$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft File: mK6VbUJuFgLO2LtyWI9io9oSqVU.mft (raw, json) Hash identifier: vwG92HAZXoWJ8chrDxqrhrMoqupzUlMlNU9jwfDhmJI= Subject key identifier: 4D:1D:4D:AA:9A:98:7C:2B:5C:AD:69:CB:DC:F7:9F:3C:B0:DD:2E:BA Authority key identifier: 98:AE:95:6D:42:6E:16:02:CE:D8:BB:72:58:8F:62:A3:DA:12:A9:55 Certificate issuer: /CN=A91A5FCF/serialNumber=98AE956D426E1602CED8BB72588F62A3DA12A955 Certificate serial: 06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mK6VbUJuFgLO2LtyWI9io9oSqVU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft Manifest number: 05 Signing time: Sun 27 Apr 2025 06:59:52 +0000 Manifest this update: Sun 27 Apr 2025 06:59:52 +0000 Manifest next update: Sun 04 May 2025 06:59:52 +0000 Files and hashes: 1: mK6VbUJuFgLO2LtyWI9io9oSqVU.crl (hash: /yzFlK5JBAaoBStLhEkTbwotaSVJku72AkGTJp/3dTs=) 2: 943B92961E6011F0B81D3A54C4F9AE02.roa (hash: OpKLsw9gUBvgDq3xLq9YboZIcPYYkBwvYdkkqKU3FB4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.crl rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mK6VbUJuFgLO2LtyWI9io9oSqVU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5FCF, serialNumber=98AE956D426E1602CED8BB72588F62A3DA12A955 Validity Not Before: Apr 27 06:59:52 2025 GMT Not After : May 4 06:59:52 2025 GMT Subject: CN=680dd5e8-2045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:16:c3:72:ed:8d:54:e7:68:0b:ae:2e:f6:61: 93:a3:95:e6:29:db:98:77:cb:17:07:06:b5:7f:8c: 98:1d:68:dc:55:61:74:7d:26:25:1d:8a:81:20:40: 53:0e:67:c0:bd:08:bb:57:a7:ac:62:ad:1e:cb:92: 6c:d4:2e:48:a2:23:8c:d9:7d:91:2e:b8:02:ec:8a: 25:64:af:de:c2:4e:6e:f1:a0:e9:1b:e2:a1:85:62: e2:17:1e:8b:98:5c:5d:e0:34:a1:6e:c2:8f:47:63: 63:31:6a:4d:dd:5e:0b:3d:32:4f:0b:fe:7b:41:1b: 51:6b:12:eb:09:7a:05:4b:32:b0:f7:35:b6:d2:34: 96:98:38:38:b0:29:72:8e:f3:c4:0c:ae:3a:14:26: e6:bb:37:2b:fd:b8:6c:96:70:84:d5:38:cf:ce:d4: a9:76:7d:10:0b:04:82:1f:b3:45:05:a3:71:9d:6c: d8:d4:c4:b9:ab:6b:1f:32:66:ae:64:32:28:00:a8: 6f:b5:72:9f:0a:cb:1c:29:46:a6:d9:90:8b:72:b4: d4:fc:f1:12:ed:6a:f8:11:f1:8d:ad:b3:00:d7:f1: 86:a4:d2:7e:8b:8b:ad:3b:c3:fb:f1:34:ed:7b:97: 39:4f:2a:61:3e:94:3d:0c:dd:61:ad:fd:86:2f:b8: 04:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:1D:4D:AA:9A:98:7C:2B:5C:AD:69:CB:DC:F7:9F:3C:B0:DD:2E:BA X509v3 Authority Key Identifier: keyid:98:AE:95:6D:42:6E:16:02:CE:D8:BB:72:58:8F:62:A3:DA:12:A9:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mK6VbUJuFgLO2LtyWI9io9oSqVU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:e1:6f:e4:1e:5d:03:ae:46:95:11:28:57:14:02:25:98:c4: c8:6e:8e:05:ed:82:1e:20:82:29:0b:7a:e7:4e:9b:8f:09:4c: 79:27:0f:65:85:9b:4b:fb:56:dd:62:1f:32:b4:79:95:08:0e: 2f:8b:90:9f:2f:df:de:e6:c1:65:18:77:8c:08:e6:b3:5f:4a: 06:33:3a:c5:90:2f:4a:eb:1f:0e:e3:08:3b:3a:60:22:f7:d7: bd:cd:e2:a2:61:fd:17:a0:4e:03:16:03:36:f1:1e:05:02:81: f6:fe:f1:39:dd:80:45:bc:81:8d:d5:7d:0a:80:2f:c2:76:26: 67:a9:ac:74:04:44:b4:6d:62:23:5b:6e:88:ab:ef:ba:89:f8: c5:e0:92:71:55:8d:b1:36:33:7a:f4:c9:53:3a:a8:08:59:03: 8b:3d:2d:47:e3:d6:de:33:90:49:81:08:89:fd:74:c0:0f:8a: 06:22:b2:3e:aa:25:8d:72:2d:d9:4d:cd:8a:5b:da:18:21:56: b0:2e:de:45:97:ec:99:76:d1:f7:10:26:50:ff:50:3a:70:bc: 9d:90:20:91:76:df:58:d2:33:71:52:11:35:d1:62:e4:d7:64: ab:3e:23:88:4d:d5:43:8e:78:23:f7:ce:08:17:8a:b1:f6:95: 60:13:4d:d8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NUZDRjExMC8GA1UEBRMoOThBRTk1NkQ0MjZFMTYwMkNFRDhCQjcyNTg4RjYyQTNE QTEyQTk1NTAeFw0yNTA0MjcwNjU5NTJaFw0yNTA1MDQwNjU5NTJaMBgxFjAUBgNV BAMTDTY4MGRkNWU4LTIwNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCiFsNy7Y1U52gLri72YZOjleYp25h3yxcHBrV/jJgdaNxVYXR9JiUdioEgQFMO Z8C9CLtXp6xirR7LkmzULkiiI4zZfZEuuALsiiVkr97CTm7xoOkb4qGFYuIXHouY XF3gNKFuwo9HY2Mxak3dXgs9Mk8L/ntBG1FrEusJegVLMrD3NbbSNJaYODiwKXKO 88QMrjoUJua7Nyv9uGyWcITVOM/O1Kl2fRALBIIfs0UFo3GdbNjUxLmrax8yZq5k MigAqG+1cp8KyxwpRqbZkItytNT88RLtavgR8Y2tswDX8Yak0n6Li607w/vxNO17 lzlPKmE+lD0M3WGt/YYvuARfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTR1NqpqY fCtcrWnL3PefPLDdLrowHwYDVR0jBBgwFoAUmK6VbUJuFgLO2LtyWI9io9oSqVUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1RkNGL0I4NEM2MDNBMUU1 RjExRjA5RTZBNkI0RkM0RjlBRTAyL21LNlZiVUp1RmdMTzJMdHlXSTlpbzlvU3FW VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbUs2VmJVSnVGZ0xPMkx0eVdJOWlvOW9TcVZVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1 RkNGL0I4NEM2MDNBMUU1RjExRjA5RTZBNkI0RkM0RjlBRTAyL21LNlZiVUp1RmdM TzJMdHlXSTlpbzlvU3FWVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAL/hb+QeXQOuRpURKFcUAiWYxMhujgXtgh4ggikLeudOm48JTHknD2WF m0v7Vt1iHzK0eZUIDi+LkJ8v397mwWUYd4wI5rNfSgYzOsWQL0rrHw7jCDs6YCL3 173N4qJh/RegTgMWAzbxHgUCgfb+8TndgEW8gY3VfQqAL8J2JmeprHQERLRtYiNb boir77qJ+MXgknFVjbE2M3r0yVM6qAhZA4s9LUfj1t4zkEmBCIn9dMAPigYisj6q JY1yLdlNzYpb2hghVrAu3kWX7Jl20fcQJlD/UDpwvJ2QIJF231jSM3FSETXRYuTX ZKs+I4hN1UOOeCP3zggXirH2lWATTdg= -----END CERTIFICATE-----Generated at Sun Apr 27 10:27:18 2025 by rpki-client on console.sobornost.net