$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft File: O9MC-nouhmpnmxtglttnRToDq4Y.mft (raw, json) Hash identifier: 7byEMMTr7PvuQoVQjewU6olWuYDs3xXgmLkOn/mhq80= Subject key identifier: 27:41:FD:C7:9C:43:6C:9A:C8:55:E7:56:D0:EC:84:A7:EF:77:19:FD Authority key identifier: 3B:D3:02:FA:7A:2E:86:6A:67:9B:1B:60:96:DB:67:45:3A:03:AB:86 Certificate issuer: /CN=A91F7DCD/serialNumber=3BD302FA7A2E866A679B1B6096DB67453A03AB86 Certificate serial: 0A1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft Manifest number: 0A09 Signing time: Mon 28 Apr 2025 20:16:26 +0000 Manifest this update: Mon 28 Apr 2025 20:16:25 +0000 Manifest next update: Mon 05 May 2025 20:16:25 +0000 Files and hashes: 1: O9MC-nouhmpnmxtglttnRToDq4Y.crl (hash: v3TSnfnETU6OyUe/zsv0dPepxao/OAWwyn31GeaE6D4=) 2: 0791DE6034A511ED9D82D13BC4F9AE02.roa (hash: juMQ71UzLGU0NVMfjPJ2FFyOOWRBZEQJenhZ2xiR7QE=) 3: 62512E2C73D311EABC99D63AC4F9AE02.roa (hash: DFYge5dHCEqKdjq6qJwiRBDOxqQ6gIZRO7JP5sPeXVk=) 4: 27323072FF0E11EFB014CB3CC4F9AE02.roa (hash: Fcw453Ezb9efQnwUieSmXg5daSqXlucP3XjYZWFxjYQ=) 5: 855AECF29B3A11EB9B73EB7BC4F9AE02.roa (hash: R3iQDjS1xmyA/Ti9pGMuv3ByraTjewOpXnxZ6reYInQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.crl rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:16:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2591 (0xa1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7DCD, serialNumber=3BD302FA7A2E866A679B1B6096DB67453A03AB86 Validity Not Before: Apr 28 20:16:25 2025 GMT Not After : May 5 20:16:25 2025 GMT Subject: CN=680fe21a-cb16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:da:5d:bd:37:03:ef:bf:15:5a:96:d1:da:c1: e2:d0:28:01:d3:dc:a5:ae:1f:d8:c0:bb:e8:f1:9e: 1c:ac:4b:07:20:f0:94:42:25:01:62:d5:5d:0c:40: 1d:00:c1:f6:1d:6b:5a:58:42:1a:7e:6c:7c:f2:b1: cd:70:f2:a3:6c:24:f5:ce:bb:77:49:9b:a1:a1:c0: 2c:72:99:84:dd:9b:94:e1:c4:0f:38:2a:bf:e5:ae: 41:4d:21:e2:a9:2f:23:ab:79:a5:ad:d2:6c:4b:f6: 5d:84:d8:1f:45:91:2b:4a:1f:33:4d:55:ad:3c:90: 55:91:3c:b8:4c:f4:39:6d:bc:ef:b2:35:74:30:ae: 2c:ba:de:49:fa:e5:ca:38:5f:7e:7e:17:5e:65:99: 70:cf:9e:35:4f:69:40:70:bb:57:74:b8:25:8b:7a: c0:7f:6c:d2:84:ef:de:57:7b:5f:a4:1f:a3:00:21: d8:d9:55:f9:f3:7a:f4:41:3f:75:63:cf:e5:3e:c3: c0:e2:62:3a:cf:ca:31:c4:84:d5:80:5d:74:bf:7f: 7a:48:a6:35:69:1f:0d:9c:f2:e4:f3:19:9b:dc:04: 19:a7:e2:0a:71:f0:77:84:30:d7:c8:d6:16:13:15: c2:5a:17:20:9e:54:c5:b7:16:eb:1a:58:1e:90:b6: 91:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:41:FD:C7:9C:43:6C:9A:C8:55:E7:56:D0:EC:84:A7:EF:77:19:FD X509v3 Authority