$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft File: Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft (raw, json) Hash identifier: z3t0cg9snarNHIAztiiuIPQ0zftK+927FmejWuVLOHk= Subject key identifier: F5:FC:FA:07:28:33:C8:19:DA:DC:4C:9A:55:88:96:C8:37:E2:C4:96 Authority key identifier: 63:7E:D1:41:FF:E0:25:FD:05:19:94:5C:ED:48:E7:4F:8B:D0:F5:C9 Certificate issuer: /CN=A91B1461/serialNumber=637ED141FFE025FD0519945CED48E74F8BD0F5C9 Certificate serial: 315B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft Manifest number: 3147 Signing time: Mon 28 Apr 2025 15:31:15 +0000 Manifest this update: Mon 28 Apr 2025 15:31:14 +0000 Manifest next update: Mon 05 May 2025 15:31:14 +0000 Files and hashes: 1: Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl (hash: vYdUpxT4CmhBfY6eGnM0UllMwIClQwcEC4AeCXXYPiY=) 2: 33B0CCAEBCE311EA953FBB5EC4F9AE02.roa (hash: v67lW37yOK1EE+Ye9daXrMBIu71X0smdg0I3L06d6Kc=) 3: 32538B4EBCE311EA953FBB5EC4F9AE02.roa (hash: W3sK8AJb9TonKRiMiC+GBOGQDVtd6T29hWzDhem/MOk=) 4: 31CCE602BCE311EA953FBB5EC4F9AE02.roa (hash: pswsUG0qEzo4Lxip378d+/jtEbIDA6UOlyLDYYpHdnM=) 5: 33036E24BCE311EA953FBB5EC4F9AE02.roa (hash: h9X/Ha5+JAajFHpKe4PaLiXxR7AjtPZF1G/S4br67kg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 15:31:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12635 (0x315b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1461, serialNumber=637ED141FFE025FD0519945CED48E74F8BD0F5C9 Validity Not Before: Apr 28 15:31:14 2025 GMT Not After : May 5 15:31:14 2025 GMT Subject: CN=680f9f42-98ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ed:66:9f:38:00:aa:14:62:a1:43:3c:76:a4: ba:0f:c1:9e:50:08:44:49:26:7f:59:5a:9b:3a:b9: 62:fc:df:dd:2a:22:b2:71:d5:6e:4b:1c:b9:ef:f2: c1:ad:9e:0b:48:43:2e:18:ba:07:c9:63:2c:a7:f4: e9:32:ea:90:48:d5:c6:5b:ac:26:df:53:43:af:36: f9:e5:35:75:16:45:7b:ce:cb:d7:5b:b1:4e:01:0f: 04:05:73:1d:e1:49:eb:7a:26:06:7e:51:a6:87:66: 36:4e:f2:11:9f:51:0f:42:80:46:a3:d5:f4:96:74: 1d:a0:79:d8:72:55:86:c9:c1:20:51:71:79:0b:22: 35:cb:89:d2:97:1f:12:02:03:3c:ec:5c:4d:8e:29: 14:57:e0:fb:1d:84:b5:4a:ea:5a:7e:b1:07:34:a3: 37:5e:91:16:a6:62:57:1a:bc:24:1e:81:e5:2e:47: d4:16:14:89:14:3d:b3:62:cc:56:f5:1c:e0:0b:47: 89:6f:8f:0b:07:fd:5f:c9:75:a3:08:21:6d:84:3a: c6:50:4e:f3:41:26:db:bc:89:37:c8:d2:3d:1d:46: 8a:e6:d8:09:cb:0b:0c:0f:54:ea:ee:35:2a:51:fb: 3c:c1:10:9c:74:68:a2:74:3c:ad:05:22:33:5b:5a: 4b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:FC:FA:07:28:33:C8:19:DA:DC:4C:9A:55:88:96:C8:37:E2:C4:96 X509v3 Authority