$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft File: JM96JUWnTqJVAgG27duZ-b7bgbU.mft (raw, json) Hash identifier: HMlZo6PKBZxy76mtBEQBQoM44f2VNDdc1hbiTMmx3jc= Subject key identifier: 04:BB:A5:4D:79:14:79:26:D1:5A:07:96:B7:2E:EF:7D:75:02:63:E1 Authority key identifier: 24:CF:7A:25:45:A7:4E:A2:55:02:01:B6:ED:DB:99:F9:BE:DB:81:B5 Certificate issuer: /CN=A91A0C55/serialNumber=24CF7A2545A74EA2550201B6EDDB99F9BEDB81B5 Certificate serial: 1CB2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft Manifest number: 1C92 Signing time: Thu 24 Apr 2025 16:11:25 +0000 Manifest this update: Thu 24 Apr 2025 16:11:24 +0000 Manifest next update: Thu 01 May 2025 16:11:24 +0000 Files and hashes: 1: JM96JUWnTqJVAgG27duZ-b7bgbU.crl (hash: OgTOOZ/wKhnj/u/5IBCES1YVA6OZiBStfW4c768VXS0=) 2: FCA6FF8C749E11E8B07CAE80C4F9AE02.roa (hash: k/o6QQeGjIebtK3cSFt7OP5rP3xEncXYao5ZQWxg/pA=) 3: 91269EDA6D4111EC8A648F1EC4F9AE02.roa (hash: DWn9jCobSOgDEKS3edLHIgrtHpnKwI5elc8EFo1f8dA=) 4: FE6E6B48749E11E8B07CAE80C4F9AE02.roa (hash: Ruri1qHSgWDfSjLB7GMruorS7uq7+YoW4Hew6bZFFkY=) 5: FD4BF398749E11E8B07CAE80C4F9AE02.roa (hash: FTl4166fURxtlu8VB5wTYmb/CvUhAT5RdQV1AnE8x5Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.crl rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:11:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7346 (0x1cb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0C55, serialNumber=24CF7A2545A74EA2550201B6EDDB99F9BEDB81B5 Validity Not Before: Apr 24 16:11:24 2025 GMT Not After : May 1 16:11:24 2025 GMT Subject: CN=680a62ad-67f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:25:8e:83:80:4b:6c:5d:1b:b2:12:1e:2a:35: f0:fe:dc:5d:1f:ab:cb:78:e4:f2:5e:7e:fc:71:26: 57:a5:ad:7f:8d:a8:04:98:9a:6d:f5:b5:fd:1a:48: bd:48:1d:8b:62:53:43:f2:c6:c3:26:8b:66:02:e5: 64:ac:1b:50:ca:f3:47:2c:b1:b8:9d:6a:d1:14:10: 2f:a5:fe:6a:a6:5b:1b:26:79:ff:5b:50:4f:bb:c1: c2:ec:0c:6c:b6:60:3d:64:ee:12:ef:fa:95:17:f3: 30:34:60:7e:6d:a3:94:31:ea:f2:6f:62:a1:25:a0: 25:4b:be:15:bc:0c:d9:bf:9e:1b:3f:c8:1a:37:2f: 96:02:7e:44:27:42:ef:10:25:f4:d9:4b:5b:9f:bc: e9:a2:2a:1f:4f:7d:64:9e:dd:5c:d5:f4:6f:4b:cb: 10:67:02:6e:90:ca:d0:0b:f6:65:3c:d5:aa:21:bc: a3:95:a1:68:5a:31:8a:45:c8:78:f8:55:51:49:b4: c0:79:44:db:07:d7:d9:f6:b7:60:1b:39:59:a1:ec: b8:26:d3:84:ba:73:40:f3:ef:70:b3:68:07:d2:6f: 7d:14:0e:89:d0:92:78:0a:33:a7:ca:93:41:a2:d1: 7c:84:64:e4:78:be:6d:85:61:99:e9:66:3e:51:ed: 84:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:BB:A5:4D:79:14:79:26:D1:5A:07:96:B7:2E:EF:7D:75:02:63:E1 X509v3 Authority