$ rpki-client -vvf rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft File: 8_70YqTY4vf6BzWmq2Re5WNdqPI.mft (raw, json) Hash identifier: I02RByvtITguRgf+2DJ67v1j8KE2BXZDs6sSp2Phc6M= Subject key identifier: DC:BB:DB:0D:25:47:CC:5C:F6:A8:AD:31:6A:38:69:56:AA:E7:4E:60 Authority key identifier: F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2 Certificate issuer: /CN=A91474C3/serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2 Certificate serial: 34F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft Manifest number: 348D Signing time: Mon 28 Apr 2025 14:19:14 +0000 Manifest this update: Mon 28 Apr 2025 14:19:13 +0000 Manifest next update: Mon 05 May 2025 14:19:13 +0000 Files and hashes: 1: 8_70YqTY4vf6BzWmq2Re5WNdqPI.crl (hash: kKIgwNq4klZw9c6uVOpo5gfFNqrp9oic6vqJk+N0tSk=) 2: D80ABAE0B0F811E595E0F761C4F9AE02.roa (hash: zlRoAfBvEWm+ICqeN72JyYaPMqWwx3agcrGPpHWXNEA=) 3: DCA7C1ECB0F811E595E0F761C4F9AE02.roa (hash: 3Mq/Cwn5cDCgj9zQnKM9HEluAVsQJa4HhEZnAObnmxU=) 4: DB386CDAB0F811E595E0F761C4F9AE02.roa (hash: nJ3Mr6afajFFS4CO5aqKdc3WGM4N36WcDo4SVgiHTXM=) 5: DE0EF67CB0F811E595E0F761C4F9AE02.roa (hash: UqX9c9LLoIvVH1794mXP6T0vE+zC8ZKzhsccgA6TkpI=) 6: D96D4614B0F811E595E0F761C4F9AE02.roa (hash: kY2rjuppUd4UGAcVEwItvPQGG6DPd7eeHrFYcVM9F2I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 14:19:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13553 (0x34f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91474C3, serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2 Validity Not Before: Apr 28 14:19:13 2025 GMT Not After : May 5 14:19:13 2025 GMT Subject: CN=680f8e62-5c73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:47:61:08:d2:11:fe:f3:9b:bd:46:36:d8:0b: c1:a2:4b:ed:aa:34:3a:93:28:0b:90:16:60:ce:d2: 5a:b7:d8:73:9e:f1:4e:47:ea:86:de:47:fd:7c:f0: f2:39:ae:6d:a6:82:27:a6:02:12:e9:47:9b:40:fc: 67:c3:ac:3d:66:1c:4c:68:34:3e:17:e3:47:d1:22: 16:a6:07:67:36:2e:37:53:94:21:55:c0:ef:b1:af: b5:fb:c0:ee:50:44:46:3e:99:3c:52:13:ef:39:5c: dc:9e:9d:a2:60:ff:64:85:e6:cf:66:ab:21:90:8f: ca:fc:8c:3b:f1:e4:94:2c:dd:9c:eb:62:97:e3:5c: fd:9e:83:15:f2:b4:81:88:6d:6e:6e:b9:a0:4f:c5: 71:f4:b9:ff:d1:db:39:bf:ce:18:1d:5a:fd:69:9f: 13:8c:73:f0:68:bf:81:a3:92:29:cc:d1:8c:70:42: cd:a2:dd:a0:d9:02:7d:82:90:48:20:e5:66:dc:b9: eb:81:f4:b0:92:25:a5:50:9c:35:05:e2:cd:98:8b: d0:3e:5f:38:12:02:54:63:1f:73:f9:ba:00:4a:68: c7:71:11:86:22:3a:3b:e4:45:96:8a:0f:28:16:c9: 4f:da:a0:20:71:b5:6e:f1:9f:57:aa:d5:75:66:dc: 0d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:BB:DB:0D:25:47:CC:5C:F6:A8:AD:31:6A:38:69:56:AA:E7:4E:60 