$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.mft File: Jv6gxnfd50PC4HXhzgerW9ZmYyU.mft (raw, json) Hash identifier: aNIT6fH5EQCUaB6m2LRbH/kiLIKhOuViy88Hnjm14BQ= Subject key identifier: 10:6E:C3:49:1F:63:A7:0E:7E:46:E8:73:B3:A7:40:E6:8E:07:E8:7B Authority key identifier: 26:FE:A0:C6:77:DD:E7:43:C2:E0:75:E1:CE:07:AB:5B:D6:66:63:25 Certificate issuer: /CN=A91A3FEB/serialNumber=26FEA0C677DDE743C2E075E1CE07AB5BD6666325 Certificate serial: 0137 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jv6gxnfd50PC4HXhzgerW9ZmYyU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.mft Manifest number: 0137 Signing time: Thu 24 Apr 2025 21:32:10 +0000 Manifest this update: Thu 24 Apr 2025 21:32:09 +0000 Manifest next update: Thu 01 May 2025 21:32:09 +0000 Files and hashes: 1: Jv6gxnfd50PC4HXhzgerW9ZmYyU.crl (hash: VKqZ3r5uZMiiSkwE2DS7M1gUBHn9rglb2ZmeJpJsQU4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.crl rsync://rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jv6gxnfd50PC4HXhzgerW9ZmYyU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:32:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 311 (0x137) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3FEB, serialNumber=26FEA0C677DDE743C2E075E1CE07AB5BD6666325 Validity Not Before: Apr 24 21:32:09 2025 GMT Not After : May 1 21:32:09 2025 GMT Subject: CN=680aadd9-56fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:05:e5:0a:87:35:5f:da:f5:81:3a:1a:24:61: c2:89:5f:c5:8e:51:b3:f4:3c:50:fd:aa:ae:2c:f6: 5b:1d:22:41:4f:38:76:86:d2:d8:4f:04:74:6e:b4: bd:a9:04:03:50:cb:a6:ad:18:1c:ea:df:65:da:06: b4:27:ed:25:6d:e7:67:99:12:7e:a3:3e:74:c3:c4: 93:54:a9:73:18:ff:51:12:d6:0a:27:1d:b4:1b:92: 48:0b:66:a8:be:a9:57:63:28:30:2f:c4:9e:f5:65: 17:39:c9:fd:63:6b:ed:2e:c6:74:7c:11:40:d4:e7: 1e:f3:fb:27:1c:a8:3f:34:af:1a:48:bf:87:23:86: 5f:13:bc:df:c0:96:d4:53:57:73:91:db:a3:38:91: c4:70:0b:32:2b:a5:cc:2d:a2:21:e6:62:8f:73:cd: a8:00:66:9d:12:b8:fe:92:37:fb:87:54:4b:f0:96: 79:ed:1c:8a:2c:4c:14:2d:7d:4b:9b:5a:71:53:e1: 4f:37:79:4a:d7:71:01:84:93:4d:1a:7b:78:98:f9: 17:00:08:fe:fc:44:53:2c:16:0d:3f:e9:28:fb:94: 04:ae:fc:63:87:a6:84:e8:f3:c5:b4:e1:75:db:c4: 2f:da:4b:7a:e8:d9:5f:5f:7a:c9:80:e7:d2:39:a9: 13:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:6E:C3:49:1F:63:A7:0E:7E:46:E8:73:B3:A7:40:E6:8E:07:E8:7B X509v3 Authority Key Identifier: keyid:26:FE:A0:C6:77:DD:E7:43:C2:E0:75:E1:CE:07:AB:5B:D6:66:63:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jv6gxnfd50PC4HXhzgerW9ZmYyU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:84:af:f1:c8:8c:37:59:64:15:e1:11:f5:83:b7:95:ef:79: 5b:d4:36:0a:3f:80:28:ce:61:53:01:82:e8:5d:58:8e:98:5f: ee:36:21:6b:81:ea:c4:f5:7b:34:8c:f7:31:82:da:9c:e5:7b: a5:bf:f2:ac:e1:5e:0b:71:7c:26:b0:55:25:48:3e:58:a1:d9: 34:54:47:c9:19:31:f2:5b:ba:e5:8d:d7:75:19:72:5a:3b:38: e5:17:22:1b:f7:33:72:8a:66:07:80:7a:f1:3f:f8:d3:b1:76: 17:23:2c:17:2a:ac:c4:e7:31:79:32:48:69:c7:e0:1d:ef:7a: 23:a6:2f:7c:21:aa:16:c0:bd:e9:b9:fb:66:95:a1:84:02:61: 9c:be:0e:2d:07:31:0c:53:91:41:3c:10:24:0e:bd:f7:6c:c6: 1a:ba:94:48:2b:f7:b5:c8:67:c0:a4:26:79:e6:29:3a:ec:fe: a0:32:a1:1d:73:40:61:8f:6f:40:2e:2c:81:dd:a3:bd:f6:a4: c0:5a:d2:5e:4a:cf:df:e6:b9:3b:cd:ca:ae:5e:46:5c:36:ea: bd:de:03:0f:87:3d:be:65:1c:31:65:53:4c:06:10:b4:88:67: ce:18:a2:5e:de:5c:72:37:25:ea:6f:f1:85:cc:70:76:ae:ed: ee:d9:42:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNGRUIxMTAvBgNVBAUTKDI2RkVBMEM2NzdEREU3NDNDMkUwNzVFMUNFMDdBQjVC RDY2NjYzMjUwHhcNMjUwNDI0MjEzMjA5WhcNMjUwNTAxMjEzMjA5WjAYMRYwFAYD VQQDEw02ODBhYWRkOS01NmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5QXlCoc1X9r1gToaJGHCiV/FjlGz9DxQ/aquLPZbHSJBTzh2htLYTwR0brS9 qQQDUMumrRgc6t9l2ga0J+0lbednmRJ+oz50w8STVKlzGP9REtYKJx20G5JIC2ao vqlXYygwL8Se9WUXOcn9Y2vtLsZ0fBFA1Oce8/snHKg/NK8aSL+HI4ZfE7zfwJbU U1dzkdujOJHEcAsyK6XMLaIh5mKPc82oAGadErj+kjf7h1RL8JZ57RyKLEwULX1L m1pxU+FPN3lK13EBhJNNGnt4mPkXAAj+/ERTLBYNP+ko+5QErvxjh6aE6PPFtOF1 28Qv2kt66NlfX3rJgOfSOakTiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBBuw0kf Y6cOfkboc7OnQOaOB+h7MB8GA1UdIwQYMBaAFCb+oMZ33edDwuB14c4Hq1vWZmMl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0ZFQi8xODc0QzRBNDQ4 NkQxMUVFODIwQTU1NzZDNEY5QUUwMi9KdjZneG5mZDUwUEM0SFhoemdlclc5Wm1Z eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0p2Nmd4bmZkNTBQQzRIWGh6Z2VyVzlabVl5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0ZFQi8xODc0QzRBNDQ4NkQxMUVFODIwQTU1NzZDNEY5QUUwMi9KdjZneG5mZDUw UEM0SFhoemdlclc5Wm1ZeVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9hK/xyIw3WWQV4RH1g7eV73lb1DYKP4AozmFTAYLoXViOmF/uNiFr gerE9Xs0jPcxgtqc5Xulv/Ks4V4LcXwmsFUlSD5Yodk0VEfJGTHyW7rljdd1GXJa OzjlFyIb9zNyimYHgHrxP/jTsXYXIywXKqzE5zF5Mkhpx+Ad73ojpi98IaoWwL3p uftmlaGEAmGcvg4tBzEMU5FBPBAkDr33bMYaupRIK/e1yGfApCZ55ik67P6gMqEd c0Bhj29ALiyB3aO99qTAWtJeSs/f5rk7zcquXkZcNuq93gMPhz2+ZRwxZVNMBhC0 iGfOGKJe3lxyNyXqb/GFzHB2ru3u2UKU -----END CERTIFICATE-----Generated at Fri Apr 25 08:24:54 2025 by rpki-client on console.sobornost.net