$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.mft File: U4sHbgqt2PrilwyVQ-hJqQ_nN1I.mft (raw, json) Hash identifier: vadsVxWd89FQDkVBF64+aIWZPwQxllMqRgxfI7RpiSA= Subject key identifier: 69:50:51:80:15:4C:84:DD:6A:D1:21:97:A3:8C:A3:79:E7:70:09:A7 Authority key identifier: 53:8B:07:6E:0A:AD:D8:FA:E2:97:0C:95:43:E8:49:A9:0F:E7:37:52 Certificate issuer: /CN=A91B6F47/serialNumber=538B076E0AADD8FAE2970C9543E849A90FE73752 Certificate serial: 3551 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.mft Manifest number: 34D5 Signing time: Mon 28 Apr 2025 14:25:23 +0000 Manifest this update: Mon 28 Apr 2025 14:25:22 +0000 Manifest next update: Mon 05 May 2025 14:25:22 +0000 Files and hashes: 1: U4sHbgqt2PrilwyVQ-hJqQ_nN1I.crl (hash: GfKqhIG2NU/DJDw0B4YfVCRewroFjFOVLxCV3GzeJWw=) 2: DF8602D05E5B11ED994E491CC4F9AE02.roa (hash: KKCg2NooRoQGuF3KYpzz51c9C/45UUPObnLo2e5njhU=) 3: D0886954188811EC8E86754FC4F9AE02.roa (hash: yPv2xJqSMbxdqO3CUxzFvtSmE89AHilhOo/061TH8FU=) 4: AB9889725E5E11EDB5361D3BC4F9AE02.roa (hash: nfNjfg1IXDDhMM0k16fT6xDTUZvLHRQ/C+xvVXQFUFE=) 5: 99CF729E221011ED980A6F47C4F9AE02.roa (hash: iSQxLeiRN1fYoIns2yWqQhKW9w0d7Bh4Hi7g+FcoiAo=) 6: 491E49AECDCA11ED8F57D386C4F9AE02.roa (hash: GOobL3IcAmOzxEXI8Av9eECmrglVLT+e8Yk36aU9ns8=) 7: 9F3A919468D811EFB2FE405FC4F9AE02.roa (hash: ZaxlSh3XWBv2fOJrVopMAyhJjHEvnP8TGG96c6iuXcg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.crl rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 14:25:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13649 (0x3551) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6F47, serialNumber=538B076E0AADD8FAE2970C9543E849A90FE73752 Validity Not Before: Apr 28 14:25:22 2025 GMT Not After : May 5 14:25:22 2025 GMT Subject: CN=680f8fd3-62cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:76:cf:47:49:22:f4:65:35:07:49:80:bc:d5: 2d:e3:0d:59:f6:d6:db:e5:12:86:63:62:04:61:43: 76:6a:e7:9e:3e:17:42:4b:e4:24:8d:79:1f:d4:c2: 3a:ee:e0:7e:a9:1d:24:0d:63:a4:69:3c:ef:e5:e0: 0f:4b:35:72:21:4a:7f:94:ef:ba:d5:46:e2:fc:ab: fc:ef:df:03:e0:94:a9:31:f4:d2:aa:76:43:8e:db: 63:3f:30:11:93:80:b4:f0:eb:f1:2c:8f:30:27:3b: 71:2b:a8:c4:4c:bd:56:55:60:36:b1:d8:90:49:b5: 93:0b:79:96:37:b2:d5:3a:8e:fb:a8:c0:ac:4e:13: 5e:0e:dc:99:25:88:a7:4e:30:1a:b9:34:e2:77:71: 74:44:85:c0:d5:9e:ae:ad:6e:7c:c7:2e:ef:65:9c: 33:92:ef:d2:2c:a7:2e:e8:a0:5e:9e:46:0a:71:b8: 7c:69:4b:cb:dc:49:eb:4b:1a:42:85:3e:03:33:d9: b0:cf:a3:09:26:ca:df:49:4c:c0:74:d9:ea:a3:ba: 2e:6d:34:69:75:7f:5e:30:ec:51:51:e4:24:fb:58: 7f:6b:d2:87:90:00:d2:a0:5f:31:d7:dc:6e:e7:8d: 0f:e7:bf:d1:ab:88:9d:c0:00:b5:59:0d:49:49:db: e6:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:50:51:80:15:4C:84:DD:6A:D1:21:97:A3:8C:A3:79:E7:70:09:A7 X509v3 Authority Key Identifier: keyid:53:8B:07:6E:0A:AD:D8:FA:E2:97:0C:95:43:E8:49:A9:0F:E7:37:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:df:14:58:d1:af:a8:7e:2e:f4:cf:a7:80:a6:82:b8:fc:6d: ad:65:d9:d5:2f:e3:17:45:28:9d:82:d9:fd:8b:ab:cb:d4:18: bc:59:60:a9:46:ca:bc:10:50:30:f2:72:22:20:17:fb:55:41: 1d:9a:c7:1a:23:da:46:76:d5:a5:2e:45:4a:66:30:82:cf:9d: fc:54:8e:a9:ff:4b:bb:30:3a:1e:c9:c2:79:df:02:fb:9b:9a: 26:b9:93:b2:32:29:92:14:a1:cd:f9:e8:70:2a:72:d3:f0:d3: 6e:04:de:c3:a0:7e:c8:0b:24:a9:00:79:3a:c1:6e:14:ab:c7: f3:32:c7:00:76:b9:b6:01:91:be:02:b5:82:25:dc:92:8a:08: 31:17:de:b2:62:b6:ab:37:0e:9c:d5:76:1d:fc:e5:aa:5b:d1: ca:f7:46:2c:2a:a1:68:a7:64:db:9c:b9:c5:32:d9:e8:5f:17: ca:6a:b4:c9:93:10:70:48:e2:73:2a:42:be:9c:67:a0:9c:89: b8:15:6b:35:93:cd:1d:5c:3b:5a:48:89:44:22:fd:8a:51:87: d5:ba:ca:43:ad:f1:32:17:dd:17:6b:1f:32:88:4c:b0:1f:3f: 82:b6:f9:5e:13:33:98:81:ad:f1:83:be:f4:f6:d6:4d:9a:1a: 49:f4:89:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZGNDcxMTAvBgNVBAUTKDUzOEIwNzZFMEFBREQ4RkFFMjk3MEM5NTQzRTg0OUE5 MEZFNzM3NTIwHhcNMjUwNDI4MTQyNTIyWhcNMjUwNTA1MTQyNTIyWjAYMRYwFAYD VQQDEw02ODBmOGZkMy02MmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvXbPR0ki9GU1B0mAvNUt4w1Z9tbb5RKGY2IEYUN2aueePhdCS+QkjXkf1MI6 7uB+qR0kDWOkaTzv5eAPSzVyIUp/lO+61Ubi/Kv8798D4JSpMfTSqnZDjttjPzAR k4C08OvxLI8wJztxK6jETL1WVWA2sdiQSbWTC3mWN7LVOo77qMCsThNeDtyZJYin TjAauTTid3F0RIXA1Z6urW58xy7vZZwzku/SLKcu6KBenkYKcbh8aUvL3EnrSxpC hT4DM9mwz6MJJsrfSUzAdNnqo7oubTRpdX9eMOxRUeQk+1h/a9KHkADSoF8x19xu 540P57/Rq4idwAC1WQ1JSdvm2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGlQUYAV TITdatEhl6OMo3nncAmnMB8GA1UdIwQYMBaAFFOLB24Krdj64pcMlUPoSakP5zdS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkY0Ny9CNEE4NkMzODFE ODQxMUUyOTY5RkM1REEwOEIwMkNEMi9VNHNIYmdxdDJQcmlsd3lWUS1oSnFRX25O MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U0c0hiZ3F0MlByaWx3eVZRLWhKcVFfbk4xSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkY0Ny9CNEE4NkMzODFEODQxMUUyOTY5RkM1REEwOEIwMkNEMi9VNHNIYmdxdDJQ cmlsd3lWUS1oSnFRX25OMUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAv3xRY0a+ofi70z6eApoK4/G2tZdnVL+MXRSidgtn9i6vL1Bi8WWCp Rsq8EFAw8nIiIBf7VUEdmscaI9pGdtWlLkVKZjCCz538VI6p/0u7MDoeycJ53wL7 m5omuZOyMimSFKHN+ehwKnLT8NNuBN7DoH7ICySpAHk6wW4Uq8fzMscAdrm2AZG+ ArWCJdySiggxF96yYrarNw6c1XYd/OWqW9HK90YsKqFop2TbnLnFMtnoXxfKarTJ kxBwSOJzKkK+nGegnIm4FWs1k80dXDtaSIlEIv2KUYfVuspDrfEyF90Xax8yiEyw Hz+CtvleEzOYga3xg7709tZNmhpJ9Ilb -----END CERTIFICATE-----Generated at Mon Apr 28 17:46:02 2025 by rpki-client on console.sobornost.net