$ rpki-client -vvf rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.mft File: F2vOFchi1HunYKH2ZTj4HVxJO4E.mft (raw, json) Hash identifier: Rakw9OYOGYd/vA0wTljuCjFbRukQCZjebtzfDfxzvRY= Subject key identifier: 2F:15:EA:02:8F:78:81:25:72:B9:9D:1A:01:69:E7:F3:AB:9B:58:B8 Authority key identifier: 17:6B:CE:15:C8:62:D4:7B:A7:60:A1:F6:65:38:F8:1D:5C:49:3B:81 Certificate issuer: /CN=A91706E4/serialNumber=176BCE15C862D47BA760A1F66538F81D5C493B81 Certificate serial: 53 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F2vOFchi1HunYKH2ZTj4HVxJO4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.mft Manifest number: 52 Signing time: Fri 25 Apr 2025 06:14:01 +0000 Manifest this update: Fri 25 Apr 2025 06:14:01 +0000 Manifest next update: Fri 02 May 2025 06:14:01 +0000 Files and hashes: 1: F2vOFchi1HunYKH2ZTj4HVxJO4E.crl (hash: qmmsncaFjGbQmtFGdskOb41f4ISF7/FkHnt6q9QZyfg=) 2: 2CE10886A68511EFB0CF9981C4F9AE02.roa (hash: veK+ihHT7rgGehPtR5m7GK/hbNWI81sjRNiKcGQwWGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.crl rsync://rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F2vOFchi1HunYKH2ZTj4HVxJO4E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91706E4, serialNumber=176BCE15C862D47BA760A1F66538F81D5C493B81 Validity Not Before: Apr 25 06:14:01 2025 GMT Not After : May 2 06:14:01 2025 GMT Subject: CN=680b2829-389c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:58:44:d7:46:b5:3b:69:df:44:b8:07:4d:89: 38:8e:c0:2c:b8:06:e8:80:ed:f3:b5:ed:ec:b9:74: 78:7c:a0:e1:86:67:7c:5c:88:1a:88:52:8c:9d:ab: 14:ef:f5:05:76:92:83:31:65:10:73:d0:7a:8c:42: 17:38:96:f9:ea:13:b7:2f:2e:22:f9:f1:ec:9b:65: 1d:97:dc:33:8b:6a:59:18:a1:a9:88:74:fb:9c:fa: 60:df:fb:96:e6:a3:96:b1:cd:dd:64:33:0f:cb:f9: ae:ce:7e:61:79:79:32:09:9d:a4:af:4a:3d:de:12: 7c:7c:3a:3f:ba:af:f8:ba:84:51:a4:36:ec:10:1c: 40:7d:eb:37:f2:bd:d4:4f:74:bb:ca:c1:2a:79:43: 3d:0c:f3:3b:97:a4:94:d2:0f:a2:75:38:e5:77:91: 3d:97:cb:0d:be:d2:d2:05:9e:88:68:8f:61:2e:82: e0:0e:7f:98:46:25:0f:82:fb:8a:41:8c:8c:9c:9e: cb:0e:33:94:f5:89:89:c4:73:bf:51:77:ba:bc:30: bd:b4:2f:8b:43:0b:2a:30:f0:2d:d6:be:0c:3c:4e: a2:a9:24:d9:46:db:c0:af:73:4f:f5:48:6f:58:12: db:c3:77:f7:08:ba:e0:24:31:ec:8a:a9:dc:17:2c: 6d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:15:EA:02:8F:78:81:25:72:B9:9D:1A:01:69:E7:F3:AB:9B:58:B8 X509v3 Authority Key Identifier: keyid:17:6B:CE:15:C8:62:D4:7B:A7:60:A1:F6:65:38:F8:1D:5C:49:3B:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F2vOFchi1HunYKH2ZTj4HVxJO4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:52:0d:2f:60:db:ec:90:47:68:ed:9b:27:84:34:cb:3c:2e: 