$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft File: xgie68VWt39k5EJJpouV1b2UHkA.mft (raw, json) Hash identifier: E4sLhWIIHZRjN6YvJUQmwH1/4v/HT0zAgqeQ8SAafyQ= Subject key identifier: D0:84:36:50:6C:A2:7A:DC:64:28:F8:D0:D2:01:A2:27:51:CF:88:96 Authority key identifier: C6:08:9E:EB:C5:56:B7:7F:64:E4:42:49:A6:8B:95:D5:BD:94:1E:40 Certificate issuer: /CN=A91ADFD3/serialNumber=C6089EEBC556B77F64E44249A68B95D5BD941E40 Certificate serial: 2322 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft Manifest number: 22F4 Signing time: Mon 28 Apr 2025 15:57:48 +0000 Manifest this update: Mon 28 Apr 2025 15:57:47 +0000 Manifest next update: Mon 05 May 2025 15:57:47 +0000 Files and hashes: 1: xgie68VWt39k5EJJpouV1b2UHkA.crl (hash: Q+12iLg/Uz49zEMTWy+RmPi2UWrG4LjGOEEGdTO/oTY=) 2: 6880FA2C59D211EAB77C8C13C4F9AE02.roa (hash: lXOFb0YJQZdFFX90oDPgUqBGFkT5p8wJoFtkhJ/Uo9A=) 3: 678DA8FE59D211EAB77C8C13C4F9AE02.roa (hash: p5KqoJW3tDR/PENRBzb6MlrbIycp47ssNfWx91ehau4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.crl rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 15:55:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8994 (0x2322) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADFD3, serialNumber=C6089EEBC556B77F64E44249A68B95D5BD941E40 Validity Not Before: Apr 28 15:57:47 2025 GMT Not After : May 5 15:57:47 2025 GMT Subject: CN=680fa57c-2026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ce:97:f0:83:34:28:55:2d:0e:83:06:23:6d: 4b:de:6a:87:3f:95:3d:ad:55:88:82:18:7e:f8:6b: 10:a9:b3:89:0b:54:4e:32:65:2c:77:8d:21:b6:14: 79:73:6d:1d:4f:00:64:12:5d:1a:07:ad:a5:89:f9: 59:c4:80:77:7d:62:9a:13:82:83:cd:8d:03:9e:3e: fe:78:ea:d7:ed:ea:cc:ce:32:84:de:4a:7d:01:5f: 1a:ae:63:92:9e:e1:fc:8c:48:93:59:7e:7e:0e:6d: 19:38:08:69:bc:47:1e:85:2c:41:9c:30:f7:01:47: fc:cd:0c:5d:d9:6e:8d:f3:bf:e4:68:2c:c9:f3:9c: b3:77:79:7e:c1:fd:2e:31:74:64:f3:3e:83:0f:4a: 16:4b:44:4d:c3:04:2f:38:92:9e:e4:f5:8e:ca:f7: 71:fb:ff:61:6b:ec:6f:72:b9:02:31:79:b1:62:6a: 6b:ae:62:dd:49:56:8f:bb:55:47:40:3b:be:ff:a6: 7f:bb:66:4c:81:79:99:96:e8:37:bf:63:30:e8:92: 3c:1b:af:43:9c:89:b3:38:d7:c9:16:dd:a2:02:88: a3:05:ea:69:12:0d:0f:e2:67:ca:27:70:54:ae:19: 75:f9:1a:bb:64:3f:f4:dd:44:93:4c:24:85:4c:c2: 16:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:84:36:50:6C:A2:7A:DC:64:28:F8:D0:D2:01:A2:27:51:CF:88:96 X509v3 Authority Key Identifier: keyid:C6:08:9E:EB:C5:56:B7:7F:64:E4:42:49:A6:8B:95:D5:BD:94:1E:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:32:07:74:78:ab:4e:69:dc:55:8f:1c:6b:8a:80:5d:dd:7b: 