$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.mft File: MvJs85-fvKfzH1OV-I3ZfZRw0Zc.mft (raw, json) Hash identifier: ttkNvqwMfFm+VhyEaBC09R2cyR5GQuEccnIlrZX6XhM= Subject key identifier: 91:03:C3:0E:DB:4E:30:13:E4:5A:EC:4A:B3:E3:A2:D8:68:DC:BC:5B Authority key identifier: 32:F2:6C:F3:9F:9F:BC:A7:F3:1F:53:95:F8:8D:D9:7D:94:70:D1:97 Certificate issuer: /CN=A91AF095/serialNumber=32F26CF39F9FBCA7F31F5395F88DD97D9470D197 Certificate serial: 1D56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.mft Manifest number: 1D48 Signing time: Mon 28 Apr 2025 16:14:36 +0000 Manifest this update: Mon 28 Apr 2025 16:14:35 +0000 Manifest next update: Mon 05 May 2025 16:14:35 +0000 Files and hashes: 1: MvJs85-fvKfzH1OV-I3ZfZRw0Zc.crl (hash: /3ZSzpvXl+CiuhsUgBD3GrzouRtyaqFI7tTq5PHNC0g=) 2: 9DC06B6E36A211E893BF3061C4F9AE02.roa (hash: hlCAOqdM82iuB3BtNLbjrR+eENtQp+VFzUFQxq5vFhE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.crl rsync://rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 16:14:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7510 (0x1d56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF095, serialNumber=32F26CF39F9FBCA7F31F5395F88DD97D9470D197 Validity Not Before: Apr 28 16:14:35 2025 GMT Not After : May 5 16:14:35 2025 GMT Subject: CN=680fa96b-4c9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a0:97:4e:12:10:28:80:1e:f3:da:0e:62:4a: 3f:9e:09:91:2f:6c:c5:30:bd:a2:b3:6b:cf:1f:6e: 93:fc:79:24:fb:f8:25:a1:5c:a1:6f:11:79:45:e9: 0b:9a:36:aa:7a:d2:57:f1:04:bb:58:fa:f9:11:e0: 84:05:84:01:77:97:c3:25:92:95:b3:bf:82:45:58: 65:91:01:f0:14:3b:7a:b2:dc:1d:f4:44:70:34:3f: c3:9a:fa:65:ad:51:c6:ba:b0:75:6c:7e:12:43:df: db:17:64:da:b0:79:d9:86:29:d3:1a:c3:9f:22:7e: 5c:cb:4c:2f:4a:f9:bd:ef:02:56:3f:6a:86:79:77: 4e:a0:8a:33:ee:a1:fe:f0:be:a6:0f:c4:aa:c7:b9: 7c:a8:ec:35:9f:ff:a8:5e:e3:dd:f3:51:8b:1d:86: aa:9d:e2:cf:bb:75:7a:bb:0b:a6:af:e6:6c:b7:6f: 56:72:2f:8b:ae:5c:81:68:02:a6:ea:5a:57:17:cc: 4b:97:81:2c:6d:e5:81:3a:d2:a6:3f:bd:bb:15:82: 55:85:ca:5f:60:04:07:54:88:ee:ad:7f:81:a5:d3: f3:57:a7:f5:51:52:3e:13:93:2e:56:bc:09:e3:6e: e8:da:7d:51:94:04:9f:0a:bf:f3:f5:51:62:20:81: 6e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:03:C3:0E:DB:4E:30:13:E4:5A:EC:4A:B3:E3:A2:D8:68:DC:BC:5B X509v3 Authority Key Identifier: keyid:32:F2:6C:F3:9F:9F:BC:A7:F3:1F:53:95:F8:8D:D9:7D:94:70:D1:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:0a:c7:41:05:7c:5f:05:9f:a9:4c:85:f3:a5:bc:48:bb:a3: 