$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2C88/24299DCA978E11EBBD81B055C4F9AE02/2gE-F4NYyzWot2XJvAkK6c8cT74.mft File: 2gE-F4NYyzWot2XJvAkK6c8cT74.mft (raw, json) Hash identifier: dmRx5FNXX+X7SGVS9h71Dz60B8HVgrv/5KOYRW8kE1E= Subject key identifier: D4:74:DD:A9:C0:05:C6:C9:8A:74:20:76:80:68:1A:94:D3:D7:D0:67 Authority key identifier: DA:01:3E:17:83:58:CB:35:A8:B7:65:C9:BC:09:0A:E9:CF:1C:4F:BE Certificate issuer: /CN=A91B2C88/serialNumber=DA013E178358CB35A8B765C9BC090AE9CF1C4FBE Certificate serial: 062A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gE-F4NYyzWot2XJvAkK6c8cT74.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2C88/24299DCA978E11EBBD81B055C4F9AE02/2gE-F4NYyzWot2XJvAkK6c8cT74.mft Manifest number: 0622 Signing time: Sat 26 Apr 2025 22:26:05 +0000 Manifest this update: Sat 26 Apr 2025 22:26:05 +0000 Manifest next update: Sat 03 May 2025 22:26:05 +0000 Files and hashes: 1: 2gE-F4NYyzWot2XJvAkK6c8cT74.crl (hash: TYO31fK2E1ZzQ+ESCtEGgW0zDQOkbUAmyDTU67D4yiM=) 2: 3C5E55F041A411ECA73C8C0EC4F9AE02.roa (hash: KMuh5ult9LiAce0tih+7IUcHZQamzlPDZPCJthZ1JAs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2C88/24299DCA978E11EBBD81B055C4F9AE02/2gE-F4NYyzWot2XJvAkK6c8cT74.crl rsync://rpki.apnic.net/member_repository/A91B2C88/24299DCA978E11EBBD81B055C4F9AE02/2gE-F4NYyzWot2XJvAkK6c8cT74.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gE-F4NYyzWot2XJvAkK6c8cT74.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 22:26:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1578 (0x62a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2C88, serialNumber=DA013E178358CB35A8B765C9BC090AE9CF1C4FBE Validity Not Before: Apr 26 22:26:05 2025 GMT Not After : May 3 22:26:05 2025 GMT Subject: CN=680d5d7d-268c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8c:cf:c7:64:e6:2a:dd:2a:cb:b2:bc:ee:34: c5:e6:56:64:91:4a:75:d7:ab:5b:6c:f0:72:7e:6f: e3:95:36:85:b9:9d:dd:65:1b:b3:82:81:ac:7a:6d: bb:15:53:dd:89:44:b2:f5:47:df:f8:61:41:f8:c4: 5e:5a:aa:ef:29:9f:10:73:22:7f:28:d4:42:8b:3c: 0a:d9:0d:8b:6b:ea:bd:29:61:b8:44:af:f4:6d:fb: 9a:de:62:6a:3e:69:a9:6c:64:0d:82:f5:0a:f7:c3: 15:3b:04:71:ad:85:9b:37:5b:74:29:ec:25:d9:e4: 6a:60:ae:ad:c8:8f:fd:8f:ee:3e:d4:f8:b7:0d:a7: 1d:a3:21:36:b7:fb:d7:f8:fc:91:2a:92:15:ee:21: 29:0a:41:27:84:8e:00:28:84:dc:06:47:83:4f:5d: 12:82:84:61:26:c8:8d:da:64:0d:37:ea:38:87:53: ca:45:1b:50:a3:0a:60:df:f0:ee:34:68:d7:e6:e9: f5:b5:2c:c8:5d:1d:2d:67:91:25:99:8e:f7:36:7f: 20:6d:68:66:96:aa:81:2b:1b:60:e4:44:82:55:8b: d8:5c:95:87:fb:b0:0e:d1:13:31:f3:44:5d:f0:d2: c3:f1:49:54:3c:82:18:bc:ef:cc:8c:07:af:39:92: 22:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:74:DD:A9:C0:05:C6:C9:8A:74:20:76:80:68:1A:94:D3:D7:D0:67 X509v3 Authority Key Identifier: keyid:DA:01:3E:17:83:58:CB:35:A8:B7:65:C9:BC:09:0A:E9:CF:1C:4F:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2C88/24299DCA978E11EBBD81B055C4F9AE02/2gE-F4NYyzWot2XJvAkK6c8cT74.