$ rpki-client -vvf rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft File: s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft (raw, json) Hash identifier: 6fFNRnWh3nVMkRoMTJwKmXI4o+LJaGxTux45ocNlv/U= Subject key identifier: B6:17:CB:D8:B6:3C:4F:E6:F2:01:1C:41:6A:90:EC:00:DD:89:F3:72 Authority key identifier: B3:98:66:A9:9D:1C:D9:F4:E7:E8:F5:3C:88:AD:14:DA:89:A1:86:25 Certificate issuer: /CN=A91964B3/serialNumber=B39866A99D1CD9F4E7E8F53C88AD14DA89A18625 Certificate serial: 3646 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft Manifest number: 3571 Signing time: Mon 28 Apr 2025 14:25:41 +0000 Manifest this update: Mon 28 Apr 2025 14:25:41 +0000 Manifest next update: Mon 05 May 2025 14:25:41 +0000 Files and hashes: 1: s5hmqZ0c2fTn6PU8iK0U2omhhiU.crl (hash: s2EEZ4wxejoT3nAFPpnOWDmWFn6zfSzOrJoILXKbOE8=) 2: B36EA83C70B111E98CFFF710C4F9AE02.roa (hash: YPxJgAFP2pm+e64iG82yJRkFHNHfja4F2rH7VSVuFpA=) 3: 4BE40306048011F0B0453C78C4F9AE02.roa (hash: ToQ9hHUeTJuT7Imt8d1Juyh6j9hy0IcEOvIx4Eihy0E=) 4: 160B219870BA11E99E0F6D2DC4F9AE02.roa (hash: 3QqIb/PpEMe7CSOMb9cfzIUcXW1tet3HABkiD8A3zkU=) 5: 26A143C291EB11EF8A024083C4F9AE02.roa (hash: apyNb0gzlP7QIPlzF+1SGVtUOjpAimi2EUrocnrYZRM=) 6: 18F4FD76918111EC93DCA42AC4F9AE02.roa (hash: 8JKaEfgtThOrevd/FI1wUsWQCsjDZCsWDfH4rtPvYOM=) 7: B0EB27B470B811E9B32F6726C4F9AE02.roa (hash: Yn6iyp3sOHzht7NrUVV1K95CTLrIyR+zeCU6DhPlbi0=) 8: 9538F912A09511EE9616A86EC4F9AE02.roa (hash: UIhH1UdXX1/WldxbBw/5eFdUsW8H5rv3xowCVi4x/js=) 9: 71D60BC2F6BA11EB865C4246C4F9AE02.roa (hash: E9Q0DLQxOx2PNLNxJzUPOmEekE0nfR8RNH8+NziMkYc=) 10: 9AF37E96D71B11EA9532F30CC4F9AE02.roa (hash: 6xFx//HoX9CSfFy+iBeZSYBO+hoRtkc5fjd5y3qvsJk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.crl rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 14:25:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13894 (0x3646) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91964B3, serialNumber=B39866A99D1CD9F4E7E8F53C88AD14DA89A18625 Validity Not Before: Apr 28 14:25:41 2025 GMT Not After : May 5 14:25:41 2025 GMT Subject: CN=680f8fe5-815c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:1a:74:cd:8a:79:91:2c:ab:1d:da:da:b8:9f: 64:e9:e0:c8:99:d5:aa:64:b8:cb:61:c2:e1:f1:f5: 63:52:09:41:6c:e1:b8:9a:87:ad:f6:43:fc:a5:86: 43:1b:5e:d8:4e:d1:7a:84:91:41:b7:01:c1:e8:91: 8c:d0:68:d1:40:ca:d9:06:47:fa:4f:1d:1a:22:f0: c2:43:29:8c:8f:40:45:81:6e:b2:ba:e0:26:c2:d4: 7b:28:ee:a0:fe:b5:5f:ab:2a:19:ea:a1:d7:94:bc: 0a:4a:af:47:8a:3d:9a:ca:5b:a7:bc:ce:d6:b1:ed: 3c:5c:dd:7c:e2:2c:f5:7b:8a:18:d3:d5:7a:da:47: 29:26:03:3e:67:80:53:2c:57:f0:5e:07:09:1d:d1: f5:8d:ae:7b:2b:73:bd:04:56:78:6b:1d:1b:68:a7: dd:84:51:1b:a5:83:ae:86:55:8a:28:f6:98:88:b8: 11:f7:00:86:6a:ac:86:64:9f:66:54:a7:c8:18:8f: 30:a8:b0:5e:68:94:c0:8f:9a:6a:23:bb:ca:36:49: 