$ rpki-client -vvf rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft File: gnj0fexbetwgGJf5m8xuK_qI0BU.mft (raw, json) Hash identifier: +iF5IiH9Im7yEoh0cim/tTcxZ1gFLQS8VSABw1QKWR8= Subject key identifier: 32:90:FA:87:7F:04:FC:FE:FB:0C:20:67:B1:AF:E9:16:CC:D7:C8:22 Authority key identifier: 82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15 Certificate issuer: /CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015 Certificate serial: 3F4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft Manifest number: 3AE1 Signing time: Sat 26 Apr 2025 14:19:57 +0000 Manifest this update: Sat 26 Apr 2025 14:19:56 +0000 Manifest next update: Sat 03 May 2025 14:19:56 +0000 Files and hashes: 1: gnj0fexbetwgGJf5m8xuK_qI0BU.crl (hash: XgsNSgH4JvT+Jy2ehO7N7jYTWFavk040US9/9irkW+4=) 2: F0F17BEC9D5911EEAA9F0413C4F9AE02.roa (hash: PALIyVWAsvtscgbg+sm73eiiYRuD68MSbPN0evXTaxE=) 3: EF57185A9D5911EEAA9F0413C4F9AE02.roa (hash: XIkS3fiVeDxNk75oObZc/USCn6ndycSaKmVzL41B8c0=) 4: CB608BD0D13311EE8B61C185C4F9AE02.roa (hash: GhiisK+xkE915yTtyPUFYsaGYRY3S2Kd3NQqsg2cf3U=) 5: F025BAB69D5911EEAA9F0413C4F9AE02.roa (hash: YU4YZ74T7xW8XI8cuLhtjNp6mdFgmcLPCumM3sCTd+o=) 6: AF4D576AC55E11E9A634E487C4F9AE02.roa (hash: 4LrbAymfyErsiUGk8ioJ8VeDxysNk9CIt+uac7LIaSg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 13:09:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16206 (0x3f4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A001E, serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015 Validity Not Before: Apr 26 14:19:56 2025 GMT Not After : May 3 14:19:56 2025 GMT Subject: CN=680ceb8d-db6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:45:24:a8:fa:b9:b1:ae:9d:b2:df:fc:35:f9: 0c:00:3e:31:cd:f3:ca:85:7f:8c:12:bf:65:91:bb: f0:28:62:b7:2a:c8:4f:d1:78:69:36:2e:03:c4:f8: 65:42:34:da:71:39:d1:97:0f:6a:a4:30:2b:b9:9d: 02:77:8d:3e:fc:ff:1f:e8:54:ef:41:e8:07:79:3b: 76:cf:2c:b0:c3:7f:a4:6b:72:f3:49:16:bd:12:19: fc:aa:cf:66:13:d6:a0:49:8e:5b:f1:33:49:53:07: 59:3e:ac:69:25:91:1d:b6:20:62:82:9d:b4:e8:06: eb:97:d4:19:4d:a4:6f:df:7d:b4:e0:cd:cb:36:4f: b0:6f:f5:8c:68:5a:95:75:34:5e:e5:37:f1:a3:30: a7:b6:e5:4b:da:ee:49:69:fb:a0:45:df:11:87:b3: 2f:6c:f8:6d:da:bf:d6:08:a3:77:60:06:03:2c:df: 31:50:00:a4:f5:1a:ae:55:a5:25:61:72:71:a1:e6: a5:2f:9a:f1:e4:68:24:05:35:96:a7:ca:80:7c:de: c8:57:85:cf:6b:72:26:2d:fc:eb:b7:af:0e:3b:7b: a8:40:fb:fd:9e:fa:dd:8f:27:20:64:e6:7d:7a:bf: 51:f9:af:68:5a:54:1f:5e:5f:96:49:5d:cf:df:e0: f5:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:90:FA:87:7F:04:FC:FE:FB:0C:20:67:B1:AF:E9:16:CC:D7:C8:22 