$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft File: tAgYFca67ZihzJUKxvoQvGAFiQI.mft (raw, json) Hash identifier: l9cWHrAUXFPWb8zsFuSm4iKmZ43Npqj5ZpiFeYDfCHg= Subject key identifier: 34:6C:5D:A9:BB:01:75:18:4C:F2:28:74:92:28:65:67:DC:74:DA:5B Authority key identifier: B4:08:18:15:C6:BA:ED:98:A1:CC:95:0A:C6:FA:10:BC:60:05:89:02 Certificate issuer: /CN=A91A3F5D/serialNumber=B4081815C6BAED98A1CC950AC6FA10BC60058902 Certificate serial: C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft Manifest number: C0 Signing time: Sun 27 Apr 2025 04:47:14 +0000 Manifest this update: Sun 27 Apr 2025 04:47:14 +0000 Manifest next update: Sun 04 May 2025 04:47:14 +0000 Files and hashes: 1: tAgYFca67ZihzJUKxvoQvGAFiQI.crl (hash: vQbMm5UjaJ7w7UiL51bXug34emO7Ln2ZhkA2F86wNvY=) 2: C27BAE1E63B411EF9A87155DC4F9AE02.roa (hash: 5eMEB5vOjKQ5wQgd27+ZUWTTg4x5gmrbf6+2h3hRHcw=) 3: 04B0D250076211EFB14D3B12C4F9AE02.roa (hash: qJIeqrgvCSqMs8+P3KeM1F5hY5WT3B+IFIjWWFc0WLk=) 4: 052FFA76076211EFB14D3B12C4F9AE02.roa (hash: wEtGlzkarGn03dBjE4SQLfRy6nk8r9fN3HDFHlt9mQY=) 5: 03DAC9E4076211EFB14D3B12C4F9AE02.roa (hash: OxXlFTh6o0hdm5zRnG9YrbxWsj3c5r5ToTCPNyKoHps=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.crl rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 200 (0xc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3F5D, serialNumber=B4081815C6BAED98A1CC950AC6FA10BC60058902 Validity Not Before: Apr 27 04:47:14 2025 GMT Not After : May 4 04:47:14 2025 GMT Subject: CN=680db6d2-fd8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8d:b1:96:d2:66:a8:49:40:4c:e7:0c:85:e8: fc:26:ef:9c:a8:8b:bc:91:7c:71:fa:fb:dc:71:41: 06:a0:f8:28:40:79:b8:eb:90:6b:15:6a:fd:5e:01: 77:b4:4e:2d:63:42:93:58:33:47:48:a5:54:44:82: 24:cf:17:81:5e:95:65:c5:98:c4:66:6e:3a:d2:99: 93:5b:ba:14:d7:30:fd:ee:81:4c:cf:4c:9f:e1:c8: 4c:43:eb:08:8f:da:39:1d:34:06:db:3b:91:1e:bb: f9:99:4c:f7:68:fc:6f:78:58:6a:39:6c:00:66:b4: 33:3a:01:1b:ca:6a:d1:e2:70:2a:18:c6:52:af:cb: 6d:4c:17:d6:9c:a0:bd:53:c7:9e:6a:3b:38:41:43: f2:53:52:9f:af:44:73:8a:74:27:af:b2:ce:ab:dc: a3:2a:01:7d:dd:92:b8:6b:79:72:a9:4e:7c:61:25: 8d:0e:d1:79:a2:e6:81:fd:66:b9:5c:51:7f:79:e3: 78:c7:5f:6a:a4:67:46:33:23:c2:8b:f8:a3:1f:17: 1a:a3:60:de:6e:6e:f9:38:e4:f3:45:9b:bf:92:23: 4b:6c:b4:e1:bf:e6:94:95:41:0a:b6:02:cf:c6:3f: b6:59:91:c1:3e:d7:4a:a7:ed:35:68:dd:10:b0:e2: ca:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:6C:5D:A9:BB:01:75:18:4C:F2:28:74:92:28:65:67:DC:74:DA:5B X509v3 Authority Key Identifier: keyid:B4:08:18:15:C6:BA:ED:98:A1:CC:95:0A:C6:FA:10:BC:60:05:89:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:b4:54:fc:a1:e2:cb:6c:18:6a:bf:f0:5a:fe:5b:4a:87:7f: 6d:42:47:8e:88:8d:43:95:11:19:09:85:36:3e:b2:c3:52:0c: 38:19:d2:20:96:71:a5:fc:e0:4d:14:10:d3:e1:70:5d:3d:d5: 11:75:6b:78:e3:30:87:46:28:a6:6e:50:ca:f8:e8:ae:b0:6e: 00:49:bf:71:cd:98:44:7e:06:68:32:5b:14:ff:be:c8:97:fe: 9c:24:26:8d:aa:31:0a:cd:df:a9:5d:e4:76:27:78:63:3a:d2: 9b:35:5c:8f:f1:c6:fa:3f:35:15:cb:f4:e5:6f:dc:75:a0:e4: 4b:42:57:ff:1f:1d:26:ca:55:63:f3:d6:2d:97:5c:2a:0f:0f: ad:5c:97:ac:a1:60:ed:f2:99:1b:8e:fe:b8:e9:fd:b4:64:3c: 33:78:0d:ea:28:12:9a:eb:5e:e7:ca:61:0e:dd:9c:fd:cc:1e: 55:50:fb:9e:e9:cb:00:21:72:9f:59:84:cd:66:2b:d9:8a:2b: 25:e0:dc:69:c1:d1:51:b5:5e:3f:21:03:9c:89:33:f6:10:64: 67:65:5c:30:5b:27:66:9b:06:f2:07:5e:47:f5:75:10:19:5a: 4e:5c:09:30:9d:bb:6f:b4:4c:25:ae:eb:9b:66:76:da:17:7b: 38:d7:1d:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNGNUQxMTAvBgNVBAUTKEI0MDgxODE1QzZCQUVEOThBMUNDOTUwQUM2RkExMEJD NjAwNTg5MDIwHhcNMjUwNDI3MDQ0NzE0WhcNMjUwNTA0MDQ0NzE0WjAYMRYwFAYD VQQDEw02ODBkYjZkMi1mZDhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxo2xltJmqElATOcMhej8Ju+cqIu8kXxx+vvccUEGoPgoQHm465BrFWr9XgF3 tE4tY0KTWDNHSKVURIIkzxeBXpVlxZjEZm460pmTW7oU1zD97oFMz0yf4chMQ+sI j9o5HTQG2zuRHrv5mUz3aPxveFhqOWwAZrQzOgEbymrR4nAqGMZSr8ttTBfWnKC9 U8eeajs4QUPyU1Kfr0RzinQnr7LOq9yjKgF93ZK4a3lyqU58YSWNDtF5ouaB/Wa5 XFF/eeN4x19qpGdGMyPCi/ijHxcao2Debm75OOTzRZu/kiNLbLThv+aUlUEKtgLP xj+2WZHBPtdKp+01aN0QsOLKuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDRsXam7 AXUYTPIodJIoZWfcdNpbMB8GA1UdIwQYMBaAFLQIGBXGuu2YocyVCsb6ELxgBYkC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0Y1RC8xMEY5NEVGMDA2 QUIxMUVGODdCRkE3MjVDNEY5QUUwMi90QWdZRmNhNjdaaWh6SlVLeHZvUXZHQUZp UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RBZ1lGY2E2N1ppaHpKVUt4dm9RdkdBRmlRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0Y1RC8xMEY5NEVGMDA2QUIxMUVGODdCRkE3MjVDNEY5QUUwMi90QWdZRmNhNjda aWh6SlVLeHZvUXZHQUZpUUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/tFT8oeLLbBhqv/Ba/ltKh39tQkeOiI1DlREZCYU2PrLDUgw4GdIg lnGl/OBNFBDT4XBdPdURdWt44zCHRiimblDK+OiusG4ASb9xzZhEfgZoMlsU/77I l/6cJCaNqjEKzd+pXeR2J3hjOtKbNVyP8cb6PzUVy/Tlb9x1oORLQlf/Hx0mylVj 89Ytl1wqDw+tXJesoWDt8pkbjv646f20ZDwzeA3qKBKa617nymEO3Zz9zB5VUPue 6csAIXKfWYTNZivZiisl4NxpwdFRtV4/IQOciTP2EGRnZVwwWydmmwbyB15H9XUQ GVpOXAkwnbtvtEwlruubZnbaF3s41x0M -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:52 2025 by rpki-client on console.sobornost.net