$ rpki-client -vvf rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft File: -8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft (raw, json) Hash identifier: oj338oe63akTMglGS1TAiwUhDyLDuns1IOm80nOcm5g= Subject key identifier: 57:2D:CB:43:D7:0D:04:61:75:B0:05:32:69:C0:F8:43:BE:5D:21:28 Authority key identifier: FB:C5:5B:2C:0B:E0:AB:23:47:48:FB:C3:61:54:7F:64:BF:A7:51:97 Certificate issuer: /CN=A91984AC/serialNumber=FBC55B2C0BE0AB234748FBC361547F64BFA75197 Certificate serial: D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft Manifest number: CC Signing time: Sun 27 Apr 2025 04:40:00 +0000 Manifest this update: Sun 27 Apr 2025 04:39:59 +0000 Manifest next update: Sun 04 May 2025 04:39:59 +0000 Files and hashes: 1: -8VbLAvgqyNHSPvDYVR_ZL-nUZc.crl (hash: WqLnTEVsYchKKh5BCYv79htlMZKHWM//EztQ01EA6w0=) 2: 47610B18F5A811EEA84E8049C4F9AE02.roa (hash: oDkekcVc24g24l9w3pqtjUZRiCpSkPIIazs9r2Z2ZIs=) 3: 628C9174B6E011EF87D3F60CC4F9AE02.roa (hash: 66xBTvofN0kw93P5VictZxaCnVByR33mxLgf2xLdWgQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.crl rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91984AC, serialNumber=FBC55B2C0BE0AB234748FBC361547F64BFA75197 Validity Not Before: Apr 27 04:39:59 2025 GMT Not After : May 4 04:39:59 2025 GMT Subject: CN=680db51f-89dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3d:0c:59:2e:07:c3:28:4a:0c:47:9b:0b:a1: ab:74:cc:82:90:a7:ba:7c:50:d2:af:2d:9c:8a:6f: 03:23:98:d0:a5:a5:9a:5e:df:ad:d9:65:f0:cd:cc: 66:7d:db:9f:69:1e:67:20:06:40:b8:48:f0:b9:8e: bb:89:5b:bd:69:cc:f6:f7:f9:b1:e8:25:95:4b:33: 22:57:8e:73:29:8b:91:ca:28:80:76:c1:be:e1:47: d0:34:34:84:81:05:67:a9:60:73:d9:fe:3d:e2:cb: 77:f2:cd:82:b0:0b:2e:39:34:ba:c1:16:ee:92:d4: ec:56:ab:e3:1c:33:79:14:3a:54:c3:6f:e3:17:fc: 97:b8:e8:af:3c:9a:b1:ea:08:b2:9f:9d:f5:ab:ab: a5:61:35:85:e1:99:a5:1a:b0:35:a5:99:69:8a:8d: 5d:e3:18:ef:84:16:01:b5:45:46:b8:0c:bd:05:e6: a5:2d:4d:5e:33:37:0f:99:b1:cc:3d:b9:fc:a2:18: 11:b3:5a:b6:eb:16:d6:b3:ed:3e:4a:5c:6e:a4:1b: 79:04:18:a8:36:43:1d:e2:ec:60:63:9e:03:8c:b9: dd:be:ca:1f:80:46:32:3d:a2:70:ed:31:66:6c:bd: 59:9e:35:c1:4a:9f:81:4b:25:25:0c:a1:05:a7:e9: 6a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:2D:CB:43:D7:0D:04:61:75:B0:05:32:69:C0:F8:43:BE:5D:21:28 X509v3 Authority Key Identifier: keyid:FB:C5:5B:2C:0B:E0:AB:23:47:48:FB:C3:61:54:7F:64:BF:A7:51:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:90:b3:b3:ec:72:ba:18:9b:ff:83:cf:4e:d8:a6:b4:14:3f: 