$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.mft File: TKAS9bToBGfvDuxPjAJEoj1WmbU.mft (raw, json) Hash identifier: q8dBO1QO/SZY/4kAONNu0sz5hNMLH/prMXGS4dCIhsE= Subject key identifier: E8:DC:DC:CF:2E:47:8D:B2:B3:D5:26:B3:0A:5B:D7:B0:30:F7:7C:C7 Authority key identifier: 4C:A0:12:F5:B4:E8:04:67:EF:0E:EC:4F:8C:02:44:A2:3D:56:99:B5 Certificate issuer: /CN=A91B1E8B/serialNumber=4CA012F5B4E80467EF0EEC4F8C0244A23D5699B5 Certificate serial: 92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKAS9bToBGfvDuxPjAJEoj1WmbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.mft Manifest number: 92 Signing time: Sun 27 Apr 2025 05:15:58 +0000 Manifest this update: Sun 27 Apr 2025 05:15:57 +0000 Manifest next update: Sun 04 May 2025 05:15:57 +0000 Files and hashes: 1: TKAS9bToBGfvDuxPjAJEoj1WmbU.crl (hash: nNzxhkp1cmLc0+ZQ34Z2m8O5/Oc+wOJtVIdkSQocNVw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.crl rsync://rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKAS9bToBGfvDuxPjAJEoj1WmbU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 146 (0x92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1E8B, serialNumber=4CA012F5B4E80467EF0EEC4F8C0244A23D5699B5 Validity Not Before: Apr 27 05:15:57 2025 GMT Not After : May 4 05:15:57 2025 GMT Subject: CN=680dbd8e-0b17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:65:a5:16:0a:cf:3f:7c:93:f5:78:b2:07:93: 68:f0:49:6c:a3:e7:d4:c1:42:b7:51:93:51:a2:11: 7d:ec:99:c5:a2:35:4e:85:24:c9:c2:8c:38:71:af: 81:b5:1b:39:bd:49:8a:c0:30:7e:a7:22:32:1a:1f: 81:41:3f:1c:7c:b4:db:cd:21:16:49:ce:bd:b6:b3: 73:87:41:fa:54:3d:e2:10:90:db:a1:9f:f0:67:7f: 0f:05:3c:04:9c:62:55:63:8f:f9:21:23:86:0e:4a: 05:f0:ad:a5:b2:f5:c5:c9:f9:37:69:74:2b:a2:01: 12:e4:45:34:b2:c7:55:cf:c2:4b:6b:db:9c:1c:12: 0a:a0:45:24:7b:e5:94:f4:f0:aa:81:49:ba:e6:f0: 17:6d:5f:aa:2b:79:f8:e0:36:75:be:13:f9:cd:53: 3d:4a:8d:94:00:b1:3b:17:17:85:90:da:e7:1b:21: 9a:f7:f1:06:09:8b:14:6b:fc:06:1a:39:91:de:8c: d0:6d:53:20:22:da:d0:4f:47:27:c9:f6:a7:10:be: ea:7e:3b:e0:ab:1c:4d:44:02:52:7e:ad:e6:75:79: 96:df:32:5f:da:d1:7b:55:2e:4f:6b:65:9c:f2:77: b4:50:9a:e5:b2:0e:49:5d:9e:55:b8:c6:24:2a:4b: 27:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:DC:DC:CF:2E:47:8D:B2:B3:D5:26:B3:0A:5B:D7:B0:30:F7:7C:C7 X509v3 Authority Key Identifier: keyid:4C:A0:12:F5:B4:E8:04:67:EF:0E:EC:4F:8C:02:44:A2:3D:56:99:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKAS9bToBGfvDuxPjAJEoj1WmbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:ec:bc:04:55:b7:5c:1d:89:bf:67:f2:d2:aa:c6:0e:a7:e0: 