$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.mft File: JSnIA8s451HjaWq3li2CMUX81lk.mft (raw, json) Hash identifier: KiHMdEW6cIWdeXsNXFnLUKMH4vDxaEqV2l9DtxVZSUA= Subject key identifier: D8:9B:52:48:F8:ED:AE:BB:D0:CF:36:CF:97:8C:7E:6E:B4:B7:53:30 Authority key identifier: 25:29:C8:03:CB:38:E7:51:E3:69:6A:B7:96:2D:82:31:45:FC:D6:59 Certificate issuer: /CN=A91B6CE4/serialNumber=2529C803CB38E751E3696AB7962D823145FCD659 Certificate serial: 12BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSnIA8s451HjaWq3li2CMUX81lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.mft Manifest number: 12AE Signing time: Mon 28 Apr 2025 17:17:33 +0000 Manifest this update: Mon 28 Apr 2025 17:17:32 +0000 Manifest next update: Mon 05 May 2025 17:17:32 +0000 Files and hashes: 1: JSnIA8s451HjaWq3li2CMUX81lk.crl (hash: PWabNf2esn4BOYfNOwM8z3P6agalIpXRK+iloPw7qCQ=) 2: B3D4AEB8BFC011E8A7F4204CC4F9AE02.roa (hash: KCnIrYwfu7lFXb4I5Fn3ggrFhAeTiDDSoEEewMbwbp4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.crl rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSnIA8s451HjaWq3li2CMUX81lk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 17:17:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4795 (0x12bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6CE4, serialNumber=2529C803CB38E751E3696AB7962D823145FCD659 Validity Not Before: Apr 28 17:17:32 2025 GMT Not After : May 5 17:17:32 2025 GMT Subject: CN=680fb82c-cc28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:95:6b:a1:ad:80:3f:04:29:ca:a5:1b:24:98: 00:ee:48:5b:17:ca:ab:25:d1:84:b4:0c:de:29:d4: 39:ca:0f:7a:c7:7c:47:53:07:18:f8:6b:3f:06:87: fb:9b:16:bf:2e:43:ad:c0:28:c6:14:8f:34:84:25: b2:05:da:f9:75:7f:8e:50:6a:76:ea:fd:0c:3c:db: b1:35:60:56:e4:6f:2a:f0:37:1f:51:95:2b:38:c2: 78:b3:6e:43:10:08:65:56:5a:aa:1b:90:42:3b:47: 0a:9e:75:7d:6a:b0:fc:f6:8d:8a:b2:6f:e1:f3:bf: 79:84:2f:3c:40:70:bb:01:0c:df:5e:c8:8b:e9:31: f0:d4:b5:f7:c9:12:54:2c:62:c4:d2:1e:a5:ea:68: 1a:3f:83:d2:9e:b4:4e:76:fb:42:ab:47:70:c5:19: 39:67:86:d3:9a:cb:c9:e8:d0:13:8d:8d:b4:74:bd: d0:6c:dd:0c:fa:6d:c4:ff:ea:79:c8:ec:52:a1:a8: 56:8d:13:e3:90:88:9d:e3:62:72:7c:0b:b8:df:d8: e0:89:c3:bf:43:5b:93:ab:a3:33:84:50:40:b5:5b: 3a:ba:5f:1f:d8:8d:a2:e6:16:7d:e6:61:6e:71:a5: a6:8f:4b:73:9e:9b:27:17:ff:1b:2c:c8:bd:d5:c9: 2d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:9B:52:48:F8:ED:AE:BB:D0:CF:36:CF:97:8C:7E:6E:B4:B7:53:30 X509v3 Authority Key Identifier: keyid:25:29:C8:03:CB:38:E7:51:E3:69:6A:B7:96:2D:82:31:45:FC:D6:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSnIA8s451HjaWq3li2CMUX81lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:f4:48:7f:af:16:6e:0b:af:be:03:de:85:66:55:39:d1:0e: 61:02:d3:51:ae:fe:8e:da:bf:ff:e9:49:d7:70:6e:af:35:4f: d4:15:25:9f:57:7b:28:f6:8e:77:62:d7:ea:c2:47:67:94:53: 27:13:5c:24:94:b9:f7:92:f0:32:33:df:7d:14:ac:df:39:ce: 45:14:bb:c1:e7:99:76:47:3e:83:81:da:93:4b:2b:a4:a4:14: ef:b7:20:ab:51:16:35:ae:4d:f0:5c:48:ba:0a:26:4f:a1:df: b7:58:b7:22:f9:c3:fd:32:41:e0:dd:8e:96:20:74:8f:33:9e: 41:fe:a5:06:8a:9b:c2:46:f2:ad:6f:04:08:77:45:cc:c1:96: 64:77:0c:94:ee:87:70:3e:ae:10:05:bc:5a:70:df:17:ac:0f: 2d:45:d1:c4:4f:68:8a:59:a8:b2:61:32:58:7c:71:e5:20:95: be:98:35:58:22:04:15:84:06:9e:56:c9:9a:a1:c0:88:4c:84: ac:9f:48:a8:2a:23:75:e3:f9:52:e7:22:7e:46:9b:e5:2b:e8: b1:98:5b:18:0d:70:a9:aa:11:ea:ee:ec:62:a1:6c:9b:66:d5: 80:a8:5e:49:6b:18:b8:b7:8f:f6:89:4b:c0:e3:22:8b:99:27: cb:c9:75:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICErswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZDRTQxMTAvBgNVBAUTKDI1MjlDODAzQ0IzOEU3NTFFMzY5NkFCNzk2MkQ4MjMx NDVGQ0Q2NTkwHhcNMjUwNDI4MTcxNzMyWhcNMjUwNTA1MTcxNzMyWjAYMRYwFAYD VQQDEw02ODBmYjgyYy1jYzI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAypVroa2APwQpyqUbJJgA7khbF8qrJdGEtAzeKdQ5yg96x3xHUwcY+Gs/Bof7 mxa/LkOtwCjGFI80hCWyBdr5dX+OUGp26v0MPNuxNWBW5G8q8DcfUZUrOMJ4s25D EAhlVlqqG5BCO0cKnnV9arD89o2Ksm/h8795hC88QHC7AQzfXsiL6THw1LX3yRJU LGLE0h6l6mgaP4PSnrROdvtCq0dwxRk5Z4bTmsvJ6NATjY20dL3QbN0M+m3E/+p5 yOxSoahWjRPjkIid42JyfAu439jgicO/Q1uTq6MzhFBAtVs6ul8f2I2i5hZ95mFu caWmj0tznpsnF/8bLMi91cktcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNibUkj4 7a670M82z5eMfm60t1MwMB8GA1UdIwQYMBaAFCUpyAPLOOdR42lqt5YtgjFF/NZZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkNFNC8wOEVEMTc4OEJG QzAxMUU4QTZBODU1NEJDNEY5QUUwMi9KU25JQThzNDUxSGphV3EzbGkyQ01VWDgx bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pTbklBOHM0NTFIamFXcTNsaTJDTVVYODFsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkNFNC8wOEVEMTc4OEJGQzAxMUU4QTZBODU1NEJDNEY5QUUwMi9KU25JQThzNDUx SGphV3EzbGkyQ01VWDgxbGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAS9Eh/rxZuC6++A96FZlU50Q5hAtNRrv6O2r//6UnXcG6vNU/UFSWf V3so9o53YtfqwkdnlFMnE1wklLn3kvAyM999FKzfOc5FFLvB55l2Rz6DgdqTSyuk pBTvtyCrURY1rk3wXEi6CiZPod+3WLci+cP9MkHg3Y6WIHSPM55B/qUGipvCRvKt bwQId0XMwZZkdwyU7odwPq4QBbxacN8XrA8tRdHET2iKWaiyYTJYfHHlIJW+mDVY IgQVhAaeVsmaocCITISsn0ioKiN14/lS5yJ+RpvlK+ixmFsYDXCpqhHq7uxioWyb ZtWAqF5Jaxi4t4/2iUvA4yKLmSfLyXWf -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:55 2025 by rpki-client on console.sobornost.net