$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft File: N5uRyTDgoq-LgirZqVm6313dYJ8.mft (raw, json) Hash identifier: AZ7OQmCYKbY9hw9Oeq8nKV+HR/lMae99O/q7FAXWsew= Subject key identifier: 69:1F:47:D3:6D:10:90:10:EB:CD:DB:2A:3F:B2:EF:F6:96:E8:55:EE Authority key identifier: 37:9B:91:C9:30:E0:A2:AF:8B:82:2A:D9:A9:59:BA:DF:5D:DD:60:9F Certificate issuer: /CN=A91AD92A/serialNumber=379B91C930E0A2AF8B822AD9A959BADF5DDD609F Certificate serial: 012B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5uRyTDgoq-LgirZqVm6313dYJ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft Manifest number: 0129 Signing time: Sun 27 Apr 2025 03:31:20 +0000 Manifest this update: Sun 27 Apr 2025 03:31:20 +0000 Manifest next update: Sun 04 May 2025 03:31:20 +0000 Files and hashes: 1: N5uRyTDgoq-LgirZqVm6313dYJ8.crl (hash: bQLNms1LeRYQei88f+drAxB78hhW4LqeITWJnfatdtc=) 2: 796CD35A5B5511EE8E4D2A39C4F9AE02.roa (hash: OeBchGabyfPVMg1/t31bD5FDzmzMHYndv4rCKHiX9jw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.crl rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5uRyTDgoq-LgirZqVm6313dYJ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 299 (0x12b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD92A, serialNumber=379B91C930E0A2AF8B822AD9A959BADF5DDD609F Validity Not Before: Apr 27 03:31:20 2025 GMT Not After : May 4 03:31:20 2025 GMT Subject: CN=680da508-bda1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:85:83:1f:7f:2e:3a:5e:1d:4c:90:47:60:c3: 62:a1:63:e1:60:b8:ce:ed:8f:1b:ab:94:eb:57:ef: 9b:21:a2:e8:1d:b7:19:3e:fc:42:6b:67:c2:2c:75: a5:fe:81:86:5a:a0:a9:e3:64:2c:e8:39:8d:68:66: 58:05:4e:13:78:3f:93:69:ca:f1:20:8d:ad:94:b6: 24:24:9f:5b:db:c6:11:4a:7f:62:83:a8:74:99:cd: 24:18:d4:de:34:53:fd:02:df:0e:68:2d:b8:2f:80: b4:ee:86:cc:58:a2:6f:4c:fd:04:9b:19:51:a6:72: c0:3f:27:53:50:4c:5c:05:34:e7:1d:15:a5:fd:e4: 7e:d7:b1:b4:1c:e1:6f:24:e9:82:f3:22:85:9a:b8: 9c:b3:51:17:0d:54:37:33:af:92:50:a5:c8:05:41: 36:5f:92:9c:fd:be:32:de:f2:1d:b6:db:5d:a4:a0: 82:09:18:ff:5c:12:05:b5:51:ac:10:77:9d:f6:64: 94:4c:70:93:f1:37:b6:63:8b:a6:82:02:49:bc:65: cd:1c:eb:7c:bc:5e:f7:26:53:9c:8f:30:4a:fe:2e: 55:d3:4f:3a:ee:28:1f:6e:10:74:be:f8:d2:66:40: f0:a8:32:87:b4:28:d5:a9:6c:65:43:0e:14:fa:f3: 1a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:1F:47:D3:6D:10:90:10:EB:CD:DB:2A:3F:B2:EF:F6:96:E8:55:EE X509v3 Authority Key Identifier: keyid:37:9B:91:C9:30:E0:A2:AF:8B:82:2A:D9:A9:59:BA:DF:5D:DD:60:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5uRyTDgoq-LgirZqVm6313dYJ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:84:c7:d4:5d:0e:49:aa:f8:5b:2f:41:ab:c4:34:f4:fd:e5: 83:ca:0c:4e:ab:19:8d:e2:1d:d2:61:91:04:53:db:18:75:67: c1:55:56:17:56:68:07:6b:c7:76:41:ad:c9:c0:f5:92:86:fd: eb:2d:90:f2:5a:45:18:dd:b9:07:76:54:77:ef:9a:cb:af:8c: c9:38:5d:74:ce:5b:d5:34:44:97:ba:34:9f:2c:7c:26:b9:15: f0:59:f8:90:70:c9:cb:53:2b:30:03:34:5c:54:7a:56:79:36: 7f:58:ad:88:22:39:05:e3:49:fc:6e:fd:64:f4:14:03:ab:7e: 71:7f:ef:e8:ee:60:5d:17:1e:46:1a:f9:4c:a4:29:94:dc:3c: 1c:07:d4:ca:01:99:de:a7:fa:ff:8b:21:fb:47:a7:ae:c5:c0: cd:cb:94:bb:e9:bb:98:11:da:fa:aa:4e:ec:0d:27:00:91:0d: de:be:cb:bd:f8:06:6c:17:79:6f:0b:1a:50:22:09:3a:9a:26: fe:33:12:40:20:5a:6d:70:a6:c0:7c:f9:98:ad:33:7f:32:95: b2:64:0e:51:5c:be:a3:e2:9c:ff:ea:27:e4:07:a2:49:81:70: 8c:f9:e3:17:b9:6a:ed:18:c3:5e:1e:cb:59:c4:f3:0b:eb:84: 43:ce:96:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ5MkExMTAvBgNVBAUTKDM3OUI5MUM5MzBFMEEyQUY4QjgyMkFEOUE5NTlCQURG NURERDYwOUYwHhcNMjUwNDI3MDMzMTIwWhcNMjUwNTA0MDMzMTIwWjAYMRYwFAYD VQQDEw02ODBkYTUwOC1iZGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5IWDH38uOl4dTJBHYMNioWPhYLjO7Y8bq5TrV++bIaLoHbcZPvxCa2fCLHWl /oGGWqCp42Qs6DmNaGZYBU4TeD+TacrxII2tlLYkJJ9b28YRSn9ig6h0mc0kGNTe NFP9At8OaC24L4C07obMWKJvTP0EmxlRpnLAPydTUExcBTTnHRWl/eR+17G0HOFv JOmC8yKFmrics1EXDVQ3M6+SUKXIBUE2X5Kc/b4y3vIdtttdpKCCCRj/XBIFtVGs EHed9mSUTHCT8Te2Y4umggJJvGXNHOt8vF73JlOcjzBK/i5V00867igfbhB0vvjS ZkDwqDKHtCjVqWxlQw4U+vMaEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGkfR9Nt EJAQ683bKj+y7/aW6FXuMB8GA1UdIwQYMBaAFDebkckw4KKvi4Iq2alZut9d3WCf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDkyQS8zQ0U1NzdEQTVC NTQxMUVFODA4NkY0MzJDNEY5QUUwMi9ONXVSeVREZ29xLUxnaXJacVZtNjMxM2RZ SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL041dVJ5VERnb3EtTGdpclpxVm02MzEzZFlKOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDkyQS8zQ0U1NzdEQTVCNTQxMUVFODA4NkY0MzJDNEY5QUUwMi9ONXVSeVREZ29x LUxnaXJacVZtNjMxM2RZSjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCohMfUXQ5JqvhbL0GrxDT0/eWDygxOqxmN4h3SYZEEU9sYdWfBVVYX VmgHa8d2Qa3JwPWShv3rLZDyWkUY3bkHdlR375rLr4zJOF10zlvVNESXujSfLHwm uRXwWfiQcMnLUyswAzRcVHpWeTZ/WK2IIjkF40n8bv1k9BQDq35xf+/o7mBdFx5G GvlMpCmU3DwcB9TKAZnep/r/iyH7R6euxcDNy5S76buYEdr6qk7sDScAkQ3evsu9 +AZsF3lvCxpQIgk6mib+MxJAIFptcKbAfPmYrTN/MpWyZA5RXL6j4pz/6ifkB6JJ gXCM+eMXuWrtGMNeHstZxPML64RDzpa5 -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:07 2025 by rpki-client on console.sobornost.net