$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDAD4/C85E837A439911ED839D720EC4F9AE02/rehZrZQNGhc_pkzXBYZ9SH5nNog.mft File: rehZrZQNGhc_pkzXBYZ9SH5nNog.mft (raw, json) Hash identifier: PUVvGWK1JcdiH8ok/kLm56WbSu9l8pPz+iR1X2xgqjc= Subject key identifier: C6:63:07:A6:91:1C:11:00:E4:36:8B:88:9D:DD:32:CB:DA:FB:C0:CD Authority key identifier: AD:E8:59:AD:94:0D:1A:17:3F:A6:4C:D7:05:86:7D:48:7E:67:36:88 Certificate issuer: /CN=A91FDAD4/serialNumber=ADE859AD940D1A173FA64CD705867D487E673688 Certificate serial: 01E9 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rehZrZQNGhc_pkzXBYZ9SH5nNog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDAD4/C85E837A439911ED839D720EC4F9AE02/rehZrZQNGhc_pkzXBYZ9SH5nNog.mft Manifest number: 01E4 Signing time: Sun 27 Apr 2025 00:10:30 +0000 Manifest this update: Sun 27 Apr 2025 00:10:29 +0000 Manifest next update: Sun 04 May 2025 00:10:29 +0000 Files and hashes: 1: rehZrZQNGhc_pkzXBYZ9SH5nNog.crl (hash: tbpF4bKqCUd4dBIViEqKnepotT8NW2wQH6HYgjj/AfU=) 2: A99BC9D64CAC11EDA3BF485AC4F9AE02.roa (hash: M0LQ0bOgsXho1IONj8CXX3n4kpo/nKJprHxKVrxONpQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDAD4/C85E837A439911ED839D720EC4F9AE02/rehZrZQNGhc_pkzXBYZ9SH5nNog.crl rsync://rpki.apnic.net/member_repository/A91FDAD4/C85E837A439911ED839D720EC4F9AE02/rehZrZQNGhc_pkzXBYZ9SH5nNog.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rehZrZQNGhc_pkzXBYZ9SH5nNog.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 00:10:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 489 (0x1e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDAD4, serialNumber=ADE859AD940D1A173FA64CD705867D487E673688 Validity Not Before: Apr 27 00:10:29 2025 GMT Not After : May 4 00:10:29 2025 GMT Subject: CN=680d75f6-b6df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:48:6b:54:70:f2:73:cd:fb:d4:11:32:c7:0a: c4:0c:7a:6f:05:f8:9f:50:0d:c7:8f:48:b8:29:33: ec:4c:0a:1f:0a:bd:1d:01:0a:4d:34:ae:a7:f5:c6: 63:03:b8:9a:55:f5:bf:c4:38:dc:5a:82:30:9a:42: e8:14:9b:92:20:c9:94:77:9c:b9:19:70:7b:8d:ab: 35:df:e9:46:2e:09:33:3c:23:9e:bb:4a:41:b2:92: fe:99:86:45:7a:1e:bf:65:1e:d0:ad:8e:c3:3d:81: 78:d3:6e:6f:11:bb:27:f5:19:1f:53:7b:a5:c4:8a: b5:6c:0f:1a:a5:34:31:c4:b0:9e:45:ed:5d:11:5b: 13:2d:40:71:a4:fa:26:7f:98:cd:58:d3:6f:fb:7e: 86:c7:03:80:d2:d0:4f:48:b0:27:1e:4d:8b:17:13: c3:d2:71:32:34:a6:57:af:40:ed:fe:c3:9d:1b:5b: 17:98:19:9d:2f:6c:88:1c:4a:e2:47:2d:0c:22:26: b1:85:84:7a:bc:72:6b:78:4a:90:0d:c7:36:6f:9e: ba:72:e9:6e:c3:75:98:9b:46:34:3b:21:3a:c6:e7: c8:9a:e0:2e:c8:47:01:07:fa:4e:43:67:18:f7:0b: 27:23:55:b5:63:57:66:8c:fe:68:93:3b:b9:a9:45: fb:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:63:07:A6:91:1C:11:00:E4:36:8B:88:9D:DD:32:CB:DA:FB:C0:CD X509v3 Authority Key Identifier: keyid:AD:E8:59:AD:94:0D:1A:17:3F:A6:4C:D7:05:86:7D:48:7E:67:36:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDAD4/C85E837A439911ED839D720EC4F9AE02/rehZrZQNGhc_pkzXBYZ9SH5nNog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rehZrZQNGhc_pkzXBYZ9SH5nNog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDAD4/C85E837A439911ED839D720EC4F9AE02/rehZrZQNGhc_pkzXBYZ9SH5nNog.