$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft File: gcJvPY9BNuUZDMehfWr3IkIutm8.mft (raw, json) Hash identifier: m6yFRyIeu8SjNmlwq93JiIuCp2bl4nHYzIrRS49ohLQ= Subject key identifier: F8:E3:A7:12:F0:74:64:CB:E8:9A:5E:94:D8:E7:8F:98:B7:50:EE:13 Authority key identifier: 81:C2:6F:3D:8F:41:36:E5:19:0C:C7:A1:7D:6A:F7:22:42:2E:B6:6F Certificate issuer: /CN=A91B8E70/serialNumber=81C26F3D8F4136E5190CC7A17D6AF722422EB66F Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gcJvPY9BNuUZDMehfWr3IkIutm8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft Manifest number: 61 Signing time: Sun 27 Apr 2025 05:55:11 +0000 Manifest this update: Sun 27 Apr 2025 05:55:11 +0000 Manifest next update: Sun 04 May 2025 05:55:11 +0000 Files and hashes: 1: gcJvPY9BNuUZDMehfWr3IkIutm8.crl (hash: ttY6FBmF70lQmlXp0qi+4bBZQJDLhzvyE9+J7zyhiVY=) 2: 20B2721A955B11EFBF0F5669C4F9AE02.roa (hash: llWki8GcmgjT7J8EXf4LrHE2T0htuGvxurz/78InPoE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.crl rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gcJvPY9BNuUZDMehfWr3IkIutm8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8E70, serialNumber=81C26F3D8F4136E5190CC7A17D6AF722422EB66F Validity Not Before: Apr 27 05:55:11 2025 GMT Not After : May 4 05:55:11 2025 GMT Subject: CN=680dc6bf-2d56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b3:27:6b:70:36:86:c1:e8:67:4e:53:c0:fe: f7:67:83:79:56:ab:38:37:f2:db:33:4d:e2:ef:cd: 25:a3:e8:1a:e6:a3:f7:b5:78:cd:94:62:68:bb:4c: c2:7c:07:51:d3:a7:9e:72:25:b0:fe:07:f5:57:a1: eb:f7:aa:2a:8c:88:b9:19:3a:d8:c9:11:28:dd:98: dd:11:0d:2c:72:a1:44:be:bd:b4:90:5a:3c:85:88: 24:75:00:6b:18:83:93:fe:b3:a7:98:15:f1:0a:bb: 17:46:e5:87:2f:dd:59:2c:1d:60:6b:43:a0:6b:d7: 76:b1:b5:b7:d3:d5:95:12:6c:5f:a4:c0:22:a2:8c: 44:75:f5:01:a2:56:3f:63:e5:bc:1b:e8:64:59:04: 17:6f:d6:3c:bd:4f:f9:9c:7f:94:47:c1:d1:22:9a: 26:0d:a3:cf:98:9b:67:26:e3:e9:2a:41:23:72:ea: e8:f6:af:57:48:3b:f6:0f:9a:80:f2:c9:5b:12:20: 32:8d:a0:63:a0:22:a9:84:10:2f:57:3d:78:ad:ba: 34:98:ed:35:8e:7b:eb:c9:05:8d:27:70:28:e3:dd: 8f:c2:b2:9c:9f:70:40:f6:ac:e6:fb:f4:e1:d3:18: 53:cb:12:e8:2d:62:f6:f1:ce:4d:77:9d:d8:84:d4: cd:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:E3:A7:12:F0:74:64:CB:E8:9A:5E:94:D8:E7:8F:98:B7:50:EE:13 X509v3 Authority Key Identifier: keyid:81:C2:6F:3D:8F:41:36:E5:19:0C:C7:A1:7D:6A:F7:22:42:2E:B6:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gcJvPY9BNuUZDMehfWr3IkIutm8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d5:34:fd:7e:01:07:64:f0:14:3a:c1:be:8e:ca:29:9b:d5:90: 