$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft File: c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft (raw, json) Hash identifier: OH0K2BLLtA0g2K15UGllPL3M4oGno8SYp2UZnr+XX/4= Subject key identifier: AF:62:47:6B:6B:87:35:19:50:25:19:E0:06:4E:31:B3:A4:22:2B:DC Authority key identifier: 73:B5:61:DF:3A:58:97:6F:7F:AD:99:7A:9B:A8:DE:5F:67:6D:CF:B2 Certificate issuer: /CN=A91B2492/serialNumber=73B561DF3A58976F7FAD997A9BA8DE5F676DCFB2 Certificate serial: 0B1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7Vh3zpYl29_rZl6m6jeX2dtz7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft Manifest number: 0B16 Signing time: Sat 26 Apr 2025 19:02:56 +0000 Manifest this update: Sat 26 Apr 2025 19:02:56 +0000 Manifest next update: Sat 03 May 2025 19:02:56 +0000 Files and hashes: 1: c7Vh3zpYl29_rZl6m6jeX2dtz7I.crl (hash: +mF9/CwS66YHXpmyrExoHaL1A67QowGA+/llTsesG8w=) 2: C8436A008D7B11EDB7EB7F37C4F9AE02.roa (hash: yUzUPNwrnnqA9y2QcEn+ohx6QfzL71Dl4zwJAGApA/o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.crl rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7Vh3zpYl29_rZl6m6jeX2dtz7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 18:34:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2847 (0xb1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2492, serialNumber=73B561DF3A58976F7FAD997A9BA8DE5F676DCFB2 Validity Not Before: Apr 26 19:02:56 2025 GMT Not After : May 3 19:02:56 2025 GMT Subject: CN=680d2de0-7987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6c:17:15:43:4c:94:b7:48:f8:b5:93:36:71: f5:e8:62:a1:01:28:da:5d:a5:03:93:4e:e8:b9:c7: 53:fe:7d:33:76:ac:a6:b7:b0:09:a4:2e:83:ee:ba: a1:1f:5f:1c:9c:37:6f:08:0d:e2:dc:c9:81:bf:f1: 8a:84:c3:24:ad:df:9b:d2:95:aa:1a:94:86:9a:4e: 6b:f6:32:ab:1c:35:58:2a:bc:7a:0e:24:87:f0:2d: cc:7f:9a:4e:d8:7a:07:89:79:0f:ad:b2:c6:5a:d7: 9d:e8:7b:87:51:2e:ac:b0:24:9a:92:cb:31:7e:08: d7:a8:77:6e:d5:fd:96:41:aa:bc:3a:e8:eb:c1:a9: 91:16:f5:bf:6d:3e:fc:b6:87:e9:4b:62:78:51:d8: ba:7f:1a:72:27:c6:ff:c4:14:2f:e7:fb:c7:f7:16: 0f:4f:a0:9b:82:18:70:9c:87:bb:66:64:24:e6:7a: 11:55:51:bb:ec:a7:d0:05:d7:26:68:f2:10:46:17: a2:1c:20:ce:86:71:99:0c:53:db:f1:8c:78:fb:29: fa:21:43:31:67:1d:bf:0f:f5:77:76:b9:a1:c9:97: fc:a6:f9:06:81:ee:b3:ad:45:8d:9f:e8:a6:af:95: 60:b4:d3:d4:62:ae:2f:3b:fc:c9:e6:c0:5c:0c:93: 5e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:62:47:6B:6B:87:35:19:50:25:19:E0:06:4E:31:B3:A4:22:2B:DC X509v3 Authority Key Identifier: