$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft File: ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft (raw, json) Hash identifier: HlQjYglytlJKGkOCly3BetTskXuFPikG4k9KK4HM0A4= Subject key identifier: 00:C8:FA:68:D2:74:24:CB:FB:E5:3F:57:0F:F8:7F:8C:AC:A7:8E:C6 Authority key identifier: 8A:F7:D8:B8:64:FD:90:45:2F:FD:6D:E9:3B:51:45:6C:79:EF:B3:C7 Certificate issuer: /CN=A91AC4FA/serialNumber=8AF7D8B864FD90452FFD6DE93B51456C79EFB3C7 Certificate serial: 01D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft Manifest number: 01CA Signing time: Sun 27 Apr 2025 01:59:06 +0000 Manifest this update: Sun 27 Apr 2025 01:59:06 +0000 Manifest next update: Sun 04 May 2025 01:59:06 +0000 Files and hashes: 1: ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl (hash: ARgHXyObG6i9H8CqZMFmvMhUZFKiPCBij67yxCJG1O4=) 2: 0B1C46B26C8E11EDA1402673C4F9AE02.roa (hash: zXr6NOZcCRqEcE9Pgk6RR5qOsx1G0XavR+U4MW0E+MQ=) 3: 2A40C41C6EC511ED9672CB40C4F9AE02.roa (hash: DV9Gdp3YkASaDfgSFkYwRK6BKaUQSr3ziC7H6K89rT8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 01:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 468 (0x1d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC4FA, serialNumber=8AF7D8B864FD90452FFD6DE93B51456C79EFB3C7 Validity Not Before: Apr 27 01:59:06 2025 GMT Not After : May 4 01:59:06 2025 GMT Subject: CN=680d8f6a-3f23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a9:fa:7f:fc:2d:56:7f:ac:00:28:e7:fd:f5: 7c:e3:78:e6:af:14:e2:0e:3b:26:3d:5d:8a:a3:cb: 49:f5:eb:58:ba:79:0a:80:90:60:d0:73:da:0c:27: f3:6a:f1:43:56:90:0a:e2:9d:60:bf:c5:76:8d:f4: d5:7f:da:ef:8c:d5:2c:3f:3c:25:d6:f0:52:7b:25: f9:21:ed:03:9a:00:d9:84:75:47:d1:da:dc:b6:ed: 02:9f:60:b4:74:ab:52:b6:29:d9:35:81:cb:25:db: c1:c5:97:1d:a2:6e:06:ea:18:8b:6d:c3:e3:5c:11: 5a:bb:c7:e7:81:7c:a3:03:15:91:69:9a:59:43:1b: 7d:59:ce:3f:e8:f3:e1:bf:e6:12:5f:c5:a4:1d:63: 0d:24:33:e0:f8:aa:94:fe:c6:cd:db:78:bf:6c:3c: 1d:63:ae:4f:c1:01:cb:5b:af:a4:aa:a2:46:1c:11: 1f:93:c9:9c:1c:ff:69:2a:fe:47:21:fb:10:75:ae: 36:fd:0b:36:1a:06:c2:d9:d8:9b:47:a6:4c:94:4b: f9:2c:67:45:68:d1:0f:19:a3:a7:a9:b5:06:3a:3a: d5:e0:7a:35:85:fd:41:b9:6b:2d:ad:40:08:58:72: d3:d3:f7:a4:d5:3d:26:fd:a1:c4:14:1a:e7:a4:73: d6:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:C8:FA:68:D2:74:24:CB:FB:E5:3F:57:0F:F8:7F:8C:AC:A7:8E:C6 X509v3 Authority Key Identifier: keyid:8A:F7:D8:B8:64:FD:90:45:2F:FD:6D:E9:3B:51:45:6C:79:EF:B3:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:4f:65:fc:f0:76:46:06:a4:c4:ef:7b:7f:8b:ea:62:98:42: 44:c3:d9:76:21:75:49:88:b9:e6:3d:63:47:48:04:e2:49:f4: e0:1f:e4:58:29:f6:30:97:81:4c:63:c3:11:66:94:d3:0c:ae: 3c:48:65:7a:a2:08:27:73:61:69:cb:bc:3c:17:d8:79:ff:33: 54:46:95:02:81:d2:6d:30:98:ce:8b:6b:02:9f:a4:51:63:4c: 5a:09:8b:c6:c2:50:03:69:8d:d0:95:a1:6a:2b:3d:19:c1:20: 9e:28:37:5a:28:f7:7c:af:e4:33:c9:9f:6d:37:3e:33:6a:60: ce:31:1f:29:ff:60:45:9c:37:60:fd:c7:5f:01:93:85:c8:06: ce:29:19:79:46:b0:f7:56:0a:31:dd:ed:3c:50:91:3b:8a:f4: 4f:ca:0a:f2:fc:1c:2d:01:81:59:8e:0d:aa:dd:3f:43:3a:c4: a1:9c:25:ab:d5:17:d8:a3:b3:7c:46:bd:3f:72:f8:9b:c8:c2: 4a:91:4a:dc:99:b0:59:65:ac:2a:86:95:07:1f:a3:31:ce:3e: 45:18:8d:46:89:ea:5d:8b:72:9f:88:9a:f5:8e:0e:10:b7:a8: a4:b8:51:20:bf:44:c9:31:be:55:2f:17:3d:0f:2a:93:90:10: 2c:ab:62:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUM0RkExMTAvBgNVBAUTKDhBRjdEOEI4NjRGRDkwNDUyRkZENkRFOTNCNTE0NTZD NzlFRkIzQzcwHhcNMjUwNDI3MDE1OTA2WhcNMjUwNTA0MDE1OTA2WjAYMRYwFAYD VQQDEw02ODBkOGY2YS0zZjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnan6f/wtVn+sACjn/fV843jmrxTiDjsmPV2Ko8tJ9etYunkKgJBg0HPaDCfz avFDVpAK4p1gv8V2jfTVf9rvjNUsPzwl1vBSeyX5Ie0DmgDZhHVH0drctu0Cn2C0 dKtStinZNYHLJdvBxZcdom4G6hiLbcPjXBFau8fngXyjAxWRaZpZQxt9Wc4/6PPh v+YSX8WkHWMNJDPg+KqU/sbN23i/bDwdY65PwQHLW6+kqqJGHBEfk8mcHP9pKv5H IfsQda42/Qs2GgbC2dibR6ZMlEv5LGdFaNEPGaOnqbUGOjrV4Ho1hf1BuWstrUAI WHLT0/ek1T0m/aHEFBrnpHPWmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFADI+mjS dCTL++U/Vw/4f4ysp47GMB8GA1UdIwQYMBaAFIr32Lhk/ZBFL/1t6TtRRWx577PH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzRGQS8zN0NCODc5ODZD OEIxMUVEODdBRkY1NzFDNEY5QUUwMi9pdmZZdUdUOWtFVXZfVzNwTzFGRmJIbnZz OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l2Zll1R1Q5a0VVdl9XM3BPMUZGYkhudnM4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzRGQS8zN0NCODc5ODZDOEIxMUVEODdBRkY1NzFDNEY5QUUwMi9pdmZZdUdUOWtF VXZfVzNwTzFGRmJIbnZzOGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvT2X88HZGBqTE73t/i+pimEJEw9l2IXVJiLnmPWNHSATiSfTgH+RY KfYwl4FMY8MRZpTTDK48SGV6oggnc2Fpy7w8F9h5/zNURpUCgdJtMJjOi2sCn6RR Y0xaCYvGwlADaY3QlaFqKz0ZwSCeKDdaKPd8r+QzyZ9tNz4zamDOMR8p/2BFnDdg /cdfAZOFyAbOKRl5RrD3Vgox3e08UJE7ivRPygry/BwtAYFZjg2q3T9DOsShnCWr 1RfYo7N8Rr0/cvibyMJKkUrcmbBZZawqhpUHH6Mxzj5FGI1Giepdi3KfiJr1jg4Q t6ikuFEgv0TJMb5VLxc9DyqTkBAsq2I2 -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:07 2025 by rpki-client on console.sobornost.net