$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.mft File: MtNTdDyP4vCOl7IuW2CavBTM_js.mft (raw, json) Hash identifier: ho6+4p6ok5DAPkX3gDq/mSFNlohhlZETvxhUl2W0rAE= Subject key identifier: 41:77:25:D3:F2:F4:23:21:C8:DA:7A:92:AD:56:C5:34:11:57:C1:8F Authority key identifier: 32:D3:53:74:3C:8F:E2:F0:8E:97:B2:2E:5B:60:9A:BC:14:CC:FE:3B Certificate issuer: /CN=A9179F64/serialNumber=32D353743C8FE2F08E97B22E5B609ABC14CCFE3B Certificate serial: A1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MtNTdDyP4vCOl7IuW2CavBTM_js.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.mft Manifest number: 94 Signing time: Mon 28 Apr 2025 05:17:32 +0000 Manifest this update: Mon 28 Apr 2025 05:17:32 +0000 Manifest next update: Mon 05 May 2025 05:17:32 +0000 Files and hashes: 1: MtNTdDyP4vCOl7IuW2CavBTM_js.crl (hash: yY4FFPAPQLiXWn33IZJpxVBYYJztsH8fyfT2n4tWH0M=) 2: 144D9AA823F011F0B0D6F263C4F9AE02.roa (hash: 8/Hd/HSfsJzaFCQ02un66M2YDgdginFixcaFn5JQidY=) 3: DB9E3242C8E811EF86365B2AC4F9AE02.roa (hash: v6pTRro113en+h2WsmtXqk2rxE6NwkgghVA0fGJU70E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.crl rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MtNTdDyP4vCOl7IuW2CavBTM_js.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161 (0xa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179F64, serialNumber=32D353743C8FE2F08E97B22E5B609ABC14CCFE3B Validity Not Before: Apr 28 05:17:32 2025 GMT Not After : May 5 05:17:32 2025 GMT Subject: CN=680f0f6c-c96a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:48:d0:6c:70:6e:c2:88:c4:72:1b:93:68:d3: b6:ef:d5:a7:60:8c:08:7c:eb:2d:3d:83:19:66:38: 6b:be:c2:89:1c:be:de:8b:fe:ac:f5:d1:0e:fc:1b: 26:ee:72:c2:fb:12:cc:d7:34:82:d8:1b:a0:f0:76: 5c:31:09:ab:f8:26:01:8d:88:95:44:b3:43:c1:fc: 7e:2c:40:87:39:6f:4a:a2:04:12:ec:cf:3f:81:ba: 65:c4:e6:0a:83:4f:50:0e:df:c1:26:80:ca:84:64: 4d:ed:53:0d:46:08:b8:7f:c0:63:ac:ac:33:2e:b5: 92:32:3c:5a:41:a8:55:cc:d3:7f:d6:65:5e:bf:29: 0f:85:5e:c8:bf:60:1d:f7:ed:af:e1:f6:8a:28:8f: 07:9a:c3:0f:bf:f4:db:fa:8d:26:0b:bf:b2:2b:40: 0f:b9:12:cf:18:d6:c1:4f:e6:88:75:bb:8c:6c:f8: 9a:a2:2d:a7:8c:c7:8b:ff:00:4b:71:46:af:14:5f: 7c:28:b6:3b:19:77:25:89:df:fb:e0:c4:f3:7a:ac: 04:10:68:c6:da:fb:b6:77:e5:0f:06:56:4f:98:46: da:c0:49:de:55:69:59:88:fd:4c:4b:eb:15:88:e3: aa:88:ab:0f:6d:a4:e0:fa:1d:61:8d:50:c1:d2:6d: a3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:77:25:D3:F2:F4:23:21:C8:DA:7A:92:AD:56:C5:34:11:57:C1:8F X509v3 Authority Key Identifier: keyid:32:D3:53:74:3C:8F:E2:F0:8E:97:B2:2E:5B:60:9A:BC:14:CC:FE:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MtNTdDyP4vCOl7IuW2CavBTM_js.