4c:5d:3d:7e:65:cc:07:3c:ff:7a:73:a9:7a:dc:7b:3a:61:d2: c8:a5:cb:41:32:ad:e1:25:4d:bd:85:68:18:66:1e:f1:6f:8d: 35:a4:4b:76:1b:aa:e5:5b:33:17:31:3b:c3:c1:7a:83:68:55: 5b:11:ea:67:a4:b7:12:10:7f:40:08:85:4b:ef:d1:9f:33:89: 46:61:27:e5:2f:f8:6b:0f:ab:12:1d:60:2c:9a:38:2c:e3:59: 6f:38:bb:63:0b:ef:e8:33:95:6e:b8:e7:10:41:a9:43:2a:1d: 51:2a:2e:a4:0c:ed:c9:fb:7f:1c:14:88:71:93:48:d4:be:f8: 23:4c:be:ac:d0:fc:0a:c0:f8:8d:33:31:b9:d2:da:0d:48:ea: 5a:62:19:aa:fb:97:fc:91:4a:c8:c6:55:a1:e5:40:92:28:eb: 30:28:3c:6d:0d:2e:ee:3f:c6:d3:d4:84:e4:1a:27:a9:a8:8e: bd:ad:05:74:6e:53:31:64:32:54:94:9e:63:ae:df:8b:61:5d: bc:04:4a:47:62:41:ad:32:5e:72:53:91:a1:01:be:db:e0:93: 2b:8d:7b:b3:3f:08:87:2a:e7:8f:73:84:0e:c3:eb:de:e6:45: d1:52:10:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg0QUMxMTAvBgNVBAUTKEZCQzU1QjJDMEJFMEFCMjM0NzQ4RkJDMzYxNTQ3RjY0 QkZBNzUxOTcwHhcNMjUwNDI3MDQzOTU5WhcNMjUwNTA0MDQzOTU5WjAYMRYwFAYD VQQDEw02ODBkYjUxZi04OWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqT0MWS4HwyhKDEebC6GrdMyCkKe6fFDSry2cim8DI5jQpaWaXt+t2WXwzcxm fdufaR5nIAZAuEjwuY67iVu9acz29/mx6CWVSzMiV45zKYuRyiiAdsG+4UfQNDSE gQVnqWBz2f494st38s2CsAsuOTS6wRbuktTsVqvjHDN5FDpUw2/jF/yXuOivPJqx 6giyn531q6ulYTWF4ZmlGrA1pZlpio1d4xjvhBYBtUVGuAy9BealLU1eMzcPmbHM Pbn8ohgRs1q26xbWs+0+SlxupBt5BBioNkMd4uxgY54DjLndvsofgEYyPaJw7TFm bL1ZnjXBSp+BSyUlDKEFp+lqNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFcty0PX DQRhdbAFMmnA+EO+XSEoMB8GA1UdIwQYMBaAFPvFWywL4KsjR0j7w2FUf2S/p1GX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODRBQy82RDAyNkNFQ0Y1 QTExMUVFOThEQkNEMTFDNEY5QUUwMi8tOFZiTEF2Z3F5TkhTUHZEWVZSX1pMLW5V WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy04VmJMQXZncXlOSFNQdkRZVlJfWkwtblVaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODRBQy82RDAyNkNFQ0Y1QTExMUVFOThEQkNEMTFDNEY5QUUwMi8tOFZiTEF2Z3F5 TkhTUHZEWVZSX1pMLW5VWmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASkLOz7HK6GJv/g89O2Ka0FD9MXT1+ZcwHPP96c6l63Hs6YdLIpctB Mq3hJU29hWgYZh7xb401pEt2G6rlWzMXMTvDwXqDaFVbEepnpLcSEH9ACIVL79Gf M4lGYSflL/hrD6sSHWAsmjgs41lvOLtjC+/oM5VuuOcQQalDKh1RKi6kDO3J+38c FIhxk0jUvvgjTL6s0PwKwPiNMzG50toNSOpaYhmq+5f8kUrIxlWh5UCSKOswKDxt DS7uP8bT1ITkGiepqI69rQV0blMxZDJUlJ5jrt+LYV28BEpHYkGtMl5yU5GhAb7b 4JMrjXuzPwiHKuePc4QOw+ve5kXRUhC+ -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:52 2025 by rpki-client on console.sobornost.net