0b:85:24:2f:b3:0e:68:ce:fe:e3:ce:bd:94:ba:52:0e:39:90: 3c:cd:4c:e5:06:d0:de:a4:64:16:7e:d2:56:41:e6:df:ef:62: 33:ac:e4:da:9e:1e:c1:b6:f5:82:90:55:27:03:92:ce:01:b0: ac:44:45:da:8e:69:9b:a7:98:79:41:6c:83:90:29:5b:54:24: 40:be:41:35:cb:41:fe:f1:2e:1d:bd:8f:a0:32:75:d7:e0:b2: 3f:2a:02:7e:bb:83:de:13:e4:54:34:36:8d:88:01:89:86:e0: b3:6d:f4:4d:16:0f:01:28:fd:da:50:eb:da:87:bd:a7:d2:e2: 6a:c9:fe:27:73:85:ee:f1:a3:7d:8f:84:ec:25:3f:38:b3:50: 4c:bb:58:9e:6f:17:58:ee:18:81:96:60:55:48:72:76:37:98: f9:b8:aa:d0:b0:d0:e8:84:df:c4:9b:a9:85:d0:30:13:ed:8f: 5f:e8:a7:42:68:1a:12:2a:36:3c:0d:a8:76:f7:bc:0a:d2:40: 45:f1:7f:18:b3:99:e4:2d:40:75:40:8c:1f:98:03:70:2e:35: 97:64:52:16:98:b8:fc:6d:2b:d9:6a:93:1d:9e:2b:9f:85:43: 9d:81:e4:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYwOTUxMTAvBgNVBAUTKDMyRjI2Q0YzOUY5RkJDQTdGMzFGNTM5NUY4OEREOTdE OTQ3MEQxOTcwHhcNMjUwNDI4MTYxNDM1WhcNMjUwNTA1MTYxNDM1WjAYMRYwFAYD VQQDEw02ODBmYTk2Yi00YzliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvqCXThIQKIAe89oOYko/ngmRL2zFML2is2vPH26T/Hkk+/gloVyhbxF5RekL mjaqetJX8QS7WPr5EeCEBYQBd5fDJZKVs7+CRVhlkQHwFDt6stwd9ERwND/Dmvpl rVHGurB1bH4SQ9/bF2TasHnZhinTGsOfIn5cy0wvSvm97wJWP2qGeXdOoIoz7qH+ 8L6mD8Sqx7l8qOw1n/+oXuPd81GLHYaqneLPu3V6uwumr+Zst29Wci+LrlyBaAKm 6lpXF8xLl4EsbeWBOtKmP727FYJVhcpfYAQHVIjurX+BpdPzV6f1UVI+E5MuVrwJ 427o2n1RlASfCr/z9VFiIIFuywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJEDww7b TjAT5FrsSrPjotho3LxbMB8GA1UdIwQYMBaAFDLybPOfn7yn8x9TlfiN2X2UcNGX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjA5NS84Qzg5OUE0MkFC NTYxMUU2QjMyOUM0ODRDNEY5QUUwMi9NdkpzODUtZnZLZnpIMU9WLUkzWmZaUncw WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL012SnM4NS1mdktmekgxT1YtSTNaZlpSdzBaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjA5NS84Qzg5OUE0MkFCNTYxMUU2QjMyOUM0ODRDNEY5QUUwMi9NdkpzODUtZnZL ZnpIMU9WLUkzWmZaUncwWmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJCsdBBXxfBZ+pTIXzpbxIu6MLhSQvsw5ozv7jzr2UulIOOZA8zUzl BtDepGQWftJWQebf72IzrOTanh7BtvWCkFUnA5LOAbCsREXajmmbp5h5QWyDkClb VCRAvkE1y0H+8S4dvY+gMnXX4LI/KgJ+u4PeE+RUNDaNiAGJhuCzbfRNFg8BKP3a UOvah72n0uJqyf4nc4Xu8aN9j4TsJT84s1BMu1iebxdY7hiBlmBVSHJ2N5j5uKrQ sNDohN/Em6mF0DAT7Y9f6KdCaBoSKjY8Dah297wK0kBF8X8Ys5nkLUB1QIwfmANw LjWXZFIWmLj8bSvZapMdniufhUOdgeSK -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:53 2025 by rpki-client on console.sobornost.net