X509v3 Authority Key Identifier: keyid:82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:3b:07:fb:25:bf:64:87:05:3a:73:63:8c:a2:50:41:1c:50: fb:2d:ae:e1:db:47:65:60:72:89:ac:51:90:47:27:0c:be:5f: 3c:26:e1:c4:9f:94:65:29:1d:e0:c0:8d:d7:98:30:f2:98:3e: 28:10:34:07:bf:af:b6:4d:e1:b9:dc:95:6f:6c:45:8d:da:0f: 77:b5:3b:10:5f:60:b0:7d:ac:16:4c:4e:0f:e8:54:04:69:20: fb:c3:6d:c3:e5:df:f1:db:1b:63:ac:8e:ea:66:bc:87:5b:0b: 87:8f:3e:7b:97:f4:74:a5:9e:b2:37:c0:44:61:24:b8:fb:d9: 3f:09:bf:e0:f8:28:e9:47:56:e6:34:28:f0:75:fa:08:03:cd: 3b:ec:ca:03:1d:5e:24:0c:62:94:a4:82:d8:fa:bc:87:64:d0: 54:b8:92:c3:c8:c2:c9:67:42:c7:0a:db:2f:36:b5:a3:e5:10: c3:58:49:03:e8:72:b5:33:db:c8:c0:2d:98:59:40:85:89:98: b9:92:5b:85:0a:25:db:89:d5:21:a1:a3:ec:8b:7d:2b:44:b9: 14:69:5a:b2:2b:f4:76:4a:5c:7b:dd:38:ec:86:b8:a5:eb:73: bb:87:93:1b:e8:7e:f9:be:ce:27:6e:4c:b9:d0:86:5d:b2:f5: 44:86:16:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICP04wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTAwMUUxMTAvBgNVBAUTKDgyNzhGNDdERUM1QjdBREMyMDE4OTdGOTlCQ0M2RTJC RkE4OEQwMTUwHhcNMjUwNDI2MTQxOTU2WhcNMjUwNTAzMTQxOTU2WjAYMRYwFAYD VQQDEw02ODBjZWI4ZC1kYjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt0UkqPq5sa6dst/8NfkMAD4xzfPKhX+MEr9lkbvwKGK3KshP0XhpNi4DxPhl QjTacTnRlw9qpDAruZ0Cd40+/P8f6FTvQegHeTt2zyyww3+ka3LzSRa9Ehn8qs9m E9agSY5b8TNJUwdZPqxpJZEdtiBigp206Abrl9QZTaRv33204M3LNk+wb/WMaFqV dTRe5TfxozCntuVL2u5JafugRd8Rh7MvbPht2r/WCKN3YAYDLN8xUACk9RquVaUl YXJxoealL5rx5GgkBTWWp8qAfN7IV4XPa3ImLfzrt68OO3uoQPv9nvrdjycgZOZ9 er9R+a9oWlQfXl+WSV3P3+D1nQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDKQ+od/ BPz++wwgZ7Gv6RbM18giMB8GA1UdIwQYMBaAFIJ49H3sW3rcIBiX+ZvMbiv6iNAV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDAxRS8zNUZBMEY1NjFE NzgxMUUyOTM3NzFGQzQwOEIwMkNEMi9nbmowZmV4YmV0d2dHSmY1bTh4dUtfcUkw QlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2duajBmZXhiZXR3Z0dKZjVtOHh1S19xSTBCVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDAxRS8zNUZBMEY1NjFENzgxMUUyOTM3NzFGQzQwOEIwMkNEMi9nbmowZmV4YmV0 d2dHSmY1bTh4dUtfcUkwQlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzOwf7Jb9khwU6c2OMolBBHFD7La7h20dlYHKJrFGQRycMvl88JuHE n5RlKR3gwI3XmDDymD4oEDQHv6+2TeG53JVvbEWN2g93tTsQX2CwfawWTE4P6FQE aSD7w23D5d/x2xtjrI7qZryHWwuHjz57l/R0pZ6yN8BEYSS4+9k/Cb/g+CjpR1bm NCjwdfoIA8077MoDHV4kDGKUpILY+ryHZNBUuJLDyMLJZ0LHCtsvNrWj5RDDWEkD 6HK1M9vIwC2YWUCFiZi5kluFCiXbidUhoaPsi30rRLkUaVqyK/R2Slx73Tjshril 63O7h5Mb6H75vs4nbky50IZdsvVEhhZr -----END CERTIFICATE-----Generated at Sat Apr 26 15:55:41 2025 by rpki-client on console.sobornost.net