$ rpki-client -vvf rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft File: QSE7L18kKfwyjsP06V1YhkAv62k.mft (raw, json) Hash identifier: wWXId++Ayz055ude0jFVCGz+Ed6jESGpqTFQHBHf+wU= Subject key identifier: B5:75:5E:59:D5:59:E1:E9:2D:50:B2:56:FF:58:4A:E3:C6:6F:35:4B Authority key identifier: 41:21:3B:2F:5F:24:29:FC:32:8E:C3:F4:E9:5D:58:86:40:2F:EB:69 Certificate issuer: /CN=A91757CB/serialNumber=41213B2F5F2429FC328EC3F4E95D5886402FEB69 Certificate serial: D7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSE7L18kKfwyjsP06V1YhkAv62k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft Manifest number: CE Signing time: Sun 27 Apr 2025 04:39:09 +0000 Manifest this update: Sun 27 Apr 2025 04:39:09 +0000 Manifest next update: Sun 04 May 2025 04:39:09 +0000 Files and hashes: 1: QSE7L18kKfwyjsP06V1YhkAv62k.crl (hash: F5aLCwelaPzjJ6NV0K/JegrOha20Wafh/nPJPFKiyw4=) 2: 47142068221311EFB680F113C4F9AE02.roa (hash: Wz7+GyEz4KEH5axb8P5kr/PKoJv9dBdTnqoEdl36Fic=) 3: EE01A248F2FB11EE9AA9E24CC4F9AE02.roa (hash: u90GvXDC2nj38gPxwI7H6zVq1FrynP/V/Ah+aJjG8F8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.crl rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSE7L18kKfwyjsP06V1YhkAv62k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 215 (0xd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91757CB, serialNumber=41213B2F5F2429FC328EC3F4E95D5886402FEB69 Validity Not Before: Apr 27 04:39:09 2025 GMT Not After : May 4 04:39:09 2025 GMT Subject: CN=680db4ed-4bff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:4e:98:43:d7:d1:60:6b:19:6b:1f:93:01:f9: e1:c3:4f:52:94:c8:df:c1:39:55:84:4a:5f:ac:3d: d1:5d:9c:24:30:a9:63:96:5a:dc:1c:cf:c7:37:22: 58:7f:8c:6a:27:c4:12:87:d2:9b:17:25:b9:82:0f: ad:1e:92:6a:29:56:2b:ee:ac:d6:39:f1:f1:35:82: fb:bc:78:1f:dd:83:f0:80:44:ff:1f:01:a0:79:ef: bc:fa:09:39:45:26:c5:07:04:88:74:67:e0:70:ff: d9:43:49:6b:7f:0f:6a:01:67:8a:40:06:4f:22:23: 27:83:49:a3:09:dc:5c:8a:7d:e8:8f:62:02:d4:82: 93:23:0c:ca:4f:eb:91:d0:19:24:3d:83:14:cd:9c: fc:ab:a0:d8:f1:7d:2f:62:87:fd:c5:c6:7f:07:f4: 9f:97:41:94:a5:3d:a8:b1:1f:9d:86:db:f0:42:b5: f0:d9:32:d5:f3:dd:c7:e6:e6:b3:85:56:54:24:f8: be:4d:bb:c9:0c:6a:20:57:14:69:00:ba:c9:fe:88: 16:80:43:a1:9b:6c:46:2b:67:41:e4:5b:f2:94:c6: d1:8a:21:36:c1:9c:15:6f:fb:11:04:12:d5:d4:ea: e9:95:6a:cb:a5:40:57:0d:f9:74:23:90:a6:4e:61: f6:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:75:5E:59:D5:59:E1:E9:2D:50:B2:56:FF:58:4A:E3:C6:6F:35:4B X509v3 Authority Key Identifier: keyid:41:21:3B:2F:5F:24:29:FC:32:8E:C3:F4:E9:5D:58:86:40:2F:EB:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSE7L18kKfwyjsP06V1YhkAv62k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:aa:3b:70:27:17:3c:c0:f8:6e:a7:9f:6c:ef:da:1e:08:68: 5a:36:a4:3c:78:43:67:fb:5a:95:bd:6c:ad:fe:d5:74:8c:08: 86:8e:6c:8c:82:ba:3b:dc:12:b1:46:62:27:f1:89:de:13:20: a1:2f:0e:99:0e:0e:2a:83:7e:5a:73:43:c4:95:a5:3c:a1:f7: d5:e6:a1:03:a1:66:b0:05:5d:e7:ae:3d:36:72:23:45:07:b1: fc:9f:cd:bd:b6:e1:aa:5c:76:80:a7:4f:9a:d0:95:da:d0:24: ff:84:24:d8:4a:24:1d:9d:13:e4:5e:fd:c6:93:80:74:e9:30: 5e:1e:8a:df:c3:c5:07:09:10:3b:b1:a5:d8:7d:9e:63:eb:d8: de:e6:dd:3b:14:f8:c0:e7:36:8a:17:da:69:bc:fd:b1:7d:8f: 11:c6:60:77:31:aa:2d:ce:67:0e:c9:63:f7:64:fe:e7:4e:6a: 91:c1:89:a7:a2:f2:6a:81:dd:4c:53:c6:89:bb:9f:cf:1e:73: 08:dd:f6:14:78:31:d3:f7:f0:37:00:aa:a1:42:6f:89:07:d7: 21:b8:8c:25:b6:bd:e2:03:92:69:b9:8e:a7:52:fe:b0:91:79: 69:28:56:7b:10:b6:70:6f:f9:7b:33:21:5e:01:e6:c1:39:24: 16:cb:5b:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU3Q0IxMTAvBgNVBAUTKDQxMjEzQjJGNUYyNDI5RkMzMjhFQzNGNEU5NUQ1ODg2 NDAyRkVCNjkwHhcNMjUwNDI3MDQzOTA5WhcNMjUwNTA0MDQzOTA5WjAYMRYwFAYD VQQDEw02ODBkYjRlZC00YmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9U6YQ9fRYGsZax+TAfnhw09SlMjfwTlVhEpfrD3RXZwkMKljllrcHM/HNyJY f4xqJ8QSh9KbFyW5gg+tHpJqKVYr7qzWOfHxNYL7vHgf3YPwgET/HwGgee+8+gk5 RSbFBwSIdGfgcP/ZQ0lrfw9qAWeKQAZPIiMng0mjCdxcin3oj2IC1IKTIwzKT+uR 0BkkPYMUzZz8q6DY8X0vYof9xcZ/B/Sfl0GUpT2osR+dhtvwQrXw2TLV893H5uaz hVZUJPi+TbvJDGogVxRpALrJ/ogWgEOhm2xGK2dB5FvylMbRiiE2wZwVb/sRBBLV 1OrplWrLpUBXDfl0I5CmTmH24QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLV1XlnV WeHpLVCyVv9YSuPGbzVLMB8GA1UdIwQYMBaAFEEhOy9fJCn8Mo7D9OldWIZAL+tp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTdDQi80NTlCMEM2NEYy RjgxMUVFQTM1MDY3MzhDNEY5QUUwMi9RU0U3TDE4a0tmd3lqc1AwNlYxWWhrQXY2 MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FTRTdMMThrS2Z3eWpzUDA2VjFZaGtBdjYyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTdDQi80NTlCMEM2NEYyRjgxMUVFQTM1MDY3MzhDNEY5QUUwMi9RU0U3TDE4a0tm d3lqc1AwNlYxWWhrQXY2MmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuqjtwJxc8wPhup59s79oeCGhaNqQ8eENn+1qVvWyt/tV0jAiGjmyM gro73BKxRmIn8YneEyChLw6ZDg4qg35ac0PElaU8offV5qEDoWawBV3nrj02ciNF B7H8n829tuGqXHaAp0+a0JXa0CT/hCTYSiQdnRPkXv3Gk4B06TBeHorfw8UHCRA7 saXYfZ5j69je5t07FPjA5zaKF9ppvP2xfY8RxmB3MaotzmcOyWP3ZP7nTmqRwYmn ovJqgd1MU8aJu5/PHnMI3fYUeDHT9/A3AKqhQm+JB9chuIwltr3iA5JpuY6nUv6w kXlpKFZ7ELZwb/l7MyFeAebBOSQWy1sM -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:49 2025 by rpki-client on console.sobornost.net