$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.mft File: XsGmrXajq_3B4TKesmN8AYZLSAg.mft (raw, json) Hash identifier: viSAm1inN+kzGYCdfravfWA+SN7/+604mQewsBfAm3k= Subject key identifier: 41:62:39:77:30:09:91:2D:F4:77:21:46:D0:F5:B6:08:75:23:1C:5F Authority key identifier: 5E:C1:A6:AD:76:A3:AB:FD:C1:E1:32:9E:B2:63:7C:01:86:4B:48:08 Certificate issuer: /CN=A91AB20B/serialNumber=5EC1A6AD76A3ABFDC1E1329EB2637C01864B4808 Certificate serial: 07D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGmrXajq_3B4TKesmN8AYZLSAg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.mft Manifest number: 079D Signing time: Sat 26 Apr 2025 21:10:37 +0000 Manifest this update: Sat 26 Apr 2025 21:10:37 +0000 Manifest next update: Sat 03 May 2025 21:10:37 +0000 Files and hashes: 1: XsGmrXajq_3B4TKesmN8AYZLSAg.crl (hash: wbDvifudZqFwfKc4Pf2ZdnaBDfQpjif6rWnKgBIxJzs=) 2: 46D6261876A511EB82E04A2FC4F9AE02.roa (hash: Z0HHcyxz7rmGLBYwcIWDSL9D03AdZbtYiS469aOTikg=) 3: B512A570109211ECA693D74EC4F9AE02.roa (hash: AOyufc93Chw9bEWHvFa0LDI+LOdW3FqSZFo43ILQvd0=) 4: 82BB885E4B9811EB85F74960C4F9AE02.roa (hash: ZpHbYhB9ExSCJ+11c8ap/OdAIsKxszdOCjimKJQDTek=) 5: E3AAE94243B511EB8DA3F473C4F9AE02.roa (hash: ftDRlCPQKF+Ib5B7VJZrq540hqlVUdTm8Q2C4Ih+cM8=) 6: 7CF84F084B9111EBBA09CA72C4F9AE02.roa (hash: HxA8u7nmZWUr6BPYIZAwMw8J3pQQtwxfZZvWeTi7tWI=) 7: CF41132A1DE811EB9DE34963C4F9AE02.roa (hash: YABaqUWE/JPdcjinbFv0PWoHHYymCq6aO+ylU5Xzjo0=) 8: 046130D225FC11EC9D57EA7CC4F9AE02.roa (hash: XhE6x9E/aZ957HcPZHgLlj7Fv56GEXE7hy1IWMNgX6M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.crl rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGmrXajq_3B4TKesmN8AYZLSAg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2003 (0x7d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB20B, serialNumber=5EC1A6AD76A3ABFDC1E1329EB2637C01864B4808 Validity Not Before: Apr 26 21:10:37 2025 GMT Not After : May 3 21:10:37 2025 GMT Subject: CN=680d4bcd-a3e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:4e:44:dc:a5:46:2d:0b:de:b4:5f:cb:21:b4: a9:7e:1d:22:ca:f5:7a:ef:0d:23:9f:07:36:32:88: 7a:76:ac:cf:be:cd:3c:9e:45:8f:3f:1d:e5:ad:fb: 1f:66:f1:f5:33:12:9b:59:66:3a:78:6a:59:fd:d5: cb:7f:b7:13:0a:ab:a1:f4:2a:4e:14:09:bc:ae:13: 6d:92:19:5a:b9:63:19:2f:0f:e0:59:94:bc:3c:b7: 7c:e3:6a:15:7f:e6:f8:33:02:52:ed:6f:47:ab:dd: ed:4a:60:d0:a3:a4:bb:29:43:d8:20:fd:cc:d2:bb: b8:e6:43:fd:2e:b4:e9:bb:e1:31:8a:35:80:fb:79: 1c:83:7f:c4:88:73:79:0c:41:e7:15:e1:1f:d4:ef: 36:ce:f4:6b:30:3b:7c:c9:97:a8:6f:e0:04:09:d1: ed:d8:51:5d:30:cf:71:9f:bb:f9:ae:81:d1:ab:6f: 12:0a:33:85:50:09:9d:d9:8b:ad:34:3c:ed:99:0a: 3c:07:d9:c5:1b:0d:c6:de:05:a8:b0:2e:26:68:d0: 7a:ce:eb:b2:b9:da:b9:c9:d2:d4:20:fe:43:f6:e8: 46:21:d3:7f:a9:6e:e9:01:0f:d6:72:ed:58:49:24: 