3b:af:ee:6e:31:17:16:e7:bb:c6:cd:24:0e:5a:c6:f5:30:78: 90:78:09:84:6f:dc:1c:30:e7:ce:6c:03:7d:91:41:43:db:cb: ba:cd:99:bb:89:86:69:cc:04:15:48:88:2f:6b:70:fa:02:97: 16:4d:c6:ab:b6:bd:14:99:3c:86:34:0d:62:de:2e:5c:e3:41: ec:c9:30:02:9e:7b:5f:f7:ba:74:20:db:a4:a2:07:cc:b9:bb: ed:4b:40:bb:c4:dc:fb:6a:f5:5a:2e:27:4c:29:d1:61:ff:74: 2a:fa:c9:b1:c8:cc:b9:a5:4c:30:ba:27:8c:9a:a0:7e:44:2f: 7c:d4:56:60:cd:48:59:50:2b:1f:94:da:88:93:67:8d:82:d9: 2a:13:cd:15:bb:69:09:25:45:d2:91:89:bf:da:3f:f2:f9:0c: 56:2a:a6:96:76:f0:5a:f3:da:08:b7:19:0c:2f:c9:d7:82:5f: 05:e9:09:3f:97:a1:d1:54:ce:a5:3c:c2:3a:b2:c3:6c:9c:0b: 32:54:87:8e:3e:55:2d:f0:42:a5:26:45:df:80:fd:83:2e:01: 12:a6:f2:ba:66:bb:94:20:68:8b:bb:ce:d5:7a:b3:0e:5e:9e: d4:b1:a5:2c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MDZFNDExMC8GA1UEBRMoMTc2QkNFMTVDODYyRDQ3QkE3NjBBMUY2NjUzOEY4MUQ1 QzQ5M0I4MTAeFw0yNTA0MjUwNjE0MDFaFw0yNTA1MDIwNjE0MDFaMBgxFjAUBgNV BAMTDTY4MGIyODI5LTM4OWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDkWETXRrU7ad9EuAdNiTiOwCy4BuiA7fO17ey5dHh8oOGGZ3xciBqIUoydqxTv 9QV2koMxZRBz0HqMQhc4lvnqE7cvLiL58eybZR2X3DOLalkYoamIdPuc+mDf+5bm o5axzd1kMw/L+a7OfmF5eTIJnaSvSj3eEnx8Oj+6r/i6hFGkNuwQHEB96zfyvdRP dLvKwSp5Qz0M8zuXpJTSD6J1OOV3kT2Xyw2+0tIFnohoj2EuguAOf5hGJQ+C+4pB jIycnssOM5T1iYnEc79Rd7q8ML20L4tDCyow8C3Wvgw8TqKpJNlG28Cvc0/1SG9Y EtvDd/cIuuAkMeyKqdwXLG0VAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULxXqAo94 gSVyuZ0aAWnn86ubWLgwHwYDVR0jBBgwFoAUF2vOFchi1HunYKH2ZTj4HVxJO4Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwNkU0LzMyRTk5M0MwQTY4 NDExRUY4RjVFRDM3RkM0RjlBRTAyL0Yydk9GY2hpMUh1bllLSDJaVGo0SFZ4Sk80 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRjJ2T0ZjaGkxSHVuWUtIMlpUajRIVnhKTzRFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcw NkU0LzMyRTk5M0MwQTY4NDExRUY4RjVFRDM3RkM0RjlBRTAyL0Yydk9GY2hpMUh1 bllLSDJaVGo0SFZ4Sk80RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKRSDS9g2+yQR2jtmyeENMs8Ljuv7m4xFxbnu8bNJA5axvUweJB4CYRv 3Bww585sA32RQUPby7rNmbuJhmnMBBVIiC9rcPoClxZNxqu2vRSZPIY0DWLeLlzj QezJMAKee1/3unQg26SiB8y5u+1LQLvE3Ptq9VouJ0wp0WH/dCr6ybHIzLmlTDC6 J4yaoH5EL3zUVmDNSFlQKx+U2oiTZ42C2SoTzRW7aQklRdKRib/aP/L5DFYqppZ2 8Frz2gi3GQwvydeCXwXpCT+XodFUzqU8wjqyw2ycCzJUh44+VS3wQqUmRd+A/YMu ARKm8rpmu5QgaIu7ztV6sw5entSxpSw= -----END CERTIFICATE-----Generated at Fri Apr 25 08:23:58 2025 by rpki-client on console.sobornost.net