$ rpki-client -vvf rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft File: gp8PQIhN2ZESEAWwfQmiy_-03sY.mft (raw, json) Hash identifier: yPPxJUqnvgtp4ufoAxIrsCexenfA0Oi3UJoIusnARxw= Subject key identifier: C0:51:E2:4B:87:34:06:37:0C:14:E8:97:3C:71:3A:9C:68:4C:62:75 Authority key identifier: 82:9F:0F:40:88:4D:D9:91:12:10:05:B0:7D:09:A2:CB:FF:B4:DE:C6 Certificate issuer: /CN=A91A16CF/serialNumber=829F0F40884DD991121005B07D09A2CBFFB4DEC6 Certificate serial: 0BE1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft Manifest number: 0BD0 Signing time: Mon 28 Apr 2025 19:12:45 +0000 Manifest this update: Mon 28 Apr 2025 19:12:44 +0000 Manifest next update: Mon 05 May 2025 19:12:44 +0000 Files and hashes: 1: gp8PQIhN2ZESEAWwfQmiy_-03sY.crl (hash: P4dlWE/+/P76jqOHSfbOr0fOR11pwLjcc1tB4SmaJ3s=) 2: 46D7B1B468F911EFAB3D9424C4F9AE02.roa (hash: onDSKcNFc/pDMIziyGqjtuK2E8Imk/xI2T23hdeIbB0=) 3: 13DE95F668FA11EFAE700D5FC4F9AE02.roa (hash: sv0g0tboRsfsbJ2uarFSxGBIzB+s+V9JKt78rjuG5CQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.crl rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 19:12:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3041 (0xbe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A16CF, serialNumber=829F0F40884DD991121005B07D09A2CBFFB4DEC6 Validity Not Before: Apr 28 19:12:44 2025 GMT Not After : May 5 19:12:44 2025 GMT Subject: CN=680fd32d-4d5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:78:6b:1c:66:a3:a9:97:bd:90:57:99:3d:df: df:42:8a:b4:71:0a:19:47:ee:1e:d9:86:2a:1f:ac: ca:99:c3:77:fe:99:79:ba:72:f4:f6:76:b0:14:01: d3:75:aa:57:63:b4:60:2f:08:b8:02:34:d0:95:40: cd:5a:ab:0c:5a:a6:a3:fa:d3:c2:d6:fa:ea:66:94: 26:50:9f:8a:b4:e8:8c:c1:2a:f4:a6:b7:dd:b7:8d: 63:d0:cb:dd:b9:ef:a2:fd:f1:0c:3d:aa:ef:c1:dc: 97:30:bd:16:e2:f0:cd:fa:91:f7:f1:d4:7e:93:94: 3c:b7:d5:ed:8f:c7:39:33:cd:19:aa:29:f3:c6:c0: 89:fd:51:01:75:8a:7d:1f:9c:24:f0:16:95:7b:1e: df:ee:45:3b:03:58:44:e4:50:a5:d1:3c:4e:c4:71: a5:c0:00:e0:aa:ca:0d:0b:77:a7:15:0b:72:b1:c4: ba:92:79:a8:3c:03:95:61:2b:77:4a:08:9d:8f:bb: 2e:64:c1:df:b8:73:47:05:75:e6:dd:8b:af:02:75: 51:2a:c9:60:d1:6d:ae:2e:55:5c:dd:05:6b:cf:cf: 96:47:59:1b:e1:fb:01:53:69:00:23:ef:43:18:5f: 19:f7:4b:83:3c:cd:64:c1:85:01:4c:40:82:4c:4d: ca:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:51:E2:4B:87:34:06:37:0C:14:E8:97:3C:71:3A:9C:68:4C:62:75 X509v3 Authority Key Identifier: