$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.mft File: U2v43c6AJmc3j0e9SVSpC3xwCcE.mft (raw, json) Hash identifier: fNcsD12LzWqcLjn/SxofC4SbSvIdxUg3e3t66/TMdxg= Subject key identifier: 59:05:B9:E0:C8:2B:A5:F7:62:1B:15:AA:C3:3C:C1:A0:52:B8:A0:DB Authority key identifier: 53:6B:F8:DD:CE:80:26:67:37:8F:47:BD:49:54:A9:0B:7C:70:09:C1 Certificate issuer: /CN=A91A5849/serialNumber=536BF8DDCE802667378F47BD4954A90B7C7009C1 Certificate serial: C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U2v43c6AJmc3j0e9SVSpC3xwCcE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.mft Manifest number: C1 Signing time: Wed 23 Apr 2025 04:57:16 +0000 Manifest this update: Wed 23 Apr 2025 04:57:16 +0000 Manifest next update: Wed 30 Apr 2025 04:57:16 +0000 Files and hashes: 1: U2v43c6AJmc3j0e9SVSpC3xwCcE.crl (hash: D5ok3TQ9FVLNW/ifEFDXzui1SSt9WFUYF8bsaN3J44k=) 2: D8346320F7A011EE8BE8843BC4F9AE02.roa (hash: 8W+xFxZgciOpBXooHDbzzZTklV4cRzIRaTe2EGYo2G4=) 3: FA3B5DCAF7A011EEBAC1E03BC4F9AE02.roa (hash: SiXu7T2X5Ai2mQId/ZQnSVGAYrsHoSW8pzAzpHcsuBY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.crl rsync://rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U2v43c6AJmc3j0e9SVSpC3xwCcE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 04:47:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 196 (0xc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5849, serialNumber=536BF8DDCE802667378F47BD4954A90B7C7009C1 Validity Not Before: Apr 23 04:57:16 2025 GMT Not After : Apr 30 04:57:16 2025 GMT Subject: CN=6808732c-f2f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f9:e5:e3:d9:85:88:db:60:fc:2a:b2:88:00: b4:00:b3:9e:6f:7d:f0:fb:2b:3d:40:5c:61:1e:cb: cc:30:27:64:30:de:05:b7:27:48:11:39:a2:f6:c9: 89:6f:37:b9:5c:20:6d:be:b7:fb:0a:aa:24:19:80: 9e:8d:19:81:25:a1:42:2b:1f:f1:58:09:35:78:6b: a1:5b:72:5f:7e:46:02:c2:d0:24:40:f9:89:d5:d7: 3e:9e:3a:f8:99:60:13:a2:88:3b:df:46:62:61:bb: e3:2d:60:70:48:0e:f6:9b:be:f5:c7:04:7f:cf:1e: a6:23:b9:65:9e:ea:e9:f0:33:91:a8:90:d1:ab:e1: 8b:2b:35:61:da:ae:79:85:ed:0a:75:9e:da:6f:61: c1:16:53:be:ea:41:d1:bf:bf:59:cf:32:05:68:12: 9e:33:72:4c:a4:1d:b1:a2:be:0c:aa:5e:31:10:3f: 1c:a2:50:eb:b5:91:32:81:3f:18:a8:bf:a8:e6:92: 82:f2:9a:ea:a7:e9:f8:c1:56:4c:33:30:dc:22:10: 77:d7:2d:07:12:b6:c8:4b:0d:bb:e7:bb:45:07:43: 5b:3c:9d:db:03:83:16:c5:44:ab:ca:c0:d3:1c:7c: 6f:6c:c8:76:40:b0:85:d8:8b:a1:91:5f:4b:b9:06: 39:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:05:B9:E0:C8:2B:A5:F7:62:1B:15:AA:C3:3C:C1:A0:52:B8:A0:DB X509v3 Authority Key Identifier: keyid:53:6B:F8:DD:CE:80:26:67:37:8F:47:BD:49:54:A9:0B:7C:70:09:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U2v43c6AJmc3j0e9SVSpC3xwCcE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:f4:71:bd:9c:44:a8:4d:59:8c:cf:07:eb:c7:5a:e9:93:48: be:b0:de:09:05:8b:58:9f:6c:f8:b8:fc:7a:49:b7:30:59:b9: 00:b8:0a:d7:6c:35:76:3f:f5:07:33:0e:cc:1a:91:e7:1b:05: f1:dd:ff:6c:64:8f:e0:93:3c:4f:e6:b2:0e:32:56:b7:09:81: 23:f1:c0:7a:27:1f:28:42:a7:4e:80:63:7c:24:dd:13:e9:e5: e2:f2:49:47:af:4c:23:b6:a4:6d:1d:67:02:b6:b3:18:50:e0: a0:58:64:75:6e:4b:9c:8a:8e:32:2b:8b:90:49:e4:a0:42:dd: c6:16:02:ce:6a:00:ac:64:4f:6d:b1:54:7b:1f:68:ae:6e:63: 2f:00:4e:26:8f:60:05:c5:e9:16:b5:3d:e5:c5:28:94:f6:5f: bf:b3:10:c6:c5:36:01:4f:6d:ad:77:e3:23:4d:2f:e8:47:58: f5:3a:4a:ed:d5:9d:77:a9:d4:ee:55:35:9d:08:96:11:ce:20: a0:93:33:3a:0c:21:a2:7e:76:08:ff:fe:13:02:50:30:a7:ae: 48:2a:64:52:69:14:01:ba:3d:37:69:a2:fd:c5:1d:6a:79:dd: f3:c3:ee:b7:e5:3f:41:2e:1b:71:89:eb:b6:bc:ca:cc:a4:9c: 4e:14:2f:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU4NDkxMTAvBgNVBAUTKDUzNkJGOEREQ0U4MDI2NjczNzhGNDdCRDQ5NTRBOTBC N0M3MDA5QzEwHhcNMjUwNDIzMDQ1NzE2WhcNMjUwNDMwMDQ1NzE2WjAYMRYwFAYD VQQDEw02ODA4NzMyYy1mMmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn/nl49mFiNtg/CqyiAC0ALOeb33w+ys9QFxhHsvMMCdkMN4FtydIETmi9smJ bze5XCBtvrf7CqokGYCejRmBJaFCKx/xWAk1eGuhW3JffkYCwtAkQPmJ1dc+njr4 mWAToog730ZiYbvjLWBwSA72m771xwR/zx6mI7llnurp8DORqJDRq+GLKzVh2q55 he0KdZ7ab2HBFlO+6kHRv79ZzzIFaBKeM3JMpB2xor4Mql4xED8colDrtZEygT8Y qL+o5pKC8prqp+n4wVZMMzDcIhB31y0HErbISw2757tFB0NbPJ3bA4MWxUSrysDT HHxvbMh2QLCF2IuhkV9LuQY5YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFkFueDI K6X3YhsVqsM8waBSuKDbMB8GA1UdIwQYMBaAFFNr+N3OgCZnN49HvUlUqQt8cAnB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTg0OS9EQkFEMzg0RUY3 OUUxMUVFQTQ1QUFFMkNDNEY5QUUwMi9VMnY0M2M2QUptYzNqMGU5U1ZTcEMzeHdD Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1UydjQzYzZBSm1jM2owZTlTVlNwQzN4d0NjRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTg0OS9EQkFEMzg0RUY3OUUxMUVFQTQ1QUFFMkNDNEY5QUUwMi9VMnY0M2M2QUpt YzNqMGU5U1ZTcEMzeHdDY0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAc9HG9nESoTVmMzwfrx1rpk0i+sN4JBYtYn2z4uPx6SbcwWbkAuArX bDV2P/UHMw7MGpHnGwXx3f9sZI/gkzxP5rIOMla3CYEj8cB6Jx8oQqdOgGN8JN0T 6eXi8klHr0wjtqRtHWcCtrMYUOCgWGR1bkucio4yK4uQSeSgQt3GFgLOagCsZE9t sVR7H2iubmMvAE4mj2AFxekWtT3lxSiU9l+/sxDGxTYBT22td+MjTS/oR1j1Okrt 1Z13qdTuVTWdCJYRziCgkzM6DCGifnYI//4TAlAwp65IKmRSaRQBuj03aaL9xR1q ed3zw+635T9BLhtxieu2vMrMpJxOFC+Z -----END CERTIFICATE-----Generated at Wed Apr 23 06:35:54 2025 by rpki-client on console.sobornost.net