$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft File: eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft (raw, json) Hash identifier: ieI6ITmkl0+t4fEaZWLAmardTj/StZlU5VJfoA1+tRg= Subject key identifier: 25:59:33:13:DF:80:B3:F9:19:90:84:9F:E6:3D:5A:C7:7D:F2:5F:A2 Authority key identifier: 79:E5:63:2A:F2:9B:AE:64:E5:F9:F1:9C:57:5B:C5:A9:95:E2:05:50 Certificate issuer: /CN=A91FEB27/serialNumber=79E5632AF29BAE64E5F9F19C575BC5A995E20550 Certificate serial: 2D12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eeVjKvKbrmTl-fGcV1vFqZXiBVA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft Manifest number: 2CF6 Signing time: Mon 28 Apr 2025 15:36:38 +0000 Manifest this update: Mon 28 Apr 2025 15:36:37 +0000 Manifest next update: Mon 05 May 2025 15:36:37 +0000 Files and hashes: 1: eeVjKvKbrmTl-fGcV1vFqZXiBVA.crl (hash: rh/hoh045PvGIkG+N/UmQPyaIea0t2rFQlqywDGHwrc=) 2: 6CB78E8E967811EA92E45A27C4F9AE02.roa (hash: Vd/aN0N0PZj/2E1lobGPke/BU2o5Mlhxl5a5kuQS0uQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.crl rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eeVjKvKbrmTl-fGcV1vFqZXiBVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 15:36:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11538 (0x2d12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEB27, serialNumber=79E5632AF29BAE64E5F9F19C575BC5A995E20550 Validity Not Before: Apr 28 15:36:37 2025 GMT Not After : May 5 15:36:37 2025 GMT Subject: CN=680fa086-d7b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ff:37:4a:d4:bc:7b:ba:d1:ea:c8:1b:d0:78:49: 23:24:c7:9b:18:29:44:d8:53:02:6d:80:3a:7b:c4: 6c:7d:3d:c6:0c:8f:8c:f0:0d:0c:43:cd:21:81:f5: 96:46:7c:76:4e:42:eb:f6:bf:39:3c:f0:94:93:4a: 9e:fb:2d:b9:27:71:8a:92:81:a0:bd:95:2d:59:61: d3:0f:2e:62:c8:6e:40:ec:da:1c:c6:59:df:85:b3: 04:cd:c3:6b:3e:99:85:3e:73:28:c4:49:02:80:a1: 7c:17:d5:d9:95:26:5f:18:16:a0:dd:0a:97:7e:fa: 66:81:08:ba:7f:4e:9b:6f:d4:13:cd:22:e7:06:a1: d2:52:80:4b:0d:41:9c:79:0c:0c:e0:fd:27:70:ac: b8:e4:75:e4:2a:ad:41:7e:a6:07:6a:f0:8e:17:0a: 57:24:69:27:8a:fc:b1:cf:a0:79:ee:34:ef:dd:51: b0:e2:8d:be:40:20:cc:81:88:6f:bf:50:b2:0a:c2: 72:50:bd:b0:3c:cd:26:34:be:6e:d0:5b:e4:31:56: 09:e7:2a:95:52:55:62:b0:60:4c:13:5c:f8:30:ac: f2:ed:32:f3:59:12:08:33:cf:c8:63:f6:d3:ba:53: ff:52:20:d5:69:22:d8:52:d4:cf:c2:ca:42:f9:87: de:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:59:33:13:DF:80:B3:F9:19:90:84:9F:E6:3D:5A:C7:7D:F2:5F:A2 X509v3 Authority Key Identifier: keyid:79:E5:63:2A:F2:9B:AE:64:E5:F9:F1:9C:57:5B:C5:A9:95:E2:05:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eeVjKvKbrmTl-fGcV1vFqZXiBVA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:10:2d:10:f0:25:26:be:9f:78:4b:d9:b2:28:c8:13:e9:c3: 1f:6c:2c:66:42:41:97:f9:fe:4e:e8:cb:d2:0a:7b:ad:15:3c: c8:d1:6e:cd:0f:e0:22:20:04:b9:ad:01:51:03:41:97:52:9b: 06:17:e5:e1:76:4a:65:c6:9f:fb:4b:b4:f9:11:c9:43:05:88: 12:21:93:49:89:2c:b9:c8:bd:17:30:85:1e:56:78:e3:ee:ed: 97:0d:e4:9d:5c:bc:2c:58:12:fe:e2:87:ed:d1:6a:c2:2a:77: 24:b9:bc:de:a9:da:63:8a:b8:9c:fc:b1:c6:41:7b:aa:ad:ec: e9:95:a8:11:95:a6:43:7d:95:f2:fc:d2:e0:7f:ab:92:d7:6e: b7:a8:0c:9e:4b:5e:62:cb:db:93:83:f0:0f:cd:bd:52:59:28: 50:26:6c:39:57:1c:ba:7d:d1:9f:a4:77:a4:15:d0:46:96:56: df:0e:02:e1:32:5a:45:68:0e:23:b3:56:9f:a9:bc:2e:af:55: 8f:66:9b:e0:db:c0:01:a4:c1:59:65:db:f7:bf:39:94:1a:20: 73:fc:80:11:d4:5c:41:9b:a7:31:a7:48:8a:d8:eb:17:31:17: 8e:ca:27:0a:5d:fa:dc:51:16:e8:45:1c:67:0f:4c:51:bd:8b: cb:41:7f:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLRIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVCMjcxMTAvBgNVBAUTKDc5RTU2MzJBRjI5QkFFNjRFNUY5RjE5QzU3NUJDNUE5 OTVFMjA1NTAwHhcNMjUwNDI4MTUzNjM3WhcNMjUwNTA1MTUzNjM3WjAYMRYwFAYD VQQDEw02ODBmYTA4Ni1kN2I0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/zdK1Lx7utHqyBvQeEkjJMebGClE2FMCbYA6e8RsfT3GDI+M8A0MQ80hgfWW Rnx2TkLr9r85PPCUk0qe+y25J3GKkoGgvZUtWWHTDy5iyG5A7NocxlnfhbMEzcNr PpmFPnMoxEkCgKF8F9XZlSZfGBag3QqXfvpmgQi6f06bb9QTzSLnBqHSUoBLDUGc eQwM4P0ncKy45HXkKq1BfqYHavCOFwpXJGknivyxz6B57jTv3VGw4o2+QCDMgYhv v1CyCsJyUL2wPM0mNL5u0FvkMVYJ5yqVUlVisGBME1z4MKzy7TLzWRIIM8/IY/bT ulP/UiDVaSLYUtTPwspC+YfegQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCVZMxPf gLP5GZCEn+Y9Wsd98l+iMB8GA1UdIwQYMBaAFHnlYyrym65k5fnxnFdbxamV4gVQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUIyNy8xNjdBOTdFQzlB RTMxMUUzQTVBMjU3QTc1OTExRUEzMi9lZVZqS3ZLYnJtVGwtZkdjVjF2RnFaWGlC VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VlVmpLdkticm1UbC1mR2NWMXZGcVpYaUJWQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUIyNy8xNjdBOTdFQzlBRTMxMUUzQTVBMjU3QTc1OTExRUEzMi9lZVZqS3ZLYnJt VGwtZkdjVjF2RnFaWGlCVkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVEC0Q8CUmvp94S9myKMgT6cMfbCxmQkGX+f5O6MvSCnutFTzI0W7N D+AiIAS5rQFRA0GXUpsGF+Xhdkplxp/7S7T5EclDBYgSIZNJiSy5yL0XMIUeVnjj 7u2XDeSdXLwsWBL+4oft0WrCKnckubzeqdpjiric/LHGQXuqrezplagRlaZDfZXy /NLgf6uS1263qAyeS15iy9uTg/APzb1SWShQJmw5Vxy6fdGfpHekFdBGllbfDgLh MlpFaA4js1afqbwur1WPZpvg28ABpMFZZdv3vzmUGiBz/IAR1FxBm6cxp0iK2OsX MReOyicKXfrcURboRRxnD0xRvYvLQX+V -----END CERTIFICATE-----Generated at Mon Apr 28 17:46:07 2025 by rpki-client on console.sobornost.net