$ rpki-client -vvf rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft File: KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft (raw, json) Hash identifier: 7iFaGxz1HKQnQq7cjmopRQ3HAvjpHxI4MotOOjrQfN0= Subject key identifier: D2:BC:A7:83:37:E1:42:BE:8F:27:2C:DA:22:2A:A2:F2:DB:EA:98:61 Authority key identifier: 28:68:2E:C7:23:CC:E3:36:18:5B:33:30:20:13:FF:00:60:DD:E0:9A Certificate issuer: /CN=A91A308F/serialNumber=28682EC723CCE336185B33302013FF0060DDE09A Certificate serial: 0A18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft Manifest number: 0A12 Signing time: Mon 28 Apr 2025 20:14:39 +0000 Manifest this update: Mon 28 Apr 2025 20:14:38 +0000 Manifest next update: Mon 05 May 2025 20:14:38 +0000 Files and hashes: 1: KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl (hash: uPWkdw5voyUZBIrgFqEUk4SPNqNyqhtF8AG7wPvaXqQ=) 2: 6303AF646F8911EA92087E39C4F9AE02.roa (hash: 9EGc7zo1rzNKxXV6Dja051NIq2qalXgFXf2PEqhm154=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:14:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2584 (0xa18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A308F, serialNumber=28682EC723CCE336185B33302013FF0060DDE09A Validity Not Before: Apr 28 20:14:38 2025 GMT Not After : May 5 20:14:38 2025 GMT Subject: CN=680fe1af-adae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c6:01:02:f5:b6:76:ae:c1:66:e6:70:82:ce: 6e:fa:11:11:84:73:5c:41:21:d4:df:8c:15:62:19: 25:01:46:f9:e1:a8:a6:4e:bb:39:46:52:c6:26:65: 1b:f1:2d:e9:c6:42:df:e7:41:1c:d7:a5:93:10:8b: 83:89:e3:03:11:9d:b2:f9:93:4c:f3:5e:39:86:b3: d6:ac:fc:76:bc:41:a4:ea:7a:81:06:79:eb:af:10: c5:fc:29:c8:5d:d2:fa:2a:1f:37:c2:a6:d1:6b:af: 92:df:5a:61:8a:a7:49:a7:2b:27:ca:a3:6c:ac:7f: 3d:58:13:0d:cb:9c:26:e2:cd:21:41:5f:d9:d8:b7: d4:f7:1f:81:67:88:8b:37:97:ba:13:4b:9e:e3:bd: 16:0c:a3:84:55:c0:ac:21:5f:27:76:dd:64:3b:97: 6b:b3:8a:b6:2f:8d:d8:42:8e:f5:d3:e7:75:05:c2: 78:56:74:f9:68:5a:7f:44:b4:00:5c:7e:cf:c2:fa: a0:e5:e7:57:6f:12:c1:a4:25:c6:ec:99:37:54:8f: 50:de:84:71:28:89:d5:6a:9b:6f:ad:22:06:d2:ec: a7:7d:df:92:7b:59:02:96:1b:82:18:3f:b9:ab:d8: 52:cb:3a:7d:32:13:13:c6:3e:d6:f6:98:9b:f3:75: a6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:BC:A7:83:37:E1:42:BE:8F:27:2C:DA:22:2A:A2:F2:DB:EA:98:61 X509v3 Authority Key Identifier: keyid:28:68:2E:C7:23:CC:E3:36:18:5B:33:30:20:13:FF:00:60:DD:E0:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:eb:01:0a:78:03:ad:0c:27:1a:71:3b:32:e7:73:92:91:73: 