Key Identifier: keyid:24:CF:7A:25:45:A7:4E:A2:55:02:01:B6:ED:DB:99:F9:BE:DB:81:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:c6:b9:c5:48:d3:5f:ae:9c:27:39:c9:c6:e8:24:6c:4a:cb: d0:aa:f9:bf:39:68:f3:37:61:2e:ce:61:fa:e4:ad:06:39:3d: dc:03:ce:ab:01:df:56:6a:49:b6:33:3b:aa:41:5d:5a:2a:b4: f0:dc:14:28:27:99:47:92:3a:77:9b:95:cd:8e:bd:4f:76:8d: c4:ec:d0:9d:18:ac:ac:d2:88:b0:14:62:a8:c7:14:1a:b7:f7: ca:87:6a:fc:37:f3:7b:53:65:ea:62:eb:12:92:e2:db:0c:e4: 93:c6:1a:d6:a6:b3:e1:cd:8d:b8:a9:78:57:f6:f7:4d:e6:cc: c6:06:66:e4:82:c3:3a:3f:0e:b4:03:36:81:f5:b4:b7:55:51: 3d:d3:cf:22:fa:72:77:4d:36:ce:56:91:93:be:40:04:13:c8: 10:45:69:e5:16:05:66:bf:c7:a6:0d:6c:e9:49:53:4f:13:20: a6:25:9d:56:59:23:3e:f6:10:e0:d5:c4:06:3d:3a:e8:47:bb: f4:cd:c3:e5:0e:44:92:2d:e1:95:60:df:9a:8f:ad:b5:ce:4b: fe:84:04:3a:9a:99:1d:6b:d2:44:e1:ae:c2:b5:fe:2f:44:0e: 71:8b:b7:ae:73:cf:a9:4e:9b:bf:63:e0:43:6b:63:d2:74:3f: ac:95:cf:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBDNTUxMTAvBgNVBAUTKDI0Q0Y3QTI1NDVBNzRFQTI1NTAyMDFCNkVEREI5OUY5 QkVEQjgxQjUwHhcNMjUwNDI0MTYxMTI0WhcNMjUwNTAxMTYxMTI0WjAYMRYwFAYD VQQDEw02ODBhNjJhZC02N2Y5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5SWOg4BLbF0bshIeKjXw/txdH6vLeOTyXn78cSZXpa1/jagEmJpt9bX9Gki9 SB2LYlND8sbDJotmAuVkrBtQyvNHLLG4nWrRFBAvpf5qplsbJnn/W1BPu8HC7Axs tmA9ZO4S7/qVF/MwNGB+baOUMeryb2KhJaAlS74VvAzZv54bP8gaNy+WAn5EJ0Lv ECX02Utbn7zpoiofT31knt1c1fRvS8sQZwJukMrQC/ZlPNWqIbyjlaFoWjGKRch4 +FVRSbTAeUTbB9fZ9rdgGzlZoey4JtOEunNA8+9ws2gH0m99FA6J0JJ4CjOnypNB otF8hGTkeL5thWGZ6WY+Ue2EuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAS7pU15 FHkm0VoHlrcu7311AmPhMB8GA1UdIwQYMBaAFCTPeiVFp06iVQIBtu3bmfm+24G1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEM1NS8yRUE3QTQ2Q0NF NzExMUU2OUUyQjk0NDRDNEY5QUUwMi9KTTk2SlVXblRxSlZBZ0cyN2R1Wi1iN2Jn YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pNOTZKVVduVHFKVkFnRzI3ZHVaLWI3YmdiVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEM1NS8yRUE3QTQ2Q0NFNzExMUU2OUUyQjk0NDRDNEY5QUUwMi9KTTk2SlVXblRx SlZBZ0cyN2R1Wi1iN2JnYlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALxrnFSNNfrpwnOcnG6CRsSsvQqvm/OWjzN2EuzmH65K0GOT3cA86r Ad9Wakm2MzuqQV1aKrTw3BQoJ5lHkjp3m5XNjr1Pdo3E7NCdGKys0oiwFGKoxxQa t/fKh2r8N/N7U2XqYusSkuLbDOSTxhrWprPhzY24qXhX9vdN5szGBmbkgsM6Pw60 AzaB9bS3VVE9088i+nJ3TTbOVpGTvkAEE8gQRWnlFgVmv8emDWzpSVNPEyCmJZ1W WSM+9hDg1cQGPTroR7v0zcPlDkSSLeGVYN+aj621zkv+hAQ6mpkda9JE4a7Ctf4v RA5xi7euc8+pTpu/Y+BDa2PSdD+slc95 -----END CERTIFICATE-----Generated at Thu Apr 24 18:09:17 2025 by rpki-client on console.sobornost.net