X509v3 Authority Key Identifier: keyid:F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:c0:cb:14:f3:e2:a3:0e:c6:17:9c:06:4c:3f:0a:65:17:00: 25:2b:e0:cb:71:35:4e:fd:31:03:2c:f5:16:82:ac:cc:72:cf: ec:ab:a2:18:85:7e:7b:12:49:b4:27:d6:9c:03:7f:9b:24:b8: 07:cc:1e:b7:4f:c8:ae:47:e5:60:0b:0b:da:59:b3:3e:e6:f9: 2c:54:2d:94:81:e4:49:6f:06:9b:ca:63:da:07:20:f9:05:34: ca:43:a8:26:63:8f:ad:e9:3a:7f:48:08:94:70:84:04:b5:98: 39:13:1c:b5:43:a4:40:c7:77:c4:19:07:aa:b6:37:4b:5a:2a: dc:36:7b:47:6d:32:55:2e:8d:66:3c:3b:5b:b8:4d:40:68:18: cc:36:dd:b0:d6:fe:71:67:46:82:14:67:89:14:b6:d8:de:20: 4b:ba:67:fa:6d:3a:84:31:dc:78:1e:9e:71:91:1f:47:08:b5: a1:8b:81:ed:77:3e:4d:19:ba:b2:0f:77:d4:04:b6:0a:60:f2: 2a:96:61:80:ec:d5:9f:25:fa:27:0b:20:ff:c3:20:f6:0b:61: 68:7e:fb:25:90:7b:53:f7:36:03:c2:da:e0:f6:15:60:07:e4: 40:8d:3b:98:43:db:e1:c1:c7:00:c0:88:31:c6:42:10:98:25: 41:c6:ac:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0QzMxMTAvBgNVBAUTKEYzRkVGNDYyQTREOEUyRjdGQTA3MzVBNkFCNjQ1RUU1 NjM1REE4RjIwHhcNMjUwNDI4MTQxOTEzWhcNMjUwNTA1MTQxOTEzWjAYMRYwFAYD VQQDEw02ODBmOGU2Mi01YzczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAskdhCNIR/vObvUY22AvBokvtqjQ6kygLkBZgztJat9hznvFOR+qG3kf9fPDy Oa5tpoInpgIS6UebQPxnw6w9ZhxMaDQ+F+NH0SIWpgdnNi43U5QhVcDvsa+1+8Du UERGPpk8UhPvOVzcnp2iYP9khebPZqshkI/K/Iw78eSULN2c62KX41z9noMV8rSB iG1ubrmgT8Vx9Ln/0ds5v84YHVr9aZ8TjHPwaL+Bo5IpzNGMcELNot2g2QJ9gpBI IOVm3LnrgfSwkiWlUJw1BeLNmIvQPl84EgJUYx9z+boASmjHcRGGIjo75EWWig8o FslP2qAgcbVu8Z9XqtV1ZtwNBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNy72w0l R8xc9qitMWo4aVaq505gMB8GA1UdIwQYMBaAFPP+9GKk2OL3+gc1pqtkXuVjXajy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzRDMy82RjhCNTJBMDFE NzAxMUUyQkMxMURBQjQwOEIwMkNEMi84XzcwWXFUWTR2ZjZCeldtcTJSZTVXTmRx UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhfNzBZcVRZNHZmNkJ6V21xMlJlNVdOZHFQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzRDMy82RjhCNTJBMDFENzAxMUUyQkMxMURBQjQwOEIwMkNEMi84XzcwWXFUWTR2 ZjZCeldtcTJSZTVXTmRxUEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZwMsU8+KjDsYXnAZMPwplFwAlK+DLcTVO/TEDLPUWgqzMcs/sq6IY hX57Ekm0J9acA3+bJLgHzB63T8iuR+VgCwvaWbM+5vksVC2UgeRJbwabymPaByD5 BTTKQ6gmY4+t6Tp/SAiUcIQEtZg5Exy1Q6RAx3fEGQeqtjdLWircNntHbTJVLo1m PDtbuE1AaBjMNt2w1v5xZ0aCFGeJFLbY3iBLumf6bTqEMdx4Hp5xkR9HCLWhi4Ht dz5NGbqyD3fUBLYKYPIqlmGA7NWfJfonCyD/wyD2C2FofvslkHtT9zYDwtrg9hVg B+RAjTuYQ9vhwccAwIgxxkIQmCVBxqxQ -----END CERTIFICATE-----Generated at Mon Apr 28 17:44:50 2025 by rpki-client on console.sobornost.net