$ rpki-client -vvf rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.mft File: jdQUSFkXzUyAFnvaGdcklkawZyU.mft (raw, json) Hash identifier: zr3ZUmsrqtSRwEZPPS4TgZkQpX+oTHYvYbYsGACr+Us= Subject key identifier: AE:9F:4A:B5:30:8A:CA:92:FA:4C:0D:68:FC:F4:4F:D4:EE:EE:3A:3B Authority key identifier: 8D:D4:14:48:59:17:CD:4C:80:16:7B:DA:19:D7:24:96:46:B0:67:25 Certificate issuer: /CN=A91777B9/serialNumber=8DD414485917CD4C80167BDA19D7249646B06725 Certificate serial: 78 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jdQUSFkXzUyAFnvaGdcklkawZyU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.mft Manifest number: 76 Signing time: Sun 27 Apr 2025 05:38:58 +0000 Manifest this update: Sun 27 Apr 2025 05:38:57 +0000 Manifest next update: Sun 04 May 2025 05:38:57 +0000 Files and hashes: 1: jdQUSFkXzUyAFnvaGdcklkawZyU.crl (hash: Ux5S+t2lmBE4lTcllTj9WSBUkdqRGn9k46PWh+YMo1g=) 2: FF3D553675B711EF83FAAE42C4F9AE02.roa (hash: /HTBqf5H3Uz657hsatlKZqGr2vioW9ZJotjtVpnDq5Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.crl rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jdQUSFkXzUyAFnvaGdcklkawZyU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91777B9, serialNumber=8DD414485917CD4C80167BDA19D7249646B06725 Validity Not Before: Apr 27 05:38:57 2025 GMT Not After : May 4 05:38:57 2025 GMT Subject: CN=680dc2f2-348b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e5:90:be:ff:42:7b:38:0a:e3:c1:b9:42:b8: b3:4f:85:53:55:b3:56:cf:dd:bf:bb:ac:43:25:0e: 68:c0:54:a5:5c:df:45:07:75:4b:ec:01:89:d2:d4: 79:87:2e:b8:25:ee:d1:3d:70:c3:5e:af:e1:06:4c: 3b:2f:c2:96:22:15:99:01:cc:ab:d4:04:d0:2e:df: c4:72:af:94:b9:14:12:d7:bc:88:0d:53:ed:c1:51: 8e:19:aa:ee:ea:9d:88:c2:b1:42:fa:c8:2f:9e:10: fe:be:5d:cf:d7:f7:60:bc:2e:ec:41:ed:c3:ce:4e: 69:aa:1e:5c:18:93:b3:16:2b:35:ff:5f:17:17:cd: 39:ee:ce:39:7f:3f:3b:a5:1e:03:e6:1d:8d:be:9d: 5f:75:9b:62:da:5d:25:b5:81:60:35:43:fc:bd:b0: 59:d9:6b:d9:4a:cd:dc:72:47:69:89:4d:0d:05:ed: d2:70:23:a0:fa:79:32:d4:14:9f:f4:34:b6:4f:06: 00:0f:45:20:6b:c2:e7:f3:53:8c:0d:c3:cd:02:b5: 7b:ab:d7:a6:7b:46:ff:64:cf:09:32:61:9c:be:81: 87:87:2c:d8:c6:5b:97:af:22:6b:78:b6:a7:87:64: 1e:b8:9d:f9:48:a2:1a:ee:fd:6e:c3:bf:83:44:6d: c7:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:9F:4A:B5:30:8A:CA:92:FA:4C:0D:68:FC:F4:4F:D4:EE:EE:3A:3B X509v3 Authority Key Identifier: keyid:8D:D4:14:48:59:17:CD:4C:80:16:7B:DA:19:D7:24:96:46:B0:67:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jdQUSFkXzUyAFnvaGdcklkawZyU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:ba:df:98:f4:03:d0:6d:14:47:a0:7d:93:d8:c4:b9:f3:41: bd:77:6b:b3:7a:9f:cd:e9:ee:1a:53:b5:9a:d2:47:2e:a4:06: 6b:73:ed:62:88:83:e0:42:fe:73:68:24:e1:cc:4b:cb:19:6f: 99:af:a9:ca:fc:6d:79:08:f2:ba:eb:6b:ba:21:10:de:8d:28: c5:a7:6d:65:3a:b8:e2:d3:90:3c:cc:e1:4b:6e:b0:f2:3e:dd: 51:4e:a9:3b:10:d9:00:81:bb:01:70:66:2a:81:8b:e1:6a:61: 56:99:b2:7e:20:5c:d1:00:bc:aa:05:6f:38:21:e9:02:77:e9: a7:b4:16:60:62:d5:a8:cb:dd:ed:58:d1:c9:e7:ac:e1:4d:f6: 7c:56:44:ca:b7:ac:97:46:55:98:0a:ae:6b:c6:13:18:f5:dd: 96:d1:ca:19:e7:ed:ad:f1:d4:48:0c:c7:ce:38:23:4a:3f:4d: 40:08:84:6c:79:95:bc:fe:33:d0:4e:d1:95:3e:50:cf:cc:aa: a1:a6:cb:9b:26:68:59:48:c5:a5:5f:f4:25:0d:23:f9:2d:9e: da:2a:66:77:de:8c:39:1d:ae:6d:e8:49:db:00:ca:54:95:8f: 79:4f:2f:13:d6:85:e0:3d:92:de:fc:a7:2f:82:7e:c7:b3:29: 5d:4a:af:c7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NzdCOTExMC8GA1UEBRMoOERENDE0NDg1OTE3Q0Q0QzgwMTY3QkRBMTlENzI0OTY0 NkIwNjcyNTAeFw0yNTA0MjcwNTM4NTdaFw0yNTA1MDQwNTM4NTdaMBgxFjAUBgNV BAMTDTY4MGRjMmYyLTM0OGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC75ZC+/0J7OArjwblCuLNPhVNVs1bP3b+7rEMlDmjAVKVc30UHdUvsAYnS1HmH Lrgl7tE9cMNer+EGTDsvwpYiFZkBzKvUBNAu38Ryr5S5FBLXvIgNU+3BUY4Zqu7q nYjCsUL6yC+eEP6+Xc/X92C8LuxB7cPOTmmqHlwYk7MWKzX/XxcXzTnuzjl/Pzul HgPmHY2+nV91m2LaXSW1gWA1Q/y9sFnZa9lKzdxyR2mJTQ0F7dJwI6D6eTLUFJ/0 NLZPBgAPRSBrwufzU4wNw80CtXur16Z7Rv9kzwkyYZy+gYeHLNjGW5evImt4tqeH ZB64nflIohru/W7Dv4NEbcf/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrp9KtTCK ypL6TA1o/PRP1O7uOjswHwYDVR0jBBgwFoAUjdQUSFkXzUyAFnvaGdcklkawZyUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3N0I5L0QyN0M5MTVDNzVC NjExRUZCOEUyMTUxNEM0RjlBRTAyL2pkUVVTRmtYelV5QUZudmFHZGNrbGthd1p5 VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvamRRVVNGa1h6VXlBRm52YUdkY2tsa2F3WnlVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3 N0I5L0QyN0M5MTVDNzVCNjExRUZCOEUyMTUxNEM0RjlBRTAyL2pkUVVTRmtYelV5 QUZudmFHZGNrbGthd1p5VS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ6635j0A9BtFEegfZPYxLnzQb13a7N6n83p7hpTtZrSRy6kBmtz7WKI g+BC/nNoJOHMS8sZb5mvqcr8bXkI8rrra7ohEN6NKMWnbWU6uOLTkDzM4UtusPI+ 3VFOqTsQ2QCBuwFwZiqBi+FqYVaZsn4gXNEAvKoFbzgh6QJ36ae0FmBi1ajL3e1Y 0cnnrOFN9nxWRMq3rJdGVZgKrmvGExj13ZbRyhnn7a3x1EgMx844I0o/TUAIhGx5 lbz+M9BO0ZU+UM/MqqGmy5smaFlIxaVf9CUNI/ktntoqZnfejDkdrm3oSdsAylSV j3lPLxPWheA9kt78py+CfsezKV1Kr8c= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:49 2025 by rpki-client on console.sobornost.net