$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft File: -0q1qaTcN7vWXmHkKkJWz5UbjHM.mft (raw, json) Hash identifier: hmDPGwInKuLfu5BjyDH2RU3ro/3A14NDgBDoAGbhwKw= Subject key identifier: 4D:B9:CA:2D:22:28:E9:51:D6:9B:30:8C:55:27:59:06:A4:A0:87:C2 Authority key identifier: FB:4A:B5:A9:A4:DC:37:BB:D6:5E:61:E4:2A:42:56:CF:95:1B:8C:73 Certificate issuer: /CN=A91AE567/serialNumber=FB4AB5A9A4DC37BBD65E61E42A4256CF951B8C73 Certificate serial: 03B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft Manifest number: 03AE Signing time: Sun 27 Apr 2025 00:23:15 +0000 Manifest this update: Sun 27 Apr 2025 00:23:14 +0000 Manifest next update: Sun 04 May 2025 00:23:14 +0000 Files and hashes: 1: -0q1qaTcN7vWXmHkKkJWz5UbjHM.crl (hash: Ii0Pw4Uql3BFXRLOF2EmkWeeHWz0kJS6oPfmDBZArQo=) 2: B1B6929CCFD611ED8BEF6866C4F9AE02.roa (hash: 9DfUOxvFR13SpwnP9dE6JJ+qwtWuEZ4XB8tC3ndW1gI=) 3: C657777835BD11EEBBA15F71C4F9AE02.roa (hash: dBKzmRV5kLqxEgnT/9vEMvol4LmNVdPd79i3sVZVmJg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.crl rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 00:23:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 952 (0x3b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE567, serialNumber=FB4AB5A9A4DC37BBD65E61E42A4256CF951B8C73 Validity Not Before: Apr 27 00:23:14 2025 GMT Not After : May 4 00:23:14 2025 GMT Subject: CN=680d78f3-e405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2a:7a:58:9b:59:7b:ea:60:a2:c1:ff:ef:a7: cc:a0:cc:28:8e:11:65:f4:9e:2d:76:95:72:31:77: 28:ab:ee:ac:56:2b:3d:74:85:0e:2b:46:2c:ec:92: 24:8a:15:3c:9d:2a:02:d2:e5:1d:f1:42:ad:4e:fb: df:12:9f:96:5b:74:bb:56:83:fa:c7:1f:3e:14:49: c1:38:3b:1f:df:90:3f:35:d7:ef:7a:91:76:e4:c4: e4:61:1d:6d:76:e1:4f:1a:ab:e8:2e:31:a1:6a:d2: 8b:eb:71:dd:5d:d1:c5:66:f2:b5:6d:00:2c:ff:4b: ab:cf:d0:60:47:7f:43:07:27:b7:3d:6a:47:47:a8: d2:f5:6b:7f:f3:62:92:e2:78:14:d1:fa:6f:18:8c: a9:cc:66:24:02:e8:20:65:4c:1f:89:1c:9d:57:72: 4d:fa:e9:50:e3:06:45:b4:51:f0:93:a1:3b:bd:ef: cb:6b:c2:8e:2c:ed:d2:ea:d5:04:51:a6:5c:45:1d: b1:7c:eb:34:c2:4d:72:86:f5:fe:a1:a0:9e:97:ea: 6f:84:8f:26:16:1f:62:42:fe:dc:80:f6:76:94:2e: 58:2e:da:ff:fc:c0:d3:43:ea:83:f6:0e:52:6c:cd: e0:27:0f:3f:48:63:78:b7:2a:85:50:6d:bd:e6:8f: ee:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:B9:CA:2D:22:28:E9:51:D6:9B:30:8C:55:27:59:06:A4:A0:87:C2 X509v3 Authority Key Identifier: keyid:FB:4A:B5:A9:A4:DC:37:BB:D6:5E:61:E4:2A:42:56:CF:95:1B:8C:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:2a:55:df:ea:ff:8b:95:91:a8:d0:ed:f8:47:4f:bd:10:36: f6:bb:9c:6e:11:08:8e:98:5c:54:55:9c:32:70:4f:e9:5d:af: 47:c8:4a:d6:e9:0c:ba:73:cd:bc:0e:a5:88:07:fb:0e:57:1d: 02:cd:97:12:11:88:48:6c:34:ab:e9:76:b6:99:00:dd:3a:97: b1:fa:6e:ed:ee:9e:ea:54:0c:1e:48:f5:77:0f:d7:ec:a9:2e: 3f:0a:0f:14:a4:79:04:ef:02:b3:20:8f:f2:11:30:c3:7b:cd: 98:57:49:bd:15:49:b4:43:04:38:1e:78:fe:38:98:80:60:e9: 98:10:3a:b7:34:35:02:65:be:06:23:69:7b:7e:96:00:c5:94: ca:10:8a:4f:e7:65:e3:08:c4:dd:33:51:0e:fe:95:a9:45:f0: 93:be:2a:01:b2:67:85:a5:d9:4a:56:3a:8a:52:b9:e7:db:90: 42:ed:9a:d5:af:05:64:e0:44:9d:41:a5:43:41:20:88:9a:28: b8:b0:53:6b:85:e3:74:06:6a:8e:82:ea:ec:5b:20:cc:a4:43: 96:a1:d2:4f:e1:cc:fa:d4:77:92:23:95:ce:d3:e8:7a:f7:c1: 37:66:c9:30:73:ad:c0:c3:58:67:e0:41:2d:21:02:80:e2:62: 70:78:92:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU1NjcxMTAvBgNVBAUTKEZCNEFCNUE5QTREQzM3QkJENjVFNjFFNDJBNDI1NkNG OTUxQjhDNzMwHhcNMjUwNDI3MDAyMzE0WhcNMjUwNTA0MDAyMzE0WjAYMRYwFAYD VQQDEw02ODBkNzhmMy1lNDA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAySp6WJtZe+pgosH/76fMoMwojhFl9J4tdpVyMXcoq+6sVis9dIUOK0Ys7JIk ihU8nSoC0uUd8UKtTvvfEp+WW3S7VoP6xx8+FEnBODsf35A/NdfvepF25MTkYR1t duFPGqvoLjGhatKL63HdXdHFZvK1bQAs/0urz9BgR39DBye3PWpHR6jS9Wt/82KS 4ngU0fpvGIypzGYkAuggZUwfiRydV3JN+ulQ4wZFtFHwk6E7ve/La8KOLO3S6tUE UaZcRR2xfOs0wk1yhvX+oaCel+pvhI8mFh9iQv7cgPZ2lC5YLtr//MDTQ+qD9g5S bM3gJw8/SGN4tyqFUG295o/u9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE25yi0i KOlR1pswjFUnWQakoIfCMB8GA1UdIwQYMBaAFPtKtamk3De71l5h5CpCVs+VG4xz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTU2Ny9FNjc5OTRERThG RjQxMUVDOTA0NzJGN0RDNEY5QUUwMi8tMHExcWFUY043dldYbUhrS2tKV3o1VWJq SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy0wcTFxYVRjTjd2V1htSGtLa0pXejVVYmpITS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTU2Ny9FNjc5OTRERThGRjQxMUVDOTA0NzJGN0RDNEY5QUUwMi8tMHExcWFUY043 dldYbUhrS2tKV3o1VWJqSE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARKlXf6v+LlZGo0O34R0+9EDb2u5xuEQiOmFxUVZwycE/pXa9HyErW 6Qy6c828DqWIB/sOVx0CzZcSEYhIbDSr6Xa2mQDdOpex+m7t7p7qVAweSPV3D9fs qS4/Cg8UpHkE7wKzII/yETDDe82YV0m9FUm0QwQ4Hnj+OJiAYOmYEDq3NDUCZb4G I2l7fpYAxZTKEIpP52XjCMTdM1EO/pWpRfCTvioBsmeFpdlKVjqKUrnn25BC7ZrV rwVk4ESdQaVDQSCImii4sFNrheN0BmqOgursWyDMpEOWodJP4cz61HeSI5XO0+h6 98E3Zskwc63Aw1hn4EEtIQKA4mJweJKq -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:07 2025 by rpki-client on console.sobornost.net