$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED596/0DE23E165AE311EF932C232FC4F9AE02/ciYIDnxlJSNDlihmsxOfAjhyxAI.mft File: ciYIDnxlJSNDlihmsxOfAjhyxAI.mft (raw, json) Hash identifier: bGDQSE5SwBsKlCeUcO4s56eusiSOZ3DqIp26HCYa+l0= Subject key identifier: E3:ED:35:A6:7A:5C:22:30:6C:5E:96:69:36:20:1C:EA:99:22:96:EE Authority key identifier: 72:26:08:0E:7C:65:25:23:43:96:28:66:B3:13:9F:02:38:72:C4:02 Certificate issuer: /CN=A91ED596/serialNumber=7226080E7C65252343962866B3139F023872C402 Certificate serial: 85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciYIDnxlJSNDlihmsxOfAjhyxAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED596/0DE23E165AE311EF932C232FC4F9AE02/ciYIDnxlJSNDlihmsxOfAjhyxAI.mft Manifest number: 84 Signing time: Sun 27 Apr 2025 05:23:19 +0000 Manifest this update: Sun 27 Apr 2025 05:23:19 +0000 Manifest next update: Sun 04 May 2025 05:23:19 +0000 Files and hashes: 1: ciYIDnxlJSNDlihmsxOfAjhyxAI.crl (hash: ZD8b6XP1qo+LggAgccFVFK2Y/w8vslasWPzyLBXePYg=) 2: C0C401905AE311EF90924C30C4F9AE02.roa (hash: 7P9QGIuS2YxmoaQtTvokUjWFQu4qLuQF/pm4P1jB/wE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED596/0DE23E165AE311EF932C232FC4F9AE02/ciYIDnxlJSNDlihmsxOfAjhyxAI.crl rsync://rpki.apnic.net/member_repository/A91ED596/0DE23E165AE311EF932C232FC4F9AE02/ciYIDnxlJSNDlihmsxOfAjhyxAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciYIDnxlJSNDlihmsxOfAjhyxAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 133 (0x85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED596, serialNumber=7226080E7C65252343962866B3139F023872C402 Validity Not Before: Apr 27 05:23:19 2025 GMT Not After : May 4 05:23:19 2025 GMT Subject: CN=680dbf47-0c9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:49:df:5b:55:4d:f5:c0:79:3b:f3:09:c6:00: a2:d7:42:f8:e2:6d:39:f5:03:f7:8c:b7:bf:5a:22: 5f:c1:c0:b4:13:d9:2b:cd:5c:bb:64:13:ea:ed:3c: ac:9d:03:df:ef:6b:1e:4b:69:3b:d9:1a:96:91:f3: 0a:18:57:3f:9d:c1:c9:c6:ee:1c:fc:f0:f0:44:42: 78:e6:37:5a:21:7f:97:0a:08:6d:72:26:cb:97:91: 7c:1d:c4:e5:8b:76:91:d7:b5:9c:45:1d:51:b8:a8: 7e:bc:f2:90:76:39:bf:21:5d:7e:21:f0:54:e3:11: c9:01:1f:54:4e:0d:e1:c4:95:12:0b:2b:19:7f:c0: cd:93:bd:1b:21:8e:e2:57:ad:93:d5:64:5e:3a:84: 02:e7:3c:75:6a:5e:10:85:97:cb:ac:3b:b2:30:26: 38:18:98:36:32:d5:1a:6c:a7:bd:a7:5f:bf:6e:fe: f3:30:b5:03:7a:cd:9d:ab:e0:1e:b7:04:68:4f:63: 6a:63:65:43:81:91:89:87:68:4f:6c:21:9b:16:a1: d5:48:14:88:b0:97:e9:f4:47:11:c3:e4:ec:e9:63: 54:34:0d:3a:3c:e7:79:a5:56:a1:aa:14:6f:a3:99: f8:cd:e7:71:67:fe:0d:6d:dd:ff:56:c1:46:79:ef: eb:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:ED:35:A6:7A:5C:22:30:6C:5E:96:69:36:20:1C:EA:99:22:96:EE X509v3 Authority Key Identifier: