$ rpki-client -vvf rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.mft File: S0fJxk08IyF6Fd2rh0fDncMBhPI.mft (raw, json) Hash identifier: HmjYwTvvjWTkhjS7JwnjDGuCLl9nu2ph28yGy34abnM= Subject key identifier: F6:9E:DB:93:F0:9E:EE:71:06:05:95:10:55:B2:66:36:EE:11:41:9E Authority key identifier: 4B:47:C9:C6:4D:3C:23:21:7A:15:DD:AB:87:47:C3:9D:C3:01:84:F2 Certificate issuer: /CN=A91B31CE/serialNumber=4B47C9C64D3C23217A15DDAB8747C39DC30184F2 Certificate serial: 0679 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0fJxk08IyF6Fd2rh0fDncMBhPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.mft Manifest number: 0670 Signing time: Thu 24 Apr 2025 22:12:12 +0000 Manifest this update: Thu 24 Apr 2025 22:12:12 +0000 Manifest next update: Thu 01 May 2025 22:12:12 +0000 Files and hashes: 1: S0fJxk08IyF6Fd2rh0fDncMBhPI.crl (hash: yS+iNqWbccgFvrF2El18cNORdtgWuROlsmR7NzRDnTA=) 2: AA51390A822B11EE8B95E475C4F9AE02.roa (hash: iVoQ4DzarwOJUrSELiNWak+s+ohZp/LfOai+uGXnZZw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.crl rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0fJxk08IyF6Fd2rh0fDncMBhPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1657 (0x679) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B31CE, serialNumber=4B47C9C64D3C23217A15DDAB8747C39DC30184F2 Validity Not Before: Apr 24 22:12:12 2025 GMT Not After : May 1 22:12:12 2025 GMT Subject: CN=680ab73c-e20e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:8b:3b:78:d3:2d:cd:36:4a:93:4d:e6:fe:c6: 32:36:96:cd:2a:a8:08:78:cc:0b:b2:01:02:0d:3f: de:17:c2:f1:d3:84:4e:97:20:ed:03:cd:20:d7:44: 3f:b5:9a:75:83:42:37:94:97:86:ab:fb:e8:25:6c: b2:a3:65:fe:14:16:ba:76:1e:48:1d:97:9b:97:a2: 90:b2:85:09:df:b8:5f:51:7e:27:85:b0:46:53:42: cf:bc:91:b6:0f:f3:65:98:56:2d:b4:46:79:18:61: 11:4d:f8:9e:c8:d0:81:34:03:00:0e:0c:08:93:15: b5:c9:a9:b7:3a:a8:eb:b8:e8:b4:82:c2:eb:44:5a: 5c:a1:fb:4c:95:e6:48:1a:d8:37:a1:9c:3d:1b:8b: 22:1e:5f:e0:e0:51:87:36:bb:9a:d8:bf:c7:6a:90: ae:d3:12:ec:81:fa:c2:f5:57:2b:50:4d:31:03:a1: 20:af:f2:d7:08:d6:57:58:86:0e:c8:8c:d4:0f:48: 50:95:0d:5f:29:75:c2:13:57:87:fe:78:a4:6d:73: 0e:ca:23:00:da:32:d6:a5:99:1f:38:7c:39:63:b7: ef:15:8c:b8:6a:77:be:93:52:cf:5d:5c:29:d1:42: 5f:6a:5c:ec:f3:96:94:b9:ee:2b:74:92:bd:56:a4: 2b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:9E:DB:93:F0:9E:EE:71:06:05:95:10:55:B2:66:36:EE:11:41:9E X509v3 Authority Key Identifier: