$ rpki-client -vvf rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft File: 6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft (raw, json) Hash identifier: TNKhtfXfxf4p2TPzAnHiuHBHWWpDF45Ike9Lu7+nuFQ= Subject key identifier: 0F:5A:93:AF:C3:95:03:6B:C2:9C:7D:99:7A:E7:F1:6E:8E:2C:5C:DD Authority key identifier: E9:36:74:B1:F3:B6:91:6B:2B:63:63:B8:61:D6:B7:7B:39:05:DD:D8 Certificate issuer: /CN=A91889B6/serialNumber=E93674B1F3B6916B2B6363B861D6B77B3905DDD8 Certificate serial: 347E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft Manifest number: 347A Signing time: Mon 28 Apr 2025 14:56:51 +0000 Manifest this update: Mon 28 Apr 2025 14:56:51 +0000 Manifest next update: Mon 05 May 2025 14:56:51 +0000 Files and hashes: 1: 6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl (hash: iLy4bbbkX/FDQbBD0w3XU+yjnBN96XIMDVp42myPwzI=) 2: 8D57E1664D0911EEA9837D4AC4F9AE02.roa (hash: ANRth1hLqzWtOuNRps1oUpwLuw2TshWbOFj4QYFgW9U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 14:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13438 (0x347e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91889B6, serialNumber=E93674B1F3B6916B2B6363B861D6B77B3905DDD8 Validity Not Before: Apr 28 14:56:51 2025 GMT Not After : May 5 14:56:51 2025 GMT Subject: CN=680f9733-1f36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:45:da:2d:0d:a3:0b:f3:62:b5:49:12:65:db: 1d:3d:34:4c:8b:35:fa:54:2f:23:03:f3:f4:71:cc: 9a:6a:fa:87:5b:bd:d0:21:1f:7f:ba:fa:d4:6f:f4: 4a:a0:52:7d:9d:83:d4:56:5c:38:38:23:bf:7a:1f: 9f:26:24:a9:0b:5f:df:27:7e:03:a4:c1:27:68:6d: a5:41:81:6c:f0:56:47:ce:ab:78:82:82:cb:ab:d1: e6:ef:ae:43:77:06:38:9d:a4:25:ab:f2:74:40:cb: c5:80:ee:94:25:9c:3c:41:cc:cc:d8:b5:0c:31:3f: f1:d6:83:27:56:0c:ce:e9:7d:f6:c6:c5:e9:f6:27: 7b:9d:25:74:c9:cb:fb:60:3c:ef:6a:c9:7f:85:af: f5:45:5a:9d:ab:13:81:b2:bd:14:76:e3:4f:bc:43: 88:63:05:32:39:32:79:bb:8c:20:f5:00:62:78:14: a2:39:d8:37:79:23:77:61:ca:93:96:9c:42:10:ab: db:04:76:1a:2a:1b:73:63:cd:72:ee:42:6a:4e:69: 14:ba:ad:b7:ab:47:21:5b:d6:56:81:fb:47:d5:eb: 57:8b:ba:c6:f8:ef:f5:ee:dc:37:f8:f0:fd:fe:1e: d4:8f:bf:bb:64:81:13:d7:a4:7e:0d:31:ee:fe:ee: 02:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:5A:93:AF:C3:95:03:6B:C2:9C:7D:99:7A:E7:F1:6E:8E:2C:5C:DD X509v3 Authority Key Identifier: keyid:E9:36:74:B1:F3:B6:91:6B:2B:63:63:B8:61:D6:B7:7B:39:05:DD:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:37:76:60:5a:a8:29:68:52:c9:3b:33:53:0b:f1:28:b3:1c: 