$ rpki-client -vvf rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft File: FjMWdiEa7mdzSFtlIzxiw6RYev0.mft (raw, json) Hash identifier: +dQkM2QGlmuO0rqSYDm1lnTZT4lROfdXemSR/jfui1g= Subject key identifier: 4A:CD:BE:5C:93:83:D8:FD:5E:72:2E:97:52:0E:34:44:2F:74:B2:1D Authority key identifier: 16:33:16:76:21:1A:EE:67:73:48:5B:65:23:3C:62:C3:A4:58:7A:FD Certificate issuer: /CN=A91A86D0/serialNumber=16331676211AEE6773485B65233C62C3A4587AFD Certificate serial: 0C22 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft Manifest number: 0C15 Signing time: Mon 28 Apr 2025 17:50:57 +0000 Manifest this update: Mon 28 Apr 2025 17:50:56 +0000 Manifest next update: Mon 05 May 2025 17:50:56 +0000 Files and hashes: 1: FjMWdiEa7mdzSFtlIzxiw6RYev0.crl (hash: OgrcCN9syVIRLDfGLIHxldIMhtZ//QQ6sTJsp3/vidY=) 2: CDD0C38ECCE111EB90AF2C7AC4F9AE02.roa (hash: e16SVTPpwjEg2RE9Hpi4GSSEsMxTTKPyjdQEKVYgs6Q=) 3: CF1B3152CCE111EB90AF2C7AC4F9AE02.roa (hash: ZahlDvvl4xqyMO4InfL5NLuVKGcItekitU1WQ9tGmBk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.crl rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 14:50:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3106 (0xc22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A86D0, serialNumber=16331676211AEE6773485B65233C62C3A4587AFD Validity Not Before: Apr 28 17:50:56 2025 GMT Not After : May 5 17:50:56 2025 GMT Subject: CN=680fc000-70b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1e:e5:64:5c:a8:59:b4:2f:8b:2d:91:1f:d2: 3c:23:93:18:72:35:d7:72:1f:6e:60:f6:12:60:5c: ea:a5:25:10:7a:69:ce:fd:52:d7:84:5e:de:f2:70: 33:fc:b3:c8:42:5f:e1:46:4d:9b:d8:a4:29:e5:fe: 5d:25:a3:d0:9e:c6:1f:60:35:ff:7e:05:c1:88:5b: a6:9f:63:fe:e8:06:b8:54:d5:a8:ea:6a:49:cd:00: 24:3e:a3:5a:d9:b2:b6:e8:84:38:ee:7c:89:36:e7: ac:77:33:6c:d0:41:2a:cc:ac:53:eb:be:c4:8f:a5: 22:93:e3:72:38:53:95:a6:5a:62:7f:8e:f8:7f:59: 5e:ff:73:8d:f5:9f:2f:37:f2:22:73:63:64:a9:bd: 65:03:be:2f:c9:8e:fb:02:63:a8:ef:e3:d9:85:af: e2:a6:64:a6:a9:16:a5:0f:e2:d5:95:75:86:05:eb: c3:e5:2b:61:d9:e9:81:16:b0:31:7b:25:bc:52:a4: e0:e0:1e:a2:61:ee:68:e6:33:35:00:0f:a6:8e:9d: a0:66:bb:0b:93:fb:13:0a:18:9f:8a:57:05:d8:31: a0:a2:1f:c1:5c:64:14:33:13:08:9d:f1:b3:9f:ef: 4c:e0:fa:ce:54:a3:70:81:c2:c0:9b:b8:e2:f2:28: 03:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:CD:BE:5C:93:83:D8:FD:5E:72:2E:97:52:0E:34:44:2F:74:B2:1D X509v3 Authority Key Identifier: keyid:16:33:16:76:21:1A:EE:67:73:48:5B:65:23:3C:62:C3:A4:58:7A:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:33:24:5b:10:6f:c6:8a:41:b5:a3:16:71:76:74:c8:b6:77: e7:06:82:54:08:6b:27:71:ee:a1:76:5d:72:3a:d4:47:fd:00: 81:ec:51:6b:d6:94:e7:00:db:aa:65:86:14:32:f4:0c:18:95: f9:6f:18:61:44:05:b6:d4:ee:3d:6e:20:3f:c6:4d:8e:d0:b5: 8a:8e:d7:f4:e7:58:6c:29:77:10:4f:8f:68:e5:4d:62:e1:6c: f2:a7:a0:fc:ad:34:d5:72:e8:0a:36:38:50:11:84:6f:27:04: 53:73:97:d3:23:73:72:04:e5:cb:82:5a:62:cf:67:84:30:b5: 13:98:fb:9d:86:33:cd:c1:da:d5:5c:6c:fa:6d:d4:0b:c3:02: 06:09:ec:5c:24:88:3b:d8:8c:ee:92:1d:67:c1:b4:ac:5e:fc: 60:d8:d4:cd:cf:34:ef:1a:2b:ce:4d:a9:05:ec:7c:fb:d5:b2: 98:6a:54:ef:15:fb:bf:11:53:2f:0b:0c:b1:b9:fc:33:6b:9a: 35:7d:8e:74:6f:0e:e9:d7:0e:00:44:d7:10:85:5b:ac:e9:10: 74:b5:90:a0:35:22:bb:39:0f:69:40:cb:e4:a4:d4:68:cc:9a: 5b:bb:ac:6f:7b:99:92:5c:59:17:10:22:88:e5:dc:07:18:df: 61:91:0c:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg2RDAxMTAvBgNVBAUTKDE2MzMxNjc2MjExQUVFNjc3MzQ4NUI2NTIzM0M2MkMz QTQ1ODdBRkQwHhcNMjUwNDI4MTc1MDU2WhcNMjUwNTA1MTc1MDU2WjAYMRYwFAYD VQQDEw02ODBmYzAwMC03MGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvh7lZFyoWbQviy2RH9I8I5MYcjXXch9uYPYSYFzqpSUQemnO/VLXhF7e8nAz /LPIQl/hRk2b2KQp5f5dJaPQnsYfYDX/fgXBiFumn2P+6Aa4VNWo6mpJzQAkPqNa 2bK26IQ47nyJNuesdzNs0EEqzKxT677Ej6Uik+NyOFOVplpif474f1le/3ON9Z8v N/Iic2Nkqb1lA74vyY77AmOo7+PZha/ipmSmqRalD+LVlXWGBevD5Sth2emBFrAx eyW8UqTg4B6iYe5o5jM1AA+mjp2gZrsLk/sTChifilcF2DGgoh/BXGQUMxMInfGz n+9M4PrOVKNwgcLAm7ji8igDhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFErNvlyT g9j9XnIul1IONEQvdLIdMB8GA1UdIwQYMBaAFBYzFnYhGu5nc0hbZSM8YsOkWHr9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODZEMC84RDhGMEFCRTBC NUExMUVBOTA5MjMwNjZDNEY5QUUwMi9Gak1XZGlFYTdtZHpTRnRsSXp4aXc2Ulll djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0ZqTVdkaUVhN21kelNGdGxJenhpdzZSWWV2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODZEMC84RDhGMEFCRTBCNUExMUVBOTA5MjMwNjZDNEY5QUUwMi9Gak1XZGlFYTdt ZHpTRnRsSXp4aXc2UllldjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6MyRbEG/GikG1oxZxdnTItnfnBoJUCGsnce6hdl1yOtRH/QCB7FFr 1pTnANuqZYYUMvQMGJX5bxhhRAW21O49biA/xk2O0LWKjtf051hsKXcQT49o5U1i 4Wzyp6D8rTTVcugKNjhQEYRvJwRTc5fTI3NyBOXLglpiz2eEMLUTmPudhjPNwdrV XGz6bdQLwwIGCexcJIg72Izukh1nwbSsXvxg2NTNzzTvGivOTakF7Hz71bKYalTv Ffu/EVMvCwyxufwza5o1fY50bw7p1w4ARNcQhVus6RB0tZCgNSK7OQ9pQMvkpNRo zJpbu6xve5mSXFkXECKI5dwHGN9hkQxc -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:52 2025 by rpki-client on console.sobornost.net