$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft File: 2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft (raw, json) Hash identifier: hVtVK9LWSDIU4T+esNdRgKhNCjtOfjpHVw0P1M47q2g= Subject key identifier: 7E:6D:D1:AA:C6:29:48:EA:60:1C:A2:43:DA:AE:FA:FA:47:74:1F:C3 Authority key identifier: D9:C5:D8:2A:BD:30:FD:D2:0F:A9:CA:F3:D1:ED:86:7D:B0:76:95:6B Certificate issuer: /CN=A91A5A57/serialNumber=D9C5D82ABD30FDD20FA9CAF3D1ED867DB076956B Certificate serial: 88 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft Manifest number: 87 Signing time: Sun 27 Apr 2025 05:20:39 +0000 Manifest this update: Sun 27 Apr 2025 05:20:39 +0000 Manifest next update: Sun 04 May 2025 05:20:39 +0000 Files and hashes: 1: 2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl (hash: PA6dE74V54VPPJvu/f3SnMAZV5YhDw6VEHoaouJV2Js=) 2: F6382C7A56EC11EF85879C50C4F9AE02.roa (hash: FxzQ/fIjW3ehlt8HpKRH7n5BfwlAuKegJIAFiGlOhTE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 136 (0x88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5A57, serialNumber=D9C5D82ABD30FDD20FA9CAF3D1ED867DB076956B Validity Not Before: Apr 27 05:20:39 2025 GMT Not After : May 4 05:20:39 2025 GMT Subject: CN=680dbea7-3bb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2f:ed:c0:61:5d:e6:57:f9:5f:2c:05:36:28: e4:58:ef:3e:ff:72:23:80:6b:ca:a6:b6:cd:be:6f: 77:24:40:87:8c:1c:5c:da:61:49:d8:cf:a4:f9:44: 99:27:ff:80:dc:ee:ff:aa:4d:06:49:43:5f:63:bc: ac:d9:a3:c7:0e:62:05:c8:9e:26:b8:c9:fc:c5:c1: 52:e8:49:9c:90:ca:bb:94:bb:a5:ec:f0:ec:cb:08: cd:63:5e:9b:78:87:da:84:8f:5f:55:ed:92:8d:33: 29:2d:83:af:b3:7b:b4:4d:ce:07:4b:8e:eb:a3:b9: e8:33:7d:d1:3f:93:5e:9d:a7:65:85:a9:0f:a7:5f: 2f:50:0e:f1:72:30:a9:97:8e:6b:6b:80:ce:63:69: be:ad:9b:f8:24:b8:6a:68:ca:c7:61:f5:a8:74:da: a3:4d:c9:29:c2:6b:14:7f:47:f7:ab:b4:45:fc:9e: ca:0f:be:01:8c:3d:ea:c9:ce:dd:8b:37:7e:78:50: 6f:b6:c1:e0:27:27:30:98:ea:87:6c:bb:32:81:b2: f4:96:5e:96:c7:f8:c1:17:da:05:a0:5a:b4:1b:8c: 35:12:dd:53:e1:1a:ed:66:6a:79:0a:df:c6:cd:78: 95:ce:db:8a:f1:48:55:10:00:55:b4:e7:ef:45:47: 77:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:6D:D1:AA:C6:29:48:EA:60:1C:A2:43:DA:AE:FA:FA:47:74:1F:C3 X509v3 Authority Key Identifier: keyid:D9:C5:D8:2A:BD:30:FD:D2:0F:A9:CA:F3:D1:ED:86:7D:B0:76:95:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:d2:e3:04:b0:00:a4:f5:3f:91:09:e4:8a:2e:08:08:51:63: 