$ rpki-client -vvf rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.mft File: _UnAZPyj6S3swYqPUElLIfwB8lY.mft (raw, json) Hash identifier: FNAqm2jz3tLmjEDTTxfAaGZPPg1xZuFTcctZZ5jKQ84= Subject key identifier: CB:02:11:7F:2A:62:BC:3E:EA:37:1D:3E:B1:94:8C:08:5D:BB:4B:28 Authority key identifier: FD:49:C0:64:FC:A3:E9:2D:EC:C1:8A:8F:50:49:4B:21:FC:01:F2:56 Certificate issuer: /CN=A91934DE/serialNumber=FD49C064FCA3E92DECC18A8F50494B21FC01F256 Certificate serial: 0197 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UnAZPyj6S3swYqPUElLIfwB8lY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.mft Manifest number: 018A Signing time: Sun 27 Apr 2025 02:40:20 +0000 Manifest this update: Sun 27 Apr 2025 02:40:19 +0000 Manifest next update: Sun 04 May 2025 02:40:19 +0000 Files and hashes: 1: _UnAZPyj6S3swYqPUElLIfwB8lY.crl (hash: fYB9A7daHIzUYVB29Hkv27wHKQrczO4v3bhzXLouTLY=) 2: 358556D2D98F11EDA9A38028C4F9AE02.roa (hash: w60npFN7Kaoau14A8nUumKIk6Z7FI9jzoRmBuAraQgw=) 3: 05F11BACDF4A11EDA4190947C4F9AE02.roa (hash: xNw6lqRZVzml6zGHz7sRyZFWQnA5LMwPw8PJ9UjVWeM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.crl rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UnAZPyj6S3swYqPUElLIfwB8lY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:40:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 407 (0x197) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91934DE, serialNumber=FD49C064FCA3E92DECC18A8F50494B21FC01F256 Validity Not Before: Apr 27 02:40:19 2025 GMT Not After : May 4 02:40:19 2025 GMT Subject: CN=680d9913-8f6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:41:3b:2f:45:f0:65:83:83:bd:32:11:7a:7b: 8e:82:49:41:d7:fb:83:0c:a4:d8:8f:8f:b7:8e:97: 55:76:4f:4c:40:db:f1:c1:aa:e7:d6:18:f8:ba:c1: d5:f5:a5:f1:9a:88:97:bc:c9:df:37:b3:d4:f3:36: 54:ff:80:a9:39:7b:38:c6:8e:29:47:88:c3:ba:87: 9c:45:00:f2:fd:d3:44:36:a1:f8:84:e6:aa:7d:3a: 1d:7c:3c:2e:33:1b:f0:36:25:7a:3e:4a:61:ed:16: 2f:2c:19:58:7c:62:02:e2:11:b2:d1:a6:14:11:29: ab:92:87:a6:37:be:31:dd:ba:e1:2e:94:e8:ab:6c: 0b:30:2d:94:4c:37:d0:e0:63:db:a1:ab:ef:35:43: 5d:d1:23:ee:03:7a:7d:d3:4b:e9:dc:a5:cd:b0:50: c7:df:45:56:7a:a5:a0:08:c7:5e:3c:9e:46:c9:ca: d2:d9:f2:5c:0b:c3:43:01:34:d3:0e:5a:43:35:73: b0:cc:9e:f4:c8:a4:02:f0:43:31:91:7d:96:ba:67: 5d:b8:dd:70:83:a4:c3:a3:04:82:b0:80:f2:21:10: 63:5c:77:da:78:75:47:cb:45:14:d4:10:07:6e:e0: 81:f0:bd:ce:c6:05:03:63:97:50:eb:ed:26:82:4c: b8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:02:11:7F:2A:62:BC:3E:EA:37:1D:3E:B1:94:8C:08:5D:BB:4B:28 X509v3 Authority Key Identifier: keyid:FD:49:C0:64:FC:A3:E9:2D:EC:C1:8A:8F:50:49:4B:21:FC:01:F2:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UnAZPyj6S3swYqPUElLIfwB8lY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:d9:0d:06:93:2b:19:6c:fe:b4:93:76:a8:ab:76:cc:9f:70: b7:b4:e8:53:96:b1:c2:09:37:76:86:65:97:ba:5d:7a:78:2e: 2d:d3:df:dd:00:3d:9a:9c:2d:e4:6f:a5:a4:0f:51:c9:bd:72: ac:f9:45:72:c4:bc:6b:5f:f2:20:5b:1c:3f:95:ac:3f:72:2e: 95:43:21:36:2b:30:70:54:62:9c:f2:3d:31:9e:ff:bc:43:08: 88:97:0d:b1:39:d2:66:52:ab:30:ef:ba:20:eb:65:94:89:42: 59:88:5c:19:c4:04:d5:cb:c9:ad:ea:73:46:21:1c:b1:78:73: 26:ef:21:86:16:44:c2:b9:87:a2:18:bb:9c:8e:f3:e5:62:f4: bf:05:07:94:b4:44:38:10:a0:30:c5:bc:fc:7c:88:e3:49:21: 06:af:8a:7c:3e:2d:a8:70:af:93:98:5c:3d:db:ed:c6:c2:59: e7:4b:0a:a7:dc:28:55:d5:b6:da:4d:1e:f6:da:be:ad:0c:94: 29:94:47:a1:b1:48:9a:66:11:60:6d:ee:67:3b:c3:26:a9:9e: 40:18:e5:5c:c9:ee:20:f5:e0:23:08:e4:81:48:e2:3b:a0:70: a0:be:6d:9b:b5:a6:4e:32:41:52:0d:2e:fc:cd:96:c6:62:2b: 30:c3:12:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTM0REUxMTAvBgNVBAUTKEZENDlDMDY0RkNBM0U5MkRFQ0MxOEE4RjUwNDk0QjIx RkMwMUYyNTYwHhcNMjUwNDI3MDI0MDE5WhcNMjUwNTA0MDI0MDE5WjAYMRYwFAYD VQQDEw02ODBkOTkxMy04ZjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyEE7L0XwZYODvTIRenuOgklB1/uDDKTYj4+3jpdVdk9MQNvxwarn1hj4usHV 9aXxmoiXvMnfN7PU8zZU/4CpOXs4xo4pR4jDuoecRQDy/dNENqH4hOaqfTodfDwu MxvwNiV6Pkph7RYvLBlYfGIC4hGy0aYUESmrkoemN74x3brhLpToq2wLMC2UTDfQ 4GPboavvNUNd0SPuA3p900vp3KXNsFDH30VWeqWgCMdePJ5GycrS2fJcC8NDATTT DlpDNXOwzJ70yKQC8EMxkX2WumdduN1wg6TDowSCsIDyIRBjXHfaeHVHy0UU1BAH buCB8L3OxgUDY5dQ6+0mgky4rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMsCEX8q Yrw+6jcdPrGUjAhdu0soMB8GA1UdIwQYMBaAFP1JwGT8o+kt7MGKj1BJSyH8AfJW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzRERS9BOTQxRDVFMkQ4 RTQxMUVEOTJFQTM2MjBDNEY5QUUwMi9fVW5BWlB5ajZTM3N3WXFQVUVsTElmd0I4 bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19VbkFaUHlqNlMzc3dZcVBVRWxMSWZ3QjhsWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzRERS9BOTQxRDVFMkQ4RTQxMUVEOTJFQTM2MjBDNEY5QUUwMi9fVW5BWlB5ajZT M3N3WXFQVUVsTElmd0I4bFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA22Q0GkysZbP60k3aoq3bMn3C3tOhTlrHCCTd2hmWXul16eC4t09/d AD2anC3kb6WkD1HJvXKs+UVyxLxrX/IgWxw/law/ci6VQyE2KzBwVGKc8j0xnv+8 QwiIlw2xOdJmUqsw77og62WUiUJZiFwZxATVy8mt6nNGIRyxeHMm7yGGFkTCuYei GLucjvPlYvS/BQeUtEQ4EKAwxbz8fIjjSSEGr4p8Pi2ocK+TmFw92+3GwlnnSwqn 3ChV1bbaTR722r6tDJQplEehsUiaZhFgbe5nO8MmqZ5AGOVcye4g9eAjCOSBSOI7 oHCgvm2btaZOMkFSDS78zZbGYiswwxIl -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:00 2025 by rpki-client on console.sobornost.net