$ rpki-client -vvf rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.mft File: MZsxRPBqjysw1BIHH-EhB3T-huc.mft (raw, json) Hash identifier: Yxg8MkWCYqffkGH3s14atZQmTuHd/5xmPWZVQSHVXu8= Subject key identifier: 0A:6C:78:07:78:09:47:48:AA:83:82:11:95:41:F5:20:CD:BB:C4:D2 Authority key identifier: 31:9B:31:44:F0:6A:8F:2B:30:D4:12:07:1F:E1:21:07:74:FE:86:E7 Certificate issuer: /CN=A91971CB/serialNumber=319B3144F06A8F2B30D412071FE1210774FE86E7 Certificate serial: 066D Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MZsxRPBqjysw1BIHH-EhB3T-huc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.mft Manifest number: 0666 Signing time: Mon 28 Apr 2025 15:19:20 +0000 Manifest this update: Mon 28 Apr 2025 15:19:19 +0000 Manifest next update: Mon 05 May 2025 15:19:19 +0000 Files and hashes: 1: MZsxRPBqjysw1BIHH-EhB3T-huc.crl (hash: PAB8h1kHJdHcAi17keLApSWw0PHH54RzjRzPtZ8KxlA=) 2: 27C29E5EF94411EDB4C6E91CC4F9AE02.roa (hash: PGlTDpEV17D+1hrLu4fdfibpz1YbRKMAlzpsoNFgyb4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.crl rsync://rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MZsxRPBqjysw1BIHH-EhB3T-huc.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 14:50:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1645 (0x66d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91971CB, serialNumber=319B3144F06A8F2B30D412071FE1210774FE86E7 Validity Not Before: Apr 28 15:19:19 2025 GMT Not After : May 5 15:19:19 2025 GMT Subject: CN=680f9c78-b23d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:67:d3:ff:7f:dd:aa:ed:67:3a:2f:3f:10:04: 0e:8b:bf:79:37:70:20:82:7c:eb:7f:74:06:8a:1c: 12:dd:2c:6c:60:48:2f:e0:e3:e1:cb:dd:4f:32:22: ef:1b:92:ef:74:32:4f:8d:87:ab:8e:db:4b:f7:a6: 70:ac:b2:96:4a:ba:8f:04:e3:cf:db:6e:0f:b0:4d: 72:75:75:c2:83:0e:40:3f:c1:96:98:50:71:53:18: 24:ce:90:18:75:6c:d9:c7:d2:0d:2b:f9:e1:a0:59: 75:54:f6:90:7d:9a:ef:2a:c9:03:8c:9b:bf:19:2b: 5d:6c:87:c5:e7:53:35:79:66:4c:1f:12:e5:a4:14: 50:14:dd:a4:a4:45:e3:dc:4d:d5:b0:92:e7:1d:fe: 0f:f6:98:52:cb:ae:3d:86:28:6e:f1:89:48:a0:06: 0b:6b:df:33:12:7a:2c:27:1b:ef:44:6b:a1:25:e5: 25:b6:8b:3a:45:53:0d:1e:16:9e:e8:7e:ee:db:fe: 1a:d9:bb:7c:bd:5b:a4:50:ef:45:2e:7b:c3:d7:a8: e9:74:c8:4d:4a:ab:53:52:3e:a1:62:bb:34:58:87: 77:83:32:f8:7a:d4:95:cd:af:64:37:a9:49:cc:65: 41:68:a5:04:8f:dd:55:3c:cc:9f:58:c8:5e:78:e0: cf:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:6C:78:07:78:09:47:48:AA:83:82:11:95:41:F5:20:CD:BB:C4:D2 X509v3 Authority Key Identifier: keyid:31:9B:31:44:F0:6A:8F:2B:30:D4:12:07:1F:E1:21:07:74:FE:86:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MZsxRPBqjysw1BIHH-EhB3T-huc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:e3:4f:9b:ea:60:e5:a1:a5:f7:d1:1d:c5:88:e6:97:1b:96: cd:7b:d9:55:54:b0:91:7f:34:e2:a5:f8:21:c9:8a:d9:b0:fb: 16:14:a4:38:48:0d:e0:06:51:7e:97:f3:02:c6:34:ef:c9:af: 3b:4d:e7:31:2e:b7:0a:e0:6d:77:fe:1e:4e:3a:83:d8:88:d1: 5d:15:3d:a4:f5:cf:b8:dd:cc:cd:1c:78:5e:16:b2:d3:db:10: 68:a0:1c:ed:f5:94:88:9e:ca:7b:4a:33:87:bc:61:5d:cc:fb: 20:54:01:f0:2a:df:85:1e:7d:a5:09:fa:d6:cc:51:46:94:60: 00:d5:d1:17:0e:cc:a0:aa:c8:f8:1b:88:d2:d6:2f:60:34:df: cd:e9:6a:a7:d3:07:a9:80:fc:6a:6e:05:2c:4b:b6:92:4b:b4: b3:e7:cd:20:a4:7b:cb:f9:d1:54:eb:14:f8:f2:b6:99:93:b2: 3e:81:7b:da:ba:6f:17:39:44:70:fe:42:84:65:52:de:1e:50: af:4a:3e:d9:51:43:ac:d8:7a:88:45:65:28:f6:0b:bd:49:51: b6:3d:d5:e6:39:a7:11:8e:9c:a2:15:74:f5:e6:a5:fc:f4:e5: ab:d2:ab:ec:8b:86:ab:97:e4:33:44:ae:f5:78:62:73:4d:4f: e5:02:42:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBm0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcxQ0IxMTAvBgNVBAUTKDMxOUIzMTQ0RjA2QThGMkIzMEQ0MTIwNzFGRTEyMTA3 NzRGRTg2RTcwHhcNMjUwNDI4MTUxOTE5WhcNMjUwNTA1MTUxOTE5WjAYMRYwFAYD VQQDEw02ODBmOWM3OC1iMjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz2fT/3/dqu1nOi8/EAQOi795N3Aggnzrf3QGihwS3SxsYEgv4OPhy91PMiLv G5LvdDJPjYerjttL96ZwrLKWSrqPBOPP224PsE1ydXXCgw5AP8GWmFBxUxgkzpAY dWzZx9INK/nhoFl1VPaQfZrvKskDjJu/GStdbIfF51M1eWZMHxLlpBRQFN2kpEXj 3E3VsJLnHf4P9phSy649hihu8YlIoAYLa98zEnosJxvvRGuhJeUltos6RVMNHhae 6H7u2/4a2bt8vVukUO9FLnvD16jpdMhNSqtTUj6hYrs0WId3gzL4etSVza9kN6lJ zGVBaKUEj91VPMyfWMheeODPIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFApseAd4 CUdIqoOCEZVB9SDNu8TSMB8GA1UdIwQYMBaAFDGbMUTwao8rMNQSBx/hIQd0/obn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzFDQi8wMTBFQjI4ODgw ODkxMUVCOEI1MDVGMjBDNEY5QUUwMi9NWnN4UlBCcWp5c3cxQklISC1FaEIzVC1o dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL01ac3hSUEJxanlzdzFCSUhILUVoQjNULWh1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzFDQi8wMTBFQjI4ODgwODkxMUVCOEI1MDVGMjBDNEY5QUUwMi9NWnN4UlBCcWp5 c3cxQklISC1FaEIzVC1odWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCw40+b6mDloaX30R3FiOaXG5bNe9lVVLCRfzTipfghyYrZsPsWFKQ4 SA3gBlF+l/MCxjTvya87TecxLrcK4G13/h5OOoPYiNFdFT2k9c+43czNHHheFrLT 2xBooBzt9ZSInsp7SjOHvGFdzPsgVAHwKt+FHn2lCfrWzFFGlGAA1dEXDsygqsj4 G4jS1i9gNN/N6Wqn0wepgPxqbgUsS7aSS7Sz580gpHvL+dFU6xT48raZk7I+gXva um8XOURw/kKEZVLeHlCvSj7ZUUOs2HqIRWUo9gu9SVG2PdXmOacRjpyiFXT15qX8 9OWr0qvsi4arl+QzRK71eGJzTU/lAkIa -----END CERTIFICATE-----Generated at Mon Apr 28 17:45:59 2025 by rpki-client on console.sobornost.net