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:ec:14:02:ff:ab:28:5a:6d:42:57:5a:4c:a0:59:02:42:aa: 9c:93:71:31:72:19:a3:53:59:e1:a0:03:b6:d0:45:92:d5:be: fa:69:5d:94:83:88:37:e6:5e:06:d0:30:27:c4:22:6f:6c:25: 63:18:87:39:ed:28:6d:9c:92:97:43:30:53:ca:47:3c:34:c4: 6a:45:1f:b5:d3:89:e8:9d:d7:ea:f3:bc:3c:d6:54:7d:9d:38: 13:d7:5a:41:00:28:8b:7d:c4:d8:65:52:6f:87:a9:2f:c1:d3: 5d:b3:4b:8b:eb:ee:7f:00:fe:c0:51:bd:b2:18:80:ff:69:33: 1e:a8:a5:81:a5:89:bd:4d:38:4d:29:0b:0f:e8:21:f9:2f:d8: c1:48:a2:4b:17:06:9a:13:6c:69:5e:ec:10:11:16:1c:56:06: 69:06:92:d8:97:38:08:ff:a7:a4:df:ca:d0:91:af:c6:32:d5: f2:52:e5:63:50:d7:df:63:30:4d:0a:4a:6d:4d:f2:60:f4:0a: c3:3c:60:3d:f4:22:31:6f:72:57:6b:d7:38:26:38:f4:da:17: c9:0a:e9:4d:b6:7d:f5:a9:69:b5:45:09:56:46:03:5d:4d:18: 9a:80:26:99:cf:3a:84:b9:18:fa:83:ad:cc:96:14:74:91:f2: 84:19:51:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRBRDQxMTAvBgNVBAUTKEFERTg1OUFEOTQwRDFBMTczRkE2NENENzA1ODY3RDQ4 N0U2NzM2ODgwHhcNMjUwNDI3MDAxMDI5WhcNMjUwNTA0MDAxMDI5WjAYMRYwFAYD VQQDEw02ODBkNzVmNi1iNmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtEhrVHDyc8371BEyxwrEDHpvBfifUA3Hj0i4KTPsTAofCr0dAQpNNK6n9cZj A7iaVfW/xDjcWoIwmkLoFJuSIMmUd5y5GXB7jas13+lGLgkzPCOeu0pBspL+mYZF eh6/ZR7QrY7DPYF4025vEbsn9RkfU3ulxIq1bA8apTQxxLCeRe1dEVsTLUBxpPom f5jNWNNv+36GxwOA0tBPSLAnHk2LFxPD0nEyNKZXr0Dt/sOdG1sXmBmdL2yIHEri Ry0MIiaxhYR6vHJreEqQDcc2b566culuw3WYm0Y0OyE6xufImuAuyEcBB/pOQ2cY 9wsnI1W1Y1dmjP5okzu5qUX7ewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMZjB6aR HBEA5DaLiJ3dMsva+8DNMB8GA1UdIwQYMBaAFK3oWa2UDRoXP6ZM1wWGfUh+ZzaI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREFENC9DODVFODM3QTQz OTkxMUVEODM5RDcyMEVDNEY5QUUwMi9yZWhaclpRTkdoY19wa3pYQllaOVNINW5O b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3JlaFpyWlFOR2hjX3BrelhCWVo5U0g1bk5vZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REFENC9DODVFODM3QTQzOTkxMUVEODM5RDcyMEVDNEY5QUUwMi9yZWhaclpRTkdo Y19wa3pYQllaOVNINW5Ob2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAe7BQC/6soWm1CV1pMoFkCQqqck3ExchmjU1nhoAO20EWS1b76aV2U g4g35l4G0DAnxCJvbCVjGIc57ShtnJKXQzBTykc8NMRqRR+104nondfq87w81lR9 nTgT11pBACiLfcTYZVJvh6kvwdNds0uL6+5/AP7AUb2yGID/aTMeqKWBpYm9TThN KQsP6CH5L9jBSKJLFwaaE2xpXuwQERYcVgZpBpLYlzgI/6ek38rQka/GMtXyUuVj UNffYzBNCkptTfJg9ArDPGA99CIxb3JXa9c4Jjj02hfJCulNtn31qWm1RQlWRgNd TRiagCaZzzqEuRj6g63MlhR0kfKEGVGQ -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:19 2025 by rpki-client on console.sobornost.net