4e:81:d7:cb:a4:10:20:df:e2:1d:bc:f5:2e:fd:5d:4d:68:2e: f5:ac:a0:ca:f7:22:35:e8:cb:53:9f:8a:e2:57:b8:92:a9:f8: 76:8b:85:3a:3f:9e:02:18:95:46:3a:07:6f:75:2e:b1:f6:a3: c3:b0:e9:f5:27:fd:80:e5:57:f8:0d:30:7e:76:a4:94:fd:fb: e1:c2:74:bc:c5:94:5e:45:f4:b2:fb:ba:e2:12:8f:a7:76:05: a7:88:d6:8b:36:04:ee:c9:25:f2:a3:c6:05:17:67:a4:64:e4: a4:fd:70:7c:84:ab:52:7c:44:fb:1d:ff:cd:a8:b7:2b:dd:47: 3d:7b:82:f4:7f:ed:6d:d8:8f:80:6a:8f:94:d9:a5:b0:42:31: f1:5b:52:f6:25:68:52:67:7f:9b:01:7d:f4:6d:b4:83:c5:a7: 03:00:3a:b1:52:40:30:2e:ea:22:3b:55:b0:d3:ce:dd:59:5e: 4c:92:4f:13:22:bf:3b:7e:d0:5a:db:89:81:9a:07:05:26:a1: a4:75:76:05:6f:cc:01:c6:8a:77:4f:cb:8b:1d:e0:5b:4e:a5: 8f:b9:e2:05:26:2f:f5:37:d5:c3:00:01:7d:83:6a:03:84:c1: 7b:53:cc:a5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC OEU3MDExMC8GA1UEBRMoODFDMjZGM0Q4RjQxMzZFNTE5MENDN0ExN0Q2QUY3MjI0 MjJFQjY2RjAeFw0yNTA0MjcwNTU1MTFaFw0yNTA1MDQwNTU1MTFaMBgxFjAUBgNV BAMTDTY4MGRjNmJmLTJkNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8sydrcDaGwehnTlPA/vdng3lWqzg38tszTeLvzSWj6Brmo/e1eM2UYmi7TMJ8 B1HTp55yJbD+B/VXoev3qiqMiLkZOtjJESjdmN0RDSxyoUS+vbSQWjyFiCR1AGsY g5P+s6eYFfEKuxdG5Ycv3VksHWBrQ6Br13axtbfT1ZUSbF+kwCKijER19QGiVj9j 5bwb6GRZBBdv1jy9T/mcf5RHwdEimiYNo8+Ym2cm4+kqQSNy6uj2r1dIO/YPmoDy yVsSIDKNoGOgIqmEEC9XPXitujSY7TWOe+vJBY0ncCjj3Y/CspyfcED2rOb79OHT GFPLEugtYvbxzk13ndiE1M15AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+OOnEvB0 ZMvoml6U2OePmLdQ7hMwHwYDVR0jBBgwFoAUgcJvPY9BNuUZDMehfWr3IkIutm8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4RTcwLzJEOTk3MEQ4OTU1 QTExRUZCRDlFMDI0QUM0RjlBRTAyL2djSnZQWTlCTnVVWkRNZWhmV3IzSWtJdXRt OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZ2NKdlBZOUJOdVVaRE1laGZXcjNJa0l1dG04LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4 RTcwLzJEOTk3MEQ4OTU1QTExRUZCRDlFMDI0QUM0RjlBRTAyL2djSnZQWTlCTnVV WkRNZWhmV3IzSWtJdXRtOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANU0/X4BB2TwFDrBvo7KKZvVkE6B18ukECDf4h289S79XU1oLvWsoMr3 IjXoy1OfiuJXuJKp+HaLhTo/ngIYlUY6B291LrH2o8Ow6fUn/YDlV/gNMH52pJT9 ++HCdLzFlF5F9LL7uuISj6d2BaeI1os2BO7JJfKjxgUXZ6Rk5KT9cHyEq1J8RPsd /82otyvdRz17gvR/7W3Yj4Bqj5TZpbBCMfFbUvYlaFJnf5sBffRttIPFpwMAOrFS QDAu6iI7VbDTzt1ZXkySTxMivzt+0FrbiYGaBwUmoaR1dgVvzAHGindPy4sd4FtO pY+54gUmL/U31cMAAX2DagOEwXtTzKU= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:54 2025 by rpki-client on console.sobornost.net