$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft File: n4LbyUZjEsW6LpISeTAkAJVqmCo.mft (raw, json) Hash identifier: piApv+0lxEgvDFCN9O+ZsQVcTYVm5c2k33GbR7PJg/g= Subject key identifier: 9A:A6:04:85:64:59:E8:84:CC:BF:DB:03:8A:86:63:03:42:BA:C5:6B Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A Certificate issuer: /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A Certificate serial: 3596 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft Manifest number: 34B8 Signing time: Sat 26 Apr 2025 14:21:56 +0000 Manifest this update: Sat 26 Apr 2025 14:21:55 +0000 Manifest next update: Sat 03 May 2025 14:21:55 +0000 Files and hashes: 1: n4LbyUZjEsW6LpISeTAkAJVqmCo.crl (hash: lL1PgtA1DRBGC21zde9OEWOF7vkcBV+JVPlOhFW5DYo=) 2: 1827B7E0605411EFA8069323C4F9AE02.roa (hash: f3ZnVyGboZ3Akbin4yXhLknrh3afmJ+B8J3RZmmaopQ=) 3: 439638A88DB811E98ACC9F7EC4F9AE02.roa (hash: tJj1Fysd0xDWoVakE+OSdSVBLD/VndaJXIUaElpuDlU=) 4: 4D21FB36F7DB11EE92D1E11FC4F9AE02.roa (hash: mkqJnfjAyC1y3JZ3S/aqxyvN2bSQ/y7HbUZRZ5455Yo=) 5: EBD5A3CA6B8711EFB0476280C4F9AE02.roa (hash: fA+kqaKk3JYJ5L1SCxggXVF38dEFRQWvBBK35ZGIubk=) 6: 4107DF748DB811E98ACC9F7EC4F9AE02.roa (hash: gyGZW8SRrhVaNuiEThQUlAOFPVRZ4pRi/unEVqDLonc=) 7: F6D9C45E7B1811EF82C90D2AC4F9AE02.roa (hash: AfBe49D3Yjx5Xz+auV8iqKW+ThAbYjOi5aUSfgO+bI8=) 8: 4A71D7E08DB811E98ACC9F7EC4F9AE02.roa (hash: E7yqhdrwljkTSOgbnaG+ysHeOquc8SyVIcLUBLYl/Ds=) 9: 4EE07E481F7F11ECA7242F6CC4F9AE02.roa (hash: TA9EFDfSdd7+EEK/5RjdrLiMORuBq9ygTpVOMFIYOcU=) 10: 42EBE8D08DB811E98ACC9F7EC4F9AE02.roa (hash: FSsmkLJ70j/LoQlK6EvnfSTcsUCXKKUSfAS4HphN87g=) 11: CEC68F44973211E9954F0565C4F9AE02.roa (hash: 1JZ1OOenzlz7dOVNT0ysjgGRJusSE3+1Rk7pSgH2Okk=) 12: 9DB6EBB4972E11E9B776A755C4F9AE02.roa (hash: F9o71AH8ui5/aDIyX2EvjpYqZFlu7QiC2robUaKm7Ww=) 13: 471E9C908DB811E98ACC9F7EC4F9AE02.roa (hash: dhSNGV7WN5Gdy2FxgxjeunIC6meweUvz6hG+CLphccQ=) 14: 482C95F68DB811E98ACC9F7EC4F9AE02.roa (hash: zEScPtSmfxNjAFuYUiCbjBlCrAeiT/w5Td2/JrWEkDk=) 15: 3ED710C68DB811E98ACC9F7EC4F9AE02.roa (hash: nCFG+bk+dqsOuGFESr8+Ya9a1BnYrZYntqhV2PYzrJ0=) 16: F3A41ADEC0E411EFA19F644CC4F9AE02.roa (hash: ACVLyZykAztEdUIVBfhutPukbcuitqKmSjWINXZwcgQ=) 17: 47A6C8E08DB811E98ACC9F7EC4F9AE02.roa (hash: TGN+p1ofbtkEaQ7GXRuZyKCw4vYy+9mP3K55Olf1oRk=) 18: B2FF274A00EC11EDBC60AA4FC4F9AE02.roa (hash: SB4SEPfrJcU4bAaiYGmkUQemcbi1AfCVHBrodW3eBtk=) 19: 402418C08DB811E98ACC9F7EC4F9AE02.roa (hash: u9VQpLnmNPRlXjoztXx96YhTp7IciEzLswD4rNTXg90=) 20: 441E60E88DB811E98ACC9F7EC4F9AE02.roa (hash: uq5spO8r//Mx5XkVnf0Z6fnNcxxWQ62LgeziZF4eNPE=) 21: A3601D70C2A511EBB2025B36C4F9AE02.roa (hash: y0DwpoBfHHEL957f/ttZlyeIHwIEba7rVVTz2uU5AGY=) 22: EC8209420EB411EFAE1CF63BC4F9AE02.roa (hash: NhE6BhdvNa2vpC+KQiezMi0MSOcKQeq7OmkH62Iv3CM=) 23: B580AA94013D11EBBC81306AC4F9AE02.roa (hash: Mw8xJZC8kTBbi9VQc48nB8qn9ni0B4gLN8NhE9LyvLM=) 24: 46800A948DB811E98ACC9F7EC4F9AE02.roa (hash: HDowV0jxfkJYeFr+sT32cXrZ6tZ57Cd3d2XNwlRtI04=) 25: 5B917C28A2E011E9A98B0235C4F9AE02.roa (hash: nL1G6QX9sO47hs0tQUmWNASOgl/VhJm0a/th8GsoFuE=) 26: F7318C2CBA3E11ECA0543F6BC4F9AE02.roa (hash: MeS1DOyTdCwke/RbgIIQT3rBZNWyYB2mfEuyQ/lkLGY=) 27: 4AEE35608DB811E98ACC9F7EC4F9AE02.roa (hash: fkmpdzQWy7yxmakJ09stjz11PIAgWGUDm5gwI5DEe7k=) 28: 48ED106A8DB811E98ACC9F7EC4F9AE02.roa (hash: mkmvnGvUB9LKYbrwKSr+DiBXHGZP38l2ItEGjYEGTms=) 29: 453F8E988DB811E98ACC9F7EC4F9AE02.roa (hash: jQRT5PlFbI2u576tkmy6PzP4OP+SK4T1Hzx4zOkrIWw=) 30: 1BA16D001F8211EC8FC82E73C4F9AE02.roa (hash: DDC+5+VXBnfrx9wWnbESqssm0Yt82gNbLRVKOAlPMNQ=) 31: 49EECD288DB811E98ACC9F7EC4F9AE02.roa (hash: x7dEeBeojoDb2WMyQhh46vqt838katbavZyk3phE4cQ=) 32: 4495856A8DB811E98ACC9F7EC4F9AE02.roa (hash: a14/2406/c/Vc+e673jRH7rbdHirwb+sw7UAVsW6UA8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 13:09:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13718 (0x3596) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91697FA, serialNumber=9F82DBC9466312C5BA2E921279302400956A982A Validity Not Before: Apr 26 14:21:55 2025 GMT Not After : May 3 14:21:55 2025 GMT Subject: CN=680cec04-3756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:43:77:3c:e2:80:a6:fd:a7:7b:14:ae:33:e5: 1d:62:d5:03:66:39:6c:ef:8c:68:67:3b:d5:87:a8: b0:e3:8e:6f:c6:fd:7f:c2:22:84:60:bf:e3:81:b1: 10:b8:f2:03:0c:cc:aa:25:bf:e4:46:86:f9:a5:15: 4f:39:5c:71:be:7f:39:f9:47:56:88:29:f4:ae:81: a0:85:bc:e9:27:85:6e:c0:4a:88:d8:32:11:f8:11: 7d:2a:02:c8:00:aa:b9:38:22:ae:f9:70:ac:f3:58: a4:7e:2e:4d:c1:bf:92:33:cb:9c:75:a6:b5:02:4d: 53:4e:01:50:40:97:36:3b:fd:3e:6f:13:72:ed:40: cb:3c:51:bb:f5:99:fb:9a:97:e5:09:17:11:da:9b: 82:1d:46:48:94:15:77:7b:47:7a:68:8e:e8:da:85: a7:a3:2d:bd:15:49:50:a5:90:f7:20:11:46:35:c8: 2f:2d:94:80:f9:b2:e8:32:28:0f:56:cd:64:9b:93: 5d:63:00:35:18:03:31:97:94:bc:88:0b:24:fa:62: 5b:5a:5a:24:77:65:1c:a2:a6:23:86:8c:33:f8:bf: 20:2a:63:ca:4e:e4:26:ca:6c:3d:b5:e7:8f:1a:d4: b0:23:38:7f:4c:58:2c:b0:c4:91:c3:7b:ea:ca:e4: 95:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:A6:04:85:64:59:E8:84:CC:BF:DB:03:8A:86:63:03:42:BA:C5:6B X509v3 Authority Key Identifier: keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:62:2a:c8:1d:2a:84:ec:d0:c3:b2:c9:8a:16:6d:27:9b:f3: dd:32:94:f3:e0:b2:17:11:5f:78:14:59:96:20:bd:bb:56:51: 69:d9:1a:ad:6a:b6:f7:46:cb:d3:e5:70:19:12:7d:b9:f5:71: be:0f:b6:27:59:46:bf:c1:c5:21:7b:9b:e9:97:4b:61:e8:de: 5e:6d:ba:41:c8:07:9a:cb:31:7c:f4:a5:60:5d:bf:89:37:d3: 87:d8:1d:e5:c6:44:ff:20:12:fa:35:dc:2a:e6:68:66:0e:f0: 55:14:69:86:ac:e6:a8:17:82:a2:8c:4f:bd:04:81:06:39:6e: 06:5e:77:0d:3e:56:de:4b:3d:6d:6c:58:84:2c:ed:48:89:08: a8:74:36:07:ec:24:57:88:22:f0:d4:ab:8f:8e:59:bc:e2:5a: 2f:e7:da:0d:99:73:93:4c:fc:81:76:84:8e:72:98:94:a8:c8: 58:99:16:7a:7a:36:b5:83:21:b1:62:b9:f1:d7:34:a1:28:6d: 50:c1:f0:f6:ea:a9:fc:d8:f4:79:7c:c5:af:7c:da:ff:78:bb: c5:31:a5:37:56:72:12:ad:b1:56:50:78:92:b6:f2:ed:64:72: b0:95:7a:10:44:96:5d:37:63:83:92:73:da:21:2f:fb:c1:d8: 34:aa:a3:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk3RkExMTAvBgNVBAUTKDlGODJEQkM5NDY2MzEyQzVCQTJFOTIxMjc5MzAyNDAw OTU2QTk4MkEwHhcNMjUwNDI2MTQyMTU1WhcNMjUwNTAzMTQyMTU1WjAYMRYwFAYD VQQDEw02ODBjZWMwNC0zNzU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3EN3POKApv2nexSuM+UdYtUDZjls74xoZzvVh6iw445vxv1/wiKEYL/jgbEQ uPIDDMyqJb/kRob5pRVPOVxxvn85+UdWiCn0roGghbzpJ4VuwEqI2DIR+BF9KgLI AKq5OCKu+XCs81ikfi5Nwb+SM8ucdaa1Ak1TTgFQQJc2O/0+bxNy7UDLPFG79Zn7 mpflCRcR2puCHUZIlBV3e0d6aI7o2oWnoy29FUlQpZD3IBFGNcgvLZSA+bLoMigP Vs1km5NdYwA1GAMxl5S8iAsk+mJbWlokd2UcoqYjhowz+L8gKmPKTuQmymw9teeP GtSwIzh/TFgssMSRw3vqyuSVrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJqmBIVk WeiEzL/bA4qGYwNCusVrMB8GA1UdIwQYMBaAFJ+C28lGYxLFui6SEnkwJACVapgq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTdGQS8yN0Y4M0I3MDFE ODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9uNExieVVaakVzVzZMcElTZVRBa0FKVnFt Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL240TGJ5VVpqRXNXNkxwSVNlVEFrQUpWcW1Dby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTdGQS8yN0Y4M0I3MDFEODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9uNExieVVaakVz VzZMcElTZVRBa0FKVnFtQ28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmYirIHSqE7NDDssmKFm0nm/PdMpTz4LIXEV94FFmWIL27VlFp2Rqt arb3RsvT5XAZEn259XG+D7YnWUa/wcUhe5vpl0th6N5ebbpByAeayzF89KVgXb+J N9OH2B3lxkT/IBL6Ndwq5mhmDvBVFGmGrOaoF4KijE+9BIEGOW4GXncNPlbeSz1t bFiELO1IiQiodDYH7CRXiCLw1KuPjlm84lov59oNmXOTTPyBdoSOcpiUqMhYmRZ6 eja1gyGxYrnx1zShKG1QwfD26qn82PR5fMWvfNr/eLvFMaU3VnISrbFWUHiStvLt ZHKwlXoQRJZdN2ODknPaIS/7wdg0qqPk -----END CERTIFICATE-----Generated at Sat Apr 26 15:55:41 2025 by rpki-client on console.sobornost.net