$ rpki-client -vvf rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft File: b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft (raw, json) Hash identifier: unJIjoR7M3QBj/kn0gBOsb/P+1n10XgIfp7U5OPBvYQ= Subject key identifier: 22:C8:F6:A4:89:97:6D:F6:F6:AD:C2:E4:0E:80:FA:D4:DC:54:A8:E9 Authority key identifier: 6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00 Certificate issuer: /CN=A91112BC/serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00 Certificate serial: 1187 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft Manifest number: 115B Signing time: Mon 28 Apr 2025 17:28:30 +0000 Manifest this update: Mon 28 Apr 2025 17:28:29 +0000 Manifest next update: Mon 05 May 2025 17:28:29 +0000 Files and hashes: 1: b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl (hash: 4eKx8CzNx76wXMKYt6vpCQ+UFWoOd6zNqDKt5cOm8qc=) 2: F85A5EB6C33911E9A9463781C4F9AE02.roa (hash: eq/Jdt+R7/hZ4YW911X1nuNYUDsfy1mJ/nRJ7y06DWU=) 3: 8497885E04F911E9AF13ED31C4F9AE02.roa (hash: AKBOJFiK0CGzPrk1VjRavIF25nDnN6CV5txK6KFEoQM=) 4: 95D40AE2497311EAB4873B63C4F9AE02.roa (hash: mTC+0v+tu7i1qyU8oj/k9Utbi2nUrKBfJp5EbQJr3jw=) 5: F8D520505D0E11EA89C55D65C4F9AE02.roa (hash: z4Zna+X57y726pmGPGMeS7qfbOq2Xmw5XRAkrcvpEs8=) 6: 603AD1D0AB1211EAB4E7101BC4F9AE02.roa (hash: HiYjj0p3JXRse1uC7XLEGyug0M30GyJfvcEMlo7b1CI=) 7: 531C6440CF9A11E9ABB7C168C4F9AE02.roa (hash: Tc4kPNK+2PBhLQIxN1GXPm3IRuhcOCLKA9GmTtF5VIw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 17:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4487 (0x1187) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91112BC, serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00 Validity Not Before: Apr 28 17:28:29 2025 GMT Not After : May 5 17:28:29 2025 GMT Subject: CN=680fbabd-d8c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:cb:b1:a6:83:45:17:ce:72:38:1c:65:db:6b: 62:53:59:97:5a:b8:5b:b0:90:08:b5:eb:22:9c:af: cd:ff:d6:c7:38:52:f5:07:4a:2b:3e:4b:f0:90:93: e8:97:75:a4:ec:8b:e2:03:2e:30:ac:62:8e:53:ab: 77:7a:55:de:2c:0b:12:14:be:ce:2c:f4:bd:dc:ce: bc:62:dd:4d:b6:0e:dd:51:6c:c3:6f:4e:91:5e:9d: 4a:f4:45:ea:a5:e1:de:6e:3b:5c:bf:98:e0:a5:9a: 40:ed:02:4d:cd:9a:27:0c:14:a6:2a:70:8e:a8:1b: 6d:8a:22:6c:f6:5b:86:4b:84:bd:02:bc:3d:bd:62: 4e:5f:b1:90:3e:22:bc:52:60:d4:6c:75:13:64:c4: 28:35:67:a7:90:44:37:d3:48:00:ee:22:a8:f0:a3: 74:fe:85:ef:50:37:a9:bb:2c:60:1b:64:49:8e:d2: 0b:3d:24:7d:61:d1:06:1d:f8:78:70:26:76:07:af: 4d:0e:f4:a0:43:b7:29:83:e0:10:45:88:ac:b2:1c: ad:54:0d:ff:ba:fa:cc:3e:c1:83:18:82:42:c7:2d: a6:0a:c6:34:a0:3a:50:b7:85:c8:e7:61:8d:68:46: 27:95:c2:de:7a:0a:26:6b:69:18:a0:0e:3f:80:1a: 77:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:C8:F6:A4:89:97:6D:F6:F6:AD:C2:E4:0E:80:FA:D4:DC:54:A8:E9 X509v3 Authority Key Identifier: keyid:6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:cf:4f:1c:73:10:80:57:ca:3e:e5:3a:cb:23:d2:e4:dc:12: 40:d2:af:7c:35:90:7b:33:4b:f2:65:72:4b:f4:d5:3d:d4:95: df:a3:53:62:db:17:21:8a:c1:c6:27:e0:81:72:7c:32:a6:7f: 5b:ea:b6:81:93:ca:58:1a:2e:8a:9d:71:6f:b9:29:51:67:2d: 86:d4:7c:68:c0:8e:cf:76:67:c3:c0:2c:30:1f:60:97:81:46: 84:b2:96:18:26:a6:74:61:5e:2c:03:ca:ae:18:46:3c:c2:46: 5b:95:08:c4:1b:af:8f:fb:84:a9:7f:7d:b5:19:00:dd:fb:47: 27:08:d6:23:2d:b0:71:4f:31:47:27:5a:12:c8:df:fe:91:e7: 30:b8:b9:ac:6b:b1:ad:5e:61:ad:f0:6a:f6:eb:41:ef:68:19: 27:7b:07:e0:7d:0b:14:fa:24:cd:8e:af:1c:4b:98:08:2b:7e: 52:c6:2f:33:8d:a2:c5:b5:d2:5a:60:06:c5:37:05:2c:57:55: 36:1e:78:46:ab:79:1e:c1:11:1c:c5:20:6f:ab:8c:e8:82:83: d2:01:03:b7:20:73:09:23:5d:ba:6d:cc:4b:3c:fa:79:ba:c2: b2:d6:e0:62:02:64:b0:f9:b9:fb:5f:31:02:f5:b7:f8:0b:66: 5e:15:af:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTEyQkMxMTAvBgNVBAUTKDZGRjMxQjA2NTlBNkFFMTZDN0EwQTRFRTBFRTZBMjI5 MTBFQzJFMDAwHhcNMjUwNDI4MTcyODI5WhcNMjUwNTA1MTcyODI5WjAYMRYwFAYD VQQDEw02ODBmYmFiZC1kOGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw8uxpoNFF85yOBxl22tiU1mXWrhbsJAItesinK/N/9bHOFL1B0orPkvwkJPo l3Wk7IviAy4wrGKOU6t3elXeLAsSFL7OLPS93M68Yt1Ntg7dUWzDb06RXp1K9EXq peHebjtcv5jgpZpA7QJNzZonDBSmKnCOqBttiiJs9luGS4S9Arw9vWJOX7GQPiK8 UmDUbHUTZMQoNWenkEQ300gA7iKo8KN0/oXvUDepuyxgG2RJjtILPSR9YdEGHfh4 cCZ2B69NDvSgQ7cpg+AQRYisshytVA3/uvrMPsGDGIJCxy2mCsY0oDpQt4XI52GN aEYnlcLeegoma2kYoA4/gBp3ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCLI9qSJ l2329q3C5A6A+tTcVKjpMB8GA1UdIwQYMBaAFG/zGwZZpq4Wx6Ck7g7moikQ7C4A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTJCQy9FQkNGMTY4MjA0 RjgxMUU5QkE1MDI0MzFDNEY5QUUwMi9iX01iQmxtbXJoYkhvS1R1RHVhaUtSRHNM Z0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JfTWJCbG1tcmhiSG9LVHVEdWFpS1JEc0xnQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTJCQy9FQkNGMTY4MjA0RjgxMUU5QkE1MDI0MzFDNEY5QUUwMi9iX01iQmxtbXJo YkhvS1R1RHVhaUtSRHNMZ0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBez08ccxCAV8o+5TrLI9Lk3BJA0q98NZB7M0vyZXJL9NU91JXfo1Ni 2xchisHGJ+CBcnwypn9b6raBk8pYGi6KnXFvuSlRZy2G1HxowI7PdmfDwCwwH2CX gUaEspYYJqZ0YV4sA8quGEY8wkZblQjEG6+P+4Spf321GQDd+0cnCNYjLbBxTzFH J1oSyN/+kecwuLmsa7GtXmGt8Gr260HvaBknewfgfQsU+iTNjq8cS5gIK35Sxi8z jaLFtdJaYAbFNwUsV1U2HnhGq3kewREcxSBvq4zogoPSAQO3IHMJI126bcxLPPp5 usKy1uBiAmSw+bn7XzEC9bf4C2ZeFa9S -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:21 2025 by rpki-client on console.sobornost.net