$ rpki-client -vvf rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.mft File: a1P4D46IGzcxlyZjuhiXt0qS1E0.mft (raw, json) Hash identifier: zE4DnepkStOoZguxHmHippDEOfEMmNTgDoMdfn8NI+A= Subject key identifier: C0:77:B9:E8:18:32:07:FB:95:51:FC:E5:73:2E:2A:2A:C5:4C:59:44 Authority key identifier: 6B:53:F8:0F:8E:88:1B:37:31:97:26:63:BA:18:97:B7:4A:92:D4:4D Certificate issuer: /CN=A91991D3/serialNumber=6B53F80F8E881B3731972663BA1897B74A92D44D Certificate serial: 01BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1P4D46IGzcxlyZjuhiXt0qS1E0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.mft Manifest number: 01B8 Signing time: Sun 27 Apr 2025 02:10:37 +0000 Manifest this update: Sun 27 Apr 2025 02:10:37 +0000 Manifest next update: Sun 04 May 2025 02:10:37 +0000 Files and hashes: 1: a1P4D46IGzcxlyZjuhiXt0qS1E0.crl (hash: 9Vc4rxCV0r16qCqoPHR9Fskv9Zio6NOKqLWTMaEJXKo=) 2: 8879DC04990611EF9BA6A76EC4F9AE02.roa (hash: QMqZliYIzALZLrdF4dbF8vk9DUXnAXmdWeIPAlbr7lk=) 3: 531EFB4A8DD311EFAF53373AC4F9AE02.roa (hash: LcCehnLIRoCgjwwcDQ7TUr2n1e7iAgFU0iCoo79xeiY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.crl rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1P4D46IGzcxlyZjuhiXt0qS1E0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 446 (0x1be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91991D3, serialNumber=6B53F80F8E881B3731972663BA1897B74A92D44D Validity Not Before: Apr 27 02:10:37 2025 GMT Not After : May 4 02:10:37 2025 GMT Subject: CN=680d921d-8cd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e1:d5:8d:66:f5:dc:52:34:21:92:0e:78:e7: 75:d4:9c:b0:ce:b8:a3:a1:ae:49:17:04:6e:99:c3: 31:ff:40:0c:b6:d0:00:dd:6f:28:59:90:04:ab:95: c4:d7:03:0c:dd:d1:b8:56:fb:3e:a9:bd:fe:ad:5f: f5:13:f7:d6:72:88:f9:9e:3c:48:5c:2d:ff:54:84: d3:1a:5a:b5:05:56:83:c6:03:59:88:fa:9d:71:b4: 7f:9d:00:ed:de:cc:1a:d2:9d:ba:5d:06:4b:5b:30: 9c:75:4c:c0:b7:61:48:52:e5:d0:f7:b9:73:fd:4a: 45:f6:b0:75:0f:74:da:e4:a7:00:b5:4c:30:35:96: c4:b5:17:db:ce:af:77:f0:9a:a3:ce:da:03:40:ba: ba:f6:f5:5f:25:5c:6a:5b:45:03:18:47:ef:52:fa: 6c:d4:9b:84:f3:a1:c1:83:a0:eb:5c:99:f9:40:3b: 6b:35:f9:a6:68:26:e2:27:85:3d:87:8c:84:83:46: 23:de:62:a4:4c:1b:35:06:65:99:93:d0:42:c8:05: 8d:cc:7d:a8:8d:0b:2b:7a:ca:d4:61:fd:09:5a:8a: 68:e2:9a:12:ce:b0:be:9a:d9:4c:78:77:29:c2:f6: 99:76:9a:16:30:d8:63:db:fd:fc:7a:ee:b9:6e:26: 28:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:77:B9:E8:18:32:07:FB:95:51:FC:E5:73:2E:2A:2A:C5:4C:59:44 X509v3 Authority Key Identifier: keyid:6B:53:F8:0F:8E:88:1B:37:31:97:26:63:BA:18:97:B7:4A:92:D4:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1P4D46IGzcxlyZjuhiXt0qS1E0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:aa:6a:7f:9f:93:3a:e2:a2:63:4d:72:a4:b4:a6:de:09:96: bb:af:b3:a2:36:80:a3:40:a4:af:87:ff:b8:b1:42:ca:34:53: ac:f3:82:bf:32:c3:81:e0:46:e6:65:91:57:9f:12:73:d0:80: 31:ce:9f:d7:d5:a9:90:fd:99:21:c7:0c:dc:61:c2:d4:23:ce: 84:38:1a:7e:69:fe:e8:9e:f6:c2:65:c9:9d:c4:20:8b:89:09: 0a:f6:b5:93:96:ea:06:30:47:cb:b5:2c:4e:66:3c:34:e1:23: 80:d1:32:77:10:11:ca:58:e2:4d:a3:68:06:09:e9:03:d8:5c: 2c:65:09:7f:62:79:52:79:9a:0e:3d:37:10:a5:7e:25:d4:b6: 9f:aa:b6:1c:1a:68:97:62:87:fb:dc:36:58:27:2f:01:e4:3d: 5e:8d:bb:ce:a9:fc:7d:b0:de:71:d2:40:f7:89:26:cf:38:fa: 5c:f9:08:b9:05:85:8f:87:da:ae:23:cf:f0:96:20:48:28:df: c3:a8:38:59:5f:8e:89:3d:70:83:0c:da:11:c7:63:ab:c6:c1: c7:d2:2b:5a:10:5a:7c:de:7c:8e:91:c4:2e:58:0b:72:5a:01: d5:63:f2:bd:81:1e:02:76:a6:33:ac:1f:65:72:16:cd:73:86: f7:ae:7b:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTkxRDMxMTAvBgNVBAUTKDZCNTNGODBGOEU4ODFCMzczMTk3MjY2M0JBMTg5N0I3 NEE5MkQ0NEQwHhcNMjUwNDI3MDIxMDM3WhcNMjUwNTA0MDIxMDM3WjAYMRYwFAYD VQQDEw02ODBkOTIxZC04Y2QyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo+HVjWb13FI0IZIOeOd11Jywzrijoa5JFwRumcMx/0AMttAA3W8oWZAEq5XE 1wMM3dG4Vvs+qb3+rV/1E/fWcoj5njxIXC3/VITTGlq1BVaDxgNZiPqdcbR/nQDt 3swa0p26XQZLWzCcdUzAt2FIUuXQ97lz/UpF9rB1D3Ta5KcAtUwwNZbEtRfbzq93 8JqjztoDQLq69vVfJVxqW0UDGEfvUvps1JuE86HBg6DrXJn5QDtrNfmmaCbiJ4U9 h4yEg0Yj3mKkTBs1BmWZk9BCyAWNzH2ojQsresrUYf0JWopo4poSzrC+mtlMeHcp wvaZdpoWMNhj2/38eu65biYoFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMB3uegY Mgf7lVH85XMuKirFTFlEMB8GA1UdIwQYMBaAFGtT+A+OiBs3MZcmY7oYl7dKktRN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTFEMy81RkEzNkUzNDg5 MjMxMUVEQkNBMjk2MTNDNEY5QUUwMi9hMVA0RDQ2SUd6Y3hseVpqdWhpWHQwcVMx RTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ExUDRENDZJR3pjeGx5Wmp1aGlYdDBxUzFFMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTFEMy81RkEzNkUzNDg5MjMxMUVEQkNBMjk2MTNDNEY5QUUwMi9hMVA0RDQ2SUd6 Y3hseVpqdWhpWHQwcVMxRTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdqmp/n5M64qJjTXKktKbeCZa7r7OiNoCjQKSvh/+4sULKNFOs84K/ MsOB4EbmZZFXnxJz0IAxzp/X1amQ/ZkhxwzcYcLUI86EOBp+af7onvbCZcmdxCCL iQkK9rWTluoGMEfLtSxOZjw04SOA0TJ3EBHKWOJNo2gGCekD2FwsZQl/YnlSeZoO PTcQpX4l1LafqrYcGmiXYof73DZYJy8B5D1ejbvOqfx9sN5x0kD3iSbPOPpc+Qi5 BYWPh9quI8/wliBIKN/DqDhZX46JPXCDDNoRx2OrxsHH0itaEFp83nyOkcQuWAty WgHVY/K9gR4CdqYzrB9lchbNc4b3rntp -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:00 2025 by rpki-client on console.sobornost.net