$ rpki-client -vvf rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft File: g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft (raw, json) Hash identifier: wE6eqvAD1UQX1+o4QIkiWcQuzJ/r5vYgqiooHmHf6qw= Subject key identifier: 91:7A:F9:91:3C:8E:4B:1D:44:7E:08:5C:2F:7F:74:C4:2A:8A:47:25 Authority key identifier: 83:D9:6F:1D:EA:72:A9:9D:23:4B:44:56:D6:F6:67:5D:C7:E6:06:1E Certificate issuer: /CN=A91756B7/serialNumber=83D96F1DEA72A99D234B4456D6F6675DC7E6061E Certificate serial: 0720 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft Manifest number: 06A4 Signing time: Sat 26 Apr 2025 22:24:53 +0000 Manifest this update: Sat 26 Apr 2025 22:24:53 +0000 Manifest next update: Sat 03 May 2025 22:24:53 +0000 Files and hashes: 1: g9lvHepyqZ0jS0RW1vZnXcfmBh4.crl (hash: ex6AQWO436V3+VdM7D6lLdef/xHfWVQMlgwMT9GPrfM=) 2: 756E0BBCEAE711EE88CD8641C4F9AE02.roa (hash: XGyaR0ustoTHYGTHylMLu/5dtoppDHHQmGzCG+ndx/Q=) 3: D613984822CB11F09C084A4BC4F9AE02.roa (hash: z7hyvJBiLu2Vv2ed166vCckEPOGn8EvD+mMijkp9tCA=) 4: 993EAAD4522911EFA600C035C4F9AE02.roa (hash: FlAdyp5eoMvMr4EUAvrOqk0AMOfz/t2ORscVMWvVvIs=) 5: B22F9AE422CB11F0AE91F34AC4F9AE02.roa (hash: kOiZm+wGAmNTz2Sc7yxOPftfiGBDLaKKzE10mCtdyyY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.crl rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 22:24:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1824 (0x720) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91756B7, serialNumber=83D96F1DEA72A99D234B4456D6F6675DC7E6061E Validity Not Before: Apr 26 22:24:53 2025 GMT Not After : May 3 22:24:53 2025 GMT Subject: CN=680d5d35-31fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:46:8e:11:90:83:9b:a4:55:80:02:87:1b:3c: 4d:dd:8f:2e:e3:8d:b6:5c:04:36:82:2d:1f:19:f6: 7a:ab:42:ae:5d:36:ed:f1:43:65:5f:72:dd:f0:f9: ce:e3:b8:03:12:66:be:e5:c7:c4:a4:e3:5f:d0:df: da:81:fc:44:bc:45:be:5a:df:24:26:54:df:50:bb: c2:52:7e:5c:75:8c:05:5a:d0:b9:11:65:fc:78:3d: 08:4e:9a:38:0e:ff:87:68:c5:18:14:3f:af:9f:71: 07:e3:bd:d5:93:d4:c1:eb:06:f1:bf:0a:ee:13:8c: 28:1b:d8:8f:aa:e1:96:01:6e:40:09:28:e3:84:28: 68:aa:2a:84:06:d5:99:79:2e:ce:37:c0:df:7e:f9: cb:03:e2:cd:e4:aa:bd:5d:d1:6e:4c:58:e1:12:cb: ae:e3:50:b6:dc:ea:46:76:e5:15:d0:24:c8:92:0d: b2:03:f8:47:5f:17:69:b1:9b:77:e3:20:93:61:75: ac:9f:85:2c:11:9f:3e:b5:78:45:5a:47:30:90:2e: f3:c8:b4:af:2c:05:e8:76:bb:c2:8d:c6:79:d8:99: 8d:13:d5:7a:9c:11:af:ff:f1:95:b7:61:9e:c7:cb: 6e:f6:c4:0d:f6:52:bb:36:18:5a:30:64:06:dc:7e: 76:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:7A:F9:91:3C:8E:4B:1D:44:7E:08:5C:2F:7F:74:C4:2A:8A:47:25 X509v3 Authority