3a:3b:45:6a:0a:19:09:86:09:8a:cf:e6:ab:f5:fc: d1:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:62:39:77:30:09:91:2D:F4:77:21:46:D0:F5:B6:08:75:23:1C:5F X509v3 Authority Key Identifier: keyid:5E:C1:A6:AD:76:A3:AB:FD:C1:E1:32:9E:B2:63:7C:01:86:4B:48:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGmrXajq_3B4TKesmN8AYZLSAg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:ed:06:1e:d6:ba:ba:c4:00:2b:ba:7e:4e:b3:e9:a4:46:e5: de:64:39:d2:20:c5:e4:7a:81:96:8a:51:65:67:df:c9:2c:74: 8b:d0:10:c2:6b:44:ed:d8:ab:aa:a0:d9:bd:6f:5a:74:b7:43: 2c:81:60:97:31:45:64:57:ed:6d:8f:c2:c2:c5:29:bd:9a:fd: af:87:06:b3:43:15:a9:87:c1:0a:5d:5d:ad:64:04:29:9b:13: df:04:cd:27:a1:85:df:8e:d5:31:ec:98:86:82:d1:e2:09:b3: 01:14:eb:a6:5b:79:0b:5c:9a:c3:a3:0f:d6:54:c4:ea:73:31: 4c:a6:6d:89:7d:25:26:d3:9b:ee:b9:82:aa:97:1b:f5:be:a1: 3e:e7:4a:da:0b:eb:6f:e0:56:dc:2e:d0:d1:73:be:94:3d:65: ee:e6:86:46:9f:9e:79:97:3e:ed:af:3c:5e:00:29:00:4a:65: bf:99:d2:3a:3e:42:88:36:55:32:dc:de:a6:11:21:23:88:52: da:e4:af:8a:6d:6b:06:d1:e7:f2:39:ef:9d:47:e6:ca:4f:8e: ff:5f:1c:06:41:d6:bd:a9:6c:76:66:ff:37:b5:ba:a8:4d:96: df:cf:2c:22:75:de:9b:f1:52:88:07:06:3b:78:4e:05:71:f5: b4:96:d3:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIyMEIxMTAvBgNVBAUTKDVFQzFBNkFENzZBM0FCRkRDMUUxMzI5RUIyNjM3QzAx ODY0QjQ4MDgwHhcNMjUwNDI2MjExMDM3WhcNMjUwNTAzMjExMDM3WjAYMRYwFAYD VQQDEw02ODBkNGJjZC1hM2UzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7E5E3KVGLQvetF/LIbSpfh0iyvV67w0jnwc2Moh6dqzPvs08nkWPPx3lrfsf ZvH1MxKbWWY6eGpZ/dXLf7cTCquh9CpOFAm8rhNtkhlauWMZLw/gWZS8PLd842oV f+b4MwJS7W9Hq93tSmDQo6S7KUPYIP3M0ru45kP9LrTpu+ExijWA+3kcg3/EiHN5 DEHnFeEf1O82zvRrMDt8yZeob+AECdHt2FFdMM9xn7v5roHRq28SCjOFUAmd2Yut NDztmQo8B9nFGw3G3gWosC4maNB6zuuyudq5ydLUIP5D9uhGIdN/qW7pAQ/Wcu1Y SSQ6O0VqChkJhgmKz+ar9fzRiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEFiOXcw CZEt9HchRtD1tgh1IxxfMB8GA1UdIwQYMBaAFF7Bpq12o6v9weEynrJjfAGGS0gI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjIwQi9CQTcxQjY0ODEy MDMxMUVCQkFBMTk0MTRDNEY5QUUwMi9Yc0dtclhhanFfM0I0VEtlc21OOEFZWkxT QWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hzR21yWGFqcV8zQjRUS2VzbU44QVlaTFNBZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjIwQi9CQTcxQjY0ODEyMDMxMUVCQkFBMTk0MTRDNEY5QUUwMi9Yc0dtclhhanFf M0I0VEtlc21OOEFZWkxTQWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBe7QYe1rq6xAArun5Os+mkRuXeZDnSIMXkeoGWilFlZ9/JLHSL0BDC a0Tt2KuqoNm9b1p0t0MsgWCXMUVkV+1tj8LCxSm9mv2vhwazQxWph8EKXV2tZAQp mxPfBM0noYXfjtUx7JiGgtHiCbMBFOumW3kLXJrDow/WVMTqczFMpm2JfSUm05vu uYKqlxv1vqE+50raC+tv4FbcLtDRc76UPWXu5oZGn555lz7trzxeACkASmW/mdI6 PkKINlUy3N6mESEjiFLa5K+KbWsG0efyOe+dR+bKT47/XxwGQda9qWx2Zv83tbqo TZbfzywidd6b8VKIBwY7eE4FcfW0ltMi -----END CERTIFICATE-----Generated at Sun Apr 27 00:14:08 2025 by rpki-client on console.sobornost.net