$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft File: fSkuhkI7U8Czc7eZZYghkTSp5hA.mft (raw, json) Hash identifier: aptfnbZNBa5xpe5WdD19ojASsSZth6dXdUHZZl3EOwM= Subject key identifier: 9A:21:B4:65:9B:74:10:38:39:7B:1A:6C:5C:40:73:10:9D:74:35:71 Authority key identifier: 7D:29:2E:86:42:3B:53:C0:B3:73:B7:99:65:88:21:91:34:A9:E6:10 Certificate issuer: /CN=A91A3430/serialNumber=7D292E86423B53C0B373B7996588219134A9E610 Certificate serial: 0CD0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft Manifest number: 0CC7 Signing time: Sat 26 Apr 2025 18:00:21 +0000 Manifest this update: Sat 26 Apr 2025 18:00:21 +0000 Manifest next update: Sat 03 May 2025 18:00:21 +0000 Files and hashes: 1: fSkuhkI7U8Czc7eZZYghkTSp5hA.crl (hash: GN31uZcqAOe9oomkwtmV2sDZREarWgJjT3AFbBEXu3k=) 2: 7B3163F0072A11EA9E314D4CC4F9AE02.roa (hash: 8KRCIYlWeIU1RFVFOTA+MnkOIQ/xaefXlo2pRQaFi20=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.crl rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 18:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3280 (0xcd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3430, serialNumber=7D292E86423B53C0B373B7996588219134A9E610 Validity Not Before: Apr 26 18:00:21 2025 GMT Not After : May 3 18:00:21 2025 GMT Subject: CN=680d1f35-0e70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:dd:dc:c5:c5:84:3d:fb:2d:b9:13:06:49:b8: 0a:ef:a2:23:f2:d2:a3:cc:e8:f1:9d:cd:4d:81:5d: 57:35:e4:72:2a:6f:54:25:5e:70:a4:a7:11:c4:ea: be:5e:c1:1b:24:9e:ae:3d:74:e5:1a:95:64:8d:79: 14:bf:3e:fd:d1:05:f0:b6:8f:14:b6:37:03:de:1a: 73:fd:04:b0:00:bb:1e:d7:e7:01:a9:3a:b8:b7:55: c6:66:ff:7f:65:c6:af:a6:42:e8:ef:51:08:5e:c0: 27:15:2e:7c:54:f6:d8:b7:43:d5:2e:a6:18:ee:ae: 8f:0a:b4:c0:aa:de:d9:dd:4c:31:68:5a:74:a7:d5: 23:42:06:dd:86:46:25:21:0b:0c:0b:80:48:a5:30: 3c:f3:1e:19:5c:8f:1b:ea:d1:c5:19:d2:92:cb:22: 02:18:f1:85:80:42:dc:1a:73:6a:b6:2f:e8:85:94: 8f:9c:40:7c:fb:8c:cb:6e:4a:92:8f:ed:dd:75:e4: 76:d0:29:4d:3a:00:50:76:e3:1e:7b:32:46:70:c8: 32:08:d5:ac:2c:6d:20:9b:f3:ff:72:23:a3:a9:d0: ac:c3:b2:3f:28:80:9e:ca:70:01:7f:21:30:85:70: a9:f3:be:05:3a:f5:81:7b:55:3d:62:14:35:3c:9a: 8e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:21:B4:65:9B:74:10:38:39:7B:1A:6C:5C:40:73:10:9D:74:35:71 X509v3 Authority Key Identifier: keyid:7D:29:2E:86:42:3B:53:C0:B3:73:B7:99:65:88:21:91:34:A9:E6:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:72:fd:58:01:81:7f:09:41:03:fd:16:f0:e1:93:e7:4f:e5: d4:ba:b3:45:b2:dd:cd:5a:71:b5:c6:c5:c2:8a:39:4c:1f:05: cc:a4:96:ef:7f:26:e4:8a:b3:1d:64:2f:9d:24:b0:b9:24:5f: 4a:58:da:f8:a6:92:12:44:e6:14:13:45:ba:6c:fa:2f:e1:0a: 54:d0:e1:f1:7b:cc:94:27:01:f6:de:6d:87:c5:fd:a4:c0:f5: e9:7d:fe:f3:ed:50:d3:f3:14:87:1f:e4:c0:14:68:db:64:9f: b9:e1:91:3f:ff:47:42:5c:73:e6:46:d8:ca:ba:85:73:81:d9: 86:74:52:9e:ef:63:26:29:42:f9:b4:f8:86:ca:f0:3a:01:ed: 23:45:39:11:12:80:25:ff:c7:3a:56:01:cc:d4:4e:d6:43:e7: ea:95:87:6d:5f:d8:8e:5c:52:a7:10:79:9b:b9:07:95:4e:ba: 1f:cb:b7:91:88:30:d7:cc:18:d2:75:91:f9:b3:63:f5:84:7e: 4d:01:a5:df:3b:54:d3:b4:f6:65:3c:71:40:0b:3b:4d:e2:bd: 02:4d:de:3f:af:e1:a1:70:33:2d:bd:93:bb:d2:6b:2b:89:75: c9:81:28:80:3f:cb:09:49:8a:67:aa:90:0b:37:67:d9:68:4e: 19:fe:24:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDNAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM0MzAxMTAvBgNVBAUTKDdEMjkyRTg2NDIzQjUzQzBCMzczQjc5OTY1ODgyMTkx MzRBOUU2MTAwHhcNMjUwNDI2MTgwMDIxWhcNMjUwNTAzMTgwMDIxWjAYMRYwFAYD VQQDEw02ODBkMWYzNS0wZTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzN3cxcWEPfstuRMGSbgK76Ij8tKjzOjxnc1NgV1XNeRyKm9UJV5wpKcRxOq+ XsEbJJ6uPXTlGpVkjXkUvz790QXwto8UtjcD3hpz/QSwALse1+cBqTq4t1XGZv9/ ZcavpkLo71EIXsAnFS58VPbYt0PVLqYY7q6PCrTAqt7Z3UwxaFp0p9UjQgbdhkYl IQsMC4BIpTA88x4ZXI8b6tHFGdKSyyICGPGFgELcGnNqti/ohZSPnEB8+4zLbkqS j+3ddeR20ClNOgBQduMeezJGcMgyCNWsLG0gm/P/ciOjqdCsw7I/KICeynABfyEw hXCp874FOvWBe1U9YhQ1PJqOkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJohtGWb dBA4OXsabFxAcxCddDVxMB8GA1UdIwQYMBaAFH0pLoZCO1PAs3O3mWWIIZE0qeYQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzQzMC84NkFDODlEMEU4 N0IxMUU5QTFFRDVCNDdDNEY5QUUwMi9mU2t1aGtJN1U4Q3pjN2VaWllnaGtUU3A1 aEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZTa3Voa0k3VThDemM3ZVpaWWdoa1RTcDVoQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzQzMC84NkFDODlEMEU4N0IxMUU5QTFFRDVCNDdDNEY5QUUwMi9mU2t1aGtJN1U4 Q3pjN2VaWllnaGtUU3A1aEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZcv1YAYF/CUED/Rbw4ZPnT+XUurNFst3NWnG1xsXCijlMHwXMpJbv fybkirMdZC+dJLC5JF9KWNr4ppISROYUE0W6bPov4QpU0OHxe8yUJwH23m2Hxf2k wPXpff7z7VDT8xSHH+TAFGjbZJ+54ZE//0dCXHPmRtjKuoVzgdmGdFKe72MmKUL5 tPiGyvA6Ae0jRTkREoAl/8c6VgHM1E7WQ+fqlYdtX9iOXFKnEHmbuQeVTrofy7eR iDDXzBjSdZH5s2P1hH5NAaXfO1TTtPZlPHFACztN4r0CTd4/r+GhcDMtvZO70msr iXXJgSiAP8sJSYpnqpALN2fZaE4Z/iRL -----END CERTIFICATE-----Generated at Sat Apr 26 21:01:59 2025 by rpki-client on console.sobornost.net