2f:01:46:85:53:f5:00:b2:6c:43:4d:88:37:72:1b: d4:0e:e6:22:92:da:b4:6f:30:bc:ae:b3:91:d6:5d: 7a:60:c8:eb:50:a4:49:a1:1d:1c:39:b9:3f:65:6f: bb:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:17:CB:D8:B6:3C:4F:E6:F2:01:1C:41:6A:90:EC:00:DD:89:F3:72 X509v3 Authority Key Identifier: keyid:B3:98:66:A9:9D:1C:D9:F4:E7:E8:F5:3C:88:AD:14:DA:89:A1:86:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:a3:46:fb:05:65:34:65:4a:59:12:29:1f:61:cf:d3:bc:6a: d6:bc:49:4e:95:16:be:6c:a4:82:30:91:99:b2:72:72:09:4e: 1d:8a:00:6e:12:aa:41:58:5d:46:44:36:fc:e8:61:1b:ba:87: bf:fb:c4:56:95:8b:33:01:fd:19:ac:22:16:55:7e:6d:5c:30: 9f:a0:cf:d6:b7:bc:e1:7f:11:78:ed:0d:c7:25:6b:8c:82:81: b6:c0:c0:e7:f5:c7:88:63:3c:0c:02:7c:38:c7:b4:39:74:4c: 09:d0:ea:47:cc:65:b5:e4:cd:18:8c:a9:16:1c:f1:90:45:78: 6f:b9:99:d4:a3:53:65:29:26:cc:32:14:a3:32:ea:7a:10:07: ee:42:af:5e:f4:72:81:e6:b2:13:7b:46:f7:2f:3c:f2:17:1d: aa:4f:d9:58:fb:40:a4:70:17:55:4e:d4:5a:3d:31:56:1f:11: 41:94:d4:d8:e3:38:df:74:69:9d:50:4f:ad:97:ff:8c:d0:4a: 31:a9:35:48:0d:51:ea:47:5b:60:d1:0b:a9:05:b9:54:6f:b6: 79:a7:f4:28:fe:4c:0e:34:08:44:db:0d:41:6b:7a:d0:ee:b9: a1:62:07:69:f0:bf:bf:50:24:da:50:4a:2a:d9:1b:bc:53:2d: 8f:ce:13:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTY0QjMxMTAvBgNVBAUTKEIzOTg2NkE5OUQxQ0Q5RjRFN0U4RjUzQzg4QUQxNERB ODlBMTg2MjUwHhcNMjUwNDI4MTQyNTQxWhcNMjUwNTA1MTQyNTQxWjAYMRYwFAYD VQQDEw02ODBmOGZlNS04MTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Bp0zYp5kSyrHdrauJ9k6eDImdWqZLjLYcLh8fVjUglBbOG4moet9kP8pYZD G17YTtF6hJFBtwHB6JGM0GjRQMrZBkf6Tx0aIvDCQymMj0BFgW6yuuAmwtR7KO6g /rVfqyoZ6qHXlLwKSq9Hij2aylunvM7Wse08XN184iz1e4oY09V62kcpJgM+Z4BT LFfwXgcJHdH1ja57K3O9BFZ4ax0baKfdhFEbpYOuhlWKKPaYiLgR9wCGaqyGZJ9m VKfIGI8wqLBeaJTAj5pqI7vKNkkvAUaFU/UAsmxDTYg3chvUDuYiktq0bzC8rrOR 1l16YMjrUKRJoR0cObk/ZW+7/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLYXy9i2 PE/m8gEcQWqQ7ADdifNyMB8GA1UdIwQYMBaAFLOYZqmdHNn05+j1PIitFNqJoYYl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjRCMy9FNjU4NTExMjFE ODQxMUUyQTFCQTMwREIwOEIwMkNEMi9zNWhtcVowYzJmVG42UFU4aUswVTJvbWho aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3M1aG1xWjBjMmZUbjZQVThpSzBVMm9taGhpVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NjRCMy9FNjU4NTExMjFEODQxMUUyQTFCQTMwREIwOEIwMkNEMi9zNWhtcVowYzJm VG42UFU4aUswVTJvbWhoaVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6o0b7BWU0ZUpZEikfYc/TvGrWvElOlRa+bKSCMJGZsnJyCU4digBu EqpBWF1GRDb86GEbuoe/+8RWlYszAf0ZrCIWVX5tXDCfoM/Wt7zhfxF47Q3HJWuM goG2wMDn9ceIYzwMAnw4x7Q5dEwJ0OpHzGW15M0YjKkWHPGQRXhvuZnUo1NlKSbM MhSjMup6EAfuQq9e9HKB5rITe0b3LzzyFx2qT9lY+0CkcBdVTtRaPTFWHxFBlNTY 4zjfdGmdUE+tl/+M0EoxqTVIDVHqR1tg0QupBblUb7Z5p/Qo/kwONAhE2w1Ba3rQ 7rmhYgdp8L+/UCTaUEoq2Ru8Uy2PzhPk -----END CERTIFICATE-----Generated at Mon Apr 28 17:45:59 2025 by rpki-client on console.sobornost.net