$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft File: J3U8_U6dmOtMNus3e6tt4vkua-g.mft (raw, json) Hash identifier: 7Nq3wL5U/OE+biuEztw25uSJXHY2P1/m3jQM10ympCU= Subject key identifier: CB:A6:3C:18:57:B1:89:B0:FF:24:E2:D9:83:2A:35:BC:54:C1:DF:FC Authority key identifier: 27:75:3C:FD:4E:9D:98:EB:4C:36:EB:37:7B:AB:6D:E2:F9:2E:6B:E8 Certificate issuer: /CN=A91A8AF1/serialNumber=27753CFD4E9D98EB4C36EB377BAB6DE2F92E6BE8 Certificate serial: 0F93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft Manifest number: 0F8C Signing time: Mon 28 Apr 2025 17:47:05 +0000 Manifest this update: Mon 28 Apr 2025 17:47:05 +0000 Manifest next update: Mon 05 May 2025 17:47:05 +0000 Files and hashes: 1: J3U8_U6dmOtMNus3e6tt4vkua-g.crl (hash: /YoYTNGjKWoc14+ZrfZ6EUIn8tRQX0a3RhP9ZG1HPWo=) 2: C5FC427C5C1911E997A2ED42C4F9AE02.roa (hash: E7M9ff2lqZ9KItEYB6uL3gelJHB2f4xodQAgicwzP+4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.crl rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 17:47:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3987 (0xf93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8AF1, serialNumber=27753CFD4E9D98EB4C36EB377BAB6DE2F92E6BE8 Validity Not Before: Apr 28 17:47:05 2025 GMT Not After : May 5 17:47:05 2025 GMT Subject: CN=680fbf19-850f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:dc:bf:9a:e5:e7:2a:39:fd:a7:e7:e3:bc:89: d5:1d:5b:0c:d9:b0:ac:9e:b9:ca:0f:2f:4e:6c:fc: c0:c5:3a:50:da:2a:8a:1c:2a:2e:a3:e2:92:d0:c8: 40:26:e3:b7:ae:64:83:0e:dd:41:d2:f7:53:74:a9: 09:a7:93:d5:15:53:a4:29:bc:94:26:ce:1d:7f:af: 8a:5a:9c:a8:59:c6:de:57:70:2c:41:6f:d2:44:fa: fe:7d:70:05:e8:72:1d:57:7a:f3:11:43:e2:97:75: b4:b8:84:f5:6b:fe:d1:70:7b:19:dc:00:ec:95:37: b0:3a:7c:91:1d:0b:63:e5:1c:44:64:b4:ba:f8:2b: 41:1a:7b:06:96:76:67:cc:e4:d3:f4:3f:5e:4d:92: 4e:2e:3e:0a:dc:36:6f:91:ff:d9:82:6e:5f:8f:1c: e1:86:d2:a5:c5:fa:44:cc:c9:d5:85:0c:de:e7:e1: 88:78:8e:8b:ac:c0:fa:3f:47:92:ed:22:df:fc:4b: ee:47:c0:dd:b3:5f:15:89:45:6e:bd:66:2d:b6:5f: 1c:35:a6:e3:93:13:d7:ee:8f:99:e3:a1:2d:49:eb: c8:1a:82:98:c1:c3:9e:a7:f0:4b:fd:cc:f8:f7:8c: 52:7b:a0:f2:33:fe:5d:e9:61:78:4b:40:39:7d:ac: 9e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:A6:3C:18:57:B1:89:B0:FF:24:E2:D9:83:2A:35:BC:54:C1:DF:FC X509v3 Authority Key Identifier: keyid:27:75:3C:FD:4E:9D:98:EB:4C:36:EB:37:7B:AB:6D:E2:F9:2E:6B:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:55:24:3a:53:ca:4a:03:2f:de:ac:11:21:ae:a1:25:2b:1a: ce:bb:d2:e3:ac:c6:6b:21:ab:bc:6a:02:f8:c6:38:8a:b7:df: c7:b0:f2:91:f7:43:13:b4:e5:76:dd:92:07:d0:76:b7:4e:00: 2f:c0:80:db:44:8b:66:86:31:1f:db:3c:a4:16:39:68:ab:5f: a8:8a:83:fa:6c:87:ec:7e:57:fc:7b:04:f7:84:07:ca:3b:51: 61:6d:18:34:8e:b9:88:6d:db:bc:40:9d:41:ca:55:0f:d3:86: d4:4a:50:04:f5:ae:61:a5:b5:e6:7d:0e:68:5b:ad:37:19:5b: ab:85:c1:eb:8a:e3:3d:52:bb:f4:72:9a:a9:90:ae:58:e9:12: a2:c3:9c:e6:d7:6c:40:b8:06:44:62:ab:87:b0:38:15:c0:c7: 94:53:a4:4e:6a:8e:4c:98:97:1c:ee:39:5d:30:73:01:aa:05: 17:be:b8:ad:93:be:75:23:c5:95:f0:38:29:81:57:a6:74:43: 1a:5b:2a:f1:9e:39:fe:c6:7a:60:42:d7:0f:df:0e:e4:35:3f: 0a:7b:e6:27:ea:55:c9:aa:93:8b:11:8e:3a:ad:2b:41:f7:2e: 5f:d8:3d:b8:7c:18:96:10:07:c5:24:2f:98:40:88:b7:d0:44: 04:f1:22:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD5MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThBRjExMTAvBgNVBAUTKDI3NzUzQ0ZENEU5RDk4RUI0QzM2RUIzNzdCQUI2REUy RjkyRTZCRTgwHhcNMjUwNDI4MTc0NzA1WhcNMjUwNTA1MTc0NzA1WjAYMRYwFAYD VQQDEw02ODBmYmYxOS04NTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxdy/muXnKjn9p+fjvInVHVsM2bCsnrnKDy9ObPzAxTpQ2iqKHCouo+KS0MhA JuO3rmSDDt1B0vdTdKkJp5PVFVOkKbyUJs4df6+KWpyoWcbeV3AsQW/SRPr+fXAF 6HIdV3rzEUPil3W0uIT1a/7RcHsZ3ADslTewOnyRHQtj5RxEZLS6+CtBGnsGlnZn zOTT9D9eTZJOLj4K3DZvkf/Zgm5fjxzhhtKlxfpEzMnVhQze5+GIeI6LrMD6P0eS 7SLf/EvuR8Dds18ViUVuvWYttl8cNabjkxPX7o+Z46EtSevIGoKYwcOep/BL/cz4 94xSe6DyM/5d6WF4S0A5fayeiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMumPBhX sYmw/yTi2YMqNbxUwd/8MB8GA1UdIwQYMBaAFCd1PP1OnZjrTDbrN3urbeL5Lmvo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEFGMS9DQTFBMDNDMjVD MTgxMUU5QjMwNzQzNDFDNEY5QUUwMi9KM1U4X1U2ZG1PdE1OdXMzZTZ0dDR2a3Vh LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ozVThfVTZkbU90TU51czNlNnR0NHZrdWEtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEFGMS9DQTFBMDNDMjVDMTgxMUU5QjMwNzQzNDFDNEY5QUUwMi9KM1U4X1U2ZG1P dE1OdXMzZTZ0dDR2a3VhLWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWVSQ6U8pKAy/erBEhrqElKxrOu9LjrMZrIau8agL4xjiKt9/HsPKR 90MTtOV23ZIH0Ha3TgAvwIDbRItmhjEf2zykFjloq1+oioP6bIfsflf8ewT3hAfK O1FhbRg0jrmIbdu8QJ1BylUP04bUSlAE9a5hpbXmfQ5oW603GVurhcHriuM9Urv0 cpqpkK5Y6RKiw5zm12xAuAZEYquHsDgVwMeUU6ROao5MmJcc7jldMHMBqgUXvrit k751I8WV8DgpgVemdEMaWyrxnjn+xnpgQtcP3w7kNT8Ke+Yn6lXJqpOLEY46rStB 9y5f2D24fBiWEAfFJC+YQIi30EQE8SL/ -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:52 2025 by rpki-client on console.sobornost.net