$ rpki-client -vvf rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft File: saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft (raw, json) Hash identifier: t2r3RY+z98QfxjjpI32ycvNOWM3tzmKEak5Ij10+d9I= Subject key identifier: 5A:FB:32:53:A6:99:4B:C1:24:7B:A5:A9:BF:08:CD:F6:D2:0F:AB:10 Authority key identifier: B1:AC:FB:85:14:9B:86:A1:10:15:D6:01:81:0E:31:4F:69:48:C1:CF Certificate issuer: /CN=A91683D2/serialNumber=B1ACFB85149B86A11015D601810E314F6948C1CF Certificate serial: 3486 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft Manifest number: 347D Signing time: Mon 28 Apr 2025 14:37:45 +0000 Manifest this update: Mon 28 Apr 2025 14:37:44 +0000 Manifest next update: Mon 05 May 2025 14:37:44 +0000 Files and hashes: 1: saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl (hash: YOF7vDgy7fP+UisW8oJD1PB/39+29nXGX+QuGMvadJY=) 2: 2DD1EECEEC7A11EEBAE5E319C4F9AE02.roa (hash: LYYe0/ugE0YWppDV9+N/oSDl4IKiJUQFEaZM88DJJ/s=) 3: 2D58477CEC7A11EEBAE5E319C4F9AE02.roa (hash: JwlADxU15y3Ux/pBiI3TitQwzPcxeHG3v1ZhXPEpRug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 14:37:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13446 (0x3486) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91683D2, serialNumber=B1ACFB85149B86A11015D601810E314F6948C1CF Validity Not Before: Apr 28 14:37:44 2025 GMT Not After : May 5 14:37:44 2025 GMT Subject: CN=680f92b9-31ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:93:51:cb:8c:9d:1f:f8:a9:fe:a8:e5:11:08: 4a:5c:16:12:9b:54:ba:45:45:04:9b:0a:07:d6:48: 2e:58:6f:bf:46:8c:c5:b2:31:53:a3:12:78:e2:93: 65:bf:79:28:7e:97:f7:5e:db:e8:b7:97:fb:9f:21: a3:59:a0:76:d7:c2:3d:42:50:ef:3d:c7:39:48:5f: cd:13:55:80:5c:83:b0:a0:06:01:16:fc:e0:0b:a3: f1:76:88:ae:bf:7e:9f:bd:f9:20:1c:ce:ca:3f:f7: 4a:ed:45:46:ca:bc:92:59:29:23:6f:32:5f:04:fc: a4:83:72:c2:86:14:12:45:46:58:a9:5d:88:fa:82: 57:c5:f1:f0:03:37:22:ce:4a:b9:fb:68:26:59:05: c0:00:06:84:50:e2:c5:ed:ca:fe:57:07:d1:86:cb: eb:51:bc:c0:78:ec:fa:b1:b6:d5:3e:1b:d0:5a:07: 10:2e:67:39:51:fb:d8:f4:67:39:10:e0:0b:2c:41: 2c:b2:ea:24:0f:e1:55:ce:79:a1:fe:6d:a0:f0:58: 03:90:a7:52:1b:2a:c3:e4:23:5d:40:48:18:85:e3: 8a:25:6c:ad:90:e6:2f:6d:98:cc:16:a9:1c:ca:c1: fa:f5:bf:f3:9c:7d:65:dc:25:58:6c:31:73:cd:36: 26:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:FB:32:53:A6:99:4B:C1:24:7B:A5:A9:BF:08:CD:F6:D2:0F:AB:10 X509v3 Authority Key Identifier: keyid:B1:AC:FB:85:14:9B:86:A1:10:15:D6:01:81:0E:31:4F:69:48:C1:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:bd:3a:41:e7:aa:1f:f9:17:af:97:a3:d7:88:1a:38:55:09: aa:f9:25:8d:60:ea:a1:6e:2e:c5:db:4c:40:4b:81:20:32:0b: 7e:c6:fc:22:ba:49:40:13:c9:c3:f9:bd:d9:aa:f9:07:2d:5e: 5f:7e:95:12:e4:6a:47:5e:64:2f:0f:1c:82:67:ee:79:ca:a8: d9:72:5e:55:a3:f8:a7:a0:96:43:3a:2f:87:e7:60:02:60:1b: ef:c8:0a:25:64:43:db:ba:03:79:2c:49:11:f9:fb:59:f7:e3: d5:f2:45:76:2d:dc:43:18:c1:00:b3:4b:22:13:21:48:99:86: 2a:db:25:1a:54:9e:8e:20:75:24:39:be:ae:e7:89:ea:99:39: 87:a3:77:0b:3b:c4:6f:66:4e:f7:0e:4a:52:0c:01:6e:d5:3a: ab:be:a5:9a:b5:5f:8a:89:0c:e1:7f:26:51:e6:51:ec:82:76: e9:5a:64:51:e9:7b:31:71:59:bd:51:09:f3:d8:de:78:1a:2f: 26:b7:31:25:c0:ca:08:3b:31:b0:f8:36:9e:35:ef:d9:a0:48: d4:f7:c5:b6:71:7c:46:b6:f1:73:05:b4:61:ad:45:11:16:15: a5:84:a3:15:5a:1a:16:b9:99:cb:78:6e:6b:03:ab:54:c7:72: c7:d9:50:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgzRDIxMTAvBgNVBAUTKEIxQUNGQjg1MTQ5Qjg2QTExMDE1RDYwMTgxMEUzMTRG Njk0OEMxQ0YwHhcNMjUwNDI4MTQzNzQ0WhcNMjUwNTA1MTQzNzQ0WjAYMRYwFAYD VQQDEw02ODBmOTJiOS0zMWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxJNRy4ydH/ip/qjlEQhKXBYSm1S6RUUEmwoH1kguWG+/RozFsjFToxJ44pNl v3kofpf3Xtvot5f7nyGjWaB218I9QlDvPcc5SF/NE1WAXIOwoAYBFvzgC6Pxdoiu v36fvfkgHM7KP/dK7UVGyrySWSkjbzJfBPykg3LChhQSRUZYqV2I+oJXxfHwAzci zkq5+2gmWQXAAAaEUOLF7cr+VwfRhsvrUbzAeOz6sbbVPhvQWgcQLmc5UfvY9Gc5 EOALLEEssuokD+FVznmh/m2g8FgDkKdSGyrD5CNdQEgYheOKJWytkOYvbZjMFqkc ysH69b/znH1l3CVYbDFzzTYmlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFr7MlOm mUvBJHulqb8IzfbSD6sQMB8GA1UdIwQYMBaAFLGs+4UUm4ahEBXWAYEOMU9pSMHP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODNEMi8xOUM1NUY2QzFE OEIxMUUyOTBDNTc4RTUwOEIwMkNEMi9zYXo3aFJTYmhxRVFGZFlCZ1E0eFQybEl3 YzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NhejdoUlNiaHFFUUZkWUJnUTR4VDJsSXdjOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODNEMi8xOUM1NUY2QzFEOEIxMUUyOTBDNTc4RTUwOEIwMkNEMi9zYXo3aFJTYmhx RVFGZFlCZ1E0eFQybEl3YzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTvTpB56of+Revl6PXiBo4VQmq+SWNYOqhbi7F20xAS4EgMgt+xvwi uklAE8nD+b3ZqvkHLV5ffpUS5GpHXmQvDxyCZ+55yqjZcl5Vo/inoJZDOi+H52AC YBvvyAolZEPbugN5LEkR+ftZ9+PV8kV2LdxDGMEAs0siEyFImYYq2yUaVJ6OIHUk Ob6u54nqmTmHo3cLO8RvZk73DkpSDAFu1TqrvqWatV+KiQzhfyZR5lHsgnbpWmRR 6XsxcVm9UQnz2N54Gi8mtzElwMoIOzGw+DaeNe/ZoEjU98W2cXxGtvFzBbRhrUUR FhWlhKMVWhoWuZnLeG5rA6tUx3LH2VCJ -----END CERTIFICATE-----Generated at Mon Apr 28 17:45:08 2025 by rpki-client on console.sobornost.net