$ rpki-client -vvf rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft File: Q2NMcBuh8e_Oj1aqatHbKUWh258.mft (raw, json) Hash identifier: KxKg/sAR6dNEdz+pmGxm3+Ok15fCsueErj3hgdnzplw= Subject key identifier: B7:14:24:61:5B:9B:C1:FB:61:48:2E:FC:05:CD:66:7A:0D:93:3B:53 Authority key identifier: 43:63:4C:70:1B:A1:F1:EF:CE:8F:56:AA:6A:D1:DB:29:45:A1:DB:9F Certificate issuer: /CN=A918549C/serialNumber=43634C701BA1F1EFCE8F56AA6AD1DB2945A1DB9F Certificate serial: 93 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q2NMcBuh8e_Oj1aqatHbKUWh258.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft Manifest number: 91 Signing time: Sun 27 Apr 2025 05:18:00 +0000 Manifest this update: Sun 27 Apr 2025 05:17:59 +0000 Manifest next update: Sun 04 May 2025 05:17:59 +0000 Files and hashes: 1: Q2NMcBuh8e_Oj1aqatHbKUWh258.crl (hash: tBy49hQvzYDbRATST/7vRAmgc+GU8SSrjeKleSc6zDs=) 2: 9C6F77784A3211EFBDBCEB2FC4F9AE02.roa (hash: VtLgFQFuvZQFqc3/1iLIm4m/GkaEOorvnwwczfuLsfc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.crl rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q2NMcBuh8e_Oj1aqatHbKUWh258.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 147 (0x93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918549C, serialNumber=43634C701BA1F1EFCE8F56AA6AD1DB2945A1DB9F Validity Not Before: Apr 27 05:17:59 2025 GMT Not After : May 4 05:17:59 2025 GMT Subject: CN=680dbe08-9331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:f3:f0:28:22:6c:c0:ea:e7:46:e4:6c:99:90: be:45:66:4e:96:67:bb:bd:b0:09:d6:1a:b5:6d:6b: bc:33:c2:14:23:92:65:48:f5:43:af:0e:75:cf:da: 87:c7:e1:27:df:12:90:f7:33:af:0e:8e:72:c7:b0: b5:88:c5:6a:4c:89:5d:7f:8f:5c:97:b2:3d:2a:c6: 24:f7:93:7f:ae:59:99:94:67:95:53:99:30:0f:03: 18:f2:37:04:5d:50:f5:87:48:3c:6e:cd:24:3d:71: f4:5c:e2:b2:bd:ae:8f:5a:74:06:c8:fd:9a:63:35: 48:44:2b:fc:a7:12:cd:c9:64:9f:e9:87:b6:05:4c: fa:bf:d7:64:b7:2e:ad:57:f1:69:82:b4:78:5e:06: 23:9b:ef:ee:dc:7c:90:06:96:32:e3:e3:2f:0c:e0: c3:14:c3:e4:b2:33:ae:47:97:ef:25:08:66:f4:61: 8f:f4:5f:1c:9b:fb:66:73:32:b3:26:9e:a4:10:e8: 9b:6e:e4:dc:84:c8:96:0b:f3:c8:38:d5:be:ee:1d: d6:8b:10:f2:5f:36:8e:8d:27:96:ac:e4:0c:0a:a8: 03:6b:67:90:d2:6c:a1:64:d4:25:9e:d4:1d:a3:22: 2e:9e:ab:36:da:56:97:db:c7:ab:ca:d9:00:ce:be: 9a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:14:24:61:5B:9B:C1:FB:61:48:2E:FC:05:CD:66:7A:0D:93:3B:53 X509v3 Authority Key Identifier: keyid:43:63:4C:70:1B:A1:F1:EF:CE:8F:56:AA:6A:D1:DB:29:45:A1:DB:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q2NMcBuh8e_Oj1aqatHbKUWh258.