$ rpki-client -vvf rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft File: u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft (raw, json) Hash identifier: tIyf+6fCaUgkbfjo3P2+KvKFzC4ChBQIa6qDPJwifY8= Subject key identifier: 9B:BC:C9:A9:26:8C:7E:32:FB:BE:F7:9F:FB:91:CC:B7:DB:6C:60:77 Authority key identifier: BB:50:5D:FF:32:EC:D4:92:BF:1E:FF:7F:E3:94:F1:28:90:AA:67:34 Certificate issuer: /CN=A91836DB/serialNumber=BB505DFF32ECD492BF1EFF7FE394F12890AA6734 Certificate serial: 2C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft Manifest number: 2B Signing time: Sun 27 Apr 2025 06:31:59 +0000 Manifest this update: Sun 27 Apr 2025 06:31:59 +0000 Manifest next update: Sun 04 May 2025 06:31:59 +0000 Files and hashes: 1: u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.crl (hash: rV4sJ49REfh43KPyOQYplM0shkRfnKFpszO6c2zxa9o=) 2: C7001B70E45E11EFA2243E47C4F9AE02.roa (hash: wGQDHFlAfYrGUZehEya3kdO0mpkCJUDStwU2YZOiDKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.crl rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91836DB, serialNumber=BB505DFF32ECD492BF1EFF7FE394F12890AA6734 Validity Not Before: Apr 27 06:31:59 2025 GMT Not After : May 4 06:31:59 2025 GMT Subject: CN=680dcf5f-e424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d7:01:24:7e:82:53:b3:06:83:fc:a9:4c:0c: aa:1d:b3:51:67:8c:85:f6:b1:51:cc:8f:9b:2d:08: ab:41:8c:13:df:ad:42:53:28:01:6f:f3:92:77:98: 60:4d:22:b5:24:2f:c3:ea:01:7c:d2:7f:02:b2:28: 32:0c:c1:e4:14:fc:8d:34:37:32:b8:dd:9c:49:17: 4e:90:cf:80:1a:7e:61:3e:8e:d7:72:0f:82:f1:cb: 74:ea:0e:d9:a1:03:78:2a:10:f8:5e:73:cf:24:2a: 65:f0:a5:13:66:b3:29:b2:00:bc:5c:c0:7a:be:9f: 2e:06:82:10:1a:77:c2:34:1d:86:96:7a:13:c7:5a: fc:b4:e0:d3:f2:29:d6:7a:3a:49:6c:53:d0:3a:be: 7a:09:0d:11:7a:d1:07:d1:86:05:1d:3d:74:0f:88: 6c:c2:69:2d:24:93:70:8e:54:51:1f:bd:31:54:76: 4b:71:60:75:68:6a:54:62:7e:8b:de:e5:d7:76:86: 80:0b:a7:46:b8:e8:9a:3d:14:52:1b:3f:d4:9b:36: bc:29:6f:af:88:03:1c:f9:f7:e7:f2:4f:1d:7e:93: 75:45:83:25:be:86:59:59:5c:56:f1:6c:0f:a7:74: 34:a9:47:42:53:d9:8b:5c:6b:ed:a3:2d:f7:78:e2: 21:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:BC:C9:A9:26:8C:7E:32:FB:BE:F7:9F:FB:91:CC:B7:DB:6C:60:77 X509v3 Authority Key Identifier: keyid:BB:50:5D:FF:32:EC:D4:92:BF:1E:FF:7F:E3:94:F1:28:90:AA:67:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:4b:dd:34:dd:f5:7d:c2:66:ff:70:65:a5:aa:bf:e0:9f:9b: 