$ rpki-client -vvf rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft File: Tcfii1RvKgtTjozfgy2aofN8yOQ.mft (raw, json) Hash identifier: 02pKjC6kjYeYF3i3UOutrNL7LIEUuFlzKOdFptO+x+4= Subject key identifier: C6:80:94:6C:66:9C:EF:F4:0A:00:9C:D1:D4:60:E3:54:3E:4E:CC:58 Authority key identifier: 4D:C7:E2:8B:54:6F:2A:0B:53:8E:8C:DF:83:2D:9A:A1:F3:7C:C8:E4 Certificate issuer: /CN=A91423C1/serialNumber=4DC7E28B546F2A0B538E8CDF832D9AA1F37CC8E4 Certificate serial: 6B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tcfii1RvKgtTjozfgy2aofN8yOQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft Manifest number: 5C Signing time: Sun 27 Apr 2025 03:53:01 +0000 Manifest this update: Sun 27 Apr 2025 03:53:01 +0000 Manifest next update: Sun 04 May 2025 03:53:01 +0000 Files and hashes: 1: Tcfii1RvKgtTjozfgy2aofN8yOQ.crl (hash: 2RjSQfyGvuNCi78BKAlKFlcNlE6giDuYwHPjn3o4xdg=) 2: D31DA3FAE55311EFA195DC68C4F9AE02.roa (hash: GYS8k9UwWROEU4CPy3zJZbjxwuE5OSbNBFEHxATP3jE=) 3: 1BF014320D5411F09D0E1A4CC4F9AE02.roa (hash: qtTlSykZWAQtBUB9Rat4VpmkVXZoqWdqikbCdbZliz0=) 4: 3E9ACB6EE29611EFAE82780AC4F9AE02.roa (hash: wyEjofnc8ole0121WyuEbUERePWJfuYpn1FXolEHMnM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.crl rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tcfii1RvKgtTjozfgy2aofN8yOQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 107 (0x6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91423C1, serialNumber=4DC7E28B546F2A0B538E8CDF832D9AA1F37CC8E4 Validity Not Before: Apr 27 03:53:01 2025 GMT Not After : May 4 03:53:01 2025 GMT Subject: CN=680daa1d-0a26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:90:6f:ff:3c:10:53:fd:a7:b0:f0:2b:93:18: f2:3c:d7:e9:37:5e:cb:43:bb:a2:db:9d:38:83:57: b2:b3:c5:f7:ed:6c:31:e1:13:87:0d:d3:ce:72:b1: 9b:3d:e0:5d:ab:8b:de:26:b1:0a:e0:bf:95:77:40: 3a:80:0e:b5:37:d0:94:d3:85:f6:c1:b5:ba:7b:60: 7f:09:ce:a3:f7:1d:6b:40:c6:b5:59:74:a4:cf:04: f5:13:3a:0a:7c:f1:bd:90:a9:ff:92:24:2a:e1:45: 82:06:f7:7f:5e:da:8d:02:74:69:98:15:28:91:dc: 81:0e:97:07:57:b4:da:35:71:3d:14:fc:51:65:42: af:f2:19:71:ae:d3:d6:f2:45:69:9a:e2:63:8a:4e: 15:73:d0:70:8e:6a:68:1c:79:87:00:1e:c3:da:fb: 84:16:8b:4d:5c:3b:a5:9a:51:b4:a8:ba:47:06:1d: 1c:97:4a:04:f5:94:e2:f2:64:62:22:01:b4:2f:78: 77:c1:8e:ed:f9:fb:4f:78:f2:d1:c4:07:d6:f8:ae: 92:fc:2c:79:d2:ad:47:f0:66:7f:16:db:37:54:ac: 74:8e:2f:91:f3:e0:45:2e:49:c2:b2:b8:42:78:06: 79:31:e7:26:d3:cc:8e:9e:f6:de:f4:f7:4e:ab:b0: 00:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:80:94:6C:66:9C:EF:F4:0A:00:9C:D1:D4:60:E3:54:3E:4E:CC:58 X509v3 Authority Key Identifier: keyid:4D:C7:E2:8B:54:6F:2A:0B:53:8E:8C:DF:83:2D:9A:A1:F3:7C:C8:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tcfii1RvKgtTjozfgy2aofN8yOQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:ff:6a:46:39:35:36:03:2b:b7:67:d2:89:6b:75:9a:53:e7: 43:26:bd:4e:f7:a0:e4:d6:fa:7a:cb:fa:80:6e:aa:cb:73:b5: b3:2b:df:60:ef:fc:23:3a:04:55:53:3b:ee:90:67:2d:ce:b9: dd:e0:07:3a:01:7d:de:8e:2f:54:fc:c9:1a:2f:38:9f:d6:6c: 5a:36:5a:54:f0:43:19:4c:44:8b:cc:cc:60:27:f5:d0:d7:f6: e3:97:42:d0:34:93:1b:4c:17:04:46:be:dd:84:6a:20:de:5a: 73:9c:4e:60:dd:33:51:e8:d7:01:23:a0:7f:ab:02:da:30:10: 15:a3:de:f1:dd:fe:1f:8d:db:96:9f:f7:b3:e7:aa:7e:bf:69: d8:f7:21:ad:57:e3:dc:80:4f:9d:12:2a:27:94:e6:15:65:6b: 35:d6:fe:63:ae:db:47:26:e4:b4:bf:e6:a7:ef:13:68:8e:8c: 4b:76:10:42:3e:5c:cb:6d:e6:ac:62:9f:a7:a0:f8:37:01:7b: 09:32:e9:70:e7:c4:86:b1:60:2c:c2:64:e3:6f:e4:64:dd:85: 7c:8a:c4:8d:83:a2:f3:55:eb:9a:98:74:b1:04:02:58:4f:1b: a0:ed:e3:b1:ad:5c:a1:ce:64:e0:43:7d:a2:26:4d:fa:ac:fd: 44:c2:3f:8e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MjNDMTExMC8GA1UEBRMoNERDN0UyOEI1NDZGMkEwQjUzOEU4Q0RGODMyRDlBQTFG MzdDQzhFNDAeFw0yNTA0MjcwMzUzMDFaFw0yNTA1MDQwMzUzMDFaMBgxFjAUBgNV BAMTDTY4MGRhYTFkLTBhMjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxkG//PBBT/aew8CuTGPI81+k3XstDu6LbnTiDV7KzxfftbDHhE4cN085ysZs9 4F2ri94msQrgv5V3QDqADrU30JTThfbBtbp7YH8JzqP3HWtAxrVZdKTPBPUTOgp8 8b2Qqf+SJCrhRYIG939e2o0CdGmYFSiR3IEOlwdXtNo1cT0U/FFlQq/yGXGu09by RWma4mOKThVz0HCOamgceYcAHsPa+4QWi01cO6WaUbSoukcGHRyXSgT1lOLyZGIi AbQveHfBju35+0948tHEB9b4rpL8LHnSrUfwZn8W2zdUrHSOL5Hz4EUuScKyuEJ4 Bnkx5ybTzI6e9t70906rsAD/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxoCUbGac 7/QKAJzR1GDjVD5OzFgwHwYDVR0jBBgwFoAUTcfii1RvKgtTjozfgy2aofN8yOQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyM0MxL0QwMzIwRUY4QkY0 RjExRUZCQ0Y2ODk0NEM0RjlBRTAyL1RjZmlpMVJ2S2d0VGpvemZneTJhb2ZOOHlP US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVGNmaWkxUnZLZ3RUam96Zmd5MmFvZk44eU9RLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy M0MxL0QwMzIwRUY4QkY0RjExRUZCQ0Y2ODk0NEM0RjlBRTAyL1RjZmlpMVJ2S2d0 VGpvemZneTJhb2ZOOHlPUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIf/akY5NTYDK7dn0olrdZpT50MmvU73oOTW+nrL+oBuqstztbMr32Dv /CM6BFVTO+6QZy3Oud3gBzoBfd6OL1T8yRovOJ/WbFo2WlTwQxlMRIvMzGAn9dDX 9uOXQtA0kxtMFwRGvt2EaiDeWnOcTmDdM1Ho1wEjoH+rAtowEBWj3vHd/h+N25af 97Pnqn6/adj3Ia1X49yAT50SKieU5hVlazXW/mOu20cm5LS/5qfvE2iOjEt2EEI+ XMtt5qxin6eg+DcBewky6XDnxIaxYCzCZONv5GTdhXyKxI2DovNV65qYdLEEAlhP G6Dt47GtXKHOZOBDfaImTfqs/UTCP44= -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:36 2025 by rpki-client on console.sobornost.net