$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB68C/17D103A8EAB211EF846F1337C4F9AE02/oiiPiWTWFpqHlfL07wXg1ebhOwk.mft File: oiiPiWTWFpqHlfL07wXg1ebhOwk.mft (raw, json) Hash identifier: SEaCS5qjCOiWDqQ8WNFx5v53lNgahIxTP1+gQFn5exw= Subject key identifier: 94:A4:42:B0:58:B9:0A:93:BF:9F:F8:BE:9F:45:CE:EF:20:49:D4:C6 Authority key identifier: A2:28:8F:89:64:D6:16:9A:87:95:F2:F4:EF:05:E0:D5:E6:E1:3B:09 Certificate issuer: /CN=A91FB68C/serialNumber=A2288F8964D6169A8795F2F4EF05E0D5E6E13B09 Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiiPiWTWFpqHlfL07wXg1ebhOwk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB68C/17D103A8EAB211EF846F1337C4F9AE02/oiiPiWTWFpqHlfL07wXg1ebhOwk.mft Manifest number: 29 Signing time: Sun 27 Apr 2025 06:36:13 +0000 Manifest this update: Sun 27 Apr 2025 06:36:13 +0000 Manifest next update: Sun 04 May 2025 06:36:13 +0000 Files and hashes: 1: oiiPiWTWFpqHlfL07wXg1ebhOwk.crl (hash: zjG1ASi3OxkXVj1pK+gDNegnTNm3Ref7+OXvkJytDdo=) 2: 72294810EAB211EF902A7E27C4F9AE02.roa (hash: FSFReYDaeQFvJdY+hyjPH64a3aCnAjTrkrMSrqHp11w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB68C/17D103A8EAB211EF846F1337C4F9AE02/oiiPiWTWFpqHlfL07wXg1ebhOwk.crl rsync://rpki.apnic.net/member_repository/A91FB68C/17D103A8EAB211EF846F1337C4F9AE02/oiiPiWTWFpqHlfL07wXg1ebhOwk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiiPiWTWFpqHlfL07wXg1ebhOwk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB68C, serialNumber=A2288F8964D6169A8795F2F4EF05E0D5E6E13B09 Validity Not Before: Apr 27 06:36:13 2025 GMT Not After : May 4 06:36:13 2025 GMT Subject: CN=680dd05d-f2bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0e:f0:5d:3f:88:77:0e:c9:59:ce:4c:0d:96: d4:3f:8f:00:fa:ee:32:d4:78:cd:64:1b:43:22:53: fd:56:1d:e9:ea:a6:db:51:65:43:a0:2a:ab:d9:62: f5:d5:de:5d:e4:b3:ba:04:a4:ec:6b:91:76:a5:9c: fa:c1:15:eb:4e:51:8c:f0:70:a7:6c:12:48:36:01: a2:7b:71:66:b4:b6:a4:e1:d6:55:56:12:7a:0d:31: a6:bd:27:06:4d:3d:a6:dd:99:1f:26:90:a0:d9:9e: 16:05:b7:e0:0c:f9:80:da:11:c7:76:93:11:b5:ad: cb:83:32:c6:f9:ab:80:48:0e:84:41:cf:f1:7b:57: c1:93:b2:1d:e3:70:e4:71:52:1a:bd:d4:c9:75:b6: e0:8c:99:7d:6d:b9:d8:d0:e2:00:b1:bc:ac:60:e0: 33:9a:2c:34:95:ed:39:be:6e:6e:56:ab:97:8d:9b: d6:22:40:b0:1a:aa:2f:5d:62:3e:56:6b:c1:86:ef: 25:b1:4a:ff:87:3c:74:d1:95:ea:5e:96:14:71:0f: 4b:bc:3c:01:79:6e:7e:2c:59:64:89:a4:5c:71:e9: 3a:a1:e2:30:f5:48:66:1e:be:18:e2:6c:9f:61:dc: a9:2a:23:71:0d:c4:ba:28:71:aa:ea:67:c0:04:30: d8:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:A4:42:B0:58:B9:0A:93:BF:9F:F8:BE:9F:45:CE:EF:20:49:D4:C6 X509v3 Authority Key Identifier: keyid:A2:28:8F:89:64:D6:16:9A:87:95:F2:F4:EF:05:E0:D5:E6:E1:3B:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB68C/17D103A8EAB211EF846F1337C4F9AE02/oiiPiWTWFpqHlfL07wXg1ebhOwk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiiPiWTWFpqHlfL07wXg1ebhOwk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB68C/17D103A8EAB211EF846F1337C4F9AE02/oiiPiWTWFpqHlfL07wXg1ebhOwk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:90:9b:38:2f:dc:f5:f5:15:b1:71:c8:c7:59:ba:74:f0:82: 48:e9:e7:2d:19:f2:3a:eb:73:0c:bb:8c:45:28:8b:8e:10:8d: 70:19:a2:01:a2:23:e0:b4:ef:85:03:f6:7a:86:e7:ef:f9:ba: 28:a1:d7:5b:d2:77:4c:fd:c9:a6:89:4f:cf:f4:65:8e:8c:ca: 76:2e:02:e7:3c:7b:4e:c0:5a:12:88:3c:dc:17:f0:c1:cf:c0: 5e:6e:38:1a:35:de:e2:93:d2:3f:8a:0a:95:68:54:6c:82:d5: 5e:99:8c:b4:fd:3f:cc:49:61:b4:4b:f8:15:8a:89:d6:25:27: f6:84:b4:2c:20:be:73:51:99:a6:38:9b:e6:6e:ba:89:67:e6: d7:83:bc:3a:79:74:a0:7a:23:21:89:cb:d5:00:c3:a4:eb:be: e7:15:06:d1:de:9d:30:83:0b:cd:45:f2:ff:bd:32:0a:13:89: 6e:a2:b0:98:13:43:75:99:f2:59:80:9f:7f:f4:4d:f5:c7:94: e4:f1:62:c3:50:2e:95:78:c6:a9:5d:e0:30:0e:47:7b:b0:8d: 79:c9:70:fa:6c:93:77:87:9c:2e:7e:3f:5b:87:36:2e:4f:c2: d1:00:44:70:50:24:6c:81:7f:80:18:66:53:d0:61:ab:c3:76: 95:55:9e:ba -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QjY4QzExMC8GA1UEBRMoQTIyODhGODk2NEQ2MTY5QTg3OTVGMkY0RUYwNUUwRDVF NkUxM0IwOTAeFw0yNTA0MjcwNjM2MTNaFw0yNTA1MDQwNjM2MTNaMBgxFjAUBgNV BAMTDTY4MGRkMDVkLWYyYmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9DvBdP4h3DslZzkwNltQ/jwD67jLUeM1kG0MiU/1WHenqpttRZUOgKqvZYvXV 3l3ks7oEpOxrkXalnPrBFetOUYzwcKdsEkg2AaJ7cWa0tqTh1lVWEnoNMaa9JwZN PabdmR8mkKDZnhYFt+AM+YDaEcd2kxG1rcuDMsb5q4BIDoRBz/F7V8GTsh3jcORx Uhq91Ml1tuCMmX1tudjQ4gCxvKxg4DOaLDSV7Tm+bm5Wq5eNm9YiQLAaqi9dYj5W a8GG7yWxSv+HPHTRlepelhRxD0u8PAF5bn4sWWSJpFxx6Tqh4jD1SGYevhjibJ9h 3KkqI3ENxLoocarqZ8AEMNhpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlKRCsFi5 CpO/n/i+n0XO7yBJ1MYwHwYDVR0jBBgwFoAUoiiPiWTWFpqHlfL07wXg1ebhOwkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZCNjhDLzE3RDEwM0E4RUFC MjExRUY4NDZGMTMzN0M0RjlBRTAyL29paVBpV1RXRnBxSGxmTDA3d1hnMWViaE93 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb2lpUGlXVFdGcHFIbGZMMDd3WGcxZWJoT3drLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZC NjhDLzE3RDEwM0E4RUFCMjExRUY4NDZGMTMzN0M0RjlBRTAyL29paVBpV1RXRnBx SGxmTDA3d1hnMWViaE93ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF+Qmzgv3PX1FbFxyMdZunTwgkjp5y0Z8jrrcwy7jEUoi44QjXAZogGi I+C074UD9nqG5+/5uiih11vSd0z9yaaJT8/0ZY6MynYuAuc8e07AWhKIPNwX8MHP wF5uOBo13uKT0j+KCpVoVGyC1V6ZjLT9P8xJYbRL+BWKidYlJ/aEtCwgvnNRmaY4 m+Zuuoln5teDvDp5dKB6IyGJy9UAw6TrvucVBtHenTCDC81F8v+9MgoTiW6isJgT Q3WZ8lmAn3/0TfXHlOTxYsNQLpV4xqld4DAOR3uwjXnJcPpsk3eHnC5+P1uHNi5P wtEARHBQJGyBf4AYZlPQYavDdpVVnro= -----END CERTIFICATE-----Generated at Sun Apr 27 10:27:19 2025 by rpki-client on console.sobornost.net