$ rpki-client -vvf rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft File: _qutkjWu8XAjzc-xYZAm887bLH8.mft (raw, json) Hash identifier: Vawe2A/PjRtamhuZKf8i8DQYAaiALzCq0cwhJ/AalKw= Subject key identifier: E4:01:49:FD:7F:DD:20:A2:83:08:DE:9F:C0:D4:3A:09:26:60:03:55 Authority key identifier: FE:AB:AD:92:35:AE:F1:70:23:CD:CF:B1:61:90:26:F3:CE:DB:2C:7F Certificate issuer: /CN=A91443DC/serialNumber=FEABAD9235AEF17023CDCFB1619026F3CEDB2C7F Certificate serial: A7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_qutkjWu8XAjzc-xYZAm887bLH8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft Manifest number: A3 Signing time: Fri 25 Apr 2025 05:14:05 +0000 Manifest this update: Fri 25 Apr 2025 05:14:05 +0000 Manifest next update: Fri 02 May 2025 05:14:05 +0000 Files and hashes: 1: _qutkjWu8XAjzc-xYZAm887bLH8.crl (hash: bp1pjGucN1VoywGvVnXV1yWB9M2rtW7YzCgL5lQMFOI=) 2: D4F9C46CDCA511EF9BCCFC59C4F9AE02.roa (hash: OuazFSoXGYM6zJItNa4jp1IfJllzFolsgf+lOTd60NE=) 3: 557F3136DCA511EF98B72959C4F9AE02.roa (hash: YFXHXJDviBoPayGDb4OGE7GmrzEy24l7DcHuFpblUcg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.crl rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_qutkjWu8XAjzc-xYZAm887bLH8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91443DC, serialNumber=FEABAD9235AEF17023CDCFB1619026F3CEDB2C7F Validity Not Before: Apr 25 05:14:05 2025 GMT Not After : May 2 05:14:05 2025 GMT Subject: CN=680b1a1d-8a00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:73:d8:ec:fe:01:d2:a0:ca:68:e1:a0:25:25: 5a:2e:15:cd:20:e0:65:69:01:20:92:83:98:25:5c: 80:78:7d:cb:ee:08:0c:07:ca:75:f3:64:40:54:78: c0:be:8b:23:fe:88:e9:02:47:a0:8d:ba:0f:35:88: de:3d:fb:1b:1d:9b:b5:fe:1b:3d:e3:cf:10:87:da: 47:2e:62:98:5e:74:b9:5d:f8:e2:ac:d4:08:27:d0: 88:db:29:44:5f:52:75:dd:b5:c4:97:21:f5:8c:a4: 44:df:8e:16:3b:13:f5:db:17:e1:2c:7c:2e:b3:bd: a2:f3:af:ad:87:66:15:07:95:6f:77:89:d9:09:bb: ab:ef:c0:a4:a8:52:87:f1:a8:a5:b9:a7:23:73:96: 03:b3:12:2f:98:ef:d7:09:c9:06:59:2d:a6:59:7f: 73:ac:b2:53:32:9f:08:19:23:48:7d:54:42:7a:6c: 13:a6:5b:a2:3d:11:47:f0:7e:b6:f5:50:bf:cd:04: b9:b7:e6:e2:f6:e2:1c:6e:8c:40:1f:ca:61:ef:c0: 2d:d2:ab:ad:47:6d:4d:fb:1b:1c:85:c6:2a:53:bf: 66:de:cc:5e:20:65:51:59:ab:20:c2:5c:68:42:d5: 38:11:0c:3d:2c:d3:fc:d0:f8:3e:57:05:0d:58:3a: 4e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:01:49:FD:7F:DD:20:A2:83:08:DE:9F:C0:D4:3A:09:26:60:03:55 X509v3 Authority Key Identifier: keyid:FE:AB:AD:92:35:AE:F1:70:23:CD:CF:B1:61:90:26:F3:CE:DB:2C:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_qutkjWu8XAjzc-xYZAm887bLH8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:ee:7a:18:a0:cc:50:99:f5:d3:bb:b0:ce:12:ff:ad:4d:39: 15:3c:8c:2f:8b:4f:cd:b4:45:86:a3:68:24:22:3b:d2:63:f6: 25:62:15:4a:ad:06:c0:7f:30:35:64:8f:21:13:eb:4b:c9:67: a8:0f:4c:8d:49:27:65:ca:36:ce:19:28:d8:43:a8:ee:f5:10: f5:d6:ad:fa:00:9a:a1:29:14:11:bf:4d:fd:26:9a:b6:cc:45: e7:3b:06:88:e9:58:5e:0c:56:39:6d:d3:b9:3c:98:03:3d:7f: 94:53:0c:28:5b:ff:d4:ae:e4:83:26:f6:1a:7f:b1:e5:0d:dc: e9:d7:19:66:fa:5c:f2:c8:44:6b:15:ee:3b:0b:4a:55:dd:fe: 2b:94:c5:c9:da:17:f2:c6:9b:5f:77:ba:e9:c7:65:4f:82:4a: 2f:a6:57:38:0c:23:fc:81:f9:f3:5c:fc:a9:d5:1b:22:98:f7: fb:0e:5e:fb:f6:24:0e:f3:c0:2d:c7:2b:97:7f:26:d3:0e:70: a8:2a:be:4d:0b:3f:c3:34:d7:3f:45:bb:58:a5:b3:c2:8e:ca: 59:ae:0d:3a:dc:01:59:ea:b5:2e:50:3b:18:78:57:cd:84:38: f7:c9:a6:21:6e:26:46:97:8a:0a:dd:56:47:34:c8:4c:9c:da: 72:7d:71:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQzREMxMTAvBgNVBAUTKEZFQUJBRDkyMzVBRUYxNzAyM0NEQ0ZCMTYxOTAyNkYz Q0VEQjJDN0YwHhcNMjUwNDI1MDUxNDA1WhcNMjUwNTAyMDUxNDA1WjAYMRYwFAYD VQQDEw02ODBiMWExZC04YTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz3PY7P4B0qDKaOGgJSVaLhXNIOBlaQEgkoOYJVyAeH3L7ggMB8p182RAVHjA vosj/ojpAkegjboPNYjePfsbHZu1/hs9488Qh9pHLmKYXnS5XfjirNQIJ9CI2ylE X1J13bXElyH1jKRE344WOxP12xfhLHwus72i86+th2YVB5Vvd4nZCbur78CkqFKH 8ailuacjc5YDsxIvmO/XCckGWS2mWX9zrLJTMp8IGSNIfVRCemwTpluiPRFH8H62 9VC/zQS5t+bi9uIcboxAH8ph78At0qutR21N+xschcYqU79m3sxeIGVRWasgwlxo QtU4EQw9LNP80Pg+VwUNWDpOgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOQBSf1/ 3SCigwjen8DUOgkmYANVMB8GA1UdIwQYMBaAFP6rrZI1rvFwI83PsWGQJvPO2yx/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDNEQy85N0RGN0ExMjMw NjIxMUVGOTc4QjQ3NjRDNEY5QUUwMi9fcXV0a2pXdThYQWp6Yy14WVpBbTg4N2JM SDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19xdXRrald1OFhBanpjLXhZWkFtODg3YkxIOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDNEQy85N0RGN0ExMjMwNjIxMUVGOTc4QjQ3NjRDNEY5QUUwMi9fcXV0a2pXdThY QWp6Yy14WVpBbTg4N2JMSDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAm7noYoMxQmfXTu7DOEv+tTTkVPIwvi0/NtEWGo2gkIjvSY/YlYhVK rQbAfzA1ZI8hE+tLyWeoD0yNSSdlyjbOGSjYQ6ju9RD11q36AJqhKRQRv039Jpq2 zEXnOwaI6VheDFY5bdO5PJgDPX+UUwwoW//UruSDJvYaf7HlDdzp1xlm+lzyyERr Fe47C0pV3f4rlMXJ2hfyxptfd7rpx2VPgkovplc4DCP8gfnzXPyp1RsimPf7Dl77 9iQO88AtxyuXfybTDnCoKr5NCz/DNNc/RbtYpbPCjspZrg063AFZ6rUuUDsYeFfN hDj3yaYhbiZGl4oK3VZHNMhMnNpyfXFx -----END CERTIFICATE-----Generated at Fri Apr 25 08:23:45 2025 by rpki-client on console.sobornost.net