$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.mft File: GM0m8vXURLcgxFKoxskgxtCmGAU.mft (raw, json) Hash identifier: oE52KTZMe5Ntg9P/WnZkEuWCOG8BZlMEr5PLxNjgCQA= Subject key identifier: E2:DD:A0:DB:CA:F7:7D:12:E2:4C:C0:79:BB:72:1A:94:46:7D:89:2B Authority key identifier: 18:CD:26:F2:F5:D4:44:B7:20:C4:52:A8:C6:C9:20:C6:D0:A6:18:05 Certificate issuer: /CN=A91AAF02/serialNumber=18CD26F2F5D444B720C452A8C6C920C6D0A61805 Certificate serial: 0197 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GM0m8vXURLcgxFKoxskgxtCmGAU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.mft Manifest number: 0195 Signing time: Sat 26 Apr 2025 17:32:39 +0000 Manifest this update: Sat 26 Apr 2025 17:32:39 +0000 Manifest next update: Sat 03 May 2025 17:32:39 +0000 Files and hashes: 1: GM0m8vXURLcgxFKoxskgxtCmGAU.crl (hash: CAn2A26aYxdgoQRn01186nhd7U/7HlPyr/TNRM7dCKU=) 2: 65A422A8C3F411EEB1191654C4F9AE02.roa (hash: iZmR1FbskCchxXKnxnbe4xzmmTQB2zEX5unoWSw1o+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.crl rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GM0m8vXURLcgxFKoxskgxtCmGAU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 14:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 407 (0x197) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAF02, serialNumber=18CD26F2F5D444B720C452A8C6C920C6D0A61805 Validity Not Before: Apr 26 17:32:39 2025 GMT Not After : May 3 17:32:39 2025 GMT Subject: CN=680d18b7-5b0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:64:a4:cc:9e:00:4d:e2:3e:44:46:00:d0:8b: 98:54:51:e2:0a:f6:5a:08:f8:ee:3e:0f:7c:5e:2d: f6:29:85:cf:d8:29:5c:6d:9d:f4:e4:1f:40:cd:18: e1:4e:54:f5:26:ee:ee:50:58:cf:a9:d3:f3:62:a4: 4a:6d:6a:24:e5:18:4d:c2:de:85:0a:2e:63:a0:a9: 78:a8:ba:f4:f4:a7:b8:c6:19:db:88:75:52:33:39: f6:57:b5:ba:14:11:ee:fd:b6:1e:5e:98:d4:59:c7: 49:13:4d:50:40:d0:0b:8f:10:2c:c6:a8:40:cb:e8: 5b:f3:42:85:6d:da:af:db:77:5c:89:4d:67:3f:12: 04:b1:4c:12:1c:c0:20:5b:7f:39:6b:9a:d8:61:de: da:d5:c0:98:d3:0b:1f:a6:05:41:ed:cd:d9:c5:8a: 24:66:90:3b:a7:4d:4e:0f:82:1c:2e:a5:7a:c8:74: 67:4f:83:cd:a0:f5:16:91:37:9c:3e:87:f5:cf:f0: 0c:21:63:a9:e7:4f:48:ac:e8:ae:9a:03:aa:3e:bd: 19:f2:3f:20:af:74:89:4b:50:e9:af:83:08:0b:6c: ef:66:92:91:cf:f8:60:49:8b:1e:a2:c9:47:4b:d7: e4:df:f1:f0:ec:50:7a:f6:96:0f:34:54:0d:dc:82: d3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:DD:A0:DB:CA:F7:7D:12:E2:4C:C0:79:BB:72:1A:94:46:7D:89:2B X509v3 Authority Key Identifier: keyid:18:CD:26:F2:F5:D4:44:B7:20:C4:52:A8:C6:C9:20:C6:D0:A6:18:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GM0m8vXURLcgxFKoxskgxtCmGAU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:c4:16:39:5c:bb:c8:06:38:01:d1:12:f8:a1:d5:84:9c:43: 40:c8:f8:ae:a4:8b:74:21:3c:89:d1:78:2d:87:8e:8d:4e:1b: 0e:05:fb:1f:f2:29:f8:be:7a:27:e2:dc:63:bf:ff:9e:a2:80: a4:24:3a:eb:a9:b0:4c:5a:38:9b:0a:2b:0a:f6:c9:9d:df:ef: b9:7d:33:8c:81:e3:cf:b2:de:55:2a:e7:c0:89:77:f3:65:f6: b7:dc:38:6f:9a:f2:68:8b:2f:93:df:04:57:94:d9:5d:07:03: 07:75:a6:fb:3e:2c:83:7c:9e:ba:d0:c1:9c:44:95:18:e9:a4: b9:cf:b8:e7:8f:65:b7:9a:d2:c0:a7:5a:75:9a:9a:ff:ab:c5: db:8b:68:b6:47:1e:2e:63:6d:f2:3a:70:a1:6e:05:fc:c4:b7: ca:04:3a:c1:88:bb:e5:fa:03:b9:a9:f9:b1:fb:54:04:6d:bc: d5:d0:eb:b3:08:32:da:96:f5:01:4b:e3:bb:ea:42:1d:30:a7: 7a:31:40:0d:c0:20:fe:8a:1c:09:34:f3:99:be:e5:f4:3e:48: 09:5d:2a:cd:d6:e8:be:72:df:64:72:fb:0c:7b:d5:97:f9:91: fe:a8:48:18:a4:05:5b:5d:2f:4a:37:4e:9a:4b:5f:6e:83:bd: b9:08:a2:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFGMDIxMTAvBgNVBAUTKDE4Q0QyNkYyRjVENDQ0QjcyMEM0NTJBOEM2QzkyMEM2 RDBBNjE4MDUwHhcNMjUwNDI2MTczMjM5WhcNMjUwNTAzMTczMjM5WjAYMRYwFAYD VQQDEw02ODBkMThiNy01YjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArWSkzJ4ATeI+REYA0IuYVFHiCvZaCPjuPg98Xi32KYXP2ClcbZ305B9AzRjh TlT1Ju7uUFjPqdPzYqRKbWok5RhNwt6FCi5joKl4qLr09Ke4xhnbiHVSMzn2V7W6 FBHu/bYeXpjUWcdJE01QQNALjxAsxqhAy+hb80KFbdqv23dciU1nPxIEsUwSHMAg W385a5rYYd7a1cCY0wsfpgVB7c3ZxYokZpA7p01OD4IcLqV6yHRnT4PNoPUWkTec Pof1z/AMIWOp509IrOiumgOqPr0Z8j8gr3SJS1Dpr4MIC2zvZpKRz/hgSYseoslH S9fk3/Hw7FB69pYPNFQN3ILTUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOLdoNvK 930S4kzAebtyGpRGfYkrMB8GA1UdIwQYMBaAFBjNJvL11ES3IMRSqMbJIMbQphgF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUYwMi8yNjFGMzREOEMx RjcxMUVEQjQyNjc0N0JDNEY5QUUwMi9HTTBtOHZYVVJMY2d4RktveHNrZ3h0Q21H QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0dNMG04dlhVUkxjZ3hGS294c2tneHRDbUdBVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUYwMi8yNjFGMzREOEMxRjcxMUVEQjQyNjc0N0JDNEY5QUUwMi9HTTBtOHZYVVJM Y2d4RktveHNrZ3h0Q21HQVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhxBY5XLvIBjgB0RL4odWEnENAyPiupIt0ITyJ0Xgth46NThsOBfsf 8in4vnon4txjv/+eooCkJDrrqbBMWjibCisK9smd3++5fTOMgePPst5VKufAiXfz Zfa33DhvmvJoiy+T3wRXlNldBwMHdab7PiyDfJ660MGcRJUY6aS5z7jnj2W3mtLA p1p1mpr/q8Xbi2i2Rx4uY23yOnChbgX8xLfKBDrBiLvl+gO5qfmx+1QEbbzV0Ouz CDLalvUBS+O76kIdMKd6MUANwCD+ihwJNPOZvuX0PkgJXSrN1ui+ct9kcvsMe9WX +ZH+qEgYpAVbXS9KN06aS19ug725CKKN -----END CERTIFICATE-----Generated at Sat Apr 26 21:01:59 2025 by rpki-client on console.sobornost.net