$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft File: tBFqjm2pkf3PcWJue-oR_2nLqEY.mft (raw, json) Hash identifier: EkHyaisMMjaPwz8fohplScpafOpVyNQBfj/Jq8maiwg= Subject key identifier: 94:66:CA:6B:8A:93:2D:B1:A0:87:96:40:9E:AF:80:90:55:C5:E7:E6 Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Certificate serial: 0BBC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft Manifest number: 0B64 Signing time: Thu 24 Apr 2025 19:08:39 +0000 Manifest this update: Thu 24 Apr 2025 19:08:39 +0000 Manifest next update: Thu 01 May 2025 19:08:39 +0000 Files and hashes: 1: tBFqjm2pkf3PcWJue-oR_2nLqEY.crl (hash: RxwW4WqULpNQEVBM1i7hN/E600r9+bSthP6VJLG5q2M=) 2: 6CAE0142092E11F094B4703FC4F9AE02.roa (hash: OMRvHYE6qtGkjMaZA10UGy4kzsmijUfW8xz11XmOryU=) 3: 4283EC800E9A11F0A4CEB90AC4F9AE02.roa (hash: WaKafOz55Dy7N84Ha6z/9ygM1gQG3YThw4qCwUNSz/E=) 4: 7A35195A0A1811F0ADFE8D2DC4F9AE02.roa (hash: kzCmoo+IjhlPEf88D9nrDgIHNSfXTuGVVGf2u6U7d4w=) 5: AFB0F1260F5E11F0ABB59D3DC4F9AE02.roa (hash: ueeASWxqMUHu0S3wy2+g0pOZi+SJaKSmN/goLQWG/nM=) 6: FDA1FF440E9911F08D37E709C4F9AE02.roa (hash: 6bU/Nb5/KOjdbvl4huRqc6WCdK++PkccLCcpT5AshY8=) 7: 4353C2FC0E9A11F0A4CEB90AC4F9AE02.roa (hash: KGX7VkbOcd3qn/15c4+R2RGbCNShZlKh0ZLW1cNHR3Q=) 8: 9584CC888FD611ECB5BAF00AC4F9AE02.roa (hash: zOSU8HWzTX62npxk0Z0KI/TANc0CI5bXMVq+SzVjDCo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:08:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3004 (0xbbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Validity Not Before: Apr 24 19:08:39 2025 GMT Not After : May 1 19:08:39 2025 GMT Subject: CN=680a8c37-b453 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:50:47:63:f7:2a:6e:31:d3:90:1b:1d:a0:58: e1:47:49:cb:ed:d1:2a:c6:1a:25:30:c1:d6:d4:a0: 99:82:82:ac:94:43:b8:ce:66:74:b4:c3:da:17:c1: d9:c5:52:b3:4b:ac:50:5c:cf:e0:fe:32:86:00:fd: 06:ea:ef:f8:8f:44:cb:f7:06:6c:d3:33:37:45:e1: 05:52:1e:01:5d:df:6c:a9:18:4c:cb:36:90:03:2b: 42:db:94:38:03:de:56:13:8e:28:bd:57:13:cd:82: ca:63:75:13:12:72:87:3c:6e:a3:11:dd:65:a2:08: 99:41:7c:e2:df:9c:ad:e1:8a:5d:fb:24:e8:aa:4d: ed:65:7b:50:c9:92:9c:4b:1b:c0:e3:2b:4e:5e:46: 95:b7:c6:03:c5:2a:03:1c:0e:b1:50:9d:b0:c9:04: f4:d5:f4:22:f7:50:56:ee:fe:50:3e:80:5c:1c:c4: 3f:cd:71:35:76:9e:96:41:75:ff:3f:35:a4:06:35: 6a:30:5a:55:87:f3:bd:9b:81:23:44:dc:53:00:8a: 8d:e4:bf:e2:3c:e2:5b:bc:6e:3d:39:86:b9:f7:22: 39:28:2f:64:a5:9f:5b:c4:d6:a2:aa:80:94:74:82: c5:db:0e:56:d1:e1:d8:71:6a:00:0e:d3:39:bf:0a: 48:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:66:CA:6B:8A:93:2D:B1:A0:87:96:40:9E:AF:80:90:55:C5:E7:E6 