$ rpki-client -vvf rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.mft File: b814Gaj5P69A0OOH8htG6E3p1ws.mft (raw, json) Hash identifier: Wt5lrICKMahGqHkhXp1XGojmnirfVc4mH/j5NcP4ksI= Subject key identifier: 3E:6B:8E:CF:8C:D2:54:1F:D0:2D:51:42:E2:FE:56:BA:F7:D9:6A:A8 Authority key identifier: 6F:CD:78:19:A8:F9:3F:AF:40:D0:E3:87:F2:1B:46:E8:4D:E9:D7:0B Certificate issuer: /CN=A91B02A2/serialNumber=6FCD7819A8F93FAF40D0E387F21B46E84DE9D70B Certificate serial: 0118 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b814Gaj5P69A0OOH8htG6E3p1ws.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.mft Manifest number: 0116 Signing time: Fri 25 Apr 2025 03:55:28 +0000 Manifest this update: Fri 25 Apr 2025 03:55:27 +0000 Manifest next update: Fri 02 May 2025 03:55:27 +0000 Files and hashes: 1: b814Gaj5P69A0OOH8htG6E3p1ws.crl (hash: 99YKnJn9of/DDZKD60wTj69QABdR9xKkjCNRzsRfJ1w=) 2: 5D98833C77EC11EEA06F373BC4F9AE02.roa (hash: PTNlCaFqxgAXX8dh1a7LSvNmOXF/4erL00o7/e/JlJk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.crl rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b814Gaj5P69A0OOH8htG6E3p1ws.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 280 (0x118) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B02A2, serialNumber=6FCD7819A8F93FAF40D0E387F21B46E84DE9D70B Validity Not Before: Apr 25 03:55:27 2025 GMT Not After : May 2 03:55:27 2025 GMT Subject: CN=680b07b0-f6f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8b:66:8e:ab:e6:02:18:07:62:63:76:07:99: 00:c4:fd:37:c1:cd:7f:4b:ab:4c:55:b3:dd:9f:74: a2:fa:05:e0:6a:30:8f:d5:74:81:5b:6e:c7:a9:d5: c7:ba:67:6c:ce:03:6c:e1:d7:21:8f:d9:d7:cc:35: 90:b4:d8:10:f6:cb:17:63:e4:ff:fd:59:bb:b6:07: 97:b1:f1:a5:b2:c8:75:42:b8:cc:f0:8e:82:fd:7d: ec:4b:35:39:ed:ec:f9:49:77:ca:9b:31:af:9f:e9: e2:4b:9c:1a:fe:ee:17:76:ad:46:0a:ab:b1:be:07: 47:36:41:d6:07:cb:cf:db:36:ae:66:54:b5:31:43: 6b:59:1c:b9:d2:35:d5:4a:bf:6c:9b:3d:73:82:76: ef:3a:83:6c:7f:62:7d:a1:15:c2:c8:83:d4:9a:32: e6:03:6b:a1:3d:b2:1d:15:ab:45:d3:38:f3:c7:9b: b5:cc:f6:f3:22:21:94:4d:7f:64:18:c8:e0:29:6e: 18:4c:f4:1c:24:e7:09:87:eb:4d:09:1c:36:9f:a1: df:0e:80:7b:d7:9a:98:ed:11:bb:0b:d4:a1:d2:2a: 6e:ce:c5:86:f8:02:24:d4:23:35:70:aa:91:ac:9d: f5:cf:5a:1a:fd:33:e0:da:2e:73:e0:85:b6:78:9c: 9e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:6B:8E:CF:8C:D2:54:1F:D0:2D:51:42:E2:FE:56:BA:F7:D9:6A:A8 X509v3 Authority Key Identifier: keyid:6F:CD:78:19:A8:F9:3F:AF:40:D0:E3:87:F2:1B:46:E8:4D:E9:D7:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b814Gaj5P69A0OOH8htG6E3p1ws.