$ rpki-client -vvf rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft File: 09Fa7ppPiuXCgRCKfS062B1Oec0.mft (raw, json) Hash identifier: 35yyJ91iZI/VuFcxpyqcSGgAXPiuUADa/eeRG93/l70= Subject key identifier: A4:49:4B:2C:6A:2B:36:3B:ED:29:A0:3E:4D:B6:37:C9:87:26:07:4F Authority key identifier: D3:D1:5A:EE:9A:4F:8A:E5:C2:81:10:8A:7D:2D:3A:D8:1D:4E:79:CD Certificate issuer: /CN=A91397C2/serialNumber=D3D15AEE9A4F8AE5C281108A7D2D3AD81D4E79CD Certificate serial: 07E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft Manifest number: 07C1 Signing time: Sat 26 Apr 2025 20:54:41 +0000 Manifest this update: Sat 26 Apr 2025 20:54:41 +0000 Manifest next update: Sat 03 May 2025 20:54:41 +0000 Files and hashes: 1: 09Fa7ppPiuXCgRCKfS062B1Oec0.crl (hash: SsytRvkJW8Vlqsmx9LayRWpIXMy2Il3W9TOqpFEBwkg=) 2: BF07B0DA16AF11F08B8C4061C4F9AE02.roa (hash: m5fvUWDyLmphSj+hveftDjH5v8ZvHtc3dCRNArmrofc=) 3: 29BC840E002711EB8FA6A142C4F9AE02.roa (hash: RVujGjgRtNml2s4B1MbyglZHc1wuuQ8z+GSwbNfvR2o=) 4: 1070E6CA9A8311EF8BE0F826C4F9AE02.roa (hash: 5usMHuwC29/GKSbCm/Fabiikjfpjet0V04t/dPRj3vM=) 5: BE79CDCE16AF11F08B8C4061C4F9AE02.roa (hash: AjNKnPWs+wQxA57p7oeqhPGR6IMIStHtSJ7A+NHTTwU=) 6: 38BE1074FC0F11EA8DEF4D28C4F9AE02.roa (hash: iWWPKNMJez26/4BW7/wljyQN/N1JrdnLJYQsd0J35V0=) 7: 3AA556009A8411EFB791ED77C4F9AE02.roa (hash: vJqvl3p3GZGjPo1+bFOu/lz3UGNmQtiNtsOQmfP7QoU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.crl rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2019 (0x7e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91397C2, serialNumber=D3D15AEE9A4F8AE5C281108A7D2D3AD81D4E79CD Validity Not Before: Apr 26 20:54:41 2025 GMT Not After : May 3 20:54:41 2025 GMT Subject: CN=680d4811-46fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:1c:a1:b3:a2:00:8d:c7:20:14:4a:bd:69:26: 51:07:96:ec:29:f6:a7:92:c3:af:07:1a:ec:26:87: 58:02:fd:24:c1:4a:43:84:07:fe:e5:b2:8a:e7:15: ef:52:33:94:93:59:d8:1e:1f:67:ed:a1:3f:31:50: 6a:fc:77:79:9f:9b:08:97:86:04:bc:42:13:32:c6: 90:c5:ab:95:b2:ee:71:ae:23:83:2e:7e:5a:be:ca: 44:fd:54:02:fe:5a:f3:bd:01:15:f4:70:44:01:d1: 92:c4:95:e4:f8:ac:c0:88:ff:6a:3d:af:77:2d:05: 25:74:30:10:83:22:35:38:ac:2f:5f:30:99:43:d5: ab:8e:60:50:94:a6:43:80:2b:23:27:04:34:78:a3: 78:a6:71:d7:f8:39:39:00:43:d4:96:c6:02:8d:53: d1:9b:02:84:bb:98:ab:3f:db:59:a0:07:17:73:5d: 5a:1c:fd:ab:7e:25:08:15:df:42:09:f2:86:09:51: 8d:a6:8b:67:2d:3c:a2:16:97:57:ee:e3:60:8b:1f: f8:fb:fe:e9:fd:14:3f:7d:71:9d:2b:8e:63:62:1f: eb:f9:5e:19:53:53:4f:23:b1:9c:5f:57:fb:f7:a6: 23:60:06:ef:4b:c8:64:79:42:9f:e3:2e:a5:e5:ff: 99:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:49:4B:2C:6A:2B:36:3B:ED:29:A0:3E:4D:B6:37:C9:87:26:07:4F X509v3 Authority Key Identifier: keyid:D3:D1:5A:EE:9A:4F:8A:E5:C2:81:10:8A:7D:2D:3A:D8:1D:4E:79:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:00:7f:62:9b:ca:9c:77:e9:8f:25:8f:f7:80:80:75:ac:c0: 31:34:af:c6:3d:3a:33:ee:25:ac:ed:21:3e:ff:f5:78:b1:6e: 4e:0d:d8:70:c3:38:ba:fa:5c:4e:a5:8f:71:eb:db:f8:8d:bc: 15:62:79:c7:98:35:9b:06:20:df:a6:18:81:15:52:03:12:e5: e3:26:5b:fe:94:63:c3:cc:08:ba:7a:65:6d:0a:c4:ca:9b:93: 76:6d:a9:a3:1f:4c:b2:53:a1:64:db:50:00:fc:4c:60:12:e8: 99:3d:2d:84:f4:e4:69:ee:67:95:6a:3d:93:a6:1f:26:0d:ab: bd:10:89:57:f9:b1:ea:d5:5d:bb:86:d4:c5:37:13:22:02:3f: af:45:50:b2:f4:1e:35:5d:cf:38:f7:c2:19:2d:01:46:ec:de: b9:ba:66:70:ad:5c:be:fe:56:cc:31:0e:48:b0:92:af:90:dd: 9c:ee:41:2c:ec:82:d4:3f:20:94:dd:14:f0:69:88:05:63:d6: cd:4b:2d:1f:d8:c2:bc:e1:e7:75:9b:99:db:cf:69:76:75:47: 49:0f:2b:b5:72:20:20:d0:cf:ea:46:5b:57:0d:5a:2e:81:b2: 9e:f8:6f:91:10:c8:e6:e7:4c:e6:4d:00:83:72:59:7c:d3:80: 94:82:0a:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk3QzIxMTAvBgNVBAUTKEQzRDE1QUVFOUE0RjhBRTVDMjgxMTA4QTdEMkQzQUQ4 MUQ0RTc5Q0QwHhcNMjUwNDI2MjA1NDQxWhcNMjUwNTAzMjA1NDQxWjAYMRYwFAYD VQQDEw02ODBkNDgxMS00NmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7Ryhs6IAjccgFEq9aSZRB5bsKfanksOvBxrsJodYAv0kwUpDhAf+5bKK5xXv UjOUk1nYHh9n7aE/MVBq/Hd5n5sIl4YEvEITMsaQxauVsu5xriODLn5avspE/VQC /lrzvQEV9HBEAdGSxJXk+KzAiP9qPa93LQUldDAQgyI1OKwvXzCZQ9WrjmBQlKZD gCsjJwQ0eKN4pnHX+Dk5AEPUlsYCjVPRmwKEu5irP9tZoAcXc11aHP2rfiUIFd9C CfKGCVGNpotnLTyiFpdX7uNgix/4+/7p/RQ/fXGdK45jYh/r+V4ZU1NPI7GcX1f7 96YjYAbvS8hkeUKf4y6l5f+ZzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKRJSyxq KzY77SmgPk22N8mHJgdPMB8GA1UdIwQYMBaAFNPRWu6aT4rlwoEQin0tOtgdTnnN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTdDMi80RTQyNkRFOEZC RUExMUVBOTQwQTFEMTlDNEY5QUUwMi8wOUZhN3BwUGl1WENnUkNLZlMwNjJCMU9l YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA5RmE3cHBQaXVYQ2dSQ0tmUzA2MkIxT2VjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTdDMi80RTQyNkRFOEZCRUExMUVBOTQwQTFEMTlDNEY5QUUwMi8wOUZhN3BwUGl1 WENnUkNLZlMwNjJCMU9lYzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPAH9im8qcd+mPJY/3gIB1rMAxNK/GPToz7iWs7SE+//V4sW5ODdhw wzi6+lxOpY9x69v4jbwVYnnHmDWbBiDfphiBFVIDEuXjJlv+lGPDzAi6emVtCsTK m5N2bamjH0yyU6Fk21AA/ExgEuiZPS2E9ORp7meVaj2Tph8mDau9EIlX+bHq1V27 htTFNxMiAj+vRVCy9B41Xc8498IZLQFG7N65umZwrVy+/lbMMQ5IsJKvkN2c7kEs 7ILUPyCU3RTwaYgFY9bNSy0f2MK84ed1m5nbz2l2dUdJDyu1ciAg0M/qRltXDVou gbKe+G+REMjm50zmTQCDcll804CUggph -----END CERTIFICATE-----Generated at Sun Apr 27 00:13:56 2025 by rpki-client on console.sobornost.net