$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/kaXm5XbDFcQxnu-f2jKHrSDDgDk.mft File: kaXm5XbDFcQxnu-f2jKHrSDDgDk.mft (raw, json) Hash identifier: ydZceRoWFgFvebYYAn3wc3LmyRbDhTb7ks35JFO+b2U= Subject key identifier: 41:33:6E:17:FB:1A:B8:29:8E:41:93:1B:FD:EA:53:DA:1B:A5:D6:F5 Authority key identifier: 91:A5:E6:E5:76:C3:15:C4:31:9E:EF:9F:DA:32:87:AD:20:C3:80:39 Certificate issuer: /CN=A91B6462/serialNumber=91A5E6E576C315C4319EEF9FDA3287AD20C38039 Certificate serial: 0BF3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kaXm5XbDFcQxnu-f2jKHrSDDgDk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/kaXm5XbDFcQxnu-f2jKHrSDDgDk.mft Manifest number: 0BE0 Signing time: Sat 26 Apr 2025 18:39:57 +0000 Manifest this update: Sat 26 Apr 2025 18:39:56 +0000 Manifest next update: Sat 03 May 2025 18:39:56 +0000 Files and hashes: 1: kaXm5XbDFcQxnu-f2jKHrSDDgDk.crl (hash: KlIjZihoGpTOvnC+DUnXDPAPp8p/5xPhKGmfyHvGZ88=) 2: EA531ACE61C211EF89F25E2CC4F9AE02.roa (hash: wvS2IKCsAphgy9VmVy8jmzdrhXrxZNTENgiqGBEyqqY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/kaXm5XbDFcQxnu-f2jKHrSDDgDk.crl rsync://rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/kaXm5XbDFcQxnu-f2jKHrSDDgDk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kaXm5XbDFcQxnu-f2jKHrSDDgDk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 18:34:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3059 (0xbf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6462, serialNumber=91A5E6E576C315C4319EEF9FDA3287AD20C38039 Validity Not Before: Apr 26 18:39:56 2025 GMT Not After : May 3 18:39:56 2025 GMT Subject: CN=680d287c-3e35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:47:06:3e:56:5c:06:25:f1:4b:c7:cf:40:63: e1:30:2e:5e:c9:78:88:b5:c5:9a:28:e3:b9:8c:57: 01:4c:b3:98:76:cc:5e:b8:9f:e9:d6:03:19:0c:e9: ab:a1:04:47:4e:2f:eb:6e:75:85:2a:45:e1:c5:8d: b9:e7:f7:69:61:fd:56:21:93:25:a7:62:60:f3:89: 81:57:58:70:71:a8:e8:fe:17:d5:6c:38:41:ec:ea: 74:14:44:f7:71:25:6d:78:2e:cd:99:ce:c9:be:5e: 23:ca:36:42:8a:45:1b:8e:44:1c:a9:d0:cb:6c:43: 56:06:ea:d6:91:a0:ec:50:b2:e8:0e:a5:ab:eb:b4: 83:6b:28:b9:c5:ef:70:29:82:b1:2e:ed:eb:02:76: 99:b1:de:db:01:28:4c:57:1a:e5:a4:52:67:b7:55: 79:03:8b:94:d9:ba:35:1c:91:53:5d:7b:0d:73:68: 18:de:a6:23:ca:9e:87:93:e9:ec:ac:ef:83:ad:92: b9:74:bb:a7:8e:d1:59:e1:f7:ed:a1:2e:4d:83:d3: 0c:81:dd:d8:23:6c:83:47:7e:df:27:cf:9c:6f:fa: 3d:af:3b:cc:55:07:69:42:b8:03:84:2b:23:4e:5a: db:7b:77:f6:fa:aa:2a:7d:f4:5a:00:5b:f9:e8:cd: 7c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:33:6E:17:FB:1A:B8:29:8E:41:93:1B:FD:EA:53:DA:1B:A5:D6:F5 X509v3 Authority Key Identifier: keyid:91:A5:E6:E5:76:C3:15:C4:31:9E:EF:9F:DA:32:87:AD:20:C3:80:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/kaXm5XbDFcQxnu-f2jKHrSDDgDk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kaXm5XbDFcQxnu-f2jKHrSDDgDk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/kaXm5XbDFcQxnu-f2jKHrSDDgDk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:e9:28:cb:23:92:18:c1:91:11:4a:cb:d7:22:91:0f:3a:dc: e0:79:40:ea:ae:0c:cf:aa:95:f1:35:3c:f5:db:3b:ba:4c:90: eb:f1:01:43:3f:8b:00:d0:ad:ef:f3:74:4e:8d:88:22:43:4c: 61:c7:e3:71:7c:e3:7a:73:ca:4a:e3:47:ce:0f:47:92:9e:86: 2c:de:6b:71:97:3b:bc:68:83:8c:51:7c:6c:b7:1e:df:dd:6f: ca:27:b7:9b:10:bf:9e:90:65:fc:af:d9:26:3a:6e:a6:35:ca: e2:e4:00:df:fa:69:55:9d:72:0b:09:75:44:e6:e5:49:0d:a4: 88:89:0e:dd:12:32:0c:ad:a4:f0:65:26:b1:b4:31:0c:79:91: ce:4b:79:d8:5a:3b:1b:d1:ad:ae:9d:a3:0c:58:dc:22:ae:e8: cb:2e:9b:70:92:e8:3b:cc:a4:14:0f:25:57:90:cd:3c:0f:50: cb:b3:5a:b5:2d:ca:bc:4b:fd:b4:dd:b9:88:a8:56:fa:c0:9b: d5:1a:e2:6f:ae:89:06:2f:8e:69:ef:65:04:83:43:77:7d:db: 2d:ba:c9:d0:5d:8d:6b:f9:93:70:d3:61:30:92:b9:85:cd:71: 18:8b:35:d3:db:08:95:3f:b3:ad:8a:40:eb:f3:9f:58:7d:75: ea:4c:e8:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY0NjIxMTAvBgNVBAUTKDkxQTVFNkU1NzZDMzE1QzQzMTlFRUY5RkRBMzI4N0FE MjBDMzgwMzkwHhcNMjUwNDI2MTgzOTU2WhcNMjUwNTAzMTgzOTU2WjAYMRYwFAYD VQQDEw02ODBkMjg3Yy0zZTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA50cGPlZcBiXxS8fPQGPhMC5eyXiItcWaKOO5jFcBTLOYdsxeuJ/p1gMZDOmr oQRHTi/rbnWFKkXhxY255/dpYf1WIZMlp2Jg84mBV1hwcajo/hfVbDhB7Op0FET3 cSVteC7Nmc7Jvl4jyjZCikUbjkQcqdDLbENWBurWkaDsULLoDqWr67SDayi5xe9w KYKxLu3rAnaZsd7bAShMVxrlpFJnt1V5A4uU2bo1HJFTXXsNc2gY3qYjyp6Hk+ns rO+DrZK5dLunjtFZ4fftoS5Ng9MMgd3YI2yDR37fJ8+cb/o9rzvMVQdpQrgDhCsj Tlrbe3f2+qoqffRaAFv56M18tQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEEzbhf7 GrgpjkGTG/3qU9obpdb1MB8GA1UdIwQYMBaAFJGl5uV2wxXEMZ7vn9oyh60gw4A5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjQ2Mi9EQUY0MzVFMDE4 NDMxMUVBQjBBRjIwMURDNEY5QUUwMi9rYVhtNVhiREZjUXhudS1mMmpLSHJTRERn RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2thWG01WGJERmNReG51LWYyaktIclNERGdEay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjQ2Mi9EQUY0MzVFMDE4NDMxMUVBQjBBRjIwMURDNEY5QUUwMi9rYVhtNVhiREZj UXhudS1mMmpLSHJTRERnRGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCu6SjLI5IYwZERSsvXIpEPOtzgeUDqrgzPqpXxNTz12zu6TJDr8QFD P4sA0K3v83ROjYgiQ0xhx+NxfON6c8pK40fOD0eSnoYs3mtxlzu8aIOMUXxstx7f 3W/KJ7ebEL+ekGX8r9kmOm6mNcri5ADf+mlVnXILCXVE5uVJDaSIiQ7dEjIMraTw ZSaxtDEMeZHOS3nYWjsb0a2unaMMWNwirujLLptwkug7zKQUDyVXkM08D1DLs1q1 Lcq8S/203bmIqFb6wJvVGuJvrokGL45p72UEg0N3fdstusnQXY1r+ZNw02EwkrmF zXEYizXT2wiVP7OtikDr859YfXXqTOgv -----END CERTIFICATE-----Generated at Sat Apr 26 21:02:00 2025 by rpki-client on console.sobornost.net