$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.mft File: OdCbSlNggIIFqdaRRxnguYnPVgs.mft (raw, json) Hash identifier: jipKCCLmX/CyFgo9rhA1EYGzrurZ85pvjAHg7bnCm4I= Subject key identifier: 6F:6A:37:CA:EC:98:C2:70:11:AA:6C:50:37:53:06:AC:51:8E:52:03 Authority key identifier: 39:D0:9B:4A:53:60:80:82:05:A9:D6:91:47:19:E0:B9:89:CF:56:0B Certificate issuer: /CN=A91FDCF0/serialNumber=39D09B4A5360808205A9D6914719E0B989CF560B Certificate serial: 1783 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdCbSlNggIIFqdaRRxnguYnPVgs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.mft Manifest number: 177A Signing time: Mon 28 Apr 2025 16:47:15 +0000 Manifest this update: Mon 28 Apr 2025 16:47:15 +0000 Manifest next update: Mon 05 May 2025 16:47:15 +0000 Files and hashes: 1: OdCbSlNggIIFqdaRRxnguYnPVgs.crl (hash: xXBsjEuPOwIa5SdUeV71FQoTX/Zvx783+Rz8eZuOnOM=) 2: D8D34E92100411EE9849087AC4F9AE02.roa (hash: NYe/OwRHgWBG4n1tEVTichlRmY2tFDrc7PdcIFXXIB4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.crl rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdCbSlNggIIFqdaRRxnguYnPVgs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 16:47:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6019 (0x1783) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDCF0, serialNumber=39D09B4A5360808205A9D6914719E0B989CF560B Validity Not Before: Apr 28 16:47:15 2025 GMT Not After : May 5 16:47:15 2025 GMT Subject: CN=680fb113-e090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:77:cf:93:db:9a:b8:13:0b:bb:52:5e:d1:ff: aa:34:6f:00:8b:8a:0f:c0:fb:04:6b:cd:29:30:4b: 26:ab:7e:43:4b:05:a1:ae:1b:0f:f1:ee:60:a8:cd: 24:15:4b:59:b5:d6:45:a6:44:66:22:78:3d:08:cd: 84:70:b7:7d:b3:74:c3:22:2b:0f:73:c9:1a:5c:1d: c6:9e:8c:60:cd:9d:1a:16:30:a7:b2:ac:84:46:5f: f7:5d:54:cc:01:e9:92:e6:c0:ea:04:a8:f7:9b:b5: b6:b4:f2:bd:10:f9:1b:ca:42:e4:31:86:bb:f6:e7: 29:24:b0:53:4e:22:8c:40:7b:53:67:28:92:09:d5: 1f:e1:99:69:99:b5:50:3c:1d:13:20:07:a1:c8:26: 0b:2c:2b:5f:5e:49:76:4f:53:79:96:b2:8f:78:a2: 19:fa:57:fd:52:ed:01:19:64:60:14:3f:fe:4b:97: 34:29:60:b4:34:87:b7:46:89:0c:74:6a:e5:08:63: fa:c1:44:af:cb:f4:90:e4:6b:1a:38:ef:e3:63:1c: 1f:a9:da:ae:d1:53:52:09:a2:ca:9c:d8:f6:e1:e0: 7d:cb:2d:f7:11:3a:27:b0:0f:81:93:64:92:48:ca: 91:7e:2a:e7:2d:4a:b5:a2:b4:02:bf:fc:96:fb:77: 02:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:6A:37:CA:EC:98:C2:70:11:AA:6C:50:37:53:06:AC:51:8E:52:03 X509v3 Authority Key Identifier: keyid:39:D0:9B:4A:53:60:80:82:05:A9:D6:91:47:19:E0:B9:89:CF:56:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdCbSlNggIIFqdaRRxnguYnPVgs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:16:e2:75:92:1a:bf:74:89:1e:24:27:c4:38:66:a5:40:38: d8:f4:e2:8d:d9:26:66:c2:3c:03:9c:17:56:9b:51:93:70:da: eb:52:5b:41:ba:28:3f:07:90:95:08:80:aa:76:eb:74:a2:5f: b3:08:9b:4e:67:e5:f9:16:0e:09:ed:bf:e7:7e:bc:1a:7a:1c: c7:24:14:74:5d:f2:a1:92:bc:b3:7d:0a:09:a0:d2:98:f0:94: 07:d1:00:62:f2:47:53:ee:92:82:de:7f:e6:cd:cf:27:49:ea: e5:a0:27:03:ce:e9:39:6e:4f:a8:67:d7:4d:7e:58:a2:ba:fb: e5:14:92:56:fe:32:e6:48:ff:a9:4a:05:98:ba:88:39:80:16: 24:99:d9:19:21:00:d7:e1:cf:53:6b:a9:9a:e3:cd:ee:9f:1b: 52:fa:69:0e:ee:70:ee:07:0e:67:7e:df:f5:97:59:fa:c5:12: 7b:00:86:e7:79:da:a5:a5:24:4f:2b:c1:18:7f:a9:69:7e:1e: 84:a9:84:f7:9a:a1:f9:cd:ca:50:86:d3:91:ae:e4:49:33:01: 5b:3e:50:12:8b:fc:5c:fd:73:df:a2:34:ce:1d:d1:a1:b2:f9: 37:48:7f:81:57:3b:cc:61:72:1a:80:fd:8b:e8:d9:20:a5:dc: 5a:c1:65:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF4MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRDRjAxMTAvBgNVBAUTKDM5RDA5QjRBNTM2MDgwODIwNUE5RDY5MTQ3MTlFMEI5 ODlDRjU2MEIwHhcNMjUwNDI4MTY0NzE1WhcNMjUwNTA1MTY0NzE1WjAYMRYwFAYD VQQDEw02ODBmYjExMy1lMDkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwXfPk9uauBMLu1Je0f+qNG8Ai4oPwPsEa80pMEsmq35DSwWhrhsP8e5gqM0k FUtZtdZFpkRmIng9CM2EcLd9s3TDIisPc8kaXB3GnoxgzZ0aFjCnsqyERl/3XVTM AemS5sDqBKj3m7W2tPK9EPkbykLkMYa79ucpJLBTTiKMQHtTZyiSCdUf4ZlpmbVQ PB0TIAehyCYLLCtfXkl2T1N5lrKPeKIZ+lf9Uu0BGWRgFD/+S5c0KWC0NIe3RokM dGrlCGP6wUSvy/SQ5GsaOO/jYxwfqdqu0VNSCaLKnNj24eB9yy33ETonsA+Bk2SS SMqRfirnLUq1orQCv/yW+3cC/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG9qN8rs mMJwEapsUDdTBqxRjlIDMB8GA1UdIwQYMBaAFDnQm0pTYICCBanWkUcZ4LmJz1YL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRENGMC8zMTI3QjAxOENF QUUxMUU3ODk3ODQ4MjVDNEY5QUUwMi9PZENiU2xOZ2dJSUZxZGFSUnhuZ3VZblBW Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09kQ2JTbE5nZ0lJRnFkYVJSeG5ndVluUFZncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RENGMC8zMTI3QjAxOENFQUUxMUU3ODk3ODQ4MjVDNEY5QUUwMi9PZENiU2xOZ2dJ SUZxZGFSUnhuZ3VZblBWZ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCFuJ1khq/dIkeJCfEOGalQDjY9OKN2SZmwjwDnBdWm1GTcNrrUltB uig/B5CVCICqdut0ol+zCJtOZ+X5Fg4J7b/nfrwaehzHJBR0XfKhkryzfQoJoNKY 8JQH0QBi8kdT7pKC3n/mzc8nSerloCcDzuk5bk+oZ9dNfliiuvvlFJJW/jLmSP+p SgWYuog5gBYkmdkZIQDX4c9Ta6ma483unxtS+mkO7nDuBw5nft/1l1n6xRJ7AIbn edqlpSRPK8EYf6lpfh6EqYT3mqH5zcpQhtORruRJMwFbPlASi/xc/XPfojTOHdGh svk3SH+BVzvMYXIagP2L6NkgpdxawWUA -----END CERTIFICATE-----Generated at Mon Apr 28 20:11:17 2025 by rpki-client on console.sobornost.net