$ rpki-client -vvf rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft File: G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft (raw, json) Hash identifier: +hhQQ5Ro4yn1mOroETsE4RLjXV54v1pLMBp3C4tClRs= Subject key identifier: F6:E3:90:35:94:9A:10:EE:B6:7E:2D:19:B6:DF:F5:D5:4E:75:C9:D2 Authority key identifier: 1B:8A:E7:C7:43:01:72:9D:85:C3:15:95:24:9C:3B:48:F1:B9:15:1E Certificate issuer: /CN=A91340D8/serialNumber=1B8AE7C74301729D85C31595249C3B48F1B9151E Certificate serial: 022C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4rnx0MBcp2FwxWVJJw7SPG5FR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft Manifest number: 0224 Signing time: Sun 27 Apr 2025 01:35:07 +0000 Manifest this update: Sun 27 Apr 2025 01:35:07 +0000 Manifest next update: Sun 04 May 2025 01:35:07 +0000 Files and hashes: 1: G4rnx0MBcp2FwxWVJJw7SPG5FR4.crl (hash: 5zr7KqiAAijA2+qg3g6LSpmo0vgKROFEq+iZXMHBpjQ=) 2: BE608B1833DC11EF82BB2E27C4F9AE02.roa (hash: EWoN0iNcfOe+G9uyesPgbS2htYj/a8iGQkySadopce0=) 3: F2257AC0289011ED8AEEB43CC4F9AE02.roa (hash: Eg0ppNj4Rfn9XDDO2a6sOjdWSFXYTHKi+qKN2PGRgYA=) 4: BDDB04B633DC11EF82BB2E27C4F9AE02.roa (hash: 5c/qR2mpD5OqrfddW7wi4YgOjtRseskty4kGshoVWVs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.crl rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4rnx0MBcp2FwxWVJJw7SPG5FR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 01:35:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 556 (0x22c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91340D8, serialNumber=1B8AE7C74301729D85C31595249C3B48F1B9151E Validity Not Before: Apr 27 01:35:07 2025 GMT Not After : May 4 01:35:07 2025 GMT Subject: CN=680d89cb-1db2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:01:08:b4:d9:3e:b0:58:28:8d:91:8e:dd:d8: 6e:8f:73:56:3d:b3:42:3c:d2:0b:e9:dc:cd:43:b1: 01:8b:51:c9:14:a1:cc:cd:3b:ad:f2:7d:d4:1c:81: 10:07:21:ed:5f:9e:b2:5f:52:22:4f:8a:2d:af:ad: 85:a2:c7:7e:4f:8f:60:ae:67:6e:b8:45:b8:3b:de: 9b:94:3a:e2:91:06:75:4d:d0:81:d9:91:98:aa:ad: 8a:ed:c5:80:72:6f:7e:35:0b:0b:88:64:98:4e:0f: 93:af:fa:4d:91:f4:ad:6f:31:93:01:2b:45:e2:82: 4b:c1:46:67:86:9e:b1:b6:7d:f8:09:2a:23:55:4a: b8:3f:51:d5:d2:4a:63:e0:cc:a1:86:ae:b8:00:16: e4:73:a0:3d:65:ee:bc:2b:28:83:b0:c8:72:47:25: 35:fd:62:fe:f5:5e:81:6b:4e:0c:a9:39:a8:3a:7c: f6:fd:2b:d4:0b:9b:26:84:08:55:e0:ac:5f:e4:00: 4d:86:3a:04:95:2f:9b:ba:b4:10:6d:1f:16:55:30: df:2e:17:70:3e:d1:b1:69:55:51:45:90:96:a6:df: 23:d8:73:8f:b5:c1:95:39:5b:ce:d8:30:d0:86:93: 89:2e:a5:68:99:c6:1b:8a:fc:1f:f4:bb:c2:a7:8a: 44:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:E3:90:35:94:9A:10:EE:B6:7E:2D:19:B6:DF:F5:D5:4E:75:C9:D2 