$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.mft File: Oq_7t-pKYNd7tEKErL8lw5i6mm0.mft (raw, json) Hash identifier: DRlVR1PNTHLeb8E65GnBlbrBHw/ZN8FfBZB33Kbckc4= Subject key identifier: C1:A1:AC:AD:E1:4A:ED:BE:B8:11:A3:6B:31:D0:F0:A7:E0:1C:FA:5C Authority key identifier: 3A:AF:FB:B7:EA:4A:60:D7:7B:B4:42:84:AC:BF:25:C3:98:BA:9A:6D Certificate issuer: /CN=A91F8E3D/serialNumber=3AAFFBB7EA4A60D77BB44284ACBF25C398BA9A6D Certificate serial: 0461 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq_7t-pKYNd7tEKErL8lw5i6mm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.mft Manifest number: 044E Signing time: Sat 26 Apr 2025 23:57:07 +0000 Manifest this update: Sat 26 Apr 2025 23:57:06 +0000 Manifest next update: Sat 03 May 2025 23:57:06 +0000 Files and hashes: 1: Oq_7t-pKYNd7tEKErL8lw5i6mm0.crl (hash: hQzJvR0fRjamnJVTq41OG+fLndyNKc6zc0ioIXahuy4=) 2: FF9D89B6AB4C11ECB0C94F67C4F9AE02.roa (hash: p5RWbmc3OrbusuGd87uXwNNKECyHXGRqb7DFbO3Zzjc=) 3: 451AF9F2E3DC11ECB9410B43C4F9AE02.roa (hash: PvyXkvk9rsG65qDLSBUO/zxV1I1w1ViEmt67rzLWH3U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.crl rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq_7t-pKYNd7tEKErL8lw5i6mm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 23:57:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1121 (0x461) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8E3D, serialNumber=3AAFFBB7EA4A60D77BB44284ACBF25C398BA9A6D Validity Not Before: Apr 26 23:57:06 2025 GMT Not After : May 3 23:57:06 2025 GMT Subject: CN=680d72d3-c7c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ce:eb:a3:0e:e9:d2:1e:ba:b0:e3:a8:dd:24: 7a:98:fc:c9:aa:6f:df:e7:44:ec:4b:ab:2e:00:f7: e9:43:94:c1:43:40:8e:b0:ae:da:b1:14:d2:a0:71: 9b:d4:4a:5f:2f:6a:34:18:76:41:b0:09:d5:c6:2e: 13:ef:70:0b:83:8e:72:97:51:26:3a:a8:d6:80:b2: 25:79:15:73:02:b9:df:ff:5b:10:3e:e8:8e:ab:3d: 7d:b1:8d:c4:6f:c5:31:f5:11:67:d5:04:a3:42:c7: 3d:9a:a3:1b:7a:b8:d5:25:f0:cd:bc:b5:72:98:e0: f6:ef:94:c1:4c:c1:db:9a:31:f5:1c:b9:27:90:7c: 9f:15:0d:8b:d9:68:19:26:72:71:2c:87:fa:d7:de: f1:f6:53:b7:9b:dc:a6:a2:e6:1d:48:1f:42:38:c4: cf:00:2e:4e:d7:68:e6:d1:eb:86:0d:9c:94:94:8d: f9:a1:33:6b:5e:34:d0:09:b1:21:2c:59:69:ab:da: 6a:fe:fb:ec:56:e7:e0:71:90:cd:1b:56:be:a5:2d: bb:30:20:a9:4b:c6:6d:d7:01:c4:fe:14:60:aa:4c: 87:1d:db:5c:63:0f:c2:7c:6d:e5:09:6b:9e:ee:cf: f2:0b:7d:f3:6f:02:6f:8f:69:b3:b9:c9:f7:99:47: fb:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:A1:AC:AD:E1:4A:ED:BE:B8:11:A3:6B:31:D0:F0:A7:E0:1C:FA:5C X509v3 Authority Key Identifier: keyid:3A:AF:FB:B7:EA:4A:60:D7:7B:B4:42:84:AC:BF:25:C3:98:BA:9A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq_7t-pKYNd7tEKErL8lw5i6mm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:f0:eb:99:7b:5d:e6:0f:9a:fa:54:6b:74:1b:07:8f:5a:93: 14:f9:b0:80:9f:2e:55:82:9e:a3:46:06:c0:94:03:bb:60:9e: dc:cb:2f:51:fc:60:d5:5d:d9:23:83:1c:89:fb:43:aa:66:17: 4f:ef:c1:b8:11:13:4b:37:e4:31:d9:34:eb:8c:6c:aa:50:36: e3:47:a9:c8:1d:21:da:0a:4c:d2:c1:78:ae:3f:62:85:0d:fe: 10:5e:f0:22:01:8f:c8:43:76:9f:63:c3:5f:9c:3e:f9:c4:f0: d5:2c:63:e6:70:3e:90:44:ad:fa:b7:62:4e:aa:56:f3:9a:96: d4:e1:27:94:67:45:c3:e9:9a:70:c8:52:31:88:59:1d:eb:8b: d1:d9:3e:f3:1b:a5:b4:c7:fa:0b:25:5e:b9:17:3f:e5:fd:c3: f3:7b:f9:77:07:c3:e3:0a:36:5c:40:90:73:e6:47:9f:1d:99: 21:b1:0d:94:a1:e3:7b:e0:06:3f:8b:5d:8e:c9:c9:9f:8d:7a: 64:9e:72:fc:65:2e:45:66:d2:b8:f9:a6:18:79:68:4e:49:1e: 7a:1b:d3:c7:59:ba:bc:53:8f:96:26:ac:65:95:b7:90:ea:22: 4a:7b:44:e0:40:b2:43:49:51:b1:59:ee:cc:88:1a:25:b5:a4: 5c:06:14:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhFM0QxMTAvBgNVBAUTKDNBQUZGQkI3RUE0QTYwRDc3QkI0NDI4NEFDQkYyNUMz OThCQTlBNkQwHhcNMjUwNDI2MjM1NzA2WhcNMjUwNTAzMjM1NzA2WjAYMRYwFAYD VQQDEw02ODBkNzJkMy1jN2M3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx87row7p0h66sOOo3SR6mPzJqm/f50TsS6suAPfpQ5TBQ0COsK7asRTSoHGb 1EpfL2o0GHZBsAnVxi4T73ALg45yl1EmOqjWgLIleRVzArnf/1sQPuiOqz19sY3E b8Ux9RFn1QSjQsc9mqMberjVJfDNvLVymOD275TBTMHbmjH1HLknkHyfFQ2L2WgZ JnJxLIf6197x9lO3m9ymouYdSB9COMTPAC5O12jm0euGDZyUlI35oTNrXjTQCbEh LFlpq9pq/vvsVufgcZDNG1a+pS27MCCpS8Zt1wHE/hRgqkyHHdtcYw/CfG3lCWue 7s/yC33zbwJvj2mzucn3mUf72wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMGhrK3h Su2+uBGjazHQ8KfgHPpcMB8GA1UdIwQYMBaAFDqv+7fqSmDXe7RChKy/JcOYuppt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEUzRC8wQUI0Mzg2QTU4 NEUxMUVDOUZDRjE3NzlDNEY5QUUwMi9PcV83dC1wS1lOZDd0RUtFckw4bHc1aTZt bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09xXzd0LXBLWU5kN3RFS0VyTDhsdzVpNm1tMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEUzRC8wQUI0Mzg2QTU4NEUxMUVDOUZDRjE3NzlDNEY5QUUwMi9PcV83dC1wS1lO ZDd0RUtFckw4bHc1aTZtbTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAR8OuZe13mD5r6VGt0GwePWpMU+bCAny5Vgp6jRgbAlAO7YJ7cyy9R /GDVXdkjgxyJ+0OqZhdP78G4ERNLN+Qx2TTrjGyqUDbjR6nIHSHaCkzSwXiuP2KF Df4QXvAiAY/IQ3afY8NfnD75xPDVLGPmcD6QRK36t2JOqlbzmpbU4SeUZ0XD6Zpw yFIxiFkd64vR2T7zG6W0x/oLJV65Fz/l/cPze/l3B8PjCjZcQJBz5kefHZkhsQ2U oeN74AY/i12OycmfjXpknnL8ZS5FZtK4+aYYeWhOSR56G9PHWbq8U4+WJqxllbeQ 6iJKe0TgQLJDSVGxWe7MiBoltaRcBhTq -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:18 2025 by rpki-client on console.sobornost.net