20:c7:2d:0f:90:cd:5b:fd:ec:70:8f:96:94:e1:37:2b:43:f6: 06:e2:bd:71:15:d4:24:87:40:9c:42:3b:14:90:b2:21:76:40: fb:4a:63:52:ee:28:1d:09:97:0b:35:a4:28:7c:6f:66:fd:73: 67:70:62:0f:17:a4:b8:76:bb:08:cb:15:c3:aa:7c:4d:8c:bc: 37:88:49:0e:e2:bd:38:e1:f8:08:10:99:6b:2c:45:9a:80:17: 19:35:a0:5b:b6:39:cf:56:7d:78:fa:44:c1:bc:83:e6:fb:08: f2:37:ad:1a:47:5c:b2:66:d0:ab:28:10:94:9b:b6:3b:78:8c: 0e:65:44:59:59:4d:af:1d:07:3c:cc:a7:4b:7d:c7:23:4c:22: 25:58:dd:0d:18:53:a7:7b:fe:81:bb:0f:71:72:b8:2c:c7:35: a1:ca:76:c1:36:b9:0e:78:55:64:74:6e:50:1e:14:20:04:37: 13:fd:39:2e:9f:35:0c:a3:70:59:eb:14:10:da:9f:3e:48:2a: b5:6f:9e:07:f9:88:3c:14:c6:c2:62:95:20:52:09:01:7c:cb: f1:34:79:79:81:5b:8f:8a:cd:57:dd:39:6c:3c:e5:75:30:a9: 8e:87:56:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICChgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTMwOEYxMTAvBgNVBAUTKDI4NjgyRUM3MjNDQ0UzMzYxODVCMzMzMDIwMTNGRjAw NjBEREUwOUEwHhcNMjUwNDI4MjAxNDM4WhcNMjUwNTA1MjAxNDM4WjAYMRYwFAYD VQQDEw02ODBmZTFhZi1hZGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu8YBAvW2dq7BZuZwgs5u+hERhHNcQSHU34wVYhklAUb54aimTrs5RlLGJmUb 8S3pxkLf50Ec16WTEIuDieMDEZ2y+ZNM8145hrPWrPx2vEGk6nqBBnnrrxDF/CnI XdL6Kh83wqbRa6+S31phiqdJpysnyqNsrH89WBMNy5wm4s0hQV/Z2LfU9x+BZ4iL N5e6E0ue470WDKOEVcCsIV8ndt1kO5drs4q2L43YQo710+d1BcJ4VnT5aFp/RLQA XH7Pwvqg5edXbxLBpCXG7Jk3VI9Q3oRxKInVaptvrSIG0uynfd+Se1kClhuCGD+5 q9hSyzp9MhMTxj7W9pib83WmAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNK8p4M3 4UK+jycs2iIqovLb6phhMB8GA1UdIwQYMBaAFChoLscjzOM2GFszMCAT/wBg3eCa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzA4Ri9COUIzNDQ1QzZG ODcxMUVBOTNBOUY5MzNDNEY5QUUwMi9LR2d1eHlQTTR6WVlXek13SUJQX0FHRGQ0 Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tHZ3V4eVBNNHpZWVd6TXdJQlBfQUdEZDRKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzA4Ri9COUIzNDQ1QzZGODcxMUVBOTNBOUY5MzNDNEY5QUUwMi9LR2d1eHlQTTR6 WVlXek13SUJQX0FHRGQ0Sm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBL6wEKeAOtDCcacTsy53OSkXMgxy0PkM1b/exwj5aU4TcrQ/YG4r1x FdQkh0CcQjsUkLIhdkD7SmNS7igdCZcLNaQofG9m/XNncGIPF6S4drsIyxXDqnxN jLw3iEkO4r044fgIEJlrLEWagBcZNaBbtjnPVn14+kTBvIPm+wjyN60aR1yyZtCr KBCUm7Y7eIwOZURZWU2vHQc8zKdLfccjTCIlWN0NGFOne/6Buw9xcrgsxzWhynbB NrkOeFVkdG5QHhQgBDcT/TkunzUMo3BZ6xQQ2p8+SCq1b54H+Yg8FMbCYpUgUgkB fMvxNHl5gVuPis1X3TlsPOV1MKmOh1Zo -----END CERTIFICATE-----Generated at Mon Apr 28 23:05:42 2025 by rpki-client on console.sobornost.net