94:01:b1:95:dc:e0:67:fd:11:1d:70:a5:6a:6a:a9:d9:47:9f: b2:4f:9b:53:ee:fc:78:41:d3:79:9c:9c:2b:24:9d:a9:5f:8f: 6b:ae:cd:49:3e:82:5d:b2:4a:55:76:29:28:fa:a2:19:1b:b9: 18:44:92:6f:c6:8a:00:5c:72:d0:db:47:26:fc:97:55:79:82: ef:c2:57:b9:24:98:e9:0d:7b:dd:7e:9e:e6:86:19:22:68:bf: 18:e2:40:5d:80:74:ca:ba:b7:5a:10:6f:01:cb:85:02:bd:b9: 6a:69:60:1d:ca:65:a6:74:04:9c:99:f7:55:80:9e:b2:4a:53: 8c:f9:5f:08:3e:32:2e:04:cb:5f:98:73:49:39:29:8d:ce:cd: 6e:ea:a3:0e:cc:56:a1:fa:dc:f2:f1:08:ce:ef:be:07:6e:43: d1:bb:d6:24:6a:7c:86:46:f7:7f:40:1a:df:4b:26:b7:b0:6e: 27:4b:0e:e2:51:f8:8d:8f:8c:28:1b:73:5b:93:73:bb:c4:10: ce:12:05:17:1f:0c:e3:ac:28:6b:80:a7:3b:46:6f:6e:2f:3d: 05:8f:2d:73:51:2b:2a:e9:fb:47:5d:7a:9d:2e:f5:ce:24:ba: 68:5b:2a:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVBNTcxMTAvBgNVBAUTKEQ5QzVEODJBQkQzMEZERDIwRkE5Q0FGM0QxRUQ4NjdE QjA3Njk1NkIwHhcNMjUwNDI3MDUyMDM5WhcNMjUwNTA0MDUyMDM5WjAYMRYwFAYD VQQDEw02ODBkYmVhNy0zYmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxC/twGFd5lf5XywFNijkWO8+/3IjgGvKprbNvm93JECHjBxc2mFJ2M+k+USZ J/+A3O7/qk0GSUNfY7ys2aPHDmIFyJ4muMn8xcFS6EmckMq7lLul7PDsywjNY16b eIfahI9fVe2SjTMpLYOvs3u0Tc4HS47ro7noM33RP5NenadlhakPp18vUA7xcjCp l45ra4DOY2m+rZv4JLhqaMrHYfWodNqjTckpwmsUf0f3q7RF/J7KD74BjD3qyc7d izd+eFBvtsHgJycwmOqHbLsygbL0ll6Wx/jBF9oFoFq0G4w1Et1T4RrtZmp5Ct/G zXiVztuK8UhVEABVtOfvRUd3rwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH5t0arG KUjqYByiQ9qu+vpHdB/DMB8GA1UdIwQYMBaAFNnF2Cq9MP3SD6nK89Hthn2wdpVr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUE1Ny82RTc0ODMxMDU2 RUMxMUVGOEEwQ0IyNEZDNEY5QUUwMi8yY1hZS3Iwd19kSVBxY3J6MGUyR2ZiQjJs V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJjWFlLcjB3X2RJUHFjcnowZTJHZmJCMmxXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUE1Ny82RTc0ODMxMDU2RUMxMUVGOEEwQ0IyNEZDNEY5QUUwMi8yY1hZS3Iwd19k SVBxY3J6MGUyR2ZiQjJsV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA10uMEsACk9T+RCeSKLggIUWOUAbGV3OBn/REdcKVqaqnZR5+yT5tT 7vx4QdN5nJwrJJ2pX49rrs1JPoJdskpVdiko+qIZG7kYRJJvxooAXHLQ20cm/JdV eYLvwle5JJjpDXvdfp7mhhkiaL8Y4kBdgHTKurdaEG8By4UCvblqaWAdymWmdASc mfdVgJ6ySlOM+V8IPjIuBMtfmHNJOSmNzs1u6qMOzFah+tzy8QjO774HbkPRu9Yk anyGRvd/QBrfSya3sG4nSw7iUfiNj4woG3Nbk3O7xBDOEgUXHwzjrChrgKc7Rm9u Lz0Fjy1zUSsq6ftHXXqdLvXOJLpoWyrl -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:53 2025 by rpki-client on console.sobornost.net