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gE-F4NYyzWot2XJvAkK6c8cT74.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2C88/24299DCA978E11EBBD81B055C4F9AE02/2gE-F4NYyzWot2XJvAkK6c8cT74.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:53:7f:28:a0:d7:96:3c:4a:90:60:55:a5:e6:71:87:37:9d: 18:d1:3b:8e:3b:4f:65:66:6f:77:cf:89:78:08:ed:aa:b1:86: e7:71:ad:cc:64:f4:98:fb:5b:25:e5:80:5d:60:27:24:92:ac: df:d5:c0:9b:33:b4:7d:ce:4c:f8:1d:9f:84:0e:84:7b:b7:70: 7e:95:19:60:a5:e4:62:63:d8:9c:16:34:0e:ba:f5:b3:64:60: 78:91:43:f3:99:d8:32:b7:1c:85:50:f0:21:be:08:aa:03:cc: db:96:83:8b:db:c6:26:e9:e7:40:93:62:c3:66:b9:37:50:6c: 8f:bb:05:57:e1:e3:36:4f:64:2a:30:95:9d:ce:6a:74:f2:a2: b8:2e:b1:c9:df:8c:65:d5:49:2a:71:cd:c9:b7:50:fd:a8:38: 2e:17:43:94:4f:66:3a:23:d1:8a:1c:cd:d9:d0:3f:e0:af:df: a7:cb:cb:9d:5e:89:96:34:6c:dd:fc:14:53:9f:ce:51:81:61: f0:a1:1c:02:86:7c:86:4c:61:03:93:70:4b:d1:ee:33:d4:3a: 8e:1e:2a:e3:bf:33:48:9a:71:b7:d8:51:e4:76:76:1c:d7:ec: 2a:9e:8e:ff:4f:fe:bd:51:3f:bf:58:0d:0c:df:5f:0a:34:90: e9:53:76:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJDODgxMTAvBgNVBAUTKERBMDEzRTE3ODM1OENCMzVBOEI3NjVDOUJDMDkwQUU5 Q0YxQzRGQkUwHhcNMjUwNDI2MjIyNjA1WhcNMjUwNTAzMjIyNjA1WjAYMRYwFAYD VQQDEw02ODBkNWQ3ZC0yNjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArIzPx2TmKt0qy7K87jTF5lZkkUp116tbbPByfm/jlTaFuZ3dZRuzgoGsem27 FVPdiUSy9Uff+GFB+MReWqrvKZ8QcyJ/KNRCizwK2Q2La+q9KWG4RK/0bfua3mJq PmmpbGQNgvUK98MVOwRxrYWbN1t0Kewl2eRqYK6tyI/9j+4+1Pi3DacdoyE2t/vX +PyRKpIV7iEpCkEnhI4AKITcBkeDT10SgoRhJsiN2mQNN+o4h1PKRRtQowpg3/Du NGjX5un1tSzIXR0tZ5ElmY73Nn8gbWhmlqqBKxtg5ESCVYvYXJWH+7AO0RMx80Rd 8NLD8UlUPIIYvO/MjAevOZIiywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNR03anA BcbJinQgdoBoGpTT19BnMB8GA1UdIwQYMBaAFNoBPheDWMs1qLdlybwJCunPHE++ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkM4OC8yNDI5OURDQTk3 OEUxMUVCQkQ4MUIwNTVDNEY5QUUwMi8yZ0UtRjROWXl6V290MlhKdkFrSzZjOGNU NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJnRS1GNE5ZeXpXb3QyWEp2QWtLNmM4Y1Q3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkM4OC8yNDI5OURDQTk3OEUxMUVCQkQ4MUIwNTVDNEY5QUUwMi8yZ0UtRjROWXl6 V290MlhKdkFrSzZjOGNUNzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvU38ooNeWPEqQYFWl5nGHN50Y0TuOO09lZm93z4l4CO2qsYbnca3M ZPSY+1sl5YBdYCckkqzf1cCbM7R9zkz4HZ+EDoR7t3B+lRlgpeRiY9icFjQOuvWz ZGB4kUPzmdgytxyFUPAhvgiqA8zbloOL28Ym6edAk2LDZrk3UGyPuwVX4eM2T2Qq MJWdzmp08qK4LrHJ34xl1Ukqcc3Jt1D9qDguF0OUT2Y6I9GKHM3Z0D/gr9+ny8ud XomWNGzd/BRTn85RgWHwoRwChnyGTGEDk3BL0e4z1DqOHirjvzNImnG32FHkdnYc 1+wqno7/T/69UT+/WA0M318KNJDpU3an -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:07 2025 by rpki-client on console.sobornost.net