$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.mft File: rea1d9VLWrCQBc5hO7E2SGUuams.mft (raw, json) Hash identifier: mQlNVgTUPUruRDeYhbTlLlPyAcm+B2QeJcwNaddozo0= Subject key identifier: 27:5E:F7:23:06:F7:E4:B3:10:68:C6:EF:7A:16:23:6C:3C:15:50:51 Authority key identifier: AD:E6:B5:77:D5:4B:5A:B0:90:05:CE:61:3B:B1:36:48:65:2E:6A:6B Certificate issuer: /CN=A91F4553/serialNumber=ADE6B577D54B5AB09005CE613BB13648652E6A6B Certificate serial: 0547 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rea1d9VLWrCQBc5hO7E2SGUuams.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.mft Manifest number: 0543 Signing time: Sat 26 Apr 2025 23:06:26 +0000 Manifest this update: Sat 26 Apr 2025 23:06:25 +0000 Manifest next update: Sat 03 May 2025 23:06:25 +0000 Files and hashes: 1: rea1d9VLWrCQBc5hO7E2SGUuams.crl (hash: 0a1Jl/m7ibO0F1c/KMFxO9Q+hyG6Fiz0x59VQmDx+mE=) 2: A1491F7CEB7811EB9134133BC4F9AE02.roa (hash: yAlIecRARh3umrfcsK/yx6rBFPCYyzog9iWJaTHp1QU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.crl rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rea1d9VLWrCQBc5hO7E2SGUuams.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 23:06:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1351 (0x547) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4553, serialNumber=ADE6B577D54B5AB09005CE613BB13648652E6A6B Validity Not Before: Apr 26 23:06:25 2025 GMT Not After : May 3 23:06:25 2025 GMT Subject: CN=680d66f1-e832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d4:a1:13:ac:03:59:51:aa:f6:75:8a:73:1e: 99:30:f3:7b:7c:77:8a:ca:df:62:94:46:f5:d1:78: 90:76:9c:b0:f8:d2:94:6f:57:18:3b:7c:ed:ed:b5: 66:a8:64:b0:ae:72:45:17:52:0f:cb:65:1b:d0:c7: 7a:55:10:15:4d:4f:18:4d:bd:a5:a5:bf:c9:49:9a: 4b:5f:ee:35:bb:1e:68:6c:4e:9e:d1:ce:96:25:b5: ff:5a:64:6d:24:7f:dd:ff:69:70:e9:71:e4:2d:36: f6:d7:11:3b:5a:e7:87:91:eb:9c:71:f9:f6:cc:35: a2:ba:a8:c3:bc:6d:e2:ee:b6:7f:08:9a:d3:12:5b: 56:6b:13:08:6c:8f:ea:d5:24:7f:4a:d1:77:f6:7d: e6:29:88:09:b3:c8:e3:bf:ad:7c:51:f2:12:39:f1: 8a:71:3d:c7:dc:ce:e3:bc:bf:13:fa:c0:40:df:72: 6f:a7:cc:fe:0b:71:5a:1d:a7:08:55:62:a0:2c:e8: 7e:ad:2c:46:4e:14:33:71:9f:7c:fa:53:4e:1f:11: b6:c5:55:6a:bf:47:3e:68:3f:ac:ca:a0:19:d8:76: 65:be:59:ae:ac:6a:87:e2:01:fb:fc:7a:22:b5:75: 8e:5c:17:0f:1a:79:b2:ae:fe:06:4a:84:af:93:92: e8:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:5E:F7:23:06:F7:E4:B3:10:68:C6:EF:7A:16:23:6C:3C:15:50:51 X509v3 Authority Key Identifier: keyid:AD:E6:B5:77:D5:4B:5A:B0:90:05:CE:61:3B:B1:36:48:65:2E:6A:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rea1d9VLWrCQBc5hO7E2SGUuams.