67:8b:ea:58:ce:1c:6a:37:1f:02:29:4f:12:e0:30:e6:cd:f5: 35:63:63:74:b7:01:6e:a2:85:07:cf:89:9d:d1:90:dc:c6:f1: 56:04:ce:8f:e3:0e:df:c5:58:bc:c5:40:c0:29:54:a9:54:19: 24:2f:9e:a5:46:de:05:3f:f6:17:ea:69:c1:ae:d6:cf:74:cb: 72:5c:10:2e:fc:d3:b4:b2:bb:d5:b6:2d:9b:c5:1f:fb:b1:42: 70:1c:51:91:bf:fd:fe:1c:be:b4:15:1c:b7:3b:85:cb:ca:13: 39:42:43:7e:2c:d4:55:3e:6c:d7:ed:18:6a:82:34:92:4c:e3: 31:7a:1b:93:f3:85:f4:fe:7f:2a:aa:ff:7f:5d:10:57:e7:9a: 8c:8f:fd:4c:9f:8e:18:3f:f2:a2:eb:3b:66:a4:ae:8f:52:86: 4c:76:c9:c0:f5:04:39:dc:4a:30:e0:35:df:12:85:39:46:38: 42:a0:3a:8a:49:ae:17:24:f6:58:e7:39:2a:c3:27:dd:9d:7b: 56:9f:94:46:4e:39:16:6b:5a:e2:aa:19:f6:21:e2:b9:41:e7: 9f:54:83:c9:ff:1b:36:b0:2c:b7:85:dd:70:1f:76:eb:e9:95: c1:6d:87:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFFOEIxMTAvBgNVBAUTKDRDQTAxMkY1QjRFODA0NjdFRjBFRUM0RjhDMDI0NEEy M0Q1Njk5QjUwHhcNMjUwNDI3MDUxNTU3WhcNMjUwNTA0MDUxNTU3WjAYMRYwFAYD VQQDEw02ODBkYmQ4ZS0wYjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxGWlFgrPP3yT9XiyB5No8Elso+fUwUK3UZNRohF97JnFojVOhSTJwow4ca+B tRs5vUmKwDB+pyIyGh+BQT8cfLTbzSEWSc69trNzh0H6VD3iEJDboZ/wZ38PBTwE nGJVY4/5ISOGDkoF8K2lsvXFyfk3aXQrogES5EU0ssdVz8JLa9ucHBIKoEUke+WU 9PCqgUm65vAXbV+qK3n44DZ1vhP5zVM9So2UALE7FxeFkNrnGyGa9/EGCYsUa/wG GjmR3ozQbVMgItrQT0cnyfanEL7qfjvgqxxNRAJSfq3mdXmW3zJf2tF7VS5Pa2Wc 8ne0UJrlsg5JXZ5VuMYkKksnOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOjc3M8u R42ys9Umswpb17Aw93zHMB8GA1UdIwQYMBaAFEygEvW06ARn7w7sT4wCRKI9Vpm1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUU4Qi82QjM4QjgxNjQ1 QjYxMUVGOEFCMzBBMzFDNEY5QUUwMi9US0FTOWJUb0JHZnZEdXhQakFKRW9qMVdt YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RLQVM5YlRvQkdmdkR1eFBqQUpFb2oxV21iVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUU4Qi82QjM4QjgxNjQ1QjYxMUVGOEFCMzBBMzFDNEY5QUUwMi9US0FTOWJUb0JH ZnZEdXhQakFKRW9qMVdtYlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAV7LwEVbdcHYm/Z/LSqsYOp+Bni+pYzhxqNx8CKU8S4DDmzfU1Y2N0 twFuooUHz4md0ZDcxvFWBM6P4w7fxVi8xUDAKVSpVBkkL56lRt4FP/YX6mnBrtbP dMtyXBAu/NO0srvVti2bxR/7sUJwHFGRv/3+HL60FRy3O4XLyhM5QkN+LNRVPmzX 7RhqgjSSTOMxehuT84X0/n8qqv9/XRBX55qMj/1Mn44YP/Ki6ztmpK6PUoZMdsnA 9QQ53Eow4DXfEoU5RjhCoDqKSa4XJPZY5zkqwyfdnXtWn5RGTjkWa1riqhn2IeK5 QeefVIPJ/xs2sCy3hd1wH3br6ZXBbYdq -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:54 2025 by rpki-client on console.sobornost.net