI8zt94Qe0lBasTP8Kr2LjFrgWjtq4QPiHAKV1DmllEx2G KWh6hQRgoLFbr8obofMGENa+Zj3xBYlvP7FNq1T/FAVY/pnBTsFTdOJhrY5SRKZf XP6kuhPL94KGStuGroJUhVps48znbVDqV8OAq44yzj0RNWckJZGw9yjGJWnoyusD HVjZbyqWkL6//HTdePaoZxeQ/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCJq5RmU j65kUY4AG3RruMo0pMcMMB8GA1UdIwQYMBaAFNji+rFQov1Xj2fhmwKWU5s3Usmp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzIyNS80OTlGREY5MDhF NTUxMUU5ODBEMDlBNDJDNEY5QUUwMi8yT0w2c1ZDaV9WZVBaLUdiQXBaVG16ZFN5 YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJPTDZzVkNpX1ZlUFotR2JBcFpUbXpkU3lhay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzIyNS80OTlGREY5MDhFNTUxMUU5ODBEMDlBNDJDNEY5QUUwMi8yT0w2c1ZDaV9W ZVBaLUdiQXBaVG16ZFN5YWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4y4ppeWt4QJZYWyrj51K0skBlT4PabEdsaNzQ8sF45A3yBKJ1zsLN l6qiVsGB8y8qmGJXftd6q/gAln8YAeWEOT2Qz19ZDmRCQpajy3WxG4hVuGzLLq6T LGfp0IMCJ+rzcgK+zW6yIiGKBPoOYNs2FfXbcHUKT829xRkywx5km1F0dxCywoU6 lXUs+lpx0Y3IQUMevHfdg0n6u5Ler4s9hnnlPrvoAlJSOMjLNGZNOuctVgCWBOSE irRfXtmU5GMiZ1W/nZ7lNSzTEL4cfvyMktSUEJJH042Ja+2AudyCH4Q6CzKNBXys 7RJlFNKQM7FLcT8u5NX0YCYr2vIyjetn -----END CERTIFICATE-----Generated at Mon Apr 28 20:11:14 2025 by rpki-client on console.sobornost.net