$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/E7lE6lgzzbdBH9TsaqHJYs87CIA.mft File: E7lE6lgzzbdBH9TsaqHJYs87CIA.mft (raw, json) Hash identifier: JaTEdfzwBKtIkXIqWopyvW7r4+oW2blT9aVSxgaPGQI= Subject key identifier: 3B:92:82:73:4A:3D:0F:6C:24:42:0D:C6:6C:E7:89:80:1D:E9:F2:1B Authority key identifier: 13:B9:44:EA:58:33:CD:B7:41:1F:D4:EC:6A:A1:C9:62:CF:3B:08:80 Certificate issuer: /CN=A91FCF44/serialNumber=13B944EA5833CDB7411FD4EC6AA1C962CF3B0880 Certificate serial: 4E Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/E7lE6lgzzbdBH9TsaqHJYs87CIA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/E7lE6lgzzbdBH9TsaqHJYs87CIA.mft Manifest number: 4E Signing time: Sun 27 Apr 2025 05:28:30 +0000 Manifest this update: Sun 27 Apr 2025 05:28:29 +0000 Manifest next update: Sun 04 May 2025 05:28:29 +0000 Files and hashes: 1: E7lE6lgzzbdBH9TsaqHJYs87CIA.crl (hash: ijJk4r2+o/5/zm/DbNJ8X5wgtkrmKqBy+CWv/dkij7I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/E7lE6lgzzbdBH9TsaqHJYs87CIA.crl rsync://rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/E7lE6lgzzbdBH9TsaqHJYs87CIA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/E7lE6lgzzbdBH9TsaqHJYs87CIA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCF44, serialNumber=13B944EA5833CDB7411FD4EC6AA1C962CF3B0880 Validity Not Before: Apr 27 05:28:29 2025 GMT Not After : May 4 05:28:29 2025 GMT Subject: CN=680dc07e-2f34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:84:69:43:5f:34:c9:1f:a0:c2:fe:de:34:56: ab:b0:51:e0:c7:39:44:4b:49:93:d0:f8:7a:81:0e: 51:97:bf:87:80:22:5f:09:70:c2:6f:c2:44:8e:c4: f0:a4:a5:8c:83:cd:19:a1:98:f4:1d:74:97:44:58: ec:90:ab:ad:92:36:f4:30:5f:f3:b5:11:64:d0:6a: e6:33:11:f8:85:0d:5e:8b:af:ad:69:d7:cc:8e:ab: dd:47:88:4e:31:0e:03:9a:05:3c:92:bf:98:a9:e2: 9c:ad:9a:d4:23:43:17:94:80:0e:79:6d:c6:91:f9: e3:e3:70:8f:31:71:f0:74:de:93:72:4d:f7:8f:7d: 1f:9e:bf:c3:84:50:19:01:92:10:3a:4a:23:c2:33: f1:93:64:d3:41:41:f1:ef:b6:1f:9a:e0:04:8c:b5: db:8a:bd:1d:a1:9d:3e:eb:67:5d:7e:a2:5f:90:12: 75:cb:9c:ed:c0:ea:0d:1b:fb:08:c5:1a:ca:c7:4c: 92:9c:70:4d:d8:9f:d2:87:3d:bf:18:19:1b:fa:95: 1c:31:27:b2:5f:31:aa:99:dc:3a:97:38:9e:f3:36: 0d:44:48:82:61:b5:00:f3:81:33:b3:d8:ce:e0:e4: ad:15:43:ff:b6:06:10:a0:8a:a1:00:91:4c:32:ad: d8:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:92:82:73:4A:3D:0F:6C:24:42:0D:C6:6C:E7:89:80:1D:E9:F2:1B X509v3 Authority Key Identifier: keyid:13:B9:44:EA:58:33:CD:B7:41:1F:D4:EC:6A:A1:C9:62:CF:3B:08:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/E7lE6lgzzbdBH9TsaqHJYs87CIA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/E7lE6lgzzbdBH9TsaqHJYs87CIA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/E7lE6lgzzbdBH9TsaqHJYs87CIA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:48:81:a2:47:6f:08:5f:af:26:64:bb:44:3f:dd:b4:ff:1d: 9e:f7:aa:a7:fe:cf:e2:0f:07:e6:86:79:15:30:52:7f:02:14: 21:cd:ea:b8:ef:d0:39:21:43:3e:7b:52:38:1b:cd:62:4a:f6: 91:d4:12:dc:27:56:c2:40:8e:10:9a:c7:c4:27:96:09:43:1c: 88:b2:04:73:5a:0f:05:f3:2c:a9:a2:f8:9a:d1:99:31:0d:16: 7f:2a:17:c3:ce:6c:cd:42:a4:2e:7c:fe:58:76:09:8e:a7:2e: cf:be:1f:4a:c9:23:de:02:1c:02:3f:2b:e5:c3:10:6a:d3:96: 12:95:51:e3:bf:f2:4e:12:49:3b:a0:27:7d:71:16:c3:7c:01: 8e:a3:a0:8b:fa:25:31:b3:76:4b:34:80:57:b6:4d:a3:3d:92: b6:34:d3:31:8c:c4:70:90:ac:d3:e5:87:84:d8:92:08:b7:65: 2b:12:86:a3:48:a8:e0:85:6f:96:f4:90:aa:54:6f:af:8f:a6: 9b:2f:6c:fb:49:bf:7c:d5:aa:38:ce:05:55:9a:5d:46:38:e4: ff:c3:31:fb:99:9b:bf:c2:04:7f:87:a1:23:5a:c7:69:6d:73: 39:ad:82:23:79:e8:e3:c8:3b:4a:c4:0d:df:7b:c4:a4:b9:a1: d3:5e:2d:42 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG Q0Y0NDExMC8GA1UEBRMoMTNCOTQ0RUE1ODMzQ0RCNzQxMUZENEVDNkFBMUM5NjJD RjNCMDg4MDAeFw0yNTA0MjcwNTI4MjlaFw0yNTA1MDQwNTI4MjlaMBgxFjAUBgNV BAMTDTY4MGRjMDdlLTJmMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCVhGlDXzTJH6DC/t40VquwUeDHOURLSZPQ+HqBDlGXv4eAIl8JcMJvwkSOxPCk pYyDzRmhmPQddJdEWOyQq62SNvQwX/O1EWTQauYzEfiFDV6Lr61p18yOq91HiE4x DgOaBTySv5ip4pytmtQjQxeUgA55bcaR+ePjcI8xcfB03pNyTfePfR+ev8OEUBkB khA6SiPCM/GTZNNBQfHvth+a4ASMtduKvR2hnT7rZ11+ol+QEnXLnO3A6g0b+wjF GsrHTJKccE3Yn9KHPb8YGRv6lRwxJ7JfMaqZ3DqXOJ7zNg1ESIJhtQDzgTOz2M7g 5K0VQ/+2BhCgiqEAkUwyrdgxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUO5KCc0o9 D2wkQg3GbOeJgB3p8hswHwYDVR0jBBgwFoAUE7lE6lgzzbdBH9TsaqHJYs87CIAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZDRjQ0L0UyMTlDNjM4QUUx NTExRUZCMzAyOTgzRUM0RjlBRTAyL0U3bEU2bGd6emJkQkg5VHNhcUhKWXM4N0NJ QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvRTdsRTZsZ3p6YmRCSDlUc2FxSEpZczg3Q0lBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZD RjQ0L0UyMTlDNjM4QUUxNTExRUZCMzAyOTgzRUM0RjlBRTAyL0U3bEU2bGd6emJk Qkg5VHNhcUhKWXM4N0NJQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABJIgaJHbwhfryZku0Q/3bT/HZ73qqf+z+IPB+aGeRUwUn8CFCHN6rjv 0DkhQz57UjgbzWJK9pHUEtwnVsJAjhCax8QnlglDHIiyBHNaDwXzLKmi+JrRmTEN Fn8qF8PObM1CpC58/lh2CY6nLs++H0rJI94CHAI/K+XDEGrTlhKVUeO/8k4SSTug J31xFsN8AY6joIv6JTGzdks0gFe2TaM9krY00zGMxHCQrNPlh4TYkgi3ZSsShqNI qOCFb5b0kKpUb6+PppsvbPtJv3zVqjjOBVWaXUY45P/DMfuZm7/CBH+HoSNax2lt czmtgiN56OPIO0rEDd97xKS5odNeLUI= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:59 2025 by rpki-client on console.sobornost.net