Key Identifier: keyid:63:7E:D1:41:FF:E0:25:FD:05:19:94:5C:ED:48:E7:4F:8B:D0:F5:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:1d:8f:7b:b2:ec:a3:23:bf:0f:39:56:72:84:d5:b5:41:2b: 4a:6a:a5:f7:55:fc:3c:26:ed:db:36:67:9e:a3:0b:d0:b7:6b: e9:d8:8e:1f:35:d7:f9:b8:ec:79:20:7b:0c:c5:18:7b:c5:e8: 83:10:43:ce:ab:26:cf:44:a0:7f:c9:d3:86:4c:1a:c3:81:d6: b5:87:7d:50:01:e9:07:ea:2e:b0:e5:89:7d:7d:2d:5d:06:63: 33:1f:d4:7e:aa:56:2f:dd:63:5e:8d:ac:04:c8:7d:98:5c:bf: c7:c7:69:40:28:0e:54:04:66:13:8b:5a:e5:4d:19:1d:89:30: e5:dc:29:ba:c5:25:b4:54:06:88:7e:68:2e:45:03:c5:da:e5: a0:82:b3:ea:5d:81:dc:99:1c:ed:90:f5:48:0e:26:4d:e0:49: 0b:d5:be:97:98:43:8c:88:41:42:39:22:9e:d7:55:1c:6b:b5: da:09:5e:fc:48:2a:b1:79:73:a3:0b:a1:73:ba:e3:0d:2c:56: 94:79:fe:c4:eb:55:67:7c:52:09:85:64:fb:93:7b:52:12:94: e5:24:1e:9e:be:d1:1a:ae:63:d2:4c:bf:94:ae:ab:ab:1f:87: c5:80:54:3a:9f:0b:e4:62:9a:81:27:d8:58:ce:61:c2:fd:a9: c6:af:ae:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE0NjExMTAvBgNVBAUTKDYzN0VEMTQxRkZFMDI1RkQwNTE5OTQ1Q0VENDhFNzRG OEJEMEY1QzkwHhcNMjUwNDI4MTUzMTE0WhcNMjUwNTA1MTUzMTE0WjAYMRYwFAYD VQQDEw02ODBmOWY0Mi05OGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqu1mnzgAqhRioUM8dqS6D8GeUAhESSZ/WVqbOrli/N/dKiKycdVuSxy57/LB rZ4LSEMuGLoHyWMsp/TpMuqQSNXGW6wm31NDrzb55TV1FkV7zsvXW7FOAQ8EBXMd 4UnreiYGflGmh2Y2TvIRn1EPQoBGo9X0lnQdoHnYclWGycEgUXF5CyI1y4nSlx8S AgM87FxNjikUV+D7HYS1SupafrEHNKM3XpEWpmJXGrwkHoHlLkfUFhSJFD2zYsxW 9RzgC0eJb48LB/1fyXWjCCFthDrGUE7zQSbbvIk3yNI9HUaK5tgJywsMD1Tq7jUq Ufs8wRCcdGiidDytBSIzW1pLTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPX8+gco M8gZ2txMmlWIlsg34sSWMB8GA1UdIwQYMBaAFGN+0UH/4CX9BRmUXO1I50+L0PXJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTQ2MS9GQ0U5QTY4MEJE RjUxMUUyOEE5MDRGQjQ2ODg2NUNFRS9ZMzdSUWZfZ0pmMEZHWlJjN1VqblQ0dlE5 Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kzN1JRZl9nSmYwRkdaUmM3VWpuVDR2UTljay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTQ2MS9GQ0U5QTY4MEJERjUxMUUyOEE5MDRGQjQ2ODg2NUNFRS9ZMzdSUWZfZ0pm MEZHWlJjN1VqblQ0dlE5Y2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1HY97suyjI78POVZyhNW1QStKaqX3Vfw8Ju3bNmeeowvQt2vp2I4f Ndf5uOx5IHsMxRh7xeiDEEPOqybPRKB/ydOGTBrDgda1h31QAekH6i6w5Yl9fS1d BmMzH9R+qlYv3WNejawEyH2YXL/Hx2lAKA5UBGYTi1rlTRkdiTDl3Cm6xSW0VAaI fmguRQPF2uWggrPqXYHcmRztkPVIDiZN4EkL1b6XmEOMiEFCOSKe11Uca7XaCV78 SCqxeXOjC6FzuuMNLFaUef7E61VnfFIJhWT7k3tSEpTlJB6evtEarmPSTL+Urqur H4fFgFQ6nwvkYpqBJ9hYzmHC/anGr64T -----END CERTIFICATE-----Generated at Mon Apr 28 17:46:01 2025 by rpki-client on console.sobornost.net