$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.mft File: g1GgqJRYpHQmpXCgKQH45lQuguI.mft (raw, json) Hash identifier: cHX/j9kM4H9luzVJ8xB69PdqpweQAPTvVh6rUWwSHxY= Subject key identifier: 2F:66:F5:7B:1D:B0:7B:A6:4C:CA:15:53:63:F2:42:6D:43:A6:53:9B Authority key identifier: 83:51:A0:A8:94:58:A4:74:26:A5:70:A0:29:01:F8:E6:54:2E:82:E2 Certificate issuer: /CN=A91B7D3D/serialNumber=8351A0A89458A47426A570A02901F8E6542E82E2 Certificate serial: 0432 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1GgqJRYpHQmpXCgKQH45lQuguI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.mft Manifest number: 0423 Signing time: Sun 27 Apr 2025 00:04:47 +0000 Manifest this update: Sun 27 Apr 2025 00:04:46 +0000 Manifest next update: Sun 04 May 2025 00:04:46 +0000 Files and hashes: 1: g1GgqJRYpHQmpXCgKQH45lQuguI.crl (hash: giJvhUtm8uGRiMSDHCuU3KLUm9SI0ngODnWXV1PnkTI=) 2: D516EA2AA1E611EDABFD7D7FC4F9AE02.roa (hash: bFGAY7gHkrvRuSHehHQRzFx9uBqTtWyMVWm0D4E7juI=) 3: D3E15ECEA1E611EDABFD7D7FC4F9AE02.roa (hash: lpjw5BWb1D28FIiM0Q0zwOopAGhOPre90gYeT7boapw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.crl rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1GgqJRYpHQmpXCgKQH45lQuguI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 00:04:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1074 (0x432) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7D3D, serialNumber=8351A0A89458A47426A570A02901F8E6542E82E2 Validity Not Before: Apr 27 00:04:46 2025 GMT Not After : May 4 00:04:46 2025 GMT Subject: CN=680d749f-64d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:fe:be:9c:9d:c7:05:bb:fa:b1:15:7a:3b:d7: 13:7d:df:38:83:e1:9b:08:6b:9d:f0:f8:51:c9:90: fb:4a:3b:d4:d9:e8:9f:02:d8:85:df:6b:8e:c4:23: de:a5:5a:02:37:e1:33:42:81:6b:01:e8:90:4a:16: 2c:c2:95:b5:19:31:f4:b1:ac:4f:1c:11:e5:ea:b1: 4e:78:f0:88:5f:73:e6:c1:ea:23:1f:a9:e9:de:9c: 0c:49:f3:7e:10:ab:9d:8b:a5:bc:37:3f:f5:88:d5: 65:0d:6b:90:da:d8:b7:0e:38:1a:98:ae:f3:15:41: 93:a6:f3:08:66:74:44:11:4b:c7:d3:27:96:b5:5f: 72:94:28:d1:3f:d7:27:db:13:1c:65:a9:b9:87:fc: 49:16:35:42:7a:4d:25:ff:3b:54:4e:a3:f2:43:62: b8:63:87:fa:d8:db:b5:69:fa:a8:69:e7:83:56:e0: 3c:63:49:b1:97:8f:49:ef:94:d3:ba:4a:e1:ae:40: 2f:09:34:74:aa:88:63:77:14:90:eb:ff:8d:21:13: 37:8a:2f:43:01:76:14:9a:18:ec:62:57:a3:27:65: 46:4a:b0:3d:0a:ea:1a:88:7e:cd:78:53:ab:da:7d: 13:aa:88:07:f3:b7:82:5d:1c:00:71:32:e6:15:16: 27:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:66:F5:7B:1D:B0:7B:A6:4C:CA:15:53:63:F2:42:6D:43:A6:53:9B X509v3 Authority Key Identifier: