$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft File: MB6kG5ONf0s895PQEveN06U5cCQ.mft (raw, json) Hash identifier: j18z583A4qiRnuzBucH6MQz6aULxIUvp6HPlo8l1b28= Subject key identifier: A9:A8:FE:72:C4:06:FF:98:0C:77:09:64:10:94:89:9A:BE:62:04:48 Authority key identifier: 30:1E:A4:1B:93:8D:7F:4B:3C:F7:93:D0:12:F7:8D:D3:A5:39:70:24 Certificate issuer: /CN=A91B1F4F/serialNumber=301EA41B938D7F4B3CF793D012F78DD3A5397024 Certificate serial: 1435 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft Manifest number: 142B Signing time: Mon 28 Apr 2025 17:09:15 +0000 Manifest this update: Mon 28 Apr 2025 17:09:14 +0000 Manifest next update: Mon 05 May 2025 17:09:14 +0000 Files and hashes: 1: MB6kG5ONf0s895PQEveN06U5cCQ.crl (hash: N7RkvGndR+V7qPojG/FHFALCr4rGJpanMRL/5JeoY64=) 2: 61574192E37A11EB8AF29A5BC4F9AE02.roa (hash: W5cx07cNyMaDMA4R0/MWrV4hAi09Yk83hfS7ozdwiBc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.crl rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 17:09:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5173 (0x1435) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1F4F, serialNumber=301EA41B938D7F4B3CF793D012F78DD3A5397024 Validity Not Before: Apr 28 17:09:14 2025 GMT Not After : May 5 17:09:14 2025 GMT Subject: CN=680fb63b-ba00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:87:d2:71:3c:d3:18:41:03:28:9b:2a:e1:52: 80:48:3c:3b:26:aa:c0:a8:b9:a6:3e:65:1f:df:d7: f1:2c:ca:7a:59:b9:3e:5d:5e:fb:1f:28:56:1a:ad: 2f:69:e6:ac:2b:12:97:f3:86:c8:66:2b:6a:62:ae: c8:75:fd:38:ba:4d:58:24:9a:0e:b0:ae:3b:7e:2f: 77:0c:5f:ca:22:fc:97:91:24:3b:bf:2c:16:69:c0: 0a:16:d4:e2:1a:fc:81:1d:93:3d:74:36:ca:5f:05: 36:c8:12:e3:ed:90:fe:b1:4e:76:ec:20:7c:90:bb: 53:17:02:56:4b:98:28:b1:7e:4b:ab:21:12:43:07: 25:a6:0b:6b:23:21:be:99:54:45:7e:ab:d0:bf:cd: 03:75:71:e7:61:df:a8:38:2f:3e:42:3d:43:d4:fd: b4:91:03:50:f1:9e:4a:a0:55:81:1b:24:39:b9:b7: aa:45:bd:7e:43:e4:63:f8:26:5e:39:a5:e1:53:c9: b2:4f:cd:82:4f:d7:44:60:b1:c3:ed:9f:34:2d:ce: 11:4c:2e:22:78:bd:bf:a8:6e:27:22:81:b7:96:86: 47:4e:64:b2:d5:6c:d7:b4:82:0d:99:3c:31:c8:64: 63:3c:f8:45:3b:10:09:5d:e0:57:2d:aa:f5:d0:fa: be:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:A8:FE:72:C4:06:FF:98:0C:77:09:64:10:94:89:9A:BE:62:04:48 X509v3 Authority Key Identifier: keyid:30:1E:A4:1B:93:8D:7F:4B:3C:F7:93:D0:12:F7:8D:D3:A5:39:70:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:0d:48:13:7d:70:24:f1:10:06:b2:ff:a0:5b:1f:93:ea:90: dc:64:8b:31:18:ab:4d:8d:67:9d:97:fa:50:99:77:d5:6c:dd: 0e:e5:7b:e9:06:44:71:e1:a3:dc:3a:cb:06:e0:7b:5d:0a:04: 8c:65:66:5a:0d:54:bd:53:d7:d3:52:7a:08:b6:38:7b:48:33: 63:1f:f6:f3:cc:a0:db:8d:00:eb:bf:aa:77:bf:76:3a:8b:0e: 87:c3:f7:c4:5d:40:c5:20:7f:e8:6a:33:88:a6:48:6c:1b:10: 25:1b:e3:43:88:5e:ca:b5:62:f3:57:f4:ba:cf:2d:b5:dc:c2: 29:af:0f:89:27:19:77:fb:25:5d:3f:f0:16:f7:cf:9e:fc:f9: bb:85:3e:90:13:dd:6c:19:18:37:79:eb:da:87:78:e9:a3:07: 8e:2e:30:80:d8:5a:85:09:e3:39:84:e4:c4:e5:47:d9:64:c6: 45:ab:58:0a:a4:f1:3a:1e:63:a2:8e:30:2d:74:a3:b1:bb:85: a4:bb:d2:3f:51:6d:a3:74:d3:54:21:3c:45:b5:60:8e:d3:12: 0a:ec:8b:54:53:68:00:26:ab:ef:16:8d:10:b6:b0:27:45:76: 64:a0:4c:a2:0b:ca:64:c8:31:48:c5:de:87:e3:bf:34:d4:35: ae:01:0c:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFDUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFGNEYxMTAvBgNVBAUTKDMwMUVBNDFCOTM4RDdGNEIzQ0Y3OTNEMDEyRjc4REQz QTUzOTcwMjQwHhcNMjUwNDI4MTcwOTE0WhcNMjUwNTA1MTcwOTE0WjAYMRYwFAYD VQQDEw02ODBmYjYzYi1iYTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA74fScTzTGEEDKJsq4VKASDw7JqrAqLmmPmUf39fxLMp6Wbk+XV77HyhWGq0v aeasKxKX84bIZitqYq7Idf04uk1YJJoOsK47fi93DF/KIvyXkSQ7vywWacAKFtTi GvyBHZM9dDbKXwU2yBLj7ZD+sU527CB8kLtTFwJWS5gosX5LqyESQwclpgtrIyG+ mVRFfqvQv80DdXHnYd+oOC8+Qj1D1P20kQNQ8Z5KoFWBGyQ5ubeqRb1+Q+Rj+CZe OaXhU8myT82CT9dEYLHD7Z80Lc4RTC4ieL2/qG4nIoG3loZHTmSy1WzXtIINmTwx yGRjPPhFOxAJXeBXLar10Pq+GQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKmo/nLE Bv+YDHcJZBCUiZq+YgRIMB8GA1UdIwQYMBaAFDAepBuTjX9LPPeT0BL3jdOlOXAk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUY0Ri8wRkRCOTc0Qzc0 RDcxMUU4QkM4MkQ0MkNDNEY5QUUwMi9NQjZrRzVPTmYwczg5NVBRRXZlTjA2VTVj Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01CNmtHNU9OZjBzODk1UFFFdmVOMDZVNWNDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUY0Ri8wRkRCOTc0Qzc0RDcxMUU4QkM4MkQ0MkNDNEY5QUUwMi9NQjZrRzVPTmYw czg5NVBRRXZlTjA2VTVjQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLDUgTfXAk8RAGsv+gWx+T6pDcZIsxGKtNjWedl/pQmXfVbN0O5Xvp BkRx4aPcOssG4HtdCgSMZWZaDVS9U9fTUnoItjh7SDNjH/bzzKDbjQDrv6p3v3Y6 iw6Hw/fEXUDFIH/oajOIpkhsGxAlG+NDiF7KtWLzV/S6zy213MIprw+JJxl3+yVd P/AW98+e/Pm7hT6QE91sGRg3eevah3jpoweOLjCA2FqFCeM5hOTE5UfZZMZFq1gK pPE6HmOijjAtdKOxu4Wku9I/UW2jdNNUITxFtWCO0xIK7ItUU2gAJqvvFo0QtrAn RXZkoEyiC8pkyDFIxd6H47801DWuAQwA -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:54 2025 by rpki-client on console.sobornost.net