$ rpki-client -vvf rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.mft File: gxf8eoKw7oZSDfGP_VcpURbaXfI.mft (raw, json) Hash identifier: T5LuCSYMc8m2SCnmGmA92nndIrMRVgV2ljYaAPvqU84= Subject key identifier: C3:4E:EB:3E:ED:4E:17:64:89:10:B5:9D:CB:9E:07:E2:11:2C:C2:27 Authority key identifier: 83:17:FC:7A:82:B0:EE:86:52:0D:F1:8F:FD:57:29:51:16:DA:5D:F2 Certificate issuer: /CN=A91338F0/serialNumber=8317FC7A82B0EE86520DF18FFD57295116DA5DF2 Certificate serial: 65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxf8eoKw7oZSDfGP_VcpURbaXfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.mft Manifest number: 62 Signing time: Sun 27 Apr 2025 05:54:37 +0000 Manifest this update: Sun 27 Apr 2025 05:54:36 +0000 Manifest next update: Sun 04 May 2025 05:54:36 +0000 Files and hashes: 1: gxf8eoKw7oZSDfGP_VcpURbaXfI.crl (hash: sClcM/SrMBnE0m78qn2qsRe6xXZTkLGQStAZbLG95qg=) 2: 5B39EBD693B511EF8AEA6810C4F9AE02.roa (hash: bSwFDk6awCLG4yCeUFAgFzFigutUzb6MBdN06ltlpqE=) 3: 1A824A0E993511EF9BB0A677C4F9AE02.roa (hash: hHmJZ4kZTc3eByWyfovBTyBy7zoc4MRBKG9FMUzpQOk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.crl rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxf8eoKw7oZSDfGP_VcpURbaXfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 101 (0x65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91338F0, serialNumber=8317FC7A82B0EE86520DF18FFD57295116DA5DF2 Validity Not Before: Apr 27 05:54:36 2025 GMT Not After : May 4 05:54:36 2025 GMT Subject: CN=680dc69d-d65a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:8e:2c:9e:58:09:b1:44:d3:18:dc:18:ed:9e: 5e:b0:04:1a:69:c4:06:85:67:f7:34:59:11:6a:87: b6:8e:8b:08:78:fe:cd:84:c3:92:e5:a2:30:ab:7e: 85:c7:11:a7:30:02:aa:8a:03:40:7c:20:ae:08:5b: 93:ad:ae:44:27:89:d3:51:05:20:94:41:37:86:41: 4f:06:e6:67:56:ca:ef:7c:cb:be:9e:d4:d8:cc:11: 98:a3:a9:17:e0:73:94:14:d6:30:ba:2a:b7:0b:3f: 0a:48:de:1d:b9:e7:a3:e8:7e:8c:e0:d8:75:e7:43: cb:03:89:c1:bc:57:9c:9c:ba:9d:d3:5d:15:25:d1: 6b:e3:a7:14:0c:a0:8a:96:9f:b5:c0:c4:20:74:96: 9a:af:95:0d:80:38:57:8a:a5:33:d7:5f:0b:12:a3: 39:4f:de:0c:78:20:1b:c3:3a:f3:88:e3:f4:1d:88: cf:95:92:f1:62:a1:da:90:25:fd:13:63:32:f2:4e: 72:e7:37:83:02:da:20:a4:89:87:fe:05:f9:4c:32: ea:b3:f1:3f:f9:a1:82:36:68:7f:8b:ca:2e:d0:66: f2:24:32:15:5e:20:b4:32:b4:97:4c:ca:ca:c2:a3: 90:6a:5c:73:e5:25:81:27:a0:f8:8f:7e:a9:bb:08: 51:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:4E:EB:3E:ED:4E:17:64:89:10:B5:9D:CB:9E:07:E2:11:2C:C2:27 X509v3 Authority Key Identifier: keyid:83:17:FC:7A:82:B0:EE:86:52:0D:F1:8F:FD:57:29:51:16:DA:5D:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxf8eoKw7oZSDfGP_VcpURbaXfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:cf:f6:c7:ba:3e:9f:af:01:da:9c:fa:ec:de:fc:7b:c6:74: d0:eb:4a:d6:59:fc:89:10:60:63:0d:63:18:7c:23:b6:2f:6d: 2c:d7:1a:e8:fb:be:34:07:a5:a2:82:6f:5a:04:77:fd:08:32: 7c:a8:c3:aa:5a:1a:cc:a3:6b:f9:bb:d1:b5:53:82:0d:aa:f2: 4e:6f:71:82:85:78:2f:02:d5:92:5b:6c:e6:c1:09:c2:f2:1c: f3:5e:33:e9:c1:54:d9:45:e7:71:a0:0e:20:57:93:23:eb:a0: 04:35:74:6b:85:de:26:5b:67:a3:f0:57:2c:e5:ff:00:94:07: 6a:ed:cd:4d:56:52:07:24:98:b0:12:54:67:db:28:81:e7:46: b9:e5:c0:99:eb:ee:ef:dc:86:3b:a5:49:13:61:e2:5e:84:24: 68:9f:66:96:1d:18:2b:3b:02:f1:c8:e0:9b:67:18:bb:e7:d3: ec:2b:a1:20:b4:a8:d1:df:52:b2:88:c8:35:5d:1e:04:19:6d: b7:d6:b3:b7:96:fa:e3:c4:df:5b:10:36:c1:8f:7a:10:97:a0: 2c:e6:ae:59:68:9a:22:3c:44:d6:58:31:f0:cc:f0:05:92:27: 99:ef:70:2c:02:09:4e:8f:bd:b3:64:cd:cf:1d:57:6e:67:38: c3:2b:fe:68 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MzhGMDExMC8GA1UEBRMoODMxN0ZDN0E4MkIwRUU4NjUyMERGMThGRkQ1NzI5NTEx NkRBNURGMjAeFw0yNTA0MjcwNTU0MzZaFw0yNTA1MDQwNTU0MzZaMBgxFjAUBgNV BAMTDTY4MGRjNjlkLWQ2NWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCRjiyeWAmxRNMY3Bjtnl6wBBppxAaFZ/c0WRFqh7aOiwh4/s2Ew5LlojCrfoXH EacwAqqKA0B8IK4IW5OtrkQnidNRBSCUQTeGQU8G5mdWyu98y76e1NjMEZijqRfg c5QU1jC6KrcLPwpI3h2556Pofozg2HXnQ8sDicG8V5ycup3TXRUl0WvjpxQMoIqW n7XAxCB0lpqvlQ2AOFeKpTPXXwsSozlP3gx4IBvDOvOI4/QdiM+VkvFiodqQJf0T YzLyTnLnN4MC2iCkiYf+BflMMuqz8T/5oYI2aH+Lyi7QZvIkMhVeILQytJdMysrC o5BqXHPlJYEnoPiPfqm7CFH/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUw07rPu1O F2SJELWdy54H4hEswicwHwYDVR0jBBgwFoAUgxf8eoKw7oZSDfGP/VcpURbaXfIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMzOEYwLzBBNzcxQTM2OTNB RTExRUY4RjQ4QUI0M0M0RjlBRTAyL2d4Zjhlb0t3N29aU0RmR1BfVmNwVVJiYVhm SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ3hmOGVvS3c3b1pTRGZHUF9WY3BVUmJhWGZJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMz OEYwLzBBNzcxQTM2OTNBRTExRUY4RjQ4QUI0M0M0RjlBRTAyL2d4Zjhlb0t3N29a U0RmR1BfVmNwVVJiYVhmSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFrP9se6Pp+vAdqc+uze/HvGdNDrStZZ/IkQYGMNYxh8I7YvbSzXGuj7 vjQHpaKCb1oEd/0IMnyow6paGsyja/m70bVTgg2q8k5vcYKFeC8C1ZJbbObBCcLy HPNeM+nBVNlF53GgDiBXkyProAQ1dGuF3iZbZ6PwVyzl/wCUB2rtzU1WUgckmLAS VGfbKIHnRrnlwJnr7u/chjulSRNh4l6EJGifZpYdGCs7AvHI4JtnGLvn0+wroSC0 qNHfUrKIyDVdHgQZbbfWs7eW+uPE31sQNsGPehCXoCzmrllomiI8RNZYMfDM8AWS J5nvcCwCCU6PvbNkzc8dV25nOMMr/mg= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:42 2025 by rpki-client on console.sobornost.net