keyid:82:9F:0F:40:88:4D:D9:91:12:10:05:B0:7D:09:A2:CB:FF:B4:DE:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:67:d2:e3:21:8d:ee:8c:73:be:a6:6b:47:22:f0:0a:9c:20: e1:90:47:49:23:d1:4d:e7:4b:19:55:1d:a9:1a:39:72:42:7d: 8c:80:7c:5e:11:50:16:2e:84:37:5c:5b:55:46:71:38:55:3d: cf:72:38:d3:9e:10:df:66:47:16:a8:e3:e3:6d:13:78:2f:e0: ad:28:2f:2f:98:aa:bc:67:c0:de:e7:b2:71:ed:ae:c1:c7:bc: 23:ae:8a:17:19:1d:81:ec:cc:f9:84:09:d4:0f:5a:ac:49:28: bb:10:98:74:2f:89:5b:20:fc:aa:43:56:2e:2d:f3:dc:b1:ee: ae:9c:3e:ca:29:98:8a:ff:aa:32:bf:97:f1:3c:b4:22:16:b2: 65:90:67:60:95:e8:db:08:75:fc:62:a6:89:5d:98:3e:31:11: 3b:67:52:2b:7d:29:17:0b:99:03:2d:93:71:4f:b6:a1:a0:44: 92:dc:d2:4f:25:ac:02:0f:d0:8d:88:67:3d:9b:c1:40:e7:d8: f3:0d:cb:5e:df:12:76:cd:b8:17:40:a7:59:3b:31:eb:96:2b: 60:e7:63:3a:16:1c:9f:fa:38:63:a3:96:06:63:2e:aa:48:9e: 4d:2b:32:d9:7f:ff:7d:2f:b7:8f:6b:be:1e:c1:db:da:0b:f5: 07:8e:aa:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTE2Q0YxMTAvBgNVBAUTKDgyOUYwRjQwODg0REQ5OTExMjEwMDVCMDdEMDlBMkNC RkZCNERFQzYwHhcNMjUwNDI4MTkxMjQ0WhcNMjUwNTA1MTkxMjQ0WjAYMRYwFAYD VQQDEw02ODBmZDMyZC00ZDVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt3hrHGajqZe9kFeZPd/fQoq0cQoZR+4e2YYqH6zKmcN3/pl5unL09nawFAHT dapXY7RgLwi4AjTQlUDNWqsMWqaj+tPC1vrqZpQmUJ+KtOiMwSr0prfdt41j0Mvd ue+i/fEMParvwdyXML0W4vDN+pH38dR+k5Q8t9Xtj8c5M80ZqinzxsCJ/VEBdYp9 H5wk8BaVex7f7kU7A1hE5FCl0TxOxHGlwADgqsoNC3enFQtyscS6knmoPAOVYSt3 Sgidj7suZMHfuHNHBXXm3YuvAnVRKslg0W2uLlVc3QVrz8+WR1kb4fsBU2kAI+9D GF8Z90uDPM1kwYUBTECCTE3KkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMBR4kuH NAY3DBTolzxxOpxoTGJ1MB8GA1UdIwQYMBaAFIKfD0CITdmREhAFsH0Josv/tN7G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTZDRi8yQ0FENTA4ODE5 QTIxMUVBQUU4MTFDNzFDNEY5QUUwMi9ncDhQUUloTjJaRVNFQVd3ZlFtaXlfLTAz c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dwOFBRSWhOMlpFU0VBV3dmUW1peV8tMDNzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTZDRi8yQ0FENTA4ODE5QTIxMUVBQUU4MTFDNzFDNEY5QUUwMi9ncDhQUUloTjJa RVNFQVd3ZlFtaXlfLTAzc1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCZ9LjIY3ujHO+pmtHIvAKnCDhkEdJI9FN50sZVR2pGjlyQn2MgHxe EVAWLoQ3XFtVRnE4VT3PcjjTnhDfZkcWqOPjbRN4L+CtKC8vmKq8Z8De57Jx7a7B x7wjrooXGR2B7Mz5hAnUD1qsSSi7EJh0L4lbIPyqQ1YuLfPcse6unD7KKZiK/6oy v5fxPLQiFrJlkGdglejbCHX8YqaJXZg+MRE7Z1IrfSkXC5kDLZNxT7ahoESS3NJP JawCD9CNiGc9m8FA59jzDcte3xJ2zbgXQKdZOzHrlitg52M6Fhyf+jhjo5YGYy6q SJ5NKzLZf/99L7ePa74ewdvaC/UHjqpN -----END CERTIFICATE-----Generated at Mon Apr 28 23:05:41 2025 by rpki-client on console.sobornost.net