$ rpki-client -vvf rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft File: ALcq1TM86q4aWFyCgInERVmZY_I.mft (raw, json) Hash identifier: 5ewzEK3AF14TtaCE8Oi3tVMbCwWPYQT7sdp1cXiSSHw= Subject key identifier: 14:93:08:D8:FC:39:CF:F4:8F:3C:BB:CF:7D:E4:22:D7:87:94:75:65 Authority key identifier: 00:B7:2A:D5:33:3C:EA:AE:1A:58:5C:82:80:89:C4:45:59:99:63:F2 Certificate issuer: /CN=A91380F7/serialNumber=00B72AD5333CEAAE1A585C828089C445599963F2 Certificate serial: 57 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ALcq1TM86q4aWFyCgInERVmZY_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft Manifest number: 54 Signing time: Fri 25 Apr 2025 06:14:56 +0000 Manifest this update: Fri 25 Apr 2025 06:14:55 +0000 Manifest next update: Fri 02 May 2025 06:14:55 +0000 Files and hashes: 1: ALcq1TM86q4aWFyCgInERVmZY_I.crl (hash: VG7C4On1KjhIEQeBDq3KEQn2HVYBHFl7mmDeds5l9cw=) 2: 5D117282A7F911EF8E7B1773C4F9AE02.roa (hash: J45sLiwW4UVC5sdSS+IxX3cBMgJ0HE+7WdnowtCp0yk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.crl rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ALcq1TM86q4aWFyCgInERVmZY_I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 87 (0x57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91380F7, serialNumber=00B72AD5333CEAAE1A585C828089C445599963F2 Validity Not Before: Apr 25 06:14:55 2025 GMT Not After : May 2 06:14:55 2025 GMT Subject: CN=680b285f-0f70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:31:79:73:fc:92:32:55:91:b2:a7:3d:82:2a: 5a:ef:fb:9b:39:69:6c:a4:2d:03:da:86:ce:8a:d0: 56:ef:ff:99:5a:a4:b7:76:b5:3d:22:6c:4a:93:c2: 1c:2d:b7:91:95:e8:18:49:ee:12:90:00:08:cb:58: d5:1a:51:80:bb:ce:72:87:0a:d6:1c:c3:1a:ce:8c: 27:b0:01:5d:d3:1f:8c:0d:e6:57:95:a9:55:bb:20: e1:65:f1:4a:8b:fc:29:27:90:5b:4e:83:bb:44:7f: 3a:df:66:1e:43:34:ae:e8:38:a9:87:f5:c1:7c:70: 9a:d4:4b:98:60:3a:f7:cf:86:cc:01:30:38:68:ee: 20:bb:d8:10:be:4a:55:e0:c2:d2:9f:94:d1:f7:d1: cb:85:21:85:5a:61:8c:d3:73:3a:2e:ab:26:a0:f5: 4b:8e:16:73:7c:4a:52:2c:f1:e7:03:44:bd:a2:bd: 57:a0:56:d4:8b:61:71:ba:42:82:b5:24:0b:74:22: 8e:40:6e:86:f3:87:de:b6:97:04:c6:5a:13:6d:64: 2a:96:39:bd:18:85:61:7f:59:5e:69:38:31:8b:f1: 68:8d:91:a3:40:9b:b1:7b:59:21:38:bd:c3:6f:6c: 3c:60:9f:56:d1:e0:b3:33:5a:ab:77:7b:0d:6d:1f: 53:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:93:08:D8:FC:39:CF:F4:8F:3C:BB:CF:7D:E4:22:D7:87:94:75:65 X509v3 Authority Key Identifier: keyid:00:B7:2A:D5:33:3C:EA:AE:1A:58:5C:82:80:89:C4:45:59:99:63:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ALcq1TM86q4aWFyCgInERVmZY_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:b0:a0:88:6e:3f:37:60:78:40:31:9e:8d:e5:1c:cf:23:08: 83:17:24:95:d2:9c:2f:e1:ff:d2:90:a4:81:69:93:53:8e:fd: 2d:2d:07:db:6d:03:b3:43:a6:b5:ab:0c:8c:fc:3e:d0:6c:62: ea:b0:3e:71:bf:c5:d8:7c:6d:36:aa:12:80:2f:3c:5c:26:92: 43:12:32:35:2b:63:58:e3:fe:69:69:fe:af:d9:80:6b:c0:2f: 3f:c1:52:80:65:c8:11:38:20:a3:6d:aa:99:12:ff:89:59:92: 8d:91:42:bf:74:f7:0d:48:b5:f5:b1:d6:b3:a8:97:7b:fc:9e: 5e:4b:05:4d:09:59:9d:93:e9:db:93:72:a4:21:5f:53:c9:2c: 15:f5:3e:cf:69:b8:56:ab:63:b7:33:3b:99:32:60:00:c1:17: d9:00:82:d9:48:fc:22:45:7f:25:d5:9d:79:c8:6c:15:33:df: 55:90:7e:52:ae:52:16:34:ca:e0:e5:a8:0e:02:d9:f8:a7:da: 35:08:b7:69:3f:21:9e:59:c8:be:86:eb:27:fd:c2:cb:15:c6: 18:ff:8e:c0:0e:69:bc:b8:b6:74:6f:1b:48:fd:d3:ba:af:92: 45:32:4c:bf:ac:b6:bf:60:21:50:27:68:f9:db:fa:2c:58:4a: 7c:c2:19:dd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz ODBGNzExMC8GA1UEBRMoMDBCNzJBRDUzMzNDRUFBRTFBNTg1QzgyODA4OUM0NDU1 OTk5NjNGMjAeFw0yNTA0MjUwNjE0NTVaFw0yNTA1MDIwNjE0NTVaMBgxFjAUBgNV BAMTDTY4MGIyODVmLTBmNzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRMXlz/JIyVZGypz2CKlrv+5s5aWykLQPahs6K0Fbv/5lapLd2tT0ibEqTwhwt t5GV6BhJ7hKQAAjLWNUaUYC7znKHCtYcwxrOjCewAV3TH4wN5leVqVW7IOFl8UqL /CknkFtOg7tEfzrfZh5DNK7oOKmH9cF8cJrUS5hgOvfPhswBMDho7iC72BC+SlXg wtKflNH30cuFIYVaYYzTczouqyag9UuOFnN8SlIs8ecDRL2ivVegVtSLYXG6QoK1 JAt0Io5Abobzh962lwTGWhNtZCqWOb0YhWF/WV5pODGL8WiNkaNAm7F7WSE4vcNv bDxgn1bR4LMzWqt3ew1tH1N3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFJMI2Pw5 z/SPPLvPfeQi14eUdWUwHwYDVR0jBBgwFoAUALcq1TM86q4aWFyCgInERVmZY/Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4MEY3LzlGNzY4QUZBQTdG ODExRUZCQjQ0RjM3MUM0RjlBRTAyL0FMY3ExVE04NnE0YVdGeUNnSW5FUlZtWllf SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQUxjcTFUTTg2cTRhV0Z5Q2dJbkVSVm1aWV9JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4 MEY3LzlGNzY4QUZBQTdGODExRUZCQjQ0RjM3MUM0RjlBRTAyL0FMY3ExVE04NnE0 YVdGeUNnSW5FUlZtWllfSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ+woIhuPzdgeEAxno3lHM8jCIMXJJXSnC/h/9KQpIFpk1OO/S0tB9tt A7NDprWrDIz8PtBsYuqwPnG/xdh8bTaqEoAvPFwmkkMSMjUrY1jj/mlp/q/ZgGvA Lz/BUoBlyBE4IKNtqpkS/4lZko2RQr909w1ItfWx1rOol3v8nl5LBU0JWZ2T6duT cqQhX1PJLBX1Ps9puFarY7czO5kyYADBF9kAgtlI/CJFfyXVnXnIbBUz31WQflKu UhY0yuDlqA4C2fin2jUIt2k/IZ5ZyL6G6yf9wssVxhj/jsAOaby4tnRvG0j907qv kkUyTL+str9gIVAnaPnb+ixYSnzCGd0= -----END CERTIFICATE-----Generated at Fri Apr 25 08:23:42 2025 by rpki-client on console.sobornost.net