keyid:73:B5:61:DF:3A:58:97:6F:7F:AD:99:7A:9B:A8:DE:5F:67:6D:CF:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7Vh3zpYl29_rZl6m6jeX2dtz7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:d1:2e:d9:b7:ec:4e:b2:e9:c6:71:a9:0b:43:5f:b9:e4:b5: 10:78:59:29:3b:0d:7f:7a:dc:7c:f8:c2:b9:6c:98:c4:1b:99: e7:26:1b:9b:ae:2b:33:aa:1f:86:17:bc:f5:8f:29:f2:7b:07: a9:35:27:71:83:91:13:f0:d5:70:42:02:d4:44:59:0f:62:b4: fa:5d:b6:f8:85:30:9b:79:28:63:9e:4b:e6:ce:2d:d4:ad:43: 27:66:45:18:eb:af:00:aa:85:ff:e1:39:ed:31:cb:4d:56:1c: 06:f8:19:f5:6b:58:03:3e:ae:93:ee:d1:ca:bb:43:43:5a:46: 0c:1b:93:cf:03:5c:d8:9c:88:cc:52:76:09:64:f3:55:5a:fe: 61:70:97:77:25:5d:65:17:0e:90:58:71:8c:9f:bf:b1:df:1e: c8:81:ee:8e:e5:8b:7c:88:2a:88:c5:39:4d:dd:06:b1:33:b2: 67:e4:9c:9b:3c:34:4e:80:95:ca:13:d9:3e:4d:8c:53:1e:39: 6d:22:86:67:15:95:09:e9:4b:ac:3b:a8:58:ae:bb:e2:53:74: b7:4c:44:88:af:1d:ab:6b:df:cc:80:a1:8c:d6:27:36:34:c1: 51:61:2e:3f:7e:fa:f9:8c:ce:10:74:49:08:83:d2:bf:ef:9a: 01:27:e6:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCx8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI0OTIxMTAvBgNVBAUTKDczQjU2MURGM0E1ODk3NkY3RkFEOTk3QTlCQThERTVG Njc2RENGQjIwHhcNMjUwNDI2MTkwMjU2WhcNMjUwNTAzMTkwMjU2WjAYMRYwFAYD VQQDEw02ODBkMmRlMC03OTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoWwXFUNMlLdI+LWTNnH16GKhASjaXaUDk07oucdT/n0zdqymt7AJpC6D7rqh H18cnDdvCA3i3MmBv/GKhMMkrd+b0pWqGpSGmk5r9jKrHDVYKrx6DiSH8C3Mf5pO 2HoHiXkPrbLGWted6HuHUS6ssCSakssxfgjXqHdu1f2WQaq8OujrwamRFvW/bT78 tofpS2J4Udi6fxpyJ8b/xBQv5/vH9xYPT6CbghhwnIe7ZmQk5noRVVG77KfQBdcm aPIQRheiHCDOhnGZDFPb8Yx4+yn6IUMxZx2/D/V3drmhyZf8pvkGge6zrUWNn+im r5VgtNPUYq4vO/zJ5sBcDJNeUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK9iR2tr hzUZUCUZ4AZOMbOkIivcMB8GA1UdIwQYMBaAFHO1Yd86WJdvf62Zepuo3l9nbc+y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjQ5Mi9EQUQ1MTBENDND QjUxMUVBQjgyQ0NDNkNDNEY5QUUwMi9jN1ZoM3pwWWwyOV9yWmw2bTZqZVgyZHR6 N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M3VmgzenBZbDI5X3JabDZtNmplWDJkdHo3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MjQ5Mi9EQUQ1MTBENDNDQjUxMUVBQjgyQ0NDNkNDNEY5QUUwMi9jN1ZoM3pwWWwy OV9yWmw2bTZqZVgyZHR6N0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCj0S7Zt+xOsunGcakLQ1+55LUQeFkpOw1/etx8+MK5bJjEG5nnJhub riszqh+GF7z1jynyewepNSdxg5ET8NVwQgLURFkPYrT6Xbb4hTCbeShjnkvmzi3U rUMnZkUY668AqoX/4TntMctNVhwG+Bn1a1gDPq6T7tHKu0NDWkYMG5PPA1zYnIjM UnYJZPNVWv5hcJd3JV1lFw6QWHGMn7+x3x7Ige6O5Yt8iCqIxTlN3QaxM7Jn5Jyb PDROgJXKE9k+TYxTHjltIoZnFZUJ6UusO6hYrrviU3S3TESIrx2ra9/MgKGM1ic2 NMFRYS4/fvr5jM4QdEkIg9K/75oBJ+b5 -----END CERTIFICATE-----Generated at Sat Apr 26 21:01:59 2025 by rpki-client on console.sobornost.net