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:4c:e0:f9:ce:b8:4c:0a:fe:05:da:e2:20:fb:3c:1c:30:3f: 92:dd:6a:03:02:bb:da:3c:43:e7:80:55:55:01:3c:63:58:31: 91:71:70:f9:7a:1b:e9:04:cb:7f:db:d1:f0:cc:47:96:10:54: dd:37:25:3b:4d:9c:28:c0:1e:14:d8:fa:4b:f0:f2:ce:c2:62: be:fd:4d:45:42:82:2a:25:d5:39:fb:2e:c4:22:a1:81:5b:e8: 8f:a9:ef:1f:b6:08:19:15:b7:10:dd:5f:32:12:b7:fa:e8:5e: 9b:e4:d8:9f:23:e9:25:7c:65:a0:1c:c4:09:b9:66:a8:15:58: c6:da:34:96:0d:b6:a8:9c:12:c3:80:b0:ca:6b:95:0c:84:70: bd:1e:71:bc:b9:41:8d:06:0c:f9:87:dd:b2:a4:0a:af:3e:fa: b2:93:4b:fc:64:af:33:79:f6:a3:4e:19:7b:78:0b:a3:0a:a5: 3e:e3:1f:5b:39:a2:ae:ca:8e:4d:90:ca:96:5e:6f:0f:7a:53: cc:35:95:9c:7d:ed:98:8b:28:c6:59:5d:a4:3e:59:b7:5e:48: 89:15:68:d3:33:1e:c4:fe:01:a1:22:75:df:de:97:dc:d5:ca: c6:4c:b1:00:2c:c6:1b:56:0e:ed:f3:09:03:11:67:b8:3e:2a: 10:64:84:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU0OUMxMTAvBgNVBAUTKDQzNjM0QzcwMUJBMUYxRUZDRThGNTZBQTZBRDFEQjI5 NDVBMURCOUYwHhcNMjUwNDI3MDUxNzU5WhcNMjUwNTA0MDUxNzU5WjAYMRYwFAYD VQQDEw02ODBkYmUwOC05MzMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4/PwKCJswOrnRuRsmZC+RWZOlme7vbAJ1hq1bWu8M8IUI5JlSPVDrw51z9qH x+En3xKQ9zOvDo5yx7C1iMVqTIldf49cl7I9KsYk95N/rlmZlGeVU5kwDwMY8jcE XVD1h0g8bs0kPXH0XOKyva6PWnQGyP2aYzVIRCv8pxLNyWSf6Ye2BUz6v9dkty6t V/FpgrR4XgYjm+/u3HyQBpYy4+MvDODDFMPksjOuR5fvJQhm9GGP9F8cm/tmczKz Jp6kEOibbuTchMiWC/PIONW+7h3WixDyXzaOjSeWrOQMCqgDa2eQ0myhZNQlntQd oyIunqs22laX28erytkAzr6aBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLcUJGFb m8H7YUgu/AXNZnoNkztTMB8GA1UdIwQYMBaAFENjTHAbofHvzo9WqmrR2ylFoduf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTQ5Qy9ERTg3MThDNDRB MzExMUVGQjdCQkQ1MUNDNEY5QUUwMi9RMk5NY0J1aDhlX09qMWFxYXRIYktVV2gy NTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1EyTk1jQnVoOGVfT2oxYXFhdEhiS1VXaDI1OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTQ5Qy9ERTg3MThDNDRBMzExMUVGQjdCQkQ1MUNDNEY5QUUwMi9RMk5NY0J1aDhl X09qMWFxYXRIYktVV2gyNTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMTOD5zrhMCv4F2uIg+zwcMD+S3WoDArvaPEPngFVVATxjWDGRcXD5 ehvpBMt/29HwzEeWEFTdNyU7TZwowB4U2PpL8PLOwmK+/U1FQoIqJdU5+y7EIqGB W+iPqe8ftggZFbcQ3V8yErf66F6b5NifI+klfGWgHMQJuWaoFVjG2jSWDbaonBLD gLDKa5UMhHC9HnG8uUGNBgz5h92ypAqvPvqyk0v8ZK8zefajThl7eAujCqU+4x9b OaKuyo5NkMqWXm8PelPMNZWcfe2YiyjGWV2kPlm3XkiJFWjTMx7E/gGhInXf3pfc 1crGTLEALMYbVg7t8wkDEWe4PioQZIRT -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:50 2025 by rpki-client on console.sobornost.net