$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.mft File: K8iorLUs8M9_MTaUMA9ThmhiN60.mft (raw, json) Hash identifier: iB0Hoya7jPf7jE3KpPPM+/eXbvU1Xgf/ErPqvxTWXIQ= Subject key identifier: AA:52:F4:F4:0E:20:E4:DB:33:08:58:A1:DA:26:3A:0A:62:F4:13:27 Authority key identifier: 2B:C8:A8:AC:B5:2C:F0:CF:7F:31:36:94:30:0F:53:86:68:62:37:AD Certificate issuer: /CN=A91B0549/serialNumber=2BC8A8ACB52CF0CF7F313694300F5386686237AD Certificate serial: 0B60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8iorLUs8M9_MTaUMA9ThmhiN60.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.mft Manifest number: 0B58 Signing time: Mon 28 Apr 2025 19:26:52 +0000 Manifest this update: Mon 28 Apr 2025 19:26:51 +0000 Manifest next update: Mon 05 May 2025 19:26:51 +0000 Files and hashes: 1: K8iorLUs8M9_MTaUMA9ThmhiN60.crl (hash: 8qUPuoOey/K4euZdpDlTJfzNHBMVvkhudPMsiGe9dKA=) 2: 7A629E90303211EA9DAB6581C4F9AE02.roa (hash: 5tQROkuKBdGr5CDnMUVPHlhLeJ1/YaIHTHWkyStRniQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.crl rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8iorLUs8M9_MTaUMA9ThmhiN60.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 19:26:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2912 (0xb60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0549, serialNumber=2BC8A8ACB52CF0CF7F313694300F5386686237AD Validity Not Before: Apr 28 19:26:51 2025 GMT Not After : May 5 19:26:51 2025 GMT Subject: CN=680fd67c-cd67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:17:ec:4c:50:08:a0:98:5a:8f:cc:4c:f7:7b: ec:6c:f9:ed:20:3a:37:4d:55:5f:ce:22:2c:50:0e: f0:09:a1:8c:d3:d8:56:8d:c9:78:fd:b7:6b:65:6b: 9a:df:27:20:d2:e6:99:d4:99:ca:e5:8d:1f:52:d5: e1:d7:ae:a2:38:5c:35:cc:70:d3:17:19:db:9e:c3: 6e:7a:d0:0c:1b:f6:4b:54:8a:12:81:d4:1e:d9:86: e9:28:3a:8d:bb:24:66:f1:9c:cc:e6:57:46:df:f6: c2:ee:ad:3c:4e:40:97:c5:f8:62:14:41:d8:7b:26: c3:13:13:f6:e2:4d:b8:5d:c0:fb:31:53:d8:ee:8b: f1:49:75:df:ce:76:19:89:28:6d:6a:1f:fc:db:df: 81:eb:43:8f:8e:f5:7e:51:54:e4:8b:51:d7:f2:22: 36:a6:86:96:07:63:bf:4c:ba:e9:d6:f1:77:f1:8b: 38:a2:85:a9:21:e6:88:49:cf:b5:13:d4:2f:8f:79: d8:94:41:1e:05:c0:ed:55:39:a1:cc:ce:75:8d:2e: 73:35:d9:e0:7d:31:46:20:15:24:83:e1:e8:a2:54: dc:21:e6:8c:36:b8:5a:89:63:84:32:b8:57:6f:15: f6:a3:0a:67:1e:d0:00:83:70:af:ac:9b:63:70:a3: ac:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:52:F4:F4:0E:20:E4:DB:33:08:58:A1:DA:26:3A:0A:62:F4:13:27 X509v3 Authority Key Identifier: keyid:2B:C8:A8:AC:B5:2C:F0:CF:7F:31:36:94:30:0F:53:86:68:62:37:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8iorLUs8M9_MTaUMA9ThmhiN60.