keyid:72:26:08:0E:7C:65:25:23:43:96:28:66:B3:13:9F:02:38:72:C4:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED596/0DE23E165AE311EF932C232FC4F9AE02/ciYIDnxlJSNDlihmsxOfAjhyxAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciYIDnxlJSNDlihmsxOfAjhyxAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED596/0DE23E165AE311EF932C232FC4F9AE02/ciYIDnxlJSNDlihmsxOfAjhyxAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:23:19:26:aa:f0:f9:8d:f7:ef:55:ec:d6:09:56:af:a7:ea: 73:29:d5:6d:fd:78:09:12:d5:8c:17:72:47:fd:ac:6c:cf:84: b5:eb:1d:3c:a7:dc:46:68:a0:6c:98:20:43:9f:09:c0:23:1a: fa:5b:0f:23:04:48:b1:18:43:6c:81:ce:15:b5:13:83:ad:d1: 57:23:fa:bd:47:f2:1b:f0:0f:ec:a3:ff:c7:ca:fc:fe:bf:77: d2:41:2c:04:a0:bd:fa:00:fa:53:bb:66:b2:ea:e0:87:52:6c: 02:24:5f:5e:4c:48:a4:7b:f4:38:b2:e0:f2:44:65:1c:57:53: 4e:05:e6:b9:b7:2c:c7:2d:e0:32:9d:c4:e0:e0:ce:a6:3a:69: 4e:06:de:e7:13:9f:bb:74:6b:ad:ae:3e:79:a1:8f:9e:99:6b: 5c:37:69:0c:91:32:41:ba:3a:7a:40:53:03:27:a7:85:3d:16: 96:d0:23:00:c1:ad:7e:c9:af:2b:5d:4a:bd:d4:c6:3e:60:ab: eb:c6:c1:45:3f:34:4a:47:e7:24:7a:b2:95:cb:65:2f:c8:ae: f4:ef:75:c5:77:f0:e7:c5:30:fc:bf:10:e7:6c:81:e1:bc:65: c8:a9:b7:8e:d9:29:28:31:d7:a2:91:2a:4d:19:8c:ac:a4:39: d6:de:be:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ1OTYxMTAvBgNVBAUTKDcyMjYwODBFN0M2NTI1MjM0Mzk2Mjg2NkIzMTM5RjAy Mzg3MkM0MDIwHhcNMjUwNDI3MDUyMzE5WhcNMjUwNTA0MDUyMzE5WjAYMRYwFAYD VQQDEw02ODBkYmY0Ny0wYzlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyEnfW1VN9cB5O/MJxgCi10L44m059QP3jLe/WiJfwcC0E9krzVy7ZBPq7Tys nQPf72seS2k72RqWkfMKGFc/ncHJxu4c/PDwREJ45jdaIX+XCghtcibLl5F8HcTl i3aR17WcRR1RuKh+vPKQdjm/IV1+IfBU4xHJAR9UTg3hxJUSCysZf8DNk70bIY7i V62T1WReOoQC5zx1al4QhZfLrDuyMCY4GJg2MtUabKe9p1+/bv7zMLUDes2dq+Ae twRoT2NqY2VDgZGJh2hPbCGbFqHVSBSIsJfp9EcRw+Ts6WNUNA06POd5pVahqhRv o5n4zedxZ/4Nbd3/VsFGee/rewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOPtNaZ6 XCIwbF6WaTYgHOqZIpbuMB8GA1UdIwQYMBaAFHImCA58ZSUjQ5YoZrMTnwI4csQC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDU5Ni8wREUyM0UxNjVB RTMxMUVGOTMyQzIzMkZDNEY5QUUwMi9jaVlJRG54bEpTTkRsaWhtc3hPZkFqaHl4 QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NpWUlEbnhsSlNORGxpaG1zeE9mQWpoeXhBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDU5Ni8wREUyM0UxNjVBRTMxMUVGOTMyQzIzMkZDNEY5QUUwMi9jaVlJRG54bEpT TkRsaWhtc3hPZkFqaHl4QUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAIxkmqvD5jffvVezWCVavp+pzKdVt/XgJEtWMF3JH/axsz4S16x08 p9xGaKBsmCBDnwnAIxr6Ww8jBEixGENsgc4VtRODrdFXI/q9R/Ib8A/so//Hyvz+ v3fSQSwEoL36APpTu2ay6uCHUmwCJF9eTEike/Q4suDyRGUcV1NOBea5tyzHLeAy ncTg4M6mOmlOBt7nE5+7dGutrj55oY+emWtcN2kMkTJBujp6QFMDJ6eFPRaW0CMA wa1+ya8rXUq91MY+YKvrxsFFPzRKR+ckerKVy2UvyK7073XFd/DnxTD8vxDnbIHh vGXIqbeO2SkoMdeikSpNGYyspDnW3r71 -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:58 2025 by rpki-client on console.sobornost.net