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:05:06:32:38:03:9c:49:7c:7d:d6:0c:ba:e1:70:e6:e9:da: 62:34:00:a2:8a:f8:3f:b3:26:d5:41:8a:60:d7:17:d0:4d:03: 34:3f:a1:2f:4e:d5:91:91:06:b4:59:d8:1a:5b:cb:50:0c:78: 87:38:24:66:3b:51:ab:54:cb:66:aa:51:64:05:3f:13:41:59: 6d:71:57:07:a9:dd:69:49:76:5b:86:a9:68:e0:7f:1b:0c:7e: 6a:c8:a2:0e:41:49:0e:d1:47:ac:46:77:74:c2:50:cf:37:05: 22:63:75:3a:16:2e:19:e5:ef:22:9b:e9:0a:b1:fb:94:dc:24: 5e:62:a9:9d:fe:79:f3:14:4e:fb:76:2e:2c:e7:cb:62:0b:97: 97:4e:92:44:20:45:a3:52:d0:db:54:20:d5:83:41:5b:7c:8d: 3e:ad:6a:37:7e:5e:98:92:5f:a6:ed:70:8d:c5:f5:d5:dc:aa: 65:03:6d:30:6e:7b:88:4f:3d:08:ce:1d:70:23:6a:ba:c9:c7: 61:7a:49:8f:a6:18:9e:84:0c:23:a2:d9:6e:2d:57:43:03:33: ca:c3:50:1f:92:36:02:b4:48:1e:25:8e:94:c2:ac:a5:3f:b0: 0a:e5:fa:b0:2e:5b:5f:76:1c:f6:d2:ca:cb:86:76:f8:cb:66: 84:a4:d1:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlGNjQxMTAvBgNVBAUTKDMyRDM1Mzc0M0M4RkUyRjA4RTk3QjIyRTVCNjA5QUJD MTRDQ0ZFM0IwHhcNMjUwNDI4MDUxNzMyWhcNMjUwNTA1MDUxNzMyWjAYMRYwFAYD VQQDEw02ODBmMGY2Yy1jOTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzEjQbHBuwojEchuTaNO279WnYIwIfOstPYMZZjhrvsKJHL7ei/6s9dEO/Bsm 7nLC+xLM1zSC2Bug8HZcMQmr+CYBjYiVRLNDwfx+LECHOW9KogQS7M8/gbplxOYK g09QDt/BJoDKhGRN7VMNRgi4f8BjrKwzLrWSMjxaQahVzNN/1mVevykPhV7Iv2Ad 9+2v4faKKI8HmsMPv/Tb+o0mC7+yK0APuRLPGNbBT+aIdbuMbPiaoi2njMeL/wBL cUavFF98KLY7GXclid/74MTzeqwEEGjG2vu2d+UPBlZPmEbawEneVWlZiP1MS+sV iOOqiKsPbaTg+h1hjVDB0m2j2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEF3JdPy 9CMhyNp6kq1WxTQRV8GPMB8GA1UdIwQYMBaAFDLTU3Q8j+LwjpeyLltgmrwUzP47 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUY2NC83N0JGMDE5MjYy NEIxMUVGQUIxMjBGNEZDNEY5QUUwMi9NdE5UZER5UDR2Q09sN0l1VzJDYXZCVE1f anMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL010TlRkRHlQNHZDT2w3SXVXMkNhdkJUTV9qcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUY2NC83N0JGMDE5MjYyNEIxMUVGQUIxMjBGNEZDNEY5QUUwMi9NdE5UZER5UDR2 Q09sN0l1VzJDYXZCVE1fanMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBBQYyOAOcSXx91gy64XDm6dpiNACiivg/sybVQYpg1xfQTQM0P6Ev TtWRkQa0WdgaW8tQDHiHOCRmO1GrVMtmqlFkBT8TQVltcVcHqd1pSXZbhqlo4H8b DH5qyKIOQUkO0UesRnd0wlDPNwUiY3U6Fi4Z5e8im+kKsfuU3CReYqmd/nnzFE77 di4s58tiC5eXTpJEIEWjUtDbVCDVg0FbfI0+rWo3fl6Ykl+m7XCNxfXV3KplA20w bnuITz0Izh1wI2q6ycdhekmPphiehAwjotluLVdDAzPKw1AfkjYCtEgeJY6Uwqyl P7AK5fqwLltfdhz20srLhnb4y2aEpNHq -----END CERTIFICATE-----Generated at Mon Apr 28 08:25:36 2025 by rpki-client on console.sobornost.net