$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/qq7HHKNN7wjYjud72RwVcXXMPAk.mft File: qq7HHKNN7wjYjud72RwVcXXMPAk.mft (raw, json) Hash identifier: qbSKeSFubkjtjxHxSkbO4lo03RCbZwALA+xTr3PzJzU= Subject key identifier: 1A:78:C7:00:A3:9D:67:EE:08:F6:82:CB:56:41:D5:83:EB:73:48:3F Authority key identifier: AA:AE:C7:1C:A3:4D:EF:08:D8:8E:E7:7B:D9:1C:15:71:75:CC:3C:09 Certificate issuer: /CN=A91A6353/serialNumber=AAAEC71CA34DEF08D88EE77BD91C157175CC3C09 Certificate serial: 0695 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qq7HHKNN7wjYjud72RwVcXXMPAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/qq7HHKNN7wjYjud72RwVcXXMPAk.mft Manifest number: 066D Signing time: Sat 26 Apr 2025 22:13:54 +0000 Manifest this update: Sat 26 Apr 2025 22:13:54 +0000 Manifest next update: Sat 03 May 2025 22:13:54 +0000 Files and hashes: 1: qq7HHKNN7wjYjud72RwVcXXMPAk.crl (hash: kKOH3AGCIi058x5GpQ1tbo/SnhEF5xtUu0Ilrgc4ltQ=) 2: A43A27DAFC0911EF99725548C4F9AE02.roa (hash: emr+zhY1TbaeDkC7dmXT1lGYaVo4KENev4IW3OP2K7Q=) 3: 17687AB8D18F11EF8C6F8687C4F9AE02.roa (hash: WWuXoRDgSFC35DFMV3idQp1hR/mdc4d4fur1hKvZ27k=) 4: 94D84328C2BE11EFA78A383CC4F9AE02.roa (hash: ILedb+K4luFgP1u+0Lt3UnlTE9tN7xoj1804tP59xoo=) 5: C7DF2FAEB31C11EF92C86228C4F9AE02.roa (hash: nedZ6CxgF0ng6a51eLIMspuxhTSJIeVR5Q+BtX9A36g=) 6: 7B34351E6C4011EFB07AFE4DC4F9AE02.roa (hash: a8hiZQY4feWw7cGzPQPoFMY0Vgh/L0UfvR1IyLlgJEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/qq7HHKNN7wjYjud72RwVcXXMPAk.crl rsync://rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/qq7HHKNN7wjYjud72RwVcXXMPAk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qq7HHKNN7wjYjud72RwVcXXMPAk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 22:13:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1685 (0x695) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6353, serialNumber=AAAEC71CA34DEF08D88EE77BD91C157175CC3C09 Validity Not Before: Apr 26 22:13:54 2025 GMT Not After : May 3 22:13:54 2025 GMT Subject: CN=680d5aa2-3a64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ac:e3:27:6d:dd:2f:c7:c2:30:2c:5c:35:f8: 00:76:f0:c2:7d:93:9c:bc:85:6d:37:56:4e:30:26: 89:f4:88:49:f1:72:46:ab:ab:fd:4f:b6:52:34:78: 07:cf:a1:e9:98:27:69:8f:c6:1b:77:dd:03:9d:cf: bc:f1:f3:8b:49:c0:43:ea:76:6d:6f:63:d8:e7:de: 67:95:aa:74:f2:b4:a3:3b:14:65:84:4a:91:41:1f: 15:e1:b1:a2:b9:99:b1:98:85:fb:b6:c7:b3:53:83: 0a:66:cb:b7:5b:5e:6c:6c:fd:73:86:47:f8:a3:8b: e6:39:4b:2a:d7:74:08:9d:1b:37:a4:70:e2:65:6a: 2b:df:2c:9d:42:a9:ca:d9:94:72:52:c0:62:4e:60: e3:c9:70:e0:6f:68:e5:32:60:e5:7e:60:f8:a4:39: 24:62:c0:2d:ed:40:f9:01:c9:6b:fe:69:cf:58:bb: d9:5c:cf:53:3b:2f:0b:40:84:f3:4e:b7:2f:80:2c: ab:5f:90:55:6a:b9:90:9c:61:fd:d5:ff:f5:9c:e6: 20:5f:30:40:e1:7f:cb:56:6d:2f:cd:f4:d3:e3:3d: 00:96:a1:8e:a3:b5:82:f5:db:3e:9c:f2:a0:ed:1e: c4:f4:52:ac:86:bd:6e:dd:c5:53:f8:74:43:af:dd: 36:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:78:C7:00:A3:9D:67:EE:08:F6:82:CB:56:41:D5:83:EB:73:48:3F X509v3 Authority Key Identifier: keyid:AA:AE:C7:1C:A3:4D:EF:08:D8:8E:E7:7B:D9:1C:15:71:75:CC:3C:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/qq7HHKNN7wjYjud72RwVcXXMPAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qq7HHKNN7wjYjud72RwVcXXMPAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/qq7HHKNN7wjYjud72RwVcXXMPAk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:5d:1f:59:ab:1a:18:c6:da:ca:c1:c7:ce:27:be:37:1d:95: 37:28:59:49:4b:25:b3:47:41:88:36:c9:44:f6:9b:52:80:d8: 58:0e:24:c1:c3:bf:b2:97:cb:d3:b3:be:88:0f:64:ae:3b:99: d1:6e:b5:42:12:95:c6:4a:1e:56:8c:15:9f:11:64:f4:54:76: b9:87:7e:73:cc:61:96:09:db:fb:5e:a6:3b:9d:48:c6:c7:1b: 77:f2:f7:a4:47:4e:42:09:69:af:08:38:f4:cc:b6:8e:3e:33: 66:e3:54:5c:08:c7:e7:8d:67:96:c4:af:1e:7d:63:4e:13:22: 51:1e:29:b8:a2:59:e4:92:b5:a4:7a:de:ed:6c:fd:b0:90:7c: 37:a0:1b:cb:43:9d:71:d5:aa:44:1a:5e:69:e0:e9:89:b4:ce: 21:e4:bd:92:11:e5:81:c2:d3:5b:76:6b:5b:b8:6f:9e:bd:b8: 3b:80:20:69:c8:bf:d7:02:25:42:f8:3a:e3:b9:f8:c1:f4:74: 7a:11:c5:b9:e5:89:c0:f8:0b:d0:ca:2e:d9:34:12:e3:fb:05: 81:6b:de:08:3d:cd:fb:f4:57:29:4e:50:91:d5:b2:9b:8c:bf: a8:02:3c:dc:d5:9a:bc:50:40:49:08:1e:df:48:19:f4:33:be: a8:fe:ce:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTYzNTMxMTAvBgNVBAUTKEFBQUVDNzFDQTM0REVGMDhEODhFRTc3QkQ5MUMxNTcx NzVDQzNDMDkwHhcNMjUwNDI2MjIxMzU0WhcNMjUwNTAzMjIxMzU0WjAYMRYwFAYD VQQDEw02ODBkNWFhMi0zYTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA06zjJ23dL8fCMCxcNfgAdvDCfZOcvIVtN1ZOMCaJ9IhJ8XJGq6v9T7ZSNHgH z6HpmCdpj8Ybd90Dnc+88fOLScBD6nZtb2PY595nlap08rSjOxRlhEqRQR8V4bGi uZmxmIX7tsezU4MKZsu3W15sbP1zhkf4o4vmOUsq13QInRs3pHDiZWor3yydQqnK 2ZRyUsBiTmDjyXDgb2jlMmDlfmD4pDkkYsAt7UD5Aclr/mnPWLvZXM9TOy8LQITz TrcvgCyrX5BVarmQnGH91f/1nOYgXzBA4X/LVm0vzfTT4z0AlqGOo7WC9ds+nPKg 7R7E9FKshr1u3cVT+HRDr902fQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBp4xwCj nWfuCPaCy1ZB1YPrc0g/MB8GA1UdIwQYMBaAFKquxxyjTe8I2I7ne9kcFXF1zDwJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjM1My8zQkZERUQ2NDg2 QkExMUVCQkNDMzk4NzVDNEY5QUUwMi9xcTdISEtOTjd3allqdWQ3MlJ3VmNYWE1Q QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FxN0hIS05ON3dqWWp1ZDcyUndWY1hYTVBBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjM1My8zQkZERUQ2NDg2QkExMUVCQkNDMzk4NzVDNEY5QUUwMi9xcTdISEtOTjd3 allqdWQ3MlJ3VmNYWE1QQWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAXR9ZqxoYxtrKwcfOJ743HZU3KFlJSyWzR0GINslE9ptSgNhYDiTB w7+yl8vTs76ID2SuO5nRbrVCEpXGSh5WjBWfEWT0VHa5h35zzGGWCdv7XqY7nUjG xxt38vekR05CCWmvCDj0zLaOPjNm41RcCMfnjWeWxK8efWNOEyJRHim4olnkkrWk et7tbP2wkHw3oBvLQ51x1apEGl5p4OmJtM4h5L2SEeWBwtNbdmtbuG+evbg7gCBp yL/XAiVC+DrjufjB9HR6EcW55YnA+AvQyi7ZNBLj+wWBa94IPc379FcpTlCR1bKb jL+oAjzc1Zq8UEBJCB7fSBn0M76o/s7I -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:02 2025 by rpki-client on console.sobornost.net