$ rpki-client -vvf rpki.apnic.net/member_repository/A91116C7/C856D6C4C6C611E882A41260C4F9AE02/tnwkXksr7q0jwfBd0w_5B32HuOY.mft File: tnwkXksr7q0jwfBd0w_5B32HuOY.mft (raw, json) Hash identifier: y148IjabdWrHhvFwHxDiNOmLH5KyQstk2wovArXJDbI= Subject key identifier: BC:D3:F1:B9:4A:9B:BA:71:29:31:C3:49:A5:8D:A5:B4:7F:02:75:20 Authority key identifier: B6:7C:24:5E:4B:2B:EE:AD:23:C1:F0:5D:D3:0F:F9:07:7D:87:B8:E6 Certificate issuer: /CN=A91116C7/serialNumber=B67C245E4B2BEEAD23C1F05DD30FF9077D87B8E6 Certificate serial: 128A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnwkXksr7q0jwfBd0w_5B32HuOY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91116C7/C856D6C4C6C611E882A41260C4F9AE02/tnwkXksr7q0jwfBd0w_5B32HuOY.mft Manifest number: 1283 Signing time: Mon 28 Apr 2025 17:18:54 +0000 Manifest this update: Mon 28 Apr 2025 17:18:53 +0000 Manifest next update: Mon 05 May 2025 17:18:53 +0000 Files and hashes: 1: tnwkXksr7q0jwfBd0w_5B32HuOY.crl (hash: 1cCZFTxNNHBKaZsIxSNmgaNTCIQLPdSjm4nSMeQq4xE=) 2: 0CAF01A6C6C811E8AECD6165C4F9AE02.roa (hash: n2FBgQHuh988fwkOcnAooQ/jXQmiLgbdWeucP9Cz7sg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91116C7/C856D6C4C6C611E882A41260C4F9AE02/tnwkXksr7q0jwfBd0w_5B32HuOY.crl rsync://rpki.apnic.net/member_repository/A91116C7/C856D6C4C6C611E882A41260C4F9AE02/tnwkXksr7q0jwfBd0w_5B32HuOY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnwkXksr7q0jwfBd0w_5B32HuOY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 17:18:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4746 (0x128a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91116C7, serialNumber=B67C245E4B2BEEAD23C1F05DD30FF9077D87B8E6 Validity Not Before: Apr 28 17:18:53 2025 GMT Not After : May 5 17:18:53 2025 GMT Subject: CN=680fb87e-f3ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a0:1f:d2:2b:74:6f:0c:96:65:e5:16:1f:a5: e7:17:05:a2:02:46:70:01:70:00:8d:6d:4f:4b:94: df:21:19:af:8a:3c:6b:80:cc:2d:1f:b6:cc:d0:93: 4d:b2:f5:f9:96:e4:65:34:70:97:05:a8:38:62:78: b2:d8:bb:89:cf:c4:8b:5d:5d:80:e9:a3:91:06:c7: 9b:7d:6f:38:c6:1e:30:51:34:6d:99:b1:73:78:6c: c9:71:d3:7c:c9:4d:63:1b:12:56:a7:9d:8b:ba:0d: 9f:21:02:42:ef:f6:58:74:13:7b:4a:75:58:fa:8a: 45:79:8d:d1:fd:61:bc:82:6a:db:7e:ac:73:ef:9c: 8f:c1:a1:e1:e3:f8:69:80:d1:23:09:54:a4:bb:c0: 60:26:2e:51:8e:b3:9d:a0:33:58:ff:b2:4d:bf:68: b2:f4:a4:b5:54:10:73:ae:d9:6d:3c:c1:13:03:20: 18:49:ec:f8:40:bb:ab:d6:44:30:a9:0b:1f:81:8b: 30:61:4d:e4:ce:07:9d:56:c0:a9:50:30:eb:b8:3f: 4e:ed:42:5b:2c:b2:32:a6:a7:75:c3:db:68:1e:f5: a6:07:ad:ef:04:9c:19:ec:e5:1a:7d:05:72:84:ce: c0:1d:04:23:1b:7c:dd:04:2a:f8:51:c6:f2:a4:2e: a2:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:D3:F1:B9:4A:9B:BA:71:29:31:C3:49:A5:8D:A5:B4:7F:02:75:20 X509v3 Authority Key Identifier: keyid:B6:7C:24:5E:4B:2B:EE:AD:23:C1:F0:5D:D3:0F:F9:07:7D:87:B8:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91116C7/C856D6C4C6C611E882A41260C4F9AE02/tnwkXksr7q0jwfBd0w_5B32HuOY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnwkXksr7q0jwfBd0w_5B32HuOY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91116C7/C856D6C4C6C611E882A41260C4F9AE02/tnwkXksr7q0jwfBd0w_5B32HuOY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:c0:48:92:6c:cc:f4:44:fd:9c:38:fa:27:6e:05:60:18:e5: 46:29:87:f4:89:6f:46:09:86:5d:5c:00:08:06:44:de:22:ea: 91:48:4b:1c:6f:c4:e0:ed:e0:68:c0:ef:94:a4:1e:34:f9:ec: 71:c0:b6:a4:26:3f:ee:eb:45:c0:6b:1a:79:80:f0:44:ac:e4: 77:0f:42:6a:d2:78:4e:6c:11:68:94:e3:05:af:8e:b0:43:ed: ef:a2:26:24:6b:34:40:25:d0:ab:fd:ab:8f:4d:81:9a:2c:bc: ca:ec:c2:ab:a6:48:0f:1c:8d:32:5b:cc:8f:f9:e9:9b:2a:c6: 1a:d9:5d:51:3e:39:1c:21:13:12:ee:2c:11:f7:d3:9a:76:2b: 81:3b:f8:e2:de:90:9a:03:81:ff:5c:ec:37:a1:ed:91:89:3e: 2c:8e:cf:c0:c8:f8:b4:5d:4a:ec:70:3d:60:0a:53:b8:0a:fb: 58:36:a9:b8:28:61:38:f3:16:ce:61:06:97:60:63:12:19:fc: bc:5b:57:69:b3:40:4f:81:1e:36:01:72:3f:6e:da:e7:e8:2d: fd:9b:9c:3f:e5:05:d7:b5:e2:61:c3:b3:98:4d:16:1e:94:bc: 33:62:2a:e3:89:44:73:d3:c3:bd:e0:59:f0:10:d4:c4:b1:7c: b4:b6:7a:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTE2QzcxMTAvBgNVBAUTKEI2N0MyNDVFNEIyQkVFQUQyM0MxRjA1REQzMEZGOTA3 N0Q4N0I4RTYwHhcNMjUwNDI4MTcxODUzWhcNMjUwNTA1MTcxODUzWjAYMRYwFAYD VQQDEw02ODBmYjg3ZS1mM2VmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy6Af0it0bwyWZeUWH6XnFwWiAkZwAXAAjW1PS5TfIRmvijxrgMwtH7bM0JNN svX5luRlNHCXBag4Yniy2LuJz8SLXV2A6aORBsebfW84xh4wUTRtmbFzeGzJcdN8 yU1jGxJWp52Lug2fIQJC7/ZYdBN7SnVY+opFeY3R/WG8gmrbfqxz75yPwaHh4/hp gNEjCVSku8BgJi5RjrOdoDNY/7JNv2iy9KS1VBBzrtltPMETAyAYSez4QLur1kQw qQsfgYswYU3kzgedVsCpUDDruD9O7UJbLLIypqd1w9toHvWmB63vBJwZ7OUafQVy hM7AHQQjG3zdBCr4UcbypC6iRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLzT8blK m7pxKTHDSaWNpbR/AnUgMB8GA1UdIwQYMBaAFLZ8JF5LK+6tI8HwXdMP+Qd9h7jm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTZDNy9DODU2RDZDNEM2 QzYxMUU4ODJBNDEyNjBDNEY5QUUwMi90bndrWGtzcjdxMGp3ZkJkMHdfNUIzMkh1 T1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Rud2tYa3NyN3EwandmQmQwd181QjMySHVPWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTZDNy9DODU2RDZDNEM2QzYxMUU4ODJBNDEyNjBDNEY5QUUwMi90bndrWGtzcjdx MGp3ZkJkMHdfNUIzMkh1T1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXwEiSbMz0RP2cOPonbgVgGOVGKYf0iW9GCYZdXAAIBkTeIuqRSEsc b8Tg7eBowO+UpB40+exxwLakJj/u60XAaxp5gPBErOR3D0Jq0nhObBFolOMFr46w Q+3voiYkazRAJdCr/auPTYGaLLzK7MKrpkgPHI0yW8yP+embKsYa2V1RPjkcIRMS 7iwR99OadiuBO/ji3pCaA4H/XOw3oe2RiT4sjs/AyPi0XUrscD1gClO4CvtYNqm4 KGE48xbOYQaXYGMSGfy8W1dps0BPgR42AXI/btrn6C39m5w/5QXXteJhw7OYTRYe lLwzYirjiURz08O94FnwENTEsXy0tnqa -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:21 2025 by rpki-client on console.sobornost.net