77:c7:c6:52:da:c6:87:81:54:f1:f2:28:88:55:a3:56:2e:2f: ef:0c:f0:e1:3c:04:6a:2a:29:02:f0:cd:49:90:2e:ef:ca:6c: 1f:5e:41:d5:12:05:d5:32:3a:ec:2d:21:b1:40:f1:ee:16:4a: 35:a8:e0:66:40:15:c3:b9:db:6c:7b:ff:a5:79:0f:b3:d8:16: 22:49:af:4e:e1:65:24:03:be:9f:2e:d3:c2:78:e0:53:a9:33: 0a:5b:1e:db:eb:49:81:98:1d:0b:7b:60:bc:ec:d8:c8:26:9a: a5:e3:b4:ee:80:7d:d8:f2:4b:55:6e:76:d4:ca:7d:d7:85:5e: 39:40:76:a3:5d:60:2e:5c:80:2b:be:96:15:09:2e:26:d0:a3: c9:68:3b:5b:d4:1e:42:02:7e:7f:83:77:88:47:b8:c1:ed:d2: fe:ef:15:ae:91:21:3c:05:1f:4b:40:52:84:1f:38:ff:5d:e6: 7a:28:27:ce:c9:c5:07:dd:ab:d9:3d:bf:0b:db:d2:0a:e2:d3: bb:90:18:70:26:b7:95:c8:f3:bc:89:76:ed:0a:51:99:6f:a0: 63:11:1b:4d:aa:dd:64:cb:3c:cb:c3:14:dd:7a:3a:37:8b:7a: ff:e0:c6:a7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MzZEQjExMC8GA1UEBRMoQkI1MDVERkYzMkVDRDQ5MkJGMUVGRjdGRTM5NEYxMjg5 MEFBNjczNDAeFw0yNTA0MjcwNjMxNTlaFw0yNTA1MDQwNjMxNTlaMBgxFjAUBgNV BAMTDTY4MGRjZjVmLWU0MjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDC1wEkfoJTswaD/KlMDKods1FnjIX2sVHMj5stCKtBjBPfrUJTKAFv85J3mGBN IrUkL8PqAXzSfwKyKDIMweQU/I00NzK43ZxJF06Qz4AafmE+jtdyD4Lxy3TqDtmh A3gqEPhec88kKmXwpRNmsymyALxcwHq+ny4GghAad8I0HYaWehPHWvy04NPyKdZ6 OklsU9A6vnoJDRF60QfRhgUdPXQPiGzCaS0kk3COVFEfvTFUdktxYHVoalRifove 5dd2hoALp0a46Jo9FFIbP9SbNrwpb6+IAxz59+fyTx1+k3VFgyW+hllZXFbxbA+n dDSpR0JT2Ytca+2jLfd44iGDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUm7zJqSaM fjL7vvef+5HMt9tsYHcwHwYDVR0jBBgwFoAUu1Bd/zLs1JK/Hv9/45TxKJCqZzQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgzNkRCLzUxQkUwMTI0RTQ1 RTExRUZBMTU2Mjg0NkM0RjlBRTAyL3UxQmRfekxzMUpLX0h2OV80NVR4S0pDcVp6 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdTFCZF96THMxSktfSHY5XzQ1VHhLSkNxWnpRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgz NkRCLzUxQkUwMTI0RTQ1RTExRUZBMTU2Mjg0NkM0RjlBRTAyL3UxQmRfekxzMUpL X0h2OV80NVR4S0pDcVp6US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKpL3TTd9X3CZv9wZaWqv+Cfm3fHxlLaxoeBVPHyKIhVo1YuL+8M8OE8 BGoqKQLwzUmQLu/KbB9eQdUSBdUyOuwtIbFA8e4WSjWo4GZAFcO522x7/6V5D7PY FiJJr07hZSQDvp8u08J44FOpMwpbHtvrSYGYHQt7YLzs2MgmmqXjtO6AfdjyS1Vu dtTKfdeFXjlAdqNdYC5cgCu+lhUJLibQo8loO1vUHkICfn+Dd4hHuMHt0v7vFa6R ITwFH0tAUoQfOP9d5nooJ87JxQfdq9k9vwvb0gri07uQGHAmt5XI87yJdu0KUZlv oGMRG02q3WTLPMvDFN16OjeLev/gxqc= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:50 2025 by rpki-client on console.sobornost.net