$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft File: RrT_jckWend9mNhfL1Id0TZwc7M.mft (raw, json) Hash identifier: ZEybUlVszB5FoJBfmW0vu9ECO0q3y+fCpP0ZN9hJ4e8= Subject key identifier: A8:73:82:CD:04:A2:68:0B:F0:ED:F8:D9:D6:65:4E:22:04:53:1E:DB Authority key identifier: 46:B4:FF:8D:C9:16:7A:77:7D:98:D8:5F:2F:52:1D:D1:36:70:73:B3 Certificate issuer: /CN=A91ADE0A/serialNumber=46B4FF8DC9167A777D98D85F2F521DD1367073B3 Certificate serial: 0491 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RrT_jckWend9mNhfL1Id0TZwc7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft Manifest number: 0489 Signing time: Mon 28 Apr 2025 15:59:33 +0000 Manifest this update: Mon 28 Apr 2025 15:59:32 +0000 Manifest next update: Mon 05 May 2025 15:59:32 +0000 Files and hashes: 1: RrT_jckWend9mNhfL1Id0TZwc7M.crl (hash: IFlNrPklxyz9ZacWgqsAm93m94zomBUv0yRAqlv993U=) 2: B3789882F23211EC9A7DB924C4F9AE02.roa (hash: mHbYCPxnBj3PWJdh7qbfDGDK73T1pf2kWSW1uT2gXIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.crl rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RrT_jckWend9mNhfL1Id0TZwc7M.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 14:50:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1169 (0x491) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADE0A, serialNumber=46B4FF8DC9167A777D98D85F2F521DD1367073B3 Validity Not Before: Apr 28 15:59:32 2025 GMT Not After : May 5 15:59:32 2025 GMT Subject: CN=680fa5e5-dfb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:96:02:68:be:11:17:01:c1:94:fc:e2:30:a4: 5f:35:c7:30:e4:1d:0f:b8:7c:be:ca:ce:66:b3:f2: c6:59:d9:bc:1d:c9:c2:9d:ec:60:36:dc:45:cc:66: 19:02:93:e1:f9:23:d1:4a:fd:fa:9d:7c:23:60:06: 0e:31:44:cb:b0:f9:cf:54:c6:34:bb:b7:81:e1:f6: 63:fd:f4:a6:76:dd:aa:76:68:32:00:b4:2f:fe:d6: 5e:e8:6b:6c:88:0d:52:73:a2:38:29:fe:6c:48:c7: 90:b1:41:45:57:84:b6:c1:e1:9c:fb:c4:e7:cd:34: fd:b9:5b:9d:07:1f:c2:a6:1d:d7:1f:4f:38:ac:93: fd:91:9d:f0:7e:5f:8b:a2:66:ef:50:3e:27:ae:4d: 5f:58:8c:2b:db:b6:cd:ed:84:69:47:93:b4:94:e2: a9:e1:98:4a:5c:6e:c8:67:43:4f:2e:58:e7:2c:07: 69:6c:36:c3:f4:b2:69:79:f7:e9:57:ee:d3:89:10: 9c:f3:6a:7a:aa:39:97:06:df:7d:03:e3:53:37:e1: 3a:2e:e6:f1:4c:19:5f:ce:a5:91:0b:23:38:75:11: 8d:00:1f:4c:98:f1:e0:d9:6d:7c:4e:cd:5b:92:f0: d9:ce:2d:d8:5e:54:a8:cc:9e:74:ac:cc:0a:9d:a8: b8:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:73:82:CD:04:A2:68:0B:F0:ED:F8:D9:D6:65:4E:22:04:53:1E:DB X509v3 Authority Key Identifier: keyid:46:B4:FF:8D:C9:16:7A:77:7D:98:D8:5F:2F:52:1D:D1:36:70:73:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RrT_jckWend9mNhfL1Id0TZwc7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:3a:e0:44:34:ad:21:56:f6:d6:90:82:6e:ee:ce:b0:b0:c9: b5:5b:75:3a:e9:b7:f1:e6:22:99:80:b9:2c:df:64:39:e4:f3: 39:de:98:7b:e4:a8:60:9c:3b:d1:d8:79:64:70:bb:16:05:8a: ab:04:71:10:49:98:5e:d6:ed:66:aa:76:a1:71:fb:b9:1b:7e: c0:89:57:98:b3:7d:52:c8:6e:60:1d:57:61:ee:ea:43:09:35: ea:51:fc:c8:06:78:62:41:6c:5d:cd:b5:d8:df:4c:e4:b8:d5: de:d9:37:06:05:e3:37:2e:71:d3:15:d4:2a:16:60:d5:65:68: 07:c7:7c:7c:55:8d:d6:7f:37:16:10:60:e5:a1:ef:89:1b:bf: 0a:4b:03:ef:a1:cd:e9:61:09:43:79:ec:6b:20:1b:62:59:d2: 1e:2c:3c:18:ff:19:d7:24:66:7c:56:6a:c7:27:63:32:44:74: 14:88:a9:80:76:97:05:89:17:70:b8:47:05:c3:ed:28:5b:2b: 06:93:23:4d:20:a7:a4:63:58:20:93:af:0f:58:a5:53:ab:2e: 86:9b:63:92:24:ff:4e:ed:1f:e1:cb:80:34:da:c2:b1:25:c1: 12:66:15:94:a9:fa:bd:14:9c:cb:3e:a9:88:18:4e:57:0c:61: bf:61:c2:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURFMEExMTAvBgNVBAUTKDQ2QjRGRjhEQzkxNjdBNzc3RDk4RDg1RjJGNTIxREQx MzY3MDczQjMwHhcNMjUwNDI4MTU1OTMyWhcNMjUwNTA1MTU1OTMyWjAYMRYwFAYD VQQDEw02ODBmYTVlNS1kZmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApJYCaL4RFwHBlPziMKRfNccw5B0PuHy+ys5ms/LGWdm8HcnCnexgNtxFzGYZ ApPh+SPRSv36nXwjYAYOMUTLsPnPVMY0u7eB4fZj/fSmdt2qdmgyALQv/tZe6Gts iA1Sc6I4Kf5sSMeQsUFFV4S2weGc+8TnzTT9uVudBx/Cph3XH084rJP9kZ3wfl+L ombvUD4nrk1fWIwr27bN7YRpR5O0lOKp4ZhKXG7IZ0NPLljnLAdpbDbD9LJpeffp V+7TiRCc82p6qjmXBt99A+NTN+E6LubxTBlfzqWRCyM4dRGNAB9MmPHg2W18Ts1b kvDZzi3YXlSozJ50rMwKnai42QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKhzgs0E omgL8O342dZlTiIEUx7bMB8GA1UdIwQYMBaAFEa0/43JFnp3fZjYXy9SHdE2cHOz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREUwQS80MzU2N0VFNDNE MjgxMUVDQkVGNzdDNzZDNEY5QUUwMi9SclRfamNrV2VuZDltTmhmTDFJZDBUWndj N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1JyVF9qY2tXZW5kOW1OaGZMMUlkMFRad2M3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REUwQS80MzU2N0VFNDNEMjgxMUVDQkVGNzdDNzZDNEY5QUUwMi9SclRfamNrV2Vu ZDltTmhmTDFJZDBUWndjN00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCOuBENK0hVvbWkIJu7s6wsMm1W3U66bfx5iKZgLks32Q55PM53ph7 5KhgnDvR2HlkcLsWBYqrBHEQSZhe1u1mqnahcfu5G37AiVeYs31SyG5gHVdh7upD CTXqUfzIBnhiQWxdzbXY30zkuNXe2TcGBeM3LnHTFdQqFmDVZWgHx3x8VY3WfzcW EGDloe+JG78KSwPvoc3pYQlDeexrIBtiWdIeLDwY/xnXJGZ8VmrHJ2MyRHQUiKmA dpcFiRdwuEcFw+0oWysGkyNNIKekY1ggk68PWKVTqy6Gm2OSJP9O7R/hy4A02sKx JcESZhWUqfq9FJzLPqmIGE5XDGG/YcKz -----END CERTIFICATE-----Generated at Mon Apr 28 17:46:01 2025 by rpki-client on console.sobornost.net