$ rpki-client -vvf rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/iWZCPuKkFWMfevMU5NiEAHqEaLY.mft File: iWZCPuKkFWMfevMU5NiEAHqEaLY.mft (raw, json) Hash identifier: 2bpotWI5AeCZPK4/s3ETOPrK9sE58AOGCpJkOfNyEq0= Subject key identifier: F6:D6:84:6A:FD:77:02:9E:F3:A3:65:0F:97:AE:67:C7:DB:8C:0B:1C Authority key identifier: 89:66:42:3E:E2:A4:15:63:1F:7A:F3:14:E4:D8:84:00:7A:84:68:B6 Certificate issuer: /CN=A91A91CB/serialNumber=8966423EE2A415631F7AF314E4D884007A8468B6 Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWZCPuKkFWMfevMU5NiEAHqEaLY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/iWZCPuKkFWMfevMU5NiEAHqEaLY.mft Manifest number: 27 Signing time: Sun 27 Apr 2025 06:35:28 +0000 Manifest this update: Sun 27 Apr 2025 06:35:27 +0000 Manifest next update: Sun 04 May 2025 06:35:27 +0000 Files and hashes: 1: iWZCPuKkFWMfevMU5NiEAHqEaLY.crl (hash: 4i8Iw+aA150NOc5mSmJdI3jkcVHU/LkfK53LqFMaCNw=) 2: 0EB302DCEA5B11EFABB07C6DC4F9AE02.roa (hash: gvmSDCYZSC63LrY5JrPQoisd5tgDkXkEX0SCy3pFzuY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/iWZCPuKkFWMfevMU5NiEAHqEaLY.crl rsync://rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/iWZCPuKkFWMfevMU5NiEAHqEaLY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWZCPuKkFWMfevMU5NiEAHqEaLY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A91CB, serialNumber=8966423EE2A415631F7AF314E4D884007A8468B6 Validity Not Before: Apr 27 06:35:27 2025 GMT Not After : May 4 06:35:27 2025 GMT Subject: CN=680dd030-6182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b0:67:ff:0c:49:4e:cd:a3:67:63:c0:ce:f3: ff:90:f4:bd:ee:30:24:38:c7:af:90:2c:cd:a6:c3: 71:35:e2:d3:48:33:6b:d8:75:8b:bf:71:b6:bc:ea: 18:15:b4:a8:f9:42:5c:a3:4e:d4:5d:1c:34:03:10: d1:22:53:d8:bc:c0:26:33:a4:29:85:14:42:f4:11: 3f:35:98:db:3f:3f:3e:69:1e:3e:41:80:2c:66:b2: 01:3a:e9:f5:62:7d:c9:9e:97:08:80:3c:fa:f7:ef: 93:6b:57:eb:16:97:96:ac:88:89:f4:94:4f:1a:2b: 41:1d:aa:ab:f5:03:44:2d:d1:2c:21:b1:7e:dc:29: 8f:9a:ea:85:02:9e:e1:af:c7:92:3e:1b:f5:5e:f1: dd:a3:1e:ee:72:8b:d3:1f:ac:89:2b:47:9d:05:99: dd:a7:af:14:fc:e8:2b:71:ec:c1:23:79:71:b3:2d: 80:02:cc:9a:69:81:4d:70:48:1f:30:ba:d1:78:2d: 1a:26:8a:7d:42:17:f8:ce:a6:a6:b3:ef:c7:7f:13: 5e:13:0d:10:2b:2f:92:29:50:2e:63:78:b0:7d:da: c0:af:9a:05:f6:89:21:06:d1:6f:54:b4:dd:03:4b: ed:66:56:a7:b0:6e:e4:d2:cc:68:b9:38:db:cf:e5: f6:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:D6:84:6A:FD:77:02:9E:F3:A3:65:0F:97:AE:67:C7:DB:8C:0B:1C X509v3 Authority Key Identifier: keyid:89:66:42:3E:E2:A4:15:63:1F:7A:F3:14:E4:D8:84:00:7A:84:68:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/iWZCPuKkFWMfevMU5NiEAHqEaLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWZCPuKkFWMfevMU5NiEAHqEaLY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/iWZCPuKkFWMfevMU5NiEAHqEaLY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:6c:cf:4b:ea:07:98:03:c3:ef:0d:c2:81:89:a7:70:d5:3d: db:ff:21:8b:d9:f5:66:6c:05:68:46:54:36:7c:aa:7a:2e:8a: 62:fb:58:3f:c0:37:56:b5:9c:d7:2a:7f:12:24:a9:63:e0:45: e2:18:be:d0:a4:8d:90:0f:d2:9d:3a:c7:9e:01:e4:76:e9:b4: 79:2c:19:50:fd:f5:59:a6:50:3f:12:bd:e9:55:ea:54:d4:69: db:3f:95:f8:6b:25:b1:8c:86:fa:67:c5:6b:74:ab:90:42:00: f2:ec:fe:4d:04:49:cc:ef:95:78:5a:eb:22:ed:08:33:bf:75: b9:d1:45:b4:bf:0a:66:4b:b0:40:c3:08:a4:d9:af:3c:24:ce: 69:5c:9b:f0:ad:b3:5c:fc:87:93:3b:a6:05:75:d0:a3:cc:a0: fd:98:86:d1:99:ab:0e:18:15:18:b2:50:36:03:78:bf:2e:57: f8:0f:89:ad:ff:8a:fc:5a:13:aa:64:a2:f0:43:03:e0:07:4f: e1:c6:81:f1:0c:3d:15:79:b5:4e:a4:36:57:ff:65:d8:fb:7a: 20:74:47:9c:c9:a8:73:5f:b0:4c:c0:f4:a7:e4:7e:47:bd:d4: 0c:2d:6f:3c:b7:26:2f:e0:49:eb:ce:61:72:08:de:42:ce:a2: 85:5e:15:6b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OTFDQjExMC8GA1UEBRMoODk2NjQyM0VFMkE0MTU2MzFGN0FGMzE0RTREODg0MDA3 QTg0NjhCNjAeFw0yNTA0MjcwNjM1MjdaFw0yNTA1MDQwNjM1MjdaMBgxFjAUBgNV BAMTDTY4MGRkMDMwLTYxODIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBsGf/DElOzaNnY8DO8/+Q9L3uMCQ4x6+QLM2mw3E14tNIM2vYdYu/cba86hgV tKj5QlyjTtRdHDQDENEiU9i8wCYzpCmFFEL0ET81mNs/Pz5pHj5BgCxmsgE66fVi fcmelwiAPPr375NrV+sWl5asiIn0lE8aK0Edqqv1A0Qt0SwhsX7cKY+a6oUCnuGv x5I+G/Ve8d2jHu5yi9MfrIkrR50Fmd2nrxT86Ctx7MEjeXGzLYACzJppgU1wSB8w utF4LRomin1CF/jOpqaz78d/E14TDRArL5IpUC5jeLB92sCvmgX2iSEG0W9UtN0D S+1mVqewbuTSzGi5ONvP5fa7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9taEav13 Ap7zo2UPl65nx9uMCxwwHwYDVR0jBBgwFoAUiWZCPuKkFWMfevMU5NiEAHqEaLYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5MUNCLzY1MEU2MDBBRUE1 QTExRUZCODRBRTQ2OEM0RjlBRTAyL2lXWkNQdUtrRldNZmV2TVU1TmlFQUhxRWFM WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaVdaQ1B1S2tGV01mZXZNVTVOaUVBSHFFYUxZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5 MUNCLzY1MEU2MDBBRUE1QTExRUZCODRBRTQ2OEM0RjlBRTAyL2lXWkNQdUtrRldN ZmV2TVU1TmlFQUhxRWFMWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEZsz0vqB5gDw+8NwoGJp3DVPdv/IYvZ9WZsBWhGVDZ8qnouimL7WD/A N1a1nNcqfxIkqWPgReIYvtCkjZAP0p06x54B5HbptHksGVD99VmmUD8SvelV6lTU ads/lfhrJbGMhvpnxWt0q5BCAPLs/k0ESczvlXha6yLtCDO/dbnRRbS/CmZLsEDD CKTZrzwkzmlcm/Cts1z8h5M7pgV10KPMoP2YhtGZqw4YFRiyUDYDeL8uV/gPia3/ ivxaE6pkovBDA+AHT+HGgfEMPRV5tU6kNlf/Zdj7eiB0R5zJqHNfsEzA9Kfkfke9 1Awtbzy3Ji/gSevOYXII3kLOooVeFWs= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:53 2025 by rpki-client on console.sobornost.net