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:13:ba:34:4d:f1:d7:4b:73:59:2e:43:fa:73:d0:b5:71:9e: 1d:2c:f2:c8:40:7d:57:dd:3d:8d:68:15:c5:59:87:34:d8:54: 5c:39:7b:e4:bf:c0:c0:0f:e6:38:b8:dc:a5:ef:a3:33:fb:9f: 8e:a6:7f:d0:89:b3:06:15:7b:44:be:4e:21:e9:29:49:e1:f3: 51:2e:70:a7:e7:4d:62:2c:35:16:f4:65:4e:c6:56:7f:57:55: d7:b3:9f:04:f7:ec:b9:30:30:a7:4d:c3:ef:7c:bb:64:f9:4e: af:7d:4d:ea:00:64:2c:d6:79:cc:b9:6a:2b:38:05:45:d1:71: 64:23:a0:6d:3a:9e:53:f6:cb:4a:63:90:4c:9e:57:3f:2f:e0: a5:82:cb:a7:f6:82:66:91:4e:28:f4:2c:dc:5f:f9:75:5f:fa: e2:88:83:72:cd:96:69:3e:8d:50:bd:36:84:be:5e:85:85:90: 6d:8e:ad:7f:dd:12:b3:55:bd:4e:12:a7:da:42:4e:7c:05:3c: b5:b6:1d:f3:3d:92:19:19:5a:a2:e8:17:f2:9a:6d:f3:ba:d5: 2d:87:3f:5c:37:a9:fe:6b:ee:06:9b:6a:70:ac:66:4a:7a:17: 33:a9:d8:13:15:34:9d:0d:92:09:ce:0c:e7:ca:81:6d:fb:b3: 6f:a8:37:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ1NTMxMTAvBgNVBAUTKEFERTZCNTc3RDU0QjVBQjA5MDA1Q0U2MTNCQjEzNjQ4 NjUyRTZBNkIwHhcNMjUwNDI2MjMwNjI1WhcNMjUwNTAzMjMwNjI1WjAYMRYwFAYD VQQDEw02ODBkNjZmMS1lODMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqtShE6wDWVGq9nWKcx6ZMPN7fHeKyt9ilEb10XiQdpyw+NKUb1cYO3zt7bVm qGSwrnJFF1IPy2Ub0Md6VRAVTU8YTb2lpb/JSZpLX+41ux5obE6e0c6WJbX/WmRt JH/d/2lw6XHkLTb21xE7WueHkeuccfn2zDWiuqjDvG3i7rZ/CJrTEltWaxMIbI/q 1SR/StF39n3mKYgJs8jjv618UfISOfGKcT3H3M7jvL8T+sBA33Jvp8z+C3FaHacI VWKgLOh+rSxGThQzcZ98+lNOHxG2xVVqv0c+aD+syqAZ2HZlvlmurGqH4gH7/Hoi tXWOXBcPGnmyrv4GSoSvk5LogwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCde9yMG 9+SzEGjG73oWI2w8FVBRMB8GA1UdIwQYMBaAFK3mtXfVS1qwkAXOYTuxNkhlLmpr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDU1My80RDIzQkIwRUVC NzQxMUVCQUZCNDc2MzFDNEY5QUUwMi9yZWExZDlWTFdyQ1FCYzVoTzdFMlNHVXVh bXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JlYTFkOVZMV3JDUUJjNWhPN0UyU0dVdWFtcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDU1My80RDIzQkIwRUVCNzQxMUVCQUZCNDc2MzFDNEY5QUUwMi9yZWExZDlWTFdy Q1FCYzVoTzdFMlNHVXVhbXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuE7o0TfHXS3NZLkP6c9C1cZ4dLPLIQH1X3T2NaBXFWYc02FRcOXvk v8DAD+Y4uNyl76Mz+5+Opn/QibMGFXtEvk4h6SlJ4fNRLnCn501iLDUW9GVOxlZ/ V1XXs58E9+y5MDCnTcPvfLtk+U6vfU3qAGQs1nnMuWorOAVF0XFkI6BtOp5T9stK Y5BMnlc/L+Clgsun9oJmkU4o9CzcX/l1X/riiINyzZZpPo1QvTaEvl6FhZBtjq1/ 3RKzVb1OEqfaQk58BTy1th3zPZIZGVqi6Bfymm3zutUthz9cN6n+a+4Gm2pwrGZK ehczqdgTFTSdDZIJzgznyoFt+7NvqDfG -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:17 2025 by rpki-client on console.sobornost.net