$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft File: MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft (raw, json) Hash identifier: DDi+WxDZfteJCHlXgAXbD3UAWs3RnoIa7/pP7AbhxgA= Subject key identifier: A9:4E:94:4A:A9:3D:E0:E6:1A:17:84:2F:B9:0A:4C:15:8F:85:77:43 Authority key identifier: 31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90 Certificate issuer: /CN=A91A7B94/serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890 Certificate serial: 0159 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft Manifest number: 0149 Signing time: Sun 27 Apr 2025 03:16:49 +0000 Manifest this update: Sun 27 Apr 2025 03:16:49 +0000 Manifest next update: Sun 04 May 2025 03:16:49 +0000 Files and hashes: 1: MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl (hash: x5LDjv+nFXPpsjNaw3WmIILtfyGvlZFLpPpYBnO6BOc=) 2: 268DF20A940C11EE9B034255C4F9AE02.roa (hash: kgaZFM6PEa7OxBpQNYQJyC2BXzh6kZmUunDtbxoanho=) 3: 2732E7CE940C11EE9B034255C4F9AE02.roa (hash: vxzRpo3gFHIybngZJMla9i3xRZ+JSBWrRy4xi4ckalM=) 4: D29109C4EC6E11EEAEF9610BC4F9AE02.roa (hash: D8dAG/9CmCMBEAtiY945ZqCN3MyX7EsagCsHQSrxDDU=) 5: 7474F998377111EE8AFEB74DC4F9AE02.roa (hash: uxmO0Zu81b9ijLgJWFAnqvmhDLc0ZfCAbuCH6EbXLi0=) 6: B0562E7AEC6E11EEB7FC060BC4F9AE02.roa (hash: SpJD8GcSBoUz5MPi6PJr9VjMBRC58LFgHcmGttoe0yo=) 7: D2093EF4EC6E11EEAEF9610BC4F9AE02.roa (hash: G4Dla87V8rtQVoFrowa7K0BJ1dHwJVBSq0/2lBCHVpo=) 8: E9874B2A16D011EF90793868C4F9AE02.roa (hash: ViBEiXsjPtwDWgjWAoRfyKQaAhEvEFxJcWrERgHGyz4=) 9: AFDF1A1AEC6E11EEB7FC060BC4F9AE02.roa (hash: sVe/dlsdpYGwjAAFXOmmuTaA1ya2H4hHFG6dxtS3qXc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 345 (0x159) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7B94, serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890 Validity Not Before: Apr 27 03:16:49 2025 GMT Not After : May 4 03:16:49 2025 GMT Subject: CN=680da1a1-0357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d8:00:d3:4b:42:8d:29:86:39:03:00:4e:2a: 71:5d:4b:cf:71:ee:d5:41:e3:18:60:c9:1e:c0:84: 2d:d0:af:15:1f:09:9d:5d:f5:9f:80:15:c6:d2:66: ee:2c:71:9e:91:79:50:aa:c4:11:11:a5:50:fd:34: 5d:de:91:50:7b:23:9b:5a:eb:4a:1c:0a:78:d0:37: 00:92:0c:d6:74:c9:78:42:15:38:34:1b:c7:8a:f8: 5b:03:56:4f:95:81:7f:3d:4d:f6:74:53:7a:a0:2a: c2:4f:ea:07:0e:b2:e0:53:e9:15:30:76:16:c3:2d: 24:b9:26:6a:71:ac:05:10:a0:32:12:99:e8:75:b7: 85:e0:58:47:9f:ce:74:9a:3b:01:36:35:86:83:bc: 73:bc:50:45:8a:d9:39:03:68:92:d0:8d:53:4d:a9: 4d:7e:34:6a:e2:8b:3a:11:d8:18:74:19:ee:3a:b0: cc:0f:06:7b:06:aa:3c:1f:bb:4b:71:1d:73:9f:9c: bf:a5:95:c5:70:fa:d3:f2:51:9c:ea:8c:a2:f4:b7: f8:31:bc:6d:6b:31:6e:01:3e:90:2c:e0:3a:97:61: 24:00:00:11:43:78:f7:5c:ed:82:81:58:bf:fe:62: ce:8e:d2:c7:ba:39:d5:df:d0:17:30:6d:b0:0b:d5: 00:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:4E:94:4A:A9:3D:E0:E6:1A:17:84:2F:B9:0A:4C:15:8F:85:77:43 X509v3 Authority Key Identifier: keyid:31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e5:cf:ad:58:52:b4:4e:ea:24:1f:3d:e1:80:e7:ba:3b:c5:d4: f3:43:bb:6a:90:81:ae:f8:35:eb:1f:de:b5:9d:9e:07:2a:df: 0c:07:57:58:88:d3:0b:03:37:14:ad:6a:9b:f4:22:7a:9b:f6: 57:8d:99:af:22:dc:80:81:ae:82:4f:06:8f:50:04:58:e8:0c: 98:81:0a:4d:6b:37:56:81:00:b4:d8:a7:e0:f7:6d:78:9a:5a: 5b:34:d5:b6:ef:8b:4f:1e:d4:08:48:b2:02:9b:c6:ed:57:e8: 6e:37:c3:52:f2:2d:1b:11:dd:44:7b:f2:d7:46:39:48:72:17: 21:63:4e:fb:42:d2:6c:47:bb:ac:d0:fa:87:62:a4:55:32:d3: 89:c1:15:e4:8c:1a:68:78:71:17:e1:30:c4:ec:ed:85:bb:9f: ec:87:0d:e4:47:28:9c:99:fe:08:75:f1:78:44:ba:54:cb:ef: 22:d4:71:88:75:df:e6:09:a2:b7:91:72:41:4a:d9:71:3f:5d: 3a:9a:3a:da:12:2a:3e:74:2b:12:cd:80:40:8d:65:62:52:45: 91:76:11:b8:c2:42:2d:02:75:19:ff:48:69:ac:99:e6:ba:33: e3:0d:63:4a:b7:19:6d:a2:39:b1:4e:18:ca:fe:3f:59:a2:dc: 44:05:4a:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdCOTQxMTAvBgNVBAUTKDMxMjZGNEVGMDVFM0FFNzVBMDkxNDRCNjY3RDM5MzQ3 RDREQUE4OTAwHhcNMjUwNDI3MDMxNjQ5WhcNMjUwNTA0MDMxNjQ5WjAYMRYwFAYD VQQDEw02ODBkYTFhMS0wMzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuNgA00tCjSmGOQMATipxXUvPce7VQeMYYMkewIQt0K8VHwmdXfWfgBXG0mbu LHGekXlQqsQREaVQ/TRd3pFQeyObWutKHAp40DcAkgzWdMl4QhU4NBvHivhbA1ZP lYF/PU32dFN6oCrCT+oHDrLgU+kVMHYWwy0kuSZqcawFEKAyEpnodbeF4FhHn850 mjsBNjWGg7xzvFBFitk5A2iS0I1TTalNfjRq4os6EdgYdBnuOrDMDwZ7Bqo8H7tL cR1zn5y/pZXFcPrT8lGc6oyi9Lf4MbxtazFuAT6QLOA6l2EkAAARQ3j3XO2CgVi/ /mLOjtLHujnV39AXMG2wC9UAEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKlOlEqp PeDmGheEL7kKTBWPhXdDMB8GA1UdIwQYMBaAFDEm9O8F4651oJFEtmfTk0fU2qiQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0I5NC9DQzc0MUJCNjM3 NzAxMUVFOERDOEJCMzRDNEY5QUUwMi9NU2IwN3dYanJuV2drVVMyWjlPVFI5VGFx SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01TYjA3d1hqcm5XZ2tVUzJaOU9UUjlUYXFKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0I5NC9DQzc0MUJCNjM3NzAxMUVFOERDOEJCMzRDNEY5QUUwMi9NU2IwN3dYanJu V2drVVMyWjlPVFI5VGFxSkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDlz61YUrRO6iQfPeGA57o7xdTzQ7tqkIGu+DXrH961nZ4HKt8MB1dY iNMLAzcUrWqb9CJ6m/ZXjZmvItyAga6CTwaPUARY6AyYgQpNazdWgQC02Kfg9214 mlpbNNW274tPHtQISLICm8btV+huN8NS8i0bEd1Ee/LXRjlIchchY077QtJsR7us 0PqHYqRVMtOJwRXkjBpoeHEX4TDE7O2Fu5/shw3kRyicmf4IdfF4RLpUy+8i1HGI dd/mCaK3kXJBStlxP106mjraEio+dCsSzYBAjWViUkWRdhG4wkItAnUZ/0hprJnm ujPjDWNKtxltojmxThjK/j9ZotxEBUph -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:03 2025 by rpki-client on console.sobornost.net