X509v3 Authority Key Identifier: keyid:1B:8A:E7:C7:43:01:72:9D:85:C3:15:95:24:9C:3B:48:F1:B9:15:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4rnx0MBcp2FwxWVJJw7SPG5FR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:e8:8d:ea:33:fd:5d:b8:39:ab:77:94:80:83:70:76:c6:53: 38:ed:43:eb:d4:6a:6b:b7:dc:b0:a9:0a:f5:ab:f2:b2:4e:a1: 4c:34:d8:13:ee:77:ea:b0:85:a8:00:fa:11:f8:44:43:69:cb: f5:6f:90:75:01:aa:b7:05:c1:26:a0:b2:05:a5:db:41:64:a3: 32:de:35:4d:a7:d1:9c:57:9a:d2:5d:85:40:66:72:e7:53:1f: e2:b8:f7:1b:85:e8:3a:8b:b3:1d:f9:ee:aa:70:83:24:ed:6d: ae:7d:75:cd:b3:4c:72:3e:29:64:32:ca:05:60:27:f0:2b:ab: e2:a4:db:be:d8:c8:a6:84:50:56:e2:4e:46:33:e3:89:f0:49: 77:ac:a2:c5:a8:8e:57:ed:fa:89:61:bc:1c:2e:a9:2e:4b:b3: 43:04:3e:be:02:5a:0a:34:cd:2e:c8:a5:3d:40:a4:17:f0:08: 5b:2e:44:ca:7a:ed:b2:89:16:0e:ee:e7:61:d1:d1:bf:6a:f8: f0:f2:3c:53:d4:61:cc:cb:24:50:34:d4:76:c9:5c:ba:5d:ce: 23:a6:77:49:ba:11:c0:8d:80:4e:1f:b2:82:45:4f:1f:1d:59: fa:87:72:b1:34:cb:2a:43:c3:c4:58:08:99:d7:7c:3c:fa:aa: bb:95:13:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQwRDgxMTAvBgNVBAUTKDFCOEFFN0M3NDMwMTcyOUQ4NUMzMTU5NTI0OUMzQjQ4 RjFCOTE1MUUwHhcNMjUwNDI3MDEzNTA3WhcNMjUwNTA0MDEzNTA3WjAYMRYwFAYD VQQDEw02ODBkODljYi0xZGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2QEItNk+sFgojZGO3dhuj3NWPbNCPNIL6dzNQ7EBi1HJFKHMzTut8n3UHIEQ ByHtX56yX1IiT4otr62Fosd+T49grmduuEW4O96blDrikQZ1TdCB2ZGYqq2K7cWA cm9+NQsLiGSYTg+Tr/pNkfStbzGTAStF4oJLwUZnhp6xtn34CSojVUq4P1HV0kpj 4Myhhq64ABbkc6A9Ze68KyiDsMhyRyU1/WL+9V6Ba04MqTmoOnz2/SvUC5smhAhV 4Kxf5ABNhjoElS+burQQbR8WVTDfLhdwPtGxaVVRRZCWpt8j2HOPtcGVOVvO2DDQ hpOJLqVomcYbivwf9LvCp4pECwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPbjkDWU mhDutn4tGbbf9dVOdcnSMB8GA1UdIwQYMBaAFBuK58dDAXKdhcMVlSScO0jxuRUe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDBEOC9CM0RFNUNFNDI4 OEQxMUVEQTlBNEVBNkZDNEY5QUUwMi9HNHJueDBNQmNwMkZ3eFdWSkp3N1NQRzVG UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c0cm54ME1CY3AyRnd4V1ZKSnc3U1BHNUZSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDBEOC9CM0RFNUNFNDI4OEQxMUVEQTlBNEVBNkZDNEY5QUUwMi9HNHJueDBNQmNw MkZ3eFdWSkp3N1NQRzVGUjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAt6I3qM/1duDmrd5SAg3B2xlM47UPr1Gprt9ywqQr1q/KyTqFMNNgT 7nfqsIWoAPoR+ERDacv1b5B1Aaq3BcEmoLIFpdtBZKMy3jVNp9GcV5rSXYVAZnLn Ux/iuPcbheg6i7Md+e6qcIMk7W2ufXXNs0xyPilkMsoFYCfwK6vipNu+2MimhFBW 4k5GM+OJ8El3rKLFqI5X7fqJYbwcLqkuS7NDBD6+AloKNM0uyKU9QKQX8AhbLkTK eu2yiRYO7udh0dG/avjw8jxT1GHMyyRQNNR2yVy6Xc4jpndJuhHAjYBOH7KCRU8f HVn6h3KxNMsqQ8PEWAiZ13w8+qq7lRN4 -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:28 2025 by rpki-client on console.sobornost.net