X509v3 Authority Key Identifier: keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:48:98:cb:a3:11:3d:57:62:49:bd:ed:44:de:6a:ef:fa:7b: db:00:b9:3c:be:42:c0:27:d4:6a:f4:7c:84:e6:a3:7f:c0:df: 61:f6:5a:1f:e5:58:d8:60:9d:fa:ef:9b:e7:69:22:3a:32:32: 6f:59:79:da:05:35:1b:bf:72:5e:b9:d2:68:7f:50:27:05:1a: 97:f5:fe:87:d1:72:66:7f:da:04:50:9e:7b:c8:04:81:59:79: e4:c9:e6:22:20:6e:97:dd:43:0c:b0:bd:28:2e:cc:0d:da:8c: eb:29:a1:10:a2:69:69:a3:cd:03:bc:37:38:12:f2:98:32:8c: 77:43:70:66:1f:30:8b:42:50:a9:07:79:77:01:f5:2c:80:7e: 6a:98:65:9c:7d:23:dd:28:3f:db:70:c3:13:31:7f:f7:db:69: 51:c3:0f:d9:b2:89:50:e5:a0:12:6b:7f:43:c9:31:41:30:37: 2a:0e:63:e5:b9:1e:31:af:5e:09:66:e3:5d:da:bd:b5:5f:dd: f9:6f:af:f8:4a:84:4d:c7:80:64:24:a1:f5:15:9e:a0:bc:4e: 5b:ec:10:d4:7f:6f:90:30:64:42:32:bf:71:b4:a6:89:21:3e: 90:b2:ee:f7:4b:10:55:4e:4c:8b:f4:bb:c2:26:be:6f:99:c6: 81:1a:7b:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC7wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0MDIxMTAvBgNVBAUTKEI0MTE2QThFNkRBOTkxRkRDRjcxNjI2RTdCRUExMUZG NjlDQkE4NDYwHhcNMjUwNDI0MTkwODM5WhcNMjUwNTAxMTkwODM5WjAYMRYwFAYD VQQDEw02ODBhOGMzNy1iNDUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAulBHY/cqbjHTkBsdoFjhR0nL7dEqxholMMHW1KCZgoKslEO4zmZ0tMPaF8HZ xVKzS6xQXM/g/jKGAP0G6u/4j0TL9wZs0zM3ReEFUh4BXd9sqRhMyzaQAytC25Q4 A95WE44ovVcTzYLKY3UTEnKHPG6jEd1logiZQXzi35yt4Ypd+yToqk3tZXtQyZKc SxvA4ytOXkaVt8YDxSoDHA6xUJ2wyQT01fQi91BW7v5QPoBcHMQ/zXE1dp6WQXX/ PzWkBjVqMFpVh/O9m4EjRNxTAIqN5L/iPOJbvG49OYa59yI5KC9kpZ9bxNaiqoCU dILF2w5W0eHYcWoADtM5vwpItwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJRmymuK ky2xoIeWQJ6vgJBVxefmMB8GA1UdIwQYMBaAFLQRao5tqZH9z3FibnvqEf9py6hG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQwMi9GREJGRDAyMDNE OTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtmM1BjV0p1ZS1vUl8ybkxx RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RCRnFqbTJwa2YzUGNXSnVlLW9SXzJuTHFFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDQwMi9GREJGRDAyMDNEOTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtm M1BjV0p1ZS1vUl8ybkxxRVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVSJjLoxE9V2JJve1E3mrv+nvbALk8vkLAJ9Rq9HyE5qN/wN9h9lof 5VjYYJ3675vnaSI6MjJvWXnaBTUbv3JeudJof1AnBRqX9f6H0XJmf9oEUJ57yASB WXnkyeYiIG6X3UMMsL0oLswN2ozrKaEQomlpo80DvDc4EvKYMox3Q3BmHzCLQlCp B3l3AfUsgH5qmGWcfSPdKD/bcMMTMX/322lRww/ZsolQ5aASa39DyTFBMDcqDmPl uR4xr14JZuNd2r21X935b6/4SoRNx4BkJKH1FZ6gvE5b7BDUf2+QMGRCMr9xtKaJ IT6Qsu73SxBVTkyL9LvCJr5vmcaBGntu -----END CERTIFICATE-----Generated at Fri Apr 25 00:08:26 2025 by rpki-client on console.sobornost.net