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:0c:3a:60:4b:c7:69:35:ed:f5:13:3a:03:8b:a4:28:0d:56: 91:82:5d:a9:56:d5:1b:07:cc:48:96:be:e5:5f:d2:67:12:7b: 76:16:a3:63:cc:23:fc:07:a4:4a:ea:0c:23:5c:9b:5c:0f:b6: 33:cf:56:24:c1:77:0a:02:4e:77:7f:77:5f:6d:87:cf:67:f7: 67:2c:03:39:91:8e:d2:32:1f:df:58:aa:fe:12:79:4c:99:a7: 79:d6:93:76:b7:08:a4:6a:0b:2d:1f:70:e2:f5:e6:bc:86:6c: ea:cb:8a:4a:53:b1:c4:d5:8e:57:f9:e7:a3:b5:bc:34:f5:cd: 1e:dc:4c:6a:04:74:06:5d:37:94:88:90:96:f3:27:d2:50:50: f0:29:c5:a3:08:bf:64:7f:c5:f2:9c:d5:cf:70:94:43:d2:b6: 0a:d1:a5:59:50:db:b5:d0:5f:5f:44:e7:f9:30:18:10:8d:f7: 87:db:0c:47:81:e8:bc:7e:93:6b:ed:4a:b4:78:8e:78:81:cc: 9f:bd:8d:43:8e:56:16:30:03:5f:d7:0f:26:56:69:be:1d:2c: 4d:46:f2:6c:29:41:cb:e5:30:7b:84:00:82:75:50:76:fe:f2: 3f:af:07:4c:7c:3e:b3:91:ed:08:95:5e:76:0b:f7:9a:52:2b: 81:41:cb:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA1NDkxMTAvBgNVBAUTKDJCQzhBOEFDQjUyQ0YwQ0Y3RjMxMzY5NDMwMEY1Mzg2 Njg2MjM3QUQwHhcNMjUwNDI4MTkyNjUxWhcNMjUwNTA1MTkyNjUxWjAYMRYwFAYD VQQDEw02ODBmZDY3Yy1jZDY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtRfsTFAIoJhaj8xM93vsbPntIDo3TVVfziIsUA7wCaGM09hWjcl4/bdrZWua 3ycg0uaZ1JnK5Y0fUtXh166iOFw1zHDTFxnbnsNuetAMG/ZLVIoSgdQe2YbpKDqN uyRm8ZzM5ldG3/bC7q08TkCXxfhiFEHYeybDExP24k24XcD7MVPY7ovxSXXfznYZ iShtah/829+B60OPjvV+UVTki1HX8iI2poaWB2O/TLrp1vF38Ys4ooWpIeaISc+1 E9Qvj3nYlEEeBcDtVTmhzM51jS5zNdngfTFGIBUkg+HoolTcIeaMNrhaiWOEMrhX bxX2owpnHtAAg3CvrJtjcKOsPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKpS9PQO IOTbMwhYodomOgpi9BMnMB8GA1UdIwQYMBaAFCvIqKy1LPDPfzE2lDAPU4ZoYjet MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDU0OS8xQzZGNEFEQzMw MzExMUVBODg2RDUxN0NDNEY5QUUwMi9LOGlvckxVczhNOV9NVGFVTUE5VGhtaGlO NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s4aW9yTFVzOE05X01UYVVNQTlUaG1oaU42MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDU0OS8xQzZGNEFEQzMwMzExMUVBODg2RDUxN0NDNEY5QUUwMi9LOGlvckxVczhN OV9NVGFVTUE5VGhtaGlONjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzDDpgS8dpNe31EzoDi6QoDVaRgl2pVtUbB8xIlr7lX9JnEnt2FqNj zCP8B6RK6gwjXJtcD7Yzz1YkwXcKAk53f3dfbYfPZ/dnLAM5kY7SMh/fWKr+EnlM mad51pN2twikagstH3Di9ea8hmzqy4pKU7HE1Y5X+eejtbw09c0e3ExqBHQGXTeU iJCW8yfSUFDwKcWjCL9kf8XynNXPcJRD0rYK0aVZUNu10F9fROf5MBgQjfeH2wxH gei8fpNr7Uq0eI54gcyfvY1DjlYWMANf1w8mVmm+HSxNRvJsKUHL5TB7hACCdVB2 /vI/rwdMfD6zke0IlV52C/eaUiuBQcuf -----END CERTIFICATE-----Generated at Mon Apr 28 23:05:47 2025 by rpki-client on console.sobornost.net