$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/b8Lt8MURUqO-wRSaG9su2yk8nZU.mft File: b8Lt8MURUqO-wRSaG9su2yk8nZU.mft (raw, json) Hash identifier: 5FWaBneaz7i7BoyOBVyPfulhjyAE+wgxKeNwTOjdzQY= Subject key identifier: BB:71:A5:0B:72:0D:F9:D7:25:B7:DD:3F:FD:74:4C:3D:15:3C:CE:C8 Authority key identifier: 6F:C2:ED:F0:C5:11:52:A3:BE:C1:14:9A:1B:DB:2E:DB:29:3C:9D:95 Certificate issuer: /CN=A91AA28B/serialNumber=6FC2EDF0C51152A3BEC1149A1BDB2EDB293C9D95 Certificate serial: 0D4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8Lt8MURUqO-wRSaG9su2yk8nZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/b8Lt8MURUqO-wRSaG9su2yk8nZU.mft Manifest number: 0D23 Signing time: Mon 28 Apr 2025 18:17:01 +0000 Manifest this update: Mon 28 Apr 2025 18:17:01 +0000 Manifest next update: Mon 05 May 2025 18:17:01 +0000 Files and hashes: 1: b8Lt8MURUqO-wRSaG9su2yk8nZU.crl (hash: gt1LXGCzYppeHKTfYtvjF8wu8dzIOFZRdPh2551QtEw=) 2: 4DD0C31C0E2011F0A0825648C4F9AE02.roa (hash: 8r7MWVk5x8o1qlWsJdhw0htq1GLcuT7GZDff98YKUWg=) 3: 11815E36135311EE94A8A114C4F9AE02.roa (hash: 4RiRLEUaqFnMyzAxg+jhTtVSLZnRrw+D1OLV5ZjDtiE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/b8Lt8MURUqO-wRSaG9su2yk8nZU.crl rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/b8Lt8MURUqO-wRSaG9su2yk8nZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8Lt8MURUqO-wRSaG9su2yk8nZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 18:17:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3405 (0xd4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA28B, serialNumber=6FC2EDF0C51152A3BEC1149A1BDB2EDB293C9D95 Validity Not Before: Apr 28 18:17:01 2025 GMT Not After : May 5 18:17:01 2025 GMT Subject: CN=680fc61d-6187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:99:a5:b3:55:5a:ea:7e:10:70:8d:33:50:15: 57:27:d7:25:e0:3d:1d:2c:ea:fa:28:62:2b:b0:3d: 44:54:b6:5a:4a:7e:79:e8:55:80:a2:d4:46:d3:55: d8:66:57:ae:c8:5d:71:d8:d1:25:64:c4:a5:30:bf: 52:a7:60:8d:d8:c4:08:8b:6c:06:89:e2:38:98:80: ad:0b:ff:0e:97:ce:20:f1:41:2b:af:a6:ea:f7:45: 6c:f5:2b:56:4f:38:6d:a4:99:6f:61:5f:f6:bf:f9: 64:72:a7:0b:0b:71:dd:83:56:49:78:57:b0:6e:f7: 06:26:9a:49:b1:01:b7:14:ae:83:06:8e:ff:51:d3: f0:ef:2e:97:14:2c:e5:8a:7b:d8:c6:c9:5a:1a:ad: 05:9f:ca:46:59:1e:86:41:2f:ae:2d:1a:c2:d8:3e: 0a:d7:79:5e:7b:37:ec:bd:70:a6:ed:c6:95:26:2b: 22:69:dc:72:40:53:90:33:03:4a:cd:0f:14:04:00: 0f:f0:79:fc:00:27:86:85:2a:82:64:6c:98:ed:5d: ec:30:d5:1c:1f:71:85:f2:c6:37:4a:f7:4b:c6:46: e3:2c:0a:7f:0c:25:b0:98:03:5d:07:8c:66:08:1c: 95:60:57:77:11:80:36:1b:29:8b:23:5b:aa:d1:76: 30:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:71:A5:0B:72:0D:F9:D7:25:B7:DD:3F:FD:74:4C:3D:15:3C:CE:C8 X509v3 Authority Key Identifier: keyid:6F:C2:ED:F0:C5:11:52:A3:BE:C1:14:9A:1B:DB:2E:DB:29:3C:9D:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/b8Lt8MURUqO-wRSaG9su2yk8nZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8Lt8MURUqO-wRSaG9su2yk8nZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/b8Lt8MURUqO-wRSaG9su2yk8nZU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:70:5e:92:1c:9d:c4:98:90:c4:1a:0a:81:69:da:a3:b5:89: 30:04:33:f9:95:72:3a:d4:30:c8:08:68:bc:7d:b1:bd:64:5a: b1:55:74:3c:fb:f3:df:91:1e:0a:60:cb:20:ed:ec:2f:4b:21: 48:ff:ed:ba:e5:08:e3:f2:4e:d3:a3:a0:91:ec:29:23:40:17: ad:a1:2c:5f:ff:8e:05:7b:46:c9:16:d2:3a:32:bf:3e:1c:a5: ca:82:f8:13:91:a5:d5:68:db:17:ca:b8:d0:a3:bb:52:4e:02: 51:4e:c7:ad:6d:b6:75:4d:00:30:5f:a5:dd:f8:da:be:bf:1e: 09:6c:0e:93:94:11:19:ae:7f:dc:91:f2:81:a4:ea:65:ff:a6: 20:a6:a9:0d:71:0c:14:fa:52:14:3e:b7:99:86:35:24:82:57: 68:f4:47:8e:37:83:5d:b2:64:3f:5a:71:6e:9e:ac:b5:3c:99: 21:53:02:d1:5e:b4:53:f0:fc:37:a8:22:74:31:95:b8:ce:ad: 90:3b:60:6d:89:22:5b:ca:08:5f:22:86:3d:fc:99:3c:3f:6b: 18:5d:f8:4b:96:55:39:a0:62:2e:1b:24:f5:a4:86:2f:55:6f: 80:80:d8:6f:c4:f7:dd:3f:79:3b:3d:23:5a:ea:7d:46:77:8c: 8a:a6:1a:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUEyOEIxMTAvBgNVBAUTKDZGQzJFREYwQzUxMTUyQTNCRUMxMTQ5QTFCREIyRURC MjkzQzlEOTUwHhcNMjUwNDI4MTgxNzAxWhcNMjUwNTA1MTgxNzAxWjAYMRYwFAYD VQQDEw02ODBmYzYxZC02MTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxpmls1Va6n4QcI0zUBVXJ9cl4D0dLOr6KGIrsD1EVLZaSn556FWAotRG01XY ZleuyF1x2NElZMSlML9Sp2CN2MQIi2wGieI4mICtC/8Ol84g8UErr6bq90Vs9StW TzhtpJlvYV/2v/lkcqcLC3Hdg1ZJeFewbvcGJppJsQG3FK6DBo7/UdPw7y6XFCzl invYxslaGq0Fn8pGWR6GQS+uLRrC2D4K13leezfsvXCm7caVJisiadxyQFOQMwNK zQ8UBAAP8Hn8ACeGhSqCZGyY7V3sMNUcH3GF8sY3SvdLxkbjLAp/DCWwmANdB4xm CByVYFd3EYA2GymLI1uq0XYwBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLtxpQty DfnXJbfdP/10TD0VPM7IMB8GA1UdIwQYMBaAFG/C7fDFEVKjvsEUmhvbLtspPJ2V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTI4Qi8xRTAyNjRBQURC QzgxMUU5QkVBOTEwNTFDNEY5QUUwMi9iOEx0OE1VUlVxTy13UlNhRzlzdTJ5azhu WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I4THQ4TVVSVXFPLXdSU2FHOXN1MnlrOG5aVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTI4Qi8xRTAyNjRBQURCQzgxMUU5QkVBOTEwNTFDNEY5QUUwMi9iOEx0OE1VUlVx Ty13UlNhRzlzdTJ5azhuWlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjcF6SHJ3EmJDEGgqBadqjtYkwBDP5lXI61DDICGi8fbG9ZFqxVXQ8 +/PfkR4KYMsg7ewvSyFI/+265Qjj8k7To6CR7CkjQBetoSxf/44Fe0bJFtI6Mr8+ HKXKgvgTkaXVaNsXyrjQo7tSTgJRTsetbbZ1TQAwX6Xd+Nq+vx4JbA6TlBEZrn/c kfKBpOpl/6YgpqkNcQwU+lIUPreZhjUkgldo9EeON4NdsmQ/WnFunqy1PJkhUwLR XrRT8Pw3qCJ0MZW4zq2QO2BtiSJbyghfIoY9/Jk8P2sYXfhLllU5oGIuGyT1pIYv VW+AgNhvxPfdP3k7PSNa6n1Gd4yKphr5 -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:53 2025 by rpki-client on console.sobornost.net