Key Identifier: keyid:3B:D3:02:FA:7A:2E:86:6A:67:9B:1B:60:96:DB:67:45:3A:03:AB:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:d0:f3:46:34:00:f9:b7:4d:76:54:32:89:ea:bc:2e:72:66: da:07:ff:10:66:03:b1:ce:05:39:5c:8c:bc:bc:a5:1f:02:41: 50:bf:f7:78:be:91:69:ab:65:68:5b:35:ee:1d:4c:6a:ca:4a: f9:15:e0:b4:1e:3c:8b:7c:b0:5b:e5:5e:2d:76:6d:db:06:de: 7a:0e:17:79:25:91:2a:cf:9a:46:da:46:48:57:d0:d8:cf:4f: c1:35:3c:29:1d:4a:59:2a:af:e9:fb:33:28:d5:6e:80:69:02: 90:f2:12:46:67:09:07:d3:93:d0:8f:dc:9e:89:6d:63:17:11: 0c:6f:30:0a:b8:de:27:30:22:4f:29:70:c6:e9:2f:46:44:bb: 77:85:02:2a:96:98:b9:6e:ff:63:d9:25:ff:9c:09:de:b6:d7: 41:b7:67:b8:64:76:93:30:ad:5d:2a:56:86:7e:40:48:b1:16: 4f:02:8d:d4:dd:91:2a:a1:d1:84:74:eb:cd:2e:23:7d:20:cc: 9b:29:ea:42:9d:e9:a7:e6:ea:16:5a:52:0d:05:a2:02:dc:b7: c3:ff:d5:48:1d:6b:d7:17:38:66:34:2f:f4:f8:97:29:e6:f8: 97:aa:8b:09:80:1c:0b:bc:f6:2a:c8:5c:c6:ad:85:39:58:da: 18:87:7c:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdEQ0QxMTAvBgNVBAUTKDNCRDMwMkZBN0EyRTg2NkE2NzlCMUI2MDk2REI2NzQ1 M0EwM0FCODYwHhcNMjUwNDI4MjAxNjI1WhcNMjUwNTA1MjAxNjI1WjAYMRYwFAYD VQQDEw02ODBmZTIxYS1jYjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw9pdvTcD778VWpbR2sHi0CgB09ylrh/YwLvo8Z4crEsHIPCUQiUBYtVdDEAd AMH2HWtaWEIafmx88rHNcPKjbCT1zrt3SZuhocAscpmE3ZuU4cQPOCq/5a5BTSHi qS8jq3mlrdJsS/ZdhNgfRZErSh8zTVWtPJBVkTy4TPQ5bbzvsjV0MK4sut5J+uXK OF9+fhdeZZlwz541T2lAcLtXdLgli3rAf2zShO/eV3tfpB+jACHY2VX583r0QT91 Y8/lPsPA4mI6z8oxxITVgF10v396SKY1aR8NnPLk8xmb3AQZp+IKcfB3hDDXyNYW ExXCWhcgnlTFtxbrGlgekLaRPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCdB/cec Q2yayFXnVtDshKfvdxn9MB8GA1UdIwQYMBaAFDvTAvp6LoZqZ5sbYJbbZ0U6A6uG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0RDRC84NDQyOEIwRTcz RDExMUVBOUNERUM1MzRDNEY5QUUwMi9POU1DLW5vdWhtcG5teHRnbHR0blJUb0Rx NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL085TUMtbm91aG1wbm14dGdsdHRuUlRvRHE0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0RDRC84NDQyOEIwRTczRDExMUVBOUNERUM1MzRDNEY5QUUwMi9POU1DLW5vdWht cG5teHRnbHR0blJUb0RxNFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC60PNGNAD5t012VDKJ6rwucmbaB/8QZgOxzgU5XIy8vKUfAkFQv/d4 vpFpq2VoWzXuHUxqykr5FeC0HjyLfLBb5V4tdm3bBt56Dhd5JZEqz5pG2kZIV9DY z0/BNTwpHUpZKq/p+zMo1W6AaQKQ8hJGZwkH05PQj9yeiW1jFxEMbzAKuN4nMCJP KXDG6S9GRLt3hQIqlpi5bv9j2SX/nAnettdBt2e4ZHaTMK1dKlaGfkBIsRZPAo3U 3ZEqodGEdOvNLiN9IMybKepCnemn5uoWWlINBaIC3LfD/9VIHWvXFzhmNC/0+Jcp 5viXqosJgBwLvPYqyFzGrYU5WNoYh3yo -----END CERTIFICATE-----Generated at Mon Apr 28 23:06:00 2025 by rpki-client on console.sobornost.net