keyid:4B:47:C9:C6:4D:3C:23:21:7A:15:DD:AB:87:47:C3:9D:C3:01:84:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0fJxk08IyF6Fd2rh0fDncMBhPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:c9:66:3a:00:4c:62:d8:2f:14:b0:0b:77:4e:9f:86:14:e8: 8d:c2:1d:2f:a6:8a:ef:88:10:c1:46:d0:3a:5f:ff:ce:9a:c7: f8:77:fe:dc:dd:bc:da:c8:03:96:8a:b1:91:75:c1:e6:af:b8: f5:eb:43:ec:df:d2:7f:a3:8e:da:57:29:f2:41:4f:5d:61:d9: ed:b9:e9:6f:96:08:4c:10:d0:ab:d3:2b:80:e2:fe:31:8c:33: 95:e8:4c:fa:b0:0d:33:31:fa:34:fc:1e:1d:ec:b0:09:fc:db: e3:3d:d6:74:e9:36:be:fa:2c:bf:49:d2:46:0d:c7:20:86:2e: 0c:94:d4:19:51:f4:12:1a:bf:48:23:f8:f6:26:3b:2d:fa:ca: 4e:1b:78:8c:5b:5c:3a:1c:48:ec:41:34:17:39:c7:92:b4:96: c9:0f:6e:50:4c:ce:38:04:3d:04:69:4c:1d:88:9e:8b:be:6b: f7:50:e7:a7:ef:29:36:c2:d8:ce:42:a7:6f:e1:f9:6b:5d:ff: 53:8f:a9:ae:6a:79:00:32:d9:fc:50:82:06:de:2f:bd:19:ec: c5:66:47:cc:ac:9c:eb:dd:32:c7:c2:bd:3c:fd:c8:14:4c:c6: 4b:c5:62:76:a1:c7:08:7a:70:99:07:43:32:cd:d0:cd:f3:c5: 9a:aa:a1:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjMxQ0UxMTAvBgNVBAUTKDRCNDdDOUM2NEQzQzIzMjE3QTE1RERBQjg3NDdDMzlE QzMwMTg0RjIwHhcNMjUwNDI0MjIxMjEyWhcNMjUwNTAxMjIxMjEyWjAYMRYwFAYD VQQDEw02ODBhYjczYy1lMjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8Ys7eNMtzTZKk03m/sYyNpbNKqgIeMwLsgECDT/eF8Lx04ROlyDtA80g10Q/ tZp1g0I3lJeGq/voJWyyo2X+FBa6dh5IHZebl6KQsoUJ37hfUX4nhbBGU0LPvJG2 D/NlmFYttEZ5GGERTfieyNCBNAMADgwIkxW1yam3OqjruOi0gsLrRFpcoftMleZI Gtg3oZw9G4siHl/g4FGHNrua2L/HapCu0xLsgfrC9VcrUE0xA6Egr/LXCNZXWIYO yIzUD0hQlQ1fKXXCE1eH/nikbXMOyiMA2jLWpZkfOHw5Y7fvFYy4ane+k1LPXVwp 0UJfalzs85aUue4rdJK9VqQr5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPae25Pw nu5xBgWVEFWyZjbuEUGeMB8GA1UdIwQYMBaAFEtHycZNPCMhehXdq4dHw53DAYTy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzFDRS82QjA1NjA3QTdD Q0QxMUVCQUVDNkE5NzRDNEY5QUUwMi9TMGZKeGswOEl5RjZGZDJyaDBmRG5jTUJo UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MwZkp4azA4SXlGNkZkMnJoMGZEbmNNQmhQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzFDRS82QjA1NjA3QTdDQ0QxMUVCQUVDNkE5NzRDNEY5QUUwMi9TMGZKeGswOEl5 RjZGZDJyaDBmRG5jTUJoUEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoyWY6AExi2C8UsAt3Tp+GFOiNwh0vporviBDBRtA6X//Omsf4d/7c 3bzayAOWirGRdcHmr7j160Ps39J/o47aVynyQU9dYdntuelvlghMENCr0yuA4v4x jDOV6Ez6sA0zMfo0/B4d7LAJ/NvjPdZ06Ta++iy/SdJGDccghi4MlNQZUfQSGr9I I/j2Jjst+spOG3iMW1w6HEjsQTQXOceStJbJD25QTM44BD0EaUwdiJ6Lvmv3UOen 7yk2wtjOQqdv4flrXf9Tj6muankAMtn8UIIG3i+9GezFZkfMrJzr3TLHwr08/cgU TMZLxWJ2occIenCZB0MyzdDN88WaqqF2 -----END CERTIFICATE-----Generated at Fri Apr 25 08:24:59 2025 by rpki-client on console.sobornost.net