$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5A57/76F267FA56EC11EF8A0CB24FC4F9AE02/QBwaNjT5h86fnlzvVAncG9D_K6o.mft File: QBwaNjT5h86fnlzvVAncG9D_K6o.mft (raw, json) Hash identifier: ej7CU8994oNnlP+UHC34NpS4kf3J251ulJ/canLha2M= Subject key identifier: 11:36:75:76:E9:D0:B4:F6:A7:A4:DF:7A:B6:64:42:83:A9:4B:B5:03 Authority key identifier: 40:1C:1A:36:34:F9:87:CE:9F:9E:5C:EF:54:09:DC:1B:D0:FF:2B:AA Certificate issuer: /CN=A91A5A57/serialNumber=401C1A3634F987CE9F9E5CEF5409DC1BD0FF2BAA Certificate serial: 87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBwaNjT5h86fnlzvVAncG9D_K6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5A57/76F267FA56EC11EF8A0CB24FC4F9AE02/QBwaNjT5h86fnlzvVAncG9D_K6o.mft Manifest number: 87 Signing time: Sun 27 Apr 2025 05:20:41 +0000 Manifest this update: Sun 27 Apr 2025 05:20:41 +0000 Manifest next update: Sun 04 May 2025 05:20:41 +0000 Files and hashes: 1: QBwaNjT5h86fnlzvVAncG9D_K6o.crl (hash: HCS1v2Ch3SvqrhzaRJzJeVInSXtupiK8QOb6C76YPj0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5A57/76F267FA56EC11EF8A0CB24FC4F9AE02/QBwaNjT5h86fnlzvVAncG9D_K6o.crl rsync://rpki.apnic.net/member_repository/A91A5A57/76F267FA56EC11EF8A0CB24FC4F9AE02/QBwaNjT5h86fnlzvVAncG9D_K6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBwaNjT5h86fnlzvVAncG9D_K6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 135 (0x87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5A57, serialNumber=401C1A3634F987CE9F9E5CEF5409DC1BD0FF2BAA Validity Not Before: Apr 27 05:20:41 2025 GMT Not After : May 4 05:20:41 2025 GMT Subject: CN=680dbea9-1f80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f2:41:cc:8a:67:9d:7e:d4:62:60:1a:91:24: a0:55:8b:36:2c:33:d8:75:ed:10:df:08:81:bf:0c: 40:8e:6a:47:f6:ac:2f:07:13:f5:a5:24:aa:17:40: db:40:51:80:c9:10:9e:ca:20:a7:d5:6b:85:87:c1: d8:fd:31:2f:f7:65:28:c3:4e:b6:f2:3e:6b:b5:31: 37:91:76:7b:fd:5d:e7:d2:8f:fc:b7:da:85:5f:ba: 96:20:61:60:23:16:6f:85:84:c1:92:55:41:7c:db: d3:4d:ff:be:d4:a6:1d:a7:55:8f:03:60:05:7c:e5: 31:6a:22:1f:7e:c1:f7:17:4f:4d:d2:27:8f:a2:c0: c5:1a:ca:63:6f:af:b5:08:82:bc:a1:e0:c2:33:a2: f6:b6:56:8e:e3:82:ba:18:28:92:80:e9:61:ad:00: 7c:b5:95:56:44:7e:4e:1e:f0:88:39:6b:04:16:49: f7:af:45:8c:f0:3a:f5:4c:27:0f:b5:6a:4a:c1:59: 81:94:78:7a:07:94:e9:17:40:68:cf:78:16:29:04: 60:70:7a:1b:e8:55:57:89:0f:ed:17:73:16:4f:e7: 7a:0f:2f:db:cf:da:14:48:32:af:a2:26:fb:27:5e: 01:3a:13:7b:81:dc:b4:55:b8:74:d3:d4:fd:d8:39: 1f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:36:75:76:E9:D0:B4:F6:A7:A4:DF:7A:B6:64:42:83:A9:4B:B5:03 X509v3 Authority Key Identifier: keyid:40:1C:1A:36:34:F9:87:CE:9F:9E:5C:EF:54:09:DC:1B:D0:FF:2B:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5A57/76F267FA56EC11EF8A0CB24FC4F9AE02/QBwaNjT5h86fnlzvVAncG9D_K6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBwaNjT5h86fnlzvVAncG9D_K6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5A57/76F267FA56EC11EF8A0CB24FC4F9AE02/QBwaNjT5h86fnlzvVAncG9D_K6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:9b:b7:69:35:25:f7:7c:51:15:ab:3c:27:a5:1c:1e:67:27: 6f:e9:05:ff:88:56:69:ac:55:97:88:ca:9f:48:15:f0:c6:be: 4c:36:74:6c:0c:05:cc:c3:57:bd:73:aa:3c:b2:9f:e2:41:12: fb:02:9b:cb:8a:8a:b1:a8:fe:d0:d3:60:9b:ff:7e:28:74:02: 07:22:e9:6c:7c:61:59:a7:c5:68:60:6b:77:3e:02:ad:57:b8: aa:23:13:50:17:18:5c:37:2c:6f:82:18:6c:b9:ae:bb:ba:2b: 4e:ad:c8:2d:e5:11:7c:02:63:48:63:c7:1a:06:78:58:2a:74: 35:0b:b8:c9:88:bf:15:cc:57:df:7f:6f:d8:92:1e:2f:96:ef: 35:d1:61:3d:d7:bb:f6:c0:46:99:9e:2f:a4:70:22:f2:05:df: 20:1f:36:35:57:e7:d5:71:9d:bf:b7:f1:74:73:a7:3e:cd:20: 7e:60:16:80:71:1d:38:11:ce:be:e2:90:d4:e0:89:96:a6:87: 03:a8:85:89:f5:33:70:ae:22:21:40:55:fa:df:82:ac:ca:d4: 96:17:79:b3:15:a1:92:92:b9:c1:a8:b0:22:e1:e3:3b:dc:9a: 54:dc:4f:d4:5c:b5:95:20:2c:f0:92:16:df:9b:fa:2a:18:49: 12:da:19:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVBNTcxMTAvBgNVBAUTKDQwMUMxQTM2MzRGOTg3Q0U5RjlFNUNFRjU0MDlEQzFC RDBGRjJCQUEwHhcNMjUwNDI3MDUyMDQxWhcNMjUwNTA0MDUyMDQxWjAYMRYwFAYD VQQDEw02ODBkYmVhOS0xZjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/JBzIpnnX7UYmAakSSgVYs2LDPYde0Q3wiBvwxAjmpH9qwvBxP1pSSqF0Db QFGAyRCeyiCn1WuFh8HY/TEv92Uow0628j5rtTE3kXZ7/V3n0o/8t9qFX7qWIGFg IxZvhYTBklVBfNvTTf++1KYdp1WPA2AFfOUxaiIffsH3F09N0iePosDFGspjb6+1 CIK8oeDCM6L2tlaO44K6GCiSgOlhrQB8tZVWRH5OHvCIOWsEFkn3r0WM8Dr1TCcP tWpKwVmBlHh6B5TpF0Boz3gWKQRgcHob6FVXiQ/tF3MWT+d6Dy/bz9oUSDKvoib7 J14BOhN7gdy0Vbh009T92DkfUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBE2dXbp 0LT2p6TferZkQoOpS7UDMB8GA1UdIwQYMBaAFEAcGjY0+YfOn55c71QJ3BvQ/yuq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUE1Ny83NkYyNjdGQTU2 RUMxMUVGOEEwQ0IyNEZDNEY5QUUwMi9RQndhTmpUNWg4NmZubHp2VkFuY0c5RF9L Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FCd2FOalQ1aDg2Zm5senZWQW5jRzlEX0s2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUE1Ny83NkYyNjdGQTU2RUMxMUVGOEEwQ0IyNEZDNEY5QUUwMi9RQndhTmpUNWg4 NmZubHp2VkFuY0c5RF9LNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvm7dpNSX3fFEVqzwnpRweZydv6QX/iFZprFWXiMqfSBXwxr5MNnRs DAXMw1e9c6o8sp/iQRL7ApvLioqxqP7Q02Cb/34odAIHIulsfGFZp8VoYGt3PgKt V7iqIxNQFxhcNyxvghhsua67uitOrcgt5RF8AmNIY8caBnhYKnQ1C7jJiL8VzFff f2/Ykh4vlu810WE917v2wEaZni+kcCLyBd8gHzY1V+fVcZ2/t/F0c6c+zSB+YBaA cR04Ec6+4pDU4ImWpocDqIWJ9TNwriIhQFX634KsytSWF3mzFaGSkrnBqLAi4eM7 3JpU3E/UXLWVICzwkhbfm/oqGEkS2hkx -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:53 2025 by rpki-client on console.sobornost.net