49:a8:8a:c9:b2:cd:b9:15:2c:ab:51:e4:16:a7:90:2f:18:49: 54:6b:45:98:31:e4:bf:4f:1c:d5:f3:01:a9:7a:f6:f5:f3:32: 26:11:6d:ec:7e:44:a1:97:a9:9e:2a:71:6a:92:cd:43:59:e7: c9:98:16:1e:6d:30:6d:e4:c7:8d:01:61:37:64:1a:2b:56:0a: 44:84:e6:9d:8d:f8:d2:c0:54:fc:d9:21:7b:86:da:3d:48:c2: b3:eb:5a:98:f6:8f:c7:67:4f:77:10:d5:03:c0:27:53:36:15: b7:0f:84:45:e0:0a:d8:cd:a5:cf:e6:e0:eb:d1:a0:72:27:93: 93:45:4a:05:97:58:97:d3:0f:70:48:2c:d9:4c:6d:07:de:1b: e5:53:b0:74:aa:3d:d4:2a:cc:8f:22:74:43:13:a2:0d:ac:53: 6f:31:53:4e:a1:4c:31:26:4f:dc:81:98:b3:d4:f5:52:7f:85: 89:fd:71:f9:64:f9:89:31:88:42:ae:c1:30:4b:7b:b0:83:03: 8f:84:ce:2d:dd:24:f8:a4:46:32:99:7c:48:4b:39:0f:7e:a1: 89:f8:dc:06:2e:4c:15:3d:85:82:c1:9c:8c:f9:aa:85:f3:bf: fe:13:80:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNH4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg5QjYxMTAvBgNVBAUTKEU5MzY3NEIxRjNCNjkxNkIyQjYzNjNCODYxRDZCNzdC MzkwNURERDgwHhcNMjUwNDI4MTQ1NjUxWhcNMjUwNTA1MTQ1NjUxWjAYMRYwFAYD VQQDEw02ODBmOTczMy0xZjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr0XaLQ2jC/NitUkSZdsdPTRMizX6VC8jA/P0ccyaavqHW73QIR9/uvrUb/RK oFJ9nYPUVlw4OCO/eh+fJiSpC1/fJ34DpMEnaG2lQYFs8FZHzqt4goLLq9Hm765D dwY4naQlq/J0QMvFgO6UJZw8QczM2LUMMT/x1oMnVgzO6X32xsXp9id7nSV0ycv7 YDzvasl/ha/1RVqdqxOBsr0UduNPvEOIYwUyOTJ5u4wg9QBieBSiOdg3eSN3YcqT lpxCEKvbBHYaKhtzY81y7kJqTmkUuq23q0chW9ZWgftH1etXi7rG+O/17tw3+PD9 /h7Uj7+7ZIET16R+DTHu/u4CtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA9ak6/D lQNrwpx9mXrn8W6OLFzdMB8GA1UdIwQYMBaAFOk2dLHztpFrK2NjuGHWt3s5Bd3Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODlCNi8yQzRFRjk3NjFE OTYxMUUyQTY1NDhFN0UwOEIwMkNEMi82VFowc2ZPMmtXc3JZMk80WWRhM2V6a0Yz ZGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZUWjBzZk8ya1dzclkyTzRZZGEzZXprRjNkZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODlCNi8yQzRFRjk3NjFEOTYxMUUyQTY1NDhFN0UwOEIwMkNEMi82VFowc2ZPMmtX c3JZMk80WWRhM2V6a0YzZGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXN3ZgWqgpaFLJOzNTC/EosxxJqIrJss25FSyrUeQWp5AvGElUa0WY MeS/TxzV8wGpevb18zImEW3sfkShl6meKnFqks1DWefJmBYebTBt5MeNAWE3ZBor VgpEhOadjfjSwFT82SF7hto9SMKz61qY9o/HZ093ENUDwCdTNhW3D4RF4ArYzaXP 5uDr0aByJ5OTRUoFl1iX0w9wSCzZTG0H3hvlU7B0qj3UKsyPInRDE6INrFNvMVNO oUwxJk/cgZiz1PVSf4WJ/XH5ZPmJMYhCrsEwS3uwgwOPhM4t3ST4pEYymXxISzkP fqGJ+NwGLkwVPYWCwZyM+aqF87/+E4Ax -----END CERTIFICATE-----Generated at Mon Apr 28 17:45:13 2025 by rpki-client on console.sobornost.net