$ rpki-client -vvf rpki.apnic.net/member_repository/A91948F2/E5F2C7DACD0A11ECAE0A0C2EC4F9AE02/hnTXe0A3MAGG04EEg47spLgYMsI.mft File: hnTXe0A3MAGG04EEg47spLgYMsI.mft (raw, json) Hash identifier: gSC4Ia6GZUF0sv7cNRvu4F0UYjJHM2PYgxsPxkWZ+14= Subject key identifier: C0:77:89:22:4E:C4:E8:A5:51:6A:F1:64:D2:0A:18:E7:24:4B:76:CA Authority key identifier: 86:74:D7:7B:40:37:30:01:86:D3:81:04:83:8E:EC:A4:B8:18:32:C2 Certificate issuer: /CN=A91948F2/serialNumber=8674D77B4037300186D38104838EECA4B81832C2 Certificate serial: 030F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnTXe0A3MAGG04EEg47spLgYMsI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91948F2/E5F2C7DACD0A11ECAE0A0C2EC4F9AE02/hnTXe0A3MAGG04EEg47spLgYMsI.mft Manifest number: 030A Signing time: Sun 27 Apr 2025 00:51:31 +0000 Manifest this update: Sun 27 Apr 2025 00:51:31 +0000 Manifest next update: Sun 04 May 2025 00:51:30 +0000 Files and hashes: 1: hnTXe0A3MAGG04EEg47spLgYMsI.crl (hash: 0Wj3ebgNY4Qm2citAgPP/KAjUg29186qMh5wb/ZGcaw=) 2: E5708A82CD0E11EC8038C333C4F9AE02.roa (hash: tZvXWmFmcU/1hd7PZK+BYRJdAPFndnrfZlPRuWQgPQA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91948F2/E5F2C7DACD0A11ECAE0A0C2EC4F9AE02/hnTXe0A3MAGG04EEg47spLgYMsI.crl rsync://rpki.apnic.net/member_repository/A91948F2/E5F2C7DACD0A11ECAE0A0C2EC4F9AE02/hnTXe0A3MAGG04EEg47spLgYMsI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnTXe0A3MAGG04EEg47spLgYMsI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 00:51:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 783 (0x30f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91948F2, serialNumber=8674D77B4037300186D38104838EECA4B81832C2 Validity Not Before: Apr 27 00:51:31 2025 GMT Not After : May 4 00:51:30 2025 GMT Subject: CN=680d7f93-7d2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:cb:e8:a6:02:f4:bb:62:0f:60:c7:40:0b:58: b6:6f:a1:d8:53:cd:3a:9b:31:5f:91:ae:13:08:2d: bd:b2:2e:79:68:67:26:2e:e2:3c:37:52:3c:2e:e3: e6:6d:bf:ee:9b:97:4d:b8:c2:99:ba:29:d9:2d:f1: 86:00:86:13:97:80:73:96:75:7b:f7:58:ea:f7:ad: 72:b2:d4:33:c7:3a:b5:ba:9a:88:86:6a:ce:9d:a4: 79:b0:12:41:7f:93:c7:84:64:de:eb:4f:98:4b:35: 35:c9:52:fa:c8:b4:e8:c2:ff:ea:9b:c4:8c:45:b8: 9c:58:74:66:3b:00:99:1b:a5:66:d2:fc:57:9b:f4: 4e:61:0d:b2:aa:c8:78:58:86:82:e6:80:e0:b1:69: 9e:d8:d0:aa:a7:a0:3d:50:98:ff:d2:ac:d0:21:d0: e6:8d:02:58:af:ca:a8:de:1a:df:42:0a:ab:2e:db: c5:c7:8e:5b:2d:01:c8:94:22:f8:0a:bb:36:85:cf: 4f:48:09:40:14:a1:88:23:35:db:c6:a8:ef:c2:03: ee:01:d0:2d:fc:f5:15:62:7b:04:ef:f9:08:58:68: 21:df:a5:86:91:ce:38:62:4a:9f:b9:94:2a:2a:2a: ed:01:34:9d:13:b0:bf:66:6c:14:40:f6:a2:25:9d: 64:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:77:89:22:4E:C4:E8:A5:51:6A:F1:64:D2:0A:18:E7:24:4B:76:CA X509v3 Authority Key Identifier: keyid:86:74:D7:7B:40:37:30:01:86:D3:81:04:83:8E:EC:A4:B8:18:32:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91948F2/E5F2C7DACD0A11ECAE0A0C2EC4F9AE02/hnTXe0A3MAGG04EEg47spLgYMsI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnTXe0A3MAGG04EEg47spLgYMsI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91948F2/E5F2C7DACD0A11ECAE0A0C2EC4F9AE02/hnTXe0A3MAGG04EEg47spLgYMsI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:f3:80:24:76:2f:39:8d:b2:fe:5e:65:3b:dd:39:c4:7b:ea: 5a:62:60:9f:b6:64:2c:3d:38:b9:34:e5:8e:6d:b9:be:96:ef: e5:67:11:3c:b2:fa:26:f9:f8:e5:39:af:0f:c5:2e:b4:cf:2d: bb:ca:99:8f:4d:cc:e6:b2:1f:1f:c7:ea:3f:7e:96:93:3f:25: 24:c3:1a:11:af:88:ea:a3:61:a2:ae:03:78:f8:bf:45:2e:51: ac:f1:f8:8c:b0:ab:30:31:9c:eb:44:e3:3d:26:23:42:ff:e1: a6:39:53:57:13:06:ff:8f:46:b7:e3:fc:17:ac:da:f7:44:c6: 25:a6:ad:a4:da:7c:fe:e0:37:ab:6b:0d:af:8f:93:52:72:48: 02:ea:f7:01:4f:14:28:00:c7:a0:c0:a0:20:02:60:94:c0:95: 24:ee:8f:da:13:b9:e4:dd:9e:5f:94:15:ac:ac:29:ae:05:cf: 23:ae:db:70:fe:77:72:3f:f0:ef:3e:55:42:75:8b:e2:17:e1: db:a1:f6:ab:a1:d4:cf:5e:2f:6e:6c:4f:60:62:b6:1d:b1:5e: 98:29:06:46:26:ad:fe:09:38:11:9d:25:9d:56:fa:da:a3:de: bb:0a:38:5a:a2:47:1a:45:20:51:ea:8f:78:b7:b4:d1:30:94: 98:84:42:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAw8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ4RjIxMTAvBgNVBAUTKDg2NzRENzdCNDAzNzMwMDE4NkQzODEwNDgzOEVFQ0E0 QjgxODMyQzIwHhcNMjUwNDI3MDA1MTMxWhcNMjUwNTA0MDA1MTMwWjAYMRYwFAYD VQQDEw02ODBkN2Y5My03ZDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwcvopgL0u2IPYMdAC1i2b6HYU806mzFfka4TCC29si55aGcmLuI8N1I8LuPm bb/um5dNuMKZuinZLfGGAIYTl4BzlnV791jq961ystQzxzq1upqIhmrOnaR5sBJB f5PHhGTe60+YSzU1yVL6yLTowv/qm8SMRbicWHRmOwCZG6Vm0vxXm/ROYQ2yqsh4 WIaC5oDgsWme2NCqp6A9UJj/0qzQIdDmjQJYr8qo3hrfQgqrLtvFx45bLQHIlCL4 Crs2hc9PSAlAFKGIIzXbxqjvwgPuAdAt/PUVYnsE7/kIWGgh36WGkc44YkqfuZQq KirtATSdE7C/ZmwUQPaiJZ1kQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMB3iSJO xOilUWrxZNIKGOckS3bKMB8GA1UdIwQYMBaAFIZ013tANzABhtOBBIOO7KS4GDLC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDhGMi9FNUYyQzdEQUNE MEExMUVDQUUwQTBDMkVDNEY5QUUwMi9oblRYZTBBM01BR0cwNEVFZzQ3c3BMZ1lN c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2huVFhlMEEzTUFHRzA0RUVnNDdzcExnWU1zSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDhGMi9FNUYyQzdEQUNEMEExMUVDQUUwQTBDMkVDNEY5QUUwMi9oblRYZTBBM01B R0cwNEVFZzQ3c3BMZ1lNc0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBz84Akdi85jbL+XmU73TnEe+paYmCftmQsPTi5NOWObbm+lu/lZxE8 svom+fjlOa8PxS60zy27ypmPTczmsh8fx+o/fpaTPyUkwxoRr4jqo2GirgN4+L9F LlGs8fiMsKswMZzrROM9JiNC/+GmOVNXEwb/j0a34/wXrNr3RMYlpq2k2nz+4Der aw2vj5NSckgC6vcBTxQoAMegwKAgAmCUwJUk7o/aE7nk3Z5flBWsrCmuBc8jrttw /ndyP/DvPlVCdYviF+HbofarodTPXi9ubE9gYrYdsV6YKQZGJq3+CTgRnSWdVvra o967CjhaokcaRSBR6o94t7TRMJSYhEL2 -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:00 2025 by rpki-client on console.sobornost.net