8e:cf:f7:97:96:f7:6a:44:d0:41:a8:41:43:97:68:5a:a6:ea: c0:7a:0c:30:3c:8d:c5:61:f9:c5:59:2e:0f:73:07:75:a0:ae: 61:1a:cc:4f:9d:04:e3:fe:f8:7a:ac:c4:d4:25:c0:df:0e:b9: c9:82:37:11:6a:9b:a6:1b:fe:bb:16:c7:40:f7:52:e1:68:6e: 59:6e:82:c1:d5:e3:44:2e:d4:76:42:0e:fe:d5:3c:a1:d2:e2: ce:6b:45:e5:79:e3:03:cf:b9:56:e8:93:d5:a9:2a:a6:2b:0d: 3f:ee:ee:01:fe:4b:45:3a:b2:c6:b6:40:40:55:54:61:17:a0: a6:41:31:6a:c6:10:f0:4c:f0:93:76:e1:c9:f7:18:c1:17:dc: 48:76:60:91:40:d4:cc:88:b5:e9:73:26:d9:b4:4d:a2:9b:dc: 10:63:a9:3f:4e:c3:a4:31:9b:37:e2:7d:e4:66:cc:69:70:5c: ce:71:b2:0d:b8:03:de:34:a4:21:a1:60:05:2b:1d:10:da:55: 84:76:aa:0b:11:7d:ff:44:fc:4b:65:62:82:1a:30:2d:78:15: c0:59:4e:2b:01:ec:84:2e:34:19:1e:9a:86:82:48:d4:69:28: 87:32:58:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIyIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURGRDMxMTAvBgNVBAUTKEM2MDg5RUVCQzU1NkI3N0Y2NEU0NDI0OUE2OEI5NUQ1 QkQ5NDFFNDAwHhcNMjUwNDI4MTU1NzQ3WhcNMjUwNTA1MTU1NzQ3WjAYMRYwFAYD VQQDEw02ODBmYTU3Yy0yMDI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4M6X8IM0KFUtDoMGI21L3mqHP5U9rVWIghh++GsQqbOJC1ROMmUsd40hthR5 c20dTwBkEl0aB62liflZxIB3fWKaE4KDzY0Dnj7+eOrX7erMzjKE3kp9AV8armOS nuH8jEiTWX5+Dm0ZOAhpvEcehSxBnDD3AUf8zQxd2W6N87/kaCzJ85yzd3l+wf0u MXRk8z6DD0oWS0RNwwQvOJKe5PWOyvdx+/9ha+xvcrkCMXmxYmprrmLdSVaPu1VH QDu+/6Z/u2ZMgXmZlug3v2Mw6JI8G69DnImzONfJFt2iAoijBeppEg0P4mfKJ3BU rhl1+Rq7ZD/03USTTCSFTMIW5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNCENlBs onrcZCj40NIBoidRz4iWMB8GA1UdIwQYMBaAFMYInuvFVrd/ZORCSaaLldW9lB5A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREZEMy8xRkQxQThCRTk0 ODYxMUU1QUUwQzhCNzJDNEY5QUUwMi94Z2llNjhWV3QzOWs1RUpKcG91VjFiMlVI a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hnaWU2OFZXdDM5azVFSkpwb3VWMWIyVUhrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REZEMy8xRkQxQThCRTk0ODYxMUU1QUUwQzhCNzJDNEY5QUUwMi94Z2llNjhWV3Qz OWs1RUpKcG91VjFiMlVIa0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJMgd0eKtOadxVjxxrioBd3XuOz/eXlvdqRNBBqEFDl2hapurAegww PI3FYfnFWS4Pcwd1oK5hGsxPnQTj/vh6rMTUJcDfDrnJgjcRapumG/67FsdA91Lh aG5ZboLB1eNELtR2Qg7+1Tyh0uLOa0XleeMDz7lW6JPVqSqmKw0/7u4B/ktFOrLG tkBAVVRhF6CmQTFqxhDwTPCTduHJ9xjBF9xIdmCRQNTMiLXpcybZtE2im9wQY6k/ TsOkMZs34n3kZsxpcFzOcbINuAPeNKQhoWAFKx0Q2lWEdqoLEX3/RPxLZWKCGjAt eBXAWU4rAeyELjQZHpqGgkjUaSiHMliv -----END CERTIFICATE-----Generated at Mon Apr 28 17:46:01 2025 by rpki-client on console.sobornost.net