$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft File: tOfjRK3ONthPHzq8zRSyTBUSu6o.mft (raw, json) Hash identifier: nkn/RdyN35DahnXzrvrV482J8fTHRFUO6zGa8K1Arrg= Subject key identifier: FB:11:F8:4B:4F:94:25:44:94:3E:B8:E7:35:A8:DD:F9:45:22:10:22 Authority key identifier: B4:E7:E3:44:AD:CE:36:D8:4F:1F:3A:BC:CD:14:B2:4C:15:12:BB:AA Certificate issuer: /CN=A911BDA9/serialNumber=B4E7E344ADCE36D84F1F3ABCCD14B24C1512BBAA Certificate serial: 94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft Manifest number: 93 Signing time: Sun 27 Apr 2025 05:14:06 +0000 Manifest this update: Sun 27 Apr 2025 05:14:06 +0000 Manifest next update: Sun 04 May 2025 05:14:06 +0000 Files and hashes: 1: tOfjRK3ONthPHzq8zRSyTBUSu6o.crl (hash: CL4YhYkrNGsYQ916CkNb5i8idmgUpcr++wVDWDXqNvI=) 2: 723720464ABE11EFA87EE85BC4F9AE02.roa (hash: 3HXgfR2xDybCR9JbXAm4K9BmBrTeyB6NLob5uNWXRyE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.crl rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 148 (0x94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BDA9, serialNumber=B4E7E344ADCE36D84F1F3ABCCD14B24C1512BBAA Validity Not Before: Apr 27 05:14:06 2025 GMT Not After : May 4 05:14:06 2025 GMT Subject: CN=680dbd1e-e2e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:9c:e0:a0:2c:0d:b1:ac:7b:f9:a2:b1:3a:a4: d3:29:e0:13:d3:55:96:55:c2:98:93:76:89:c8:23: b1:e6:a1:43:d7:6f:d6:c5:ad:39:86:36:70:14:51: a4:e9:9e:a7:cb:73:40:33:7c:57:1b:0c:8d:47:cf: 1c:b9:7a:68:95:ec:70:c8:2f:9c:77:76:aa:e3:b3: 8b:f4:d3:0c:3a:c3:41:8a:27:1d:4d:fe:48:ab:17: 08:b0:6d:7f:84:ea:46:5d:5a:fb:eb:64:1f:81:bb: 6d:a0:59:88:6a:a0:fa:81:33:b0:91:79:a7:4c:49: 87:06:67:ea:62:93:79:23:91:f8:44:f6:22:be:7d: 5f:2c:85:40:28:01:7c:60:0b:b2:2a:5a:74:04:bc: 9b:8b:55:b7:e9:41:fa:fd:8a:75:97:1e:16:30:6b: f1:7c:a7:68:51:38:cb:32:5e:d3:9c:7e:48:a4:b3: e5:0d:64:7c:5f:61:a9:af:1b:31:3c:ac:01:bf:c6: af:8b:88:0d:97:11:02:d5:e8:7e:7f:d9:0d:60:ae: e9:2a:4c:89:70:7c:cb:d1:fa:0b:bc:51:e4:14:53: 80:32:c9:f4:9b:aa:3f:7c:27:a8:54:28:f0:ca:56: 8a:32:a3:f3:f0:60:9a:f0:32:a9:ec:9f:4f:6e:78: a1:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:11:F8:4B:4F:94:25:44:94:3E:B8:E7:35:A8:DD:F9:45:22:10:22 X509v3 Authority Key Identifier: keyid:B4:E7:E3:44:AD:CE:36:D8:4F:1F:3A:BC:CD:14:B2:4C:15:12:BB:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:d8:d0:7a:ef:62:e1:e2:75:8a:27:01:4a:ff:0c:4e:a0:e5: a0:ad:b6:d6:82:e1:18:59:02:1c:2d:59:cd:bf:92:37:22:80: e0:ef:6a:51:c7:41:98:cd:c8:e0:a1:dc:74:01:e8:05:c5:e6: 1a:e6:64:97:ee:03:b7:50:bb:d8:95:8a:4c:97:06:e5:c4:d3: f5:52:c7:ec:00:3f:db:4e:dc:83:18:bd:05:c5:b7:27:23:77: a9:f0:4d:71:dc:2a:c7:42:7b:b5:03:5a:86:c4:2f:cb:94:d1: a7:6e:45:0d:50:4d:49:d9:88:09:5b:d5:86:bc:37:ce:b2:76: 24:3e:e5:9d:fe:29:41:e6:57:fe:4f:2d:39:5c:1b:9c:82:26: 91:c4:c8:11:d4:a3:24:6d:65:0d:4d:ed:25:1a:be:fd:b2:21: 51:6b:a1:27:77:de:37:bf:1d:5f:3e:2a:0c:06:1f:a3:fc:9e: 23:97:3b:54:28:4f:0d:59:8c:9a:b5:a0:cd:d1:29:ab:1e:1d: 50:03:a9:9a:49:7d:05:91:80:75:30:33:ea:b7:95:03:c1:fd: a3:3d:43:c7:bf:a4:a1:4f:a3:0c:55:f9:9f:10:f7:99:5b:22: fa:53:94:ee:ce:b5:18:b5:23:2f:2d:33:eb:f7:b7:07:a8:0e: a0:f6:22:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJEQTkxMTAvBgNVBAUTKEI0RTdFMzQ0QURDRTM2RDg0RjFGM0FCQ0NEMTRCMjRD MTUxMkJCQUEwHhcNMjUwNDI3MDUxNDA2WhcNMjUwNTA0MDUxNDA2WjAYMRYwFAYD VQQDEw02ODBkYmQxZS1lMmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9ZzgoCwNsax7+aKxOqTTKeAT01WWVcKYk3aJyCOx5qFD12/Wxa05hjZwFFGk 6Z6ny3NAM3xXGwyNR88cuXpolexwyC+cd3aq47OL9NMMOsNBiicdTf5IqxcIsG1/ hOpGXVr762QfgbttoFmIaqD6gTOwkXmnTEmHBmfqYpN5I5H4RPYivn1fLIVAKAF8 YAuyKlp0BLybi1W36UH6/Yp1lx4WMGvxfKdoUTjLMl7TnH5IpLPlDWR8X2Gprxsx PKwBv8avi4gNlxEC1eh+f9kNYK7pKkyJcHzL0foLvFHkFFOAMsn0m6o/fCeoVCjw ylaKMqPz8GCa8DKp7J9PbnihLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPsR+EtP lCVElD645zWo3flFIhAiMB8GA1UdIwQYMBaAFLTn40StzjbYTx86vM0UskwVEruq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkRBOS8zNkE1MzBGNjQ0 QkQxMUVGQjczREI3N0JDNEY5QUUwMi90T2ZqUkszT050aFBIenE4elJTeVRCVVN1 Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RPZmpSSzNPTnRoUEh6cTh6UlN5VEJVU3U2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkRBOS8zNkE1MzBGNjQ0QkQxMUVGQjczREI3N0JDNEY5QUUwMi90T2ZqUkszT050 aFBIenE4elJTeVRCVVN1Nm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBd2NB672Lh4nWKJwFK/wxOoOWgrbbWguEYWQIcLVnNv5I3IoDg72pR x0GYzcjgodx0AegFxeYa5mSX7gO3ULvYlYpMlwblxNP1UsfsAD/bTtyDGL0Fxbcn I3ep8E1x3CrHQnu1A1qGxC/LlNGnbkUNUE1J2YgJW9WGvDfOsnYkPuWd/ilB5lf+ Ty05XBucgiaRxMgR1KMkbWUNTe0lGr79siFRa6End943vx1fPioMBh+j/J4jlztU KE8NWYyataDN0SmrHh1QA6maSX0FkYB1MDPqt5UDwf2jPUPHv6ShT6MMVfmfEPeZ WyL6U5TuzrUYtSMvLTPr97cHqA6g9iJQ -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:40 2025 by rpki-client on console.sobornost.net