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:12:58:88:ff:58:39:d5:27:d3:53:13:8d:a8:55:2e:65:19: 9d:19:b7:69:01:41:8d:89:5e:d2:48:ac:86:8b:45:22:47:66: 7e:ec:54:be:91:bf:d0:d7:a0:08:08:ac:c7:0a:9a:77:b7:00: 98:2c:13:f5:14:e9:23:7a:35:93:d1:32:ad:15:a9:d9:ad:fb: 71:3a:a2:7f:62:c9:93:51:65:27:96:b8:c7:54:e2:7b:29:60: a0:aa:23:92:7b:0a:b4:be:2b:25:cc:aa:02:a1:0c:28:f8:b7: c4:e1:5b:ca:da:99:c4:88:02:70:93:a5:b7:7b:e5:ce:05:12: 72:cb:72:87:0e:b7:25:fd:e0:ba:d9:c7:97:b3:65:87:01:f5: 7c:5d:94:ac:93:bd:33:7e:73:e5:6d:97:75:56:ab:91:36:8e: 48:77:f8:e2:5c:40:83:d3:bb:3b:94:62:4b:88:b7:d8:8f:44: 01:0b:3f:e7:89:9a:bc:38:fc:e3:36:e1:d2:bd:c4:73:de:a3: 72:13:8e:44:1d:c1:37:41:b1:36:87:28:bb:ef:c3:b0:1a:56: 5b:78:4c:c1:66:df:03:1f:e7:6a:5e:3b:45:ac:5c:8b:44:1b: 1b:e0:5a:4f:b8:5f:30:ba:c3:94:ba:64:cb:0c:d3:0b:c0:2f: fa:82:9e:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAyQTIxMTAvBgNVBAUTKDZGQ0Q3ODE5QThGOTNGQUY0MEQwRTM4N0YyMUI0NkU4 NERFOUQ3MEIwHhcNMjUwNDI1MDM1NTI3WhcNMjUwNTAyMDM1NTI3WjAYMRYwFAYD VQQDEw02ODBiMDdiMC1mNmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArotmjqvmAhgHYmN2B5kAxP03wc1/S6tMVbPdn3Si+gXgajCP1XSBW27HqdXH umdszgNs4dchj9nXzDWQtNgQ9ssXY+T//Vm7tgeXsfGlssh1QrjM8I6C/X3sSzU5 7ez5SXfKmzGvn+niS5wa/u4Xdq1GCquxvgdHNkHWB8vP2zauZlS1MUNrWRy50jXV Sr9smz1zgnbvOoNsf2J9oRXCyIPUmjLmA2uhPbIdFatF0zjzx5u1zPbzIiGUTX9k GMjgKW4YTPQcJOcJh+tNCRw2n6HfDoB715qY7RG7C9Sh0ipuzsWG+AIk1CM1cKqR rJ31z1oa/TPg2i5z4IW2eJye/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD5rjs+M 0lQf0C1RQuL+Vrr32WqoMB8GA1UdIwQYMBaAFG/NeBmo+T+vQNDjh/IbRuhN6dcL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDJBMi9FRkQyMTU4NDc3 RUIxMUVFOTNCNjhCM0FDNEY5QUUwMi9iODE0R2FqNVA2OUEwT09IOGh0RzZFM3Ax d3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I4MTRHYWo1UDY5QTBPT0g4aHRHNkUzcDF3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDJBMi9FRkQyMTU4NDc3RUIxMUVFOTNCNjhCM0FDNEY5QUUwMi9iODE0R2FqNVA2 OUEwT09IOGh0RzZFM3Axd3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxEliI/1g51SfTUxONqFUuZRmdGbdpAUGNiV7SSKyGi0UiR2Z+7FS+ kb/Q16AICKzHCpp3twCYLBP1FOkjejWT0TKtFanZrftxOqJ/YsmTUWUnlrjHVOJ7 KWCgqiOSewq0vislzKoCoQwo+LfE4VvK2pnEiAJwk6W3e+XOBRJyy3KHDrcl/eC6 2ceXs2WHAfV8XZSsk70zfnPlbZd1VquRNo5Id/jiXECD07s7lGJLiLfYj0QBCz/n iZq8OPzjNuHSvcRz3qNyE45EHcE3QbE2hyi778OwGlZbeEzBZt8DH+dqXjtFrFyL RBsb4FpPuF8wusOUumTLDNMLwC/6gp6B -----END CERTIFICATE-----Generated at Fri Apr 25 08:24:58 2025 by rpki-client on console.sobornost.net