$ rpki-client -vvf rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft File: 40gJvFtFT8eZSH_u2tcCEkAkYjo.mft (raw, json) Hash identifier: QoyL2G7oNFfo2lzjK+vvVlCB/+gcFK67r67JDTtWXrs= Subject key identifier: 00:54:53:AE:E8:B3:83:6D:88:6D:69:7D:35:23:4E:08:89:60:E2:11 Authority key identifier: E3:48:09:BC:5B:45:4F:C7:99:48:7F:EE:DA:D7:02:12:40:24:62:3A Certificate issuer: /CN=A91734C9/serialNumber=E34809BC5B454FC799487FEEDAD702124024623A Certificate serial: 0BB0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40gJvFtFT8eZSH_u2tcCEkAkYjo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft Manifest number: 0BA0 Signing time: Mon 28 Apr 2025 19:20:59 +0000 Manifest this update: Mon 28 Apr 2025 19:20:59 +0000 Manifest next update: Mon 05 May 2025 19:20:59 +0000 Files and hashes: 1: 40gJvFtFT8eZSH_u2tcCEkAkYjo.crl (hash: HkOd/8TcajjTQqhHCupoQyn93jaEhI408gchyXyzL9U=) 2: 783907BC225E11EA8BD18A62C4F9AE02.roa (hash: Myi9k4IrBdVLRWD9OtQqLIwtmIphhX+YDXYJBcNy/bw=) 3: 78CFD3CC225E11EA8BD18A62C4F9AE02.roa (hash: MyUFtJY4lLof0Zwtdhx7AIg2aYopA1OEBl/K6VizYaU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.crl rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40gJvFtFT8eZSH_u2tcCEkAkYjo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 19:20:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2992 (0xbb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91734C9, serialNumber=E34809BC5B454FC799487FEEDAD702124024623A Validity Not Before: Apr 28 19:20:59 2025 GMT Not After : May 5 19:20:59 2025 GMT Subject: CN=680fd51b-e521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:eb:53:91:aa:c5:ed:44:91:48:f6:1f:a7:89: 60:e6:15:2e:df:97:8f:c2:26:72:23:aa:a6:88:a9: 61:55:93:64:86:59:c3:16:d5:52:fa:88:5f:f6:1c: e5:94:c7:34:a2:e6:ac:8e:48:eb:f5:a7:f0:e4:ce: b2:97:f7:00:e7:d5:7f:47:c2:d7:c3:b9:cd:60:64: 7d:a7:2d:88:e5:4d:9d:26:46:af:fa:30:33:d3:a9: 57:7d:ed:4b:90:87:b2:bd:a5:c5:84:5b:b5:62:1c: 88:df:97:d3:15:94:2e:1d:1c:dd:4e:3e:10:5d:42: 1a:d9:f5:ce:17:8e:53:d8:89:1c:98:f9:3a:41:d0: c0:61:2d:bd:c0:27:fe:f4:95:c2:35:6c:e7:e5:78: 6a:16:d1:2d:00:84:61:b5:20:45:5e:28:3e:08:cc: 7c:48:a9:2d:fc:bb:41:6a:b8:7b:65:15:fd:fc:e9: cc:33:2e:7c:7c:25:e7:86:22:c4:84:2e:56:1f:c6: fd:2d:67:ed:ef:05:62:87:1e:71:15:f1:0e:fb:da: a4:17:bc:48:2b:1d:3d:a7:ab:1e:7f:cc:1b:e7:cc: c4:6b:62:17:1c:ef:43:4b:4a:e7:ab:0f:88:f2:53: 47:4b:7f:df:e2:c4:d3:52:70:55:64:09:8f:b4:94: 98:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:54:53:AE:E8:B3:83:6D:88:6D:69:7D:35:23:4E:08:89:60:E2:11 X509v3 Authority Key Identifier: keyid:E3:48:09:BC:5B:45:4F:C7:99:48:7F:EE:DA:D7:02:12:40:24:62:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40gJvFtFT8eZSH_u2tcCEkAkYjo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:24:f2:b8:10:f9:b9:92:32:7e:88:3a:77:f7:26:28:08:73: b8:4e:2e:8e:76:30:1e:3b:73:de:e1:c9:ca:9e:45:59:35:95: ea:bb:17:3c:bc:f4:dd:4e:fe:ef:b6:ff:45:7e:77:ef:c2:fc: 74:57:ef:a9:32:31:7c:be:1e:a3:99:3d:81:ac:4b:ee:12:23: c1:04:6d:9f:18:cb:3f:bf:24:c6:c9:65:d2:f6:e8:ef:74:cc: 9b:46:f5:ff:d7:da:b0:f1:0c:9b:0a:0d:1b:30:d4:5f:71:88: 5b:83:c1:65:a6:b3:63:0b:2f:5b:53:ec:20:0e:be:5c:8d:89: 8a:73:3b:8d:1f:ea:d2:fd:c2:8d:6a:96:b9:e1:62:52:0d:1c: 6a:7e:a0:ad:90:d2:57:75:f0:c3:d3:70:c3:2c:61:9a:fa:34: 14:4c:6d:05:00:45:c1:e1:7e:67:06:b8:43:be:77:be:b9:10: 46:de:7d:e4:df:e9:31:6f:2c:fe:d8:0e:cd:79:09:1d:97:87: 99:af:12:28:3e:9e:01:f1:69:58:10:5d:97:f4:8f:6d:a0:45: d0:35:38:7d:d1:17:d8:02:91:44:2b:2d:f6:7e:3f:9c:17:c2: b5:66:80:e3:e4:ed:6a:4e:20:eb:cc:82:fd:eb:c7:0f:61:2e: 4a:cb:ae:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC7AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzM0QzkxMTAvBgNVBAUTKEUzNDgwOUJDNUI0NTRGQzc5OTQ4N0ZFRURBRDcwMjEy NDAyNDYyM0EwHhcNMjUwNDI4MTkyMDU5WhcNMjUwNTA1MTkyMDU5WjAYMRYwFAYD VQQDEw02ODBmZDUxYi1lNTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz+tTkarF7USRSPYfp4lg5hUu35ePwiZyI6qmiKlhVZNkhlnDFtVS+ohf9hzl lMc0ouasjkjr9afw5M6yl/cA59V/R8LXw7nNYGR9py2I5U2dJkav+jAz06lXfe1L kIeyvaXFhFu1YhyI35fTFZQuHRzdTj4QXUIa2fXOF45T2IkcmPk6QdDAYS29wCf+ 9JXCNWzn5XhqFtEtAIRhtSBFXig+CMx8SKkt/LtBarh7ZRX9/OnMMy58fCXnhiLE hC5WH8b9LWft7wVihx5xFfEO+9qkF7xIKx09p6sef8wb58zEa2IXHO9DS0rnqw+I 8lNHS3/f4sTTUnBVZAmPtJSY3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFABUU67o s4NtiG1pfTUjTgiJYOIRMB8GA1UdIwQYMBaAFONICbxbRU/HmUh/7trXAhJAJGI6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzRDOS82NzM2MDI0QTIy NUQxMUVBQkFDRkM5NjBDNEY5QUUwMi80MGdKdkZ0RlQ4ZVpTSF91MnRjQ0VrQWtZ am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQwZ0p2RnRGVDhlWlNIX3UydGNDRWtBa1lqby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzRDOS82NzM2MDI0QTIyNUQxMUVBQkFDRkM5NjBDNEY5QUUwMi80MGdKdkZ0RlQ4 ZVpTSF91MnRjQ0VrQWtZam8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8JPK4EPm5kjJ+iDp39yYoCHO4Ti6OdjAeO3Pe4cnKnkVZNZXquxc8 vPTdTv7vtv9Ffnfvwvx0V++pMjF8vh6jmT2BrEvuEiPBBG2fGMs/vyTGyWXS9ujv dMybRvX/19qw8QybCg0bMNRfcYhbg8FlprNjCy9bU+wgDr5cjYmKczuNH+rS/cKN apa54WJSDRxqfqCtkNJXdfDD03DDLGGa+jQUTG0FAEXB4X5nBrhDvne+uRBG3n3k 3+kxbyz+2A7NeQkdl4eZrxIoPp4B8WlYEF2X9I9toEXQNTh90RfYApFEKy32fj+c F8K1ZoDj5O1qTiDrzIL968cPYS5Ky662 -----END CERTIFICATE-----Generated at Mon Apr 28 23:05:26 2025 by rpki-client on console.sobornost.net