Key Identifier: keyid:83:D9:6F:1D:EA:72:A9:9D:23:4B:44:56:D6:F6:67:5D:C7:E6:06:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:69:5d:81:03:47:35:f4:3b:bd:3f:a8:9d:7e:ca:1d:76:a9: 5f:1e:2b:d5:07:f4:84:8a:a6:69:60:3f:8d:b3:60:ad:67:48: f9:0f:ad:10:34:8d:e2:0b:6e:63:b0:20:bd:3b:55:7a:16:8d: ab:d2:3e:7c:57:f5:0d:2a:2f:a8:38:06:ba:fc:76:9a:5c:8a: 47:65:50:a5:5c:ec:db:1d:b8:d2:b7:df:95:1c:5e:d1:d0:d3: 0c:c7:4f:08:32:ff:a5:2c:d6:c2:16:e0:6e:78:d1:d8:e1:c3: 61:d8:fa:49:4d:b1:45:98:6f:7c:ea:0f:38:64:b6:5b:44:af: 3c:19:ca:4c:8e:7c:d9:fc:ff:a5:85:81:66:5f:9f:44:6f:d4: 84:94:38:22:ce:c3:4d:84:00:af:c4:56:6d:ca:a9:60:be:3d: 4e:b2:35:87:fa:87:c4:93:9d:be:71:2d:8b:d3:3f:37:70:3c: 0d:b1:44:4d:9f:53:9e:cd:6c:a8:3f:56:52:34:b7:96:e9:f0: 6c:e4:d6:7d:08:6a:b3:d3:85:a9:5c:20:fe:42:4e:c9:d2:5e: 4e:9f:6a:c1:b9:ce:15:ef:44:18:10:87:3d:8d:c7:11:75:9d: cd:ca:dc:ea:b9:51:69:d3:44:ca:65:6a:67:ce:43:e9:79:67: 18:ba:01:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICByAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU2QjcxMTAvBgNVBAUTKDgzRDk2RjFERUE3MkE5OUQyMzRCNDQ1NkQ2RjY2NzVE QzdFNjA2MUUwHhcNMjUwNDI2MjIyNDUzWhcNMjUwNTAzMjIyNDUzWjAYMRYwFAYD VQQDEw02ODBkNWQzNS0zMWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA80aOEZCDm6RVgAKHGzxN3Y8u4422XAQ2gi0fGfZ6q0KuXTbt8UNlX3Ld8PnO 47gDEma+5cfEpONf0N/agfxEvEW+Wt8kJlTfULvCUn5cdYwFWtC5EWX8eD0ITpo4 Dv+HaMUYFD+vn3EH473Vk9TB6wbxvwruE4woG9iPquGWAW5ACSjjhChoqiqEBtWZ eS7ON8DffvnLA+LN5Kq9XdFuTFjhEsuu41C23OpGduUV0CTIkg2yA/hHXxdpsZt3 4yCTYXWsn4UsEZ8+tXhFWkcwkC7zyLSvLAXodrvCjcZ52JmNE9V6nBGv//GVt2Ge x8tu9sQN9lK7NhhaMGQG3H52+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJF6+ZE8 jksdRH4IXC9/dMQqikclMB8GA1UdIwQYMBaAFIPZbx3qcqmdI0tEVtb2Z13H5gYe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTZCNy85NUVGN0RCQTk2 N0QxMUVCQURENTBEMkNDNEY5QUUwMi9nOWx2SGVweXFaMGpTMFJXMXZablhjZm1C aDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c5bHZIZXB5cVowalMwUlcxdlpuWGNmbUJoNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTZCNy85NUVGN0RCQTk2N0QxMUVCQURENTBEMkNDNEY5QUUwMi9nOWx2SGVweXFa MGpTMFJXMXZablhjZm1CaDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZaV2BA0c19Du9P6idfsoddqlfHivVB/SEiqZpYD+Ns2CtZ0j5D60Q NI3iC25jsCC9O1V6Fo2r0j58V/UNKi+oOAa6/HaaXIpHZVClXOzbHbjSt9+VHF7R 0NMMx08IMv+lLNbCFuBueNHY4cNh2PpJTbFFmG986g84ZLZbRK88GcpMjnzZ/P+l hYFmX59Eb9SElDgizsNNhACvxFZtyqlgvj1OsjWH+ofEk52+cS2L0z83cDwNsURN n1OezWyoP1ZSNLeW6fBs5NZ9CGqz04WpXCD+Qk7J0l5On2rBuc4V70QYEIc9jccR dZ3NytzquVFp00TKZWpnzkPpeWcYugFR -----END CERTIFICATE-----Generated at Sun Apr 27 05:42:08 2025 by rpki-client on console.sobornost.net