$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft File: spEQIVRHIYPPUNKub6MOG940K_Q.mft (raw, json) Hash identifier: E63AzcHNl6koCHofnwIht+t3oR7HmP0LAajb+OOzPXE= Subject key identifier: 7D:EB:53:75:29:A4:5D:A0:2B:14:A7:E9:66:A9:04:4A:B7:DD:BC:B4 Authority key identifier: B2:91:10:21:54:47:21:83:CF:50:D2:AE:6F:A3:0E:1B:DE:34:2B:F4 Certificate issuer: /CN=A91FB095/serialNumber=B291102154472183CF50D2AE6FA30E1BDE342BF4 Certificate serial: 0165 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spEQIVRHIYPPUNKub6MOG940K_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft Manifest number: 015E Signing time: Sun 27 Apr 2025 03:03:30 +0000 Manifest this update: Sun 27 Apr 2025 03:03:30 +0000 Manifest next update: Sun 04 May 2025 03:03:30 +0000 Files and hashes: 1: spEQIVRHIYPPUNKub6MOG940K_Q.crl (hash: HeypFEWS10615XjLsdaAdMhDm+QtYgr7t93In7OkZ4c=) 2: 35A46D4E1A5611EE93742844C4F9AE02.roa (hash: d+JJ+I8S/10V6aRjr1ig3NwOOf5vZtvPjsJauOreVMs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.crl rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spEQIVRHIYPPUNKub6MOG940K_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 357 (0x165) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB095, serialNumber=B291102154472183CF50D2AE6FA30E1BDE342BF4 Validity Not Before: Apr 27 03:03:30 2025 GMT Not After : May 4 03:03:30 2025 GMT Subject: CN=680d9e82-4dd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b4:18:14:b1:2a:72:03:b6:a1:2d:90:65:04: b5:71:80:55:74:03:9e:8d:0a:b7:55:38:ae:c6:65: 13:68:0c:a8:ba:1b:d0:19:2f:2d:a3:5c:56:8e:5b: 00:1f:1b:ce:d2:fd:3e:c7:80:e8:f2:ed:87:bc:59: bf:0e:78:56:c2:9e:a4:dc:a6:f3:28:10:db:07:15: ee:38:73:44:30:12:b9:4d:43:ff:e0:57:66:ac:57: 81:d5:32:af:17:01:cf:e3:0e:b3:ea:9e:50:14:97: af:ea:a3:84:ec:06:5d:73:8b:04:09:9b:3e:24:b9: ed:2d:2f:9f:21:02:83:39:23:30:b7:bf:18:62:97: 9e:71:29:7d:ec:16:17:8b:f9:10:22:8d:61:37:59: d5:aa:cb:58:a6:44:7d:0e:09:3b:d0:79:cd:ab:85: c8:dc:32:a6:41:7c:2f:d7:bf:60:c8:4c:85:1e:2d: ca:18:b0:8d:d9:a0:76:58:d5:4d:9b:cd:ab:bd:88: 42:e0:a9:e6:76:5b:f8:34:9b:7d:3a:52:fd:9e:e7: c4:fc:da:25:b8:10:d1:8c:e2:2c:86:c6:a8:fd:7e: 21:bb:6c:80:cf:28:df:0e:83:fb:c0:7d:34:f8:48: 53:55:68:68:e4:04:f6:1f:6a:e4:8b:44:da:08:df: d5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:EB:53:75:29:A4:5D:A0:2B:14:A7:E9:66:A9:04:4A:B7:DD:BC:B4 X509v3 Authority Key Identifier: keyid:B2:91:10:21:54:47:21:83:CF:50:D2:AE:6F:A3:0E:1B:DE:34:2B:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spEQIVRHIYPPUNKub6MOG940K_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:2b:93:ab:1a:40:b0:67:18:f1:ed:1c:a7:e1:e7:7a:e4:29: 93:42:b7:4c:a1:d4:8f:d4:7b:2e:cc:e0:5e:a0:d7:c8:6a:9a: 94:d6:0b:fc:3b:d4:be:68:ca:39:91:0b:9d:00:77:bc:fa:ee: b9:97:39:cc:f7:c9:91:03:a1:64:59:49:41:db:a9:b4:7f:31: 98:dc:92:a2:d0:27:1e:1c:3c:c5:09:73:ae:88:f7:15:58:56: 16:39:59:8f:29:80:ee:5a:f8:1b:d1:9c:84:60:8f:4d:f0:be: 15:97:e3:59:83:7a:6a:7a:3d:b8:9b:23:7a:27:2d:4e:45:f1: 9e:cb:5d:26:0b:4e:bb:c2:27:d7:3a:c9:d0:df:61:12:9b:2b: f0:a7:b0:5e:aa:38:4a:dd:dc:b4:db:13:4d:05:c2:5b:42:11: be:d3:db:b3:7f:45:cc:d6:e1:cd:4b:47:ba:4b:aa:54:83:de: 40:81:04:c0:de:14:1d:c2:66:77:d9:3f:0a:8f:85:17:c4:97: 44:75:f4:2c:11:05:df:34:5c:f2:04:de:2e:2e:56:15:90:72: 72:a3:a4:f4:c7:81:38:de:33:e7:06:1c:8f:11:76:55:4d:7d: f1:67:de:92:ea:47:b9:ef:73:fa:24:a2:d3:33:a4:65:c1:73: 79:90:36:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkIwOTUxMTAvBgNVBAUTKEIyOTExMDIxNTQ0NzIxODNDRjUwRDJBRTZGQTMwRTFC REUzNDJCRjQwHhcNMjUwNDI3MDMwMzMwWhcNMjUwNTA0MDMwMzMwWjAYMRYwFAYD VQQDEw02ODBkOWU4Mi00ZGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0rQYFLEqcgO2oS2QZQS1cYBVdAOejQq3VTiuxmUTaAyouhvQGS8to1xWjlsA HxvO0v0+x4Do8u2HvFm/DnhWwp6k3KbzKBDbBxXuOHNEMBK5TUP/4FdmrFeB1TKv FwHP4w6z6p5QFJev6qOE7AZdc4sECZs+JLntLS+fIQKDOSMwt78YYpeecSl97BYX i/kQIo1hN1nVqstYpkR9Dgk70HnNq4XI3DKmQXwv179gyEyFHi3KGLCN2aB2WNVN m82rvYhC4Knmdlv4NJt9OlL9nufE/NoluBDRjOIshsao/X4hu2yAzyjfDoP7wH00 +EhTVWho5AT2H2rki0TaCN/VZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH3rU3Up pF2gKxSn6WapBEq33by0MB8GA1UdIwQYMBaAFLKRECFURyGDz1DSrm+jDhveNCv0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjA5NS9BQUJFQjU2QTFB NTMxMUVFQTQ2MDg4MTRDNEY5QUUwMi9zcEVRSVZSSElZUFBVTkt1YjZNT0c5NDBL X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NwRVFJVlJISVlQUFVOS3ViNk1PRzk0MEtfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjA5NS9BQUJFQjU2QTFBNTMxMUVFQTQ2MDg4MTRDNEY5QUUwMi9zcEVRSVZSSElZ UFBVTkt1YjZNT0c5NDBLX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4K5OrGkCwZxjx7Ryn4ed65CmTQrdModSP1HsuzOBeoNfIapqU1gv8 O9S+aMo5kQudAHe8+u65lznM98mRA6FkWUlB26m0fzGY3JKi0CceHDzFCXOuiPcV WFYWOVmPKYDuWvgb0ZyEYI9N8L4Vl+NZg3pqej24myN6Jy1ORfGey10mC067wifX OsnQ32ESmyvwp7BeqjhK3dy02xNNBcJbQhG+09uzf0XM1uHNS0e6S6pUg95AgQTA 3hQdwmZ32T8Kj4UXxJdEdfQsEQXfNFzyBN4uLlYVkHJyo6T0x4E43jPnBhyPEXZV TX3xZ96S6ke573P6JKLTM6RlwXN5kDZA -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:19 2025 by rpki-client on console.sobornost.net