keyid:83:51:A0:A8:94:58:A4:74:26:A5:70:A0:29:01:F8:E6:54:2E:82:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1GgqJRYpHQmpXCgKQH45lQuguI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d4:d9:fe:2b:37:e5:60:8d:e1:a1:8d:dd:73:da:0b:75:91:1d: cc:5a:6b:af:3a:db:fc:71:94:4c:6d:49:ae:ec:c1:f8:66:e8: 0d:53:34:0e:f3:7d:4b:a4:96:78:af:cb:4d:95:87:7f:54:79: 51:a3:37:97:bc:fd:43:53:79:a2:8a:b2:66:a5:a2:db:67:a7: e6:41:83:ae:ad:08:ff:da:92:c5:ac:86:09:eb:56:21:97:9d: 5d:ef:54:ba:2c:34:4f:2a:9c:ea:8f:36:d1:aa:40:e1:a8:8b: a9:3b:64:2b:59:ce:68:28:53:db:fa:79:61:bb:a7:a0:10:3b: eb:c5:05:b3:2d:42:b7:e9:60:81:b1:db:f1:39:bc:47:e9:c4: 5f:03:c8:4d:25:a1:bd:ba:3b:ce:0f:22:45:a6:85:fc:3f:9a: 1b:d3:43:05:5e:53:cb:96:25:d9:56:65:37:5b:0e:15:48:c9: 94:d7:48:bd:98:5a:b6:82:7b:15:5b:be:61:e9:50:27:32:0c: 6c:55:7c:34:68:65:cd:a4:24:18:3f:29:20:f2:98:ef:88:c4: f5:c8:5d:34:a1:3f:5b:3c:21:06:c7:08:be:59:52:07:65:11: 25:b3:ca:34:9e:9e:2a:25:06:01:5d:47:ef:ed:20:2e:d0:fd: c0:fb:6f:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdEM0QxMTAvBgNVBAUTKDgzNTFBMEE4OTQ1OEE0NzQyNkE1NzBBMDI5MDFGOEU2 NTQyRTgyRTIwHhcNMjUwNDI3MDAwNDQ2WhcNMjUwNTA0MDAwNDQ2WjAYMRYwFAYD VQQDEw02ODBkNzQ5Zi02NGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxP6+nJ3HBbv6sRV6O9cTfd84g+GbCGud8PhRyZD7SjvU2eifAtiF32uOxCPe pVoCN+EzQoFrAeiQShYswpW1GTH0saxPHBHl6rFOePCIX3PmweojH6np3pwMSfN+ EKudi6W8Nz/1iNVlDWuQ2ti3DjgamK7zFUGTpvMIZnREEUvH0yeWtV9ylCjRP9cn 2xMcZam5h/xJFjVCek0l/ztUTqPyQ2K4Y4f62Nu1afqoaeeDVuA8Y0mxl49J75TT ukrhrkAvCTR0qohjdxSQ6/+NIRM3ii9DAXYUmhjsYlejJ2VGSrA9CuoaiH7NeFOr 2n0TqogH87eCXRwAcTLmFRYn6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC9m9Xsd sHumTMoVU2PyQm1DplObMB8GA1UdIwQYMBaAFINRoKiUWKR0JqVwoCkB+OZULoLi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0QzRC8yMzNDMEI0NjYz QkMxMUVDOEI4QzgzMkFDNEY5QUUwMi9nMUdncUpSWXBIUW1wWENnS1FINDVsUXVn dUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2cxR2dxSlJZcEhRbXBYQ2dLUUg0NWxRdWd1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0QzRC8yMzNDMEI0NjYzQkMxMUVDOEI4QzgzMkFDNEY5QUUwMi9nMUdncUpSWXBI UW1wWENnS1FINDVsUXVndUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDU2f4rN+VgjeGhjd1z2gt1kR3MWmuvOtv8cZRMbUmu7MH4ZugNUzQO 831LpJZ4r8tNlYd/VHlRozeXvP1DU3miirJmpaLbZ6fmQYOurQj/2pLFrIYJ61Yh l51d71S6LDRPKpzqjzbRqkDhqIupO2QrWc5oKFPb+nlhu6egEDvrxQWzLUK36WCB sdvxObxH6cRfA8hNJaG9ujvODyJFpoX8P5ob00MFXlPLliXZVmU3Ww4VSMmU10i9 mFq2gnsVW75h6VAnMgxsVXw0aGXNpCQYPykg8pjviMT1yF00oT9bPCEGxwi+WVIH ZREls8o0np4qJQYBXUfv7SAu0P3A+2/t -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:08 2025 by rpki-client on console.sobornost.net