$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.mft File: 09eD7kxpu1Bj-1z1smKLx77DdIo.mft (raw, json) Hash identifier: SfEZmhOJbntY2/5CbMUA4+w/3Kyvr4DW2quNq08K9PM= Subject key identifier: A8:01:6D:13:C7:A1:D0:F3:73:DB:B4:9C:6A:F4:5D:1C:A3:A9:F7:65 Authority key identifier: D3:D7:83:EE:4C:69:BB:50:63:FB:5C:F5:B2:62:8B:C7:BE:C3:74:8A Certificate issuer: /CN=A91B9A77/serialNumber=D3D783EE4C69BB5063FB5CF5B2628BC7BEC3748A Certificate serial: 70 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/09eD7kxpu1Bj-1z1smKLx77DdIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.mft Manifest number: 70 Signing time: Sun 27 Apr 2025 01:18:27 +0000 Manifest this update: Sun 27 Apr 2025 01:18:27 +0000 Manifest next update: Sun 04 May 2025 01:18:27 +0000 Files and hashes: 1: 09eD7kxpu1Bj-1z1smKLx77DdIo.crl (hash: Qbz1yywvovFiNNV/Qi6yhzfHgqoKqXua+e/uXbDonLI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.crl rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/09eD7kxpu1Bj-1z1smKLx77DdIo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 01:18:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 112 (0x70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9A77, serialNumber=D3D783EE4C69BB5063FB5CF5B2628BC7BEC3748A Validity Not Before: Apr 27 01:18:27 2025 GMT Not After : May 4 01:18:27 2025 GMT Subject: CN=680d85e3-0931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:77:e6:4e:3b:69:b7:f2:01:20:b4:e7:be:ad: 4c:15:e8:e2:bb:e3:22:03:65:2f:0c:9c:86:9a:4d: 01:55:cb:9c:0c:30:00:28:6b:91:e4:73:ea:66:5e: 51:a7:3f:d2:49:48:27:41:80:70:f1:71:54:55:30: 8a:91:a5:b6:4d:b3:fe:53:7e:b8:39:95:82:0d:8b: 05:a5:af:3b:21:8c:60:96:42:28:a1:e6:a7:77:5a: 1e:d3:0c:c1:e0:b1:c7:f4:6a:47:09:d6:55:0f:2e: 38:eb:d3:ab:5b:14:b2:e6:39:1e:15:d6:b7:0f:3d: 02:5a:3b:b9:6a:67:ff:78:30:f1:5f:74:61:33:1a: c5:49:27:a1:d8:f1:e2:44:fa:b6:6b:43:bf:5d:86: 72:c1:56:dc:3b:d5:82:e9:7a:b4:f6:bd:8b:85:d2: d8:82:21:f4:2f:5d:ac:0b:18:5f:5b:6f:a6:2d:af: 7e:a2:6d:af:c6:85:cf:84:93:ce:6d:43:b6:de:54: 59:8f:28:fa:0a:8b:7c:13:48:61:a0:ac:54:89:ff: d9:8c:54:58:28:b9:df:09:e3:7d:a5:68:bc:93:66: 1d:fc:3f:f2:f3:97:f8:e1:04:68:d7:78:45:37:98: 74:34:27:c8:8e:6d:14:75:e7:fd:24:6a:08:8e:74: 01:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:01:6D:13:C7:A1:D0:F3:73:DB:B4:9C:6A:F4:5D:1C:A3:A9:F7:65 X509v3 Authority Key Identifier: keyid:D3:D7:83:EE:4C:69:BB:50:63:FB:5C:F5:B2:62:8B:C7:BE:C3:74:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/09eD7kxpu1Bj-1z1smKLx77DdIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:63:78:c3:21:a0:97:10:65:ec:4e:08:27:2a:21:41:05:a0: b1:66:69:ad:39:10:03:8b:a9:03:ce:90:97:2a:40:d2:d3:e4: d6:d2:ce:c2:4e:48:30:ae:23:19:fb:51:e3:cc:89:7e:8b:88: 55:24:b2:87:0c:1e:5b:5c:86:4d:d3:5b:83:8a:04:e0:f4:0f: 03:c3:67:b5:6a:c1:44:eb:0f:c4:bd:94:77:ee:7a:fc:47:fd: 6f:87:06:6d:c3:39:54:73:f6:23:25:f0:4b:47:ac:79:09:00: a7:6d:64:93:e6:e0:f4:e2:58:03:d1:a0:19:cc:97:b0:9d:e8: 89:0e:37:f1:69:dd:e0:f0:c4:bf:51:99:b7:a8:81:54:cc:01: ae:a0:65:44:35:f4:ec:99:f8:47:ff:5f:c4:3e:ab:2a:3f:df: de:90:e1:e2:be:1f:37:3d:3b:fa:b5:37:3e:54:54:99:99:53: 6e:b7:51:d0:a8:bd:bc:68:12:76:df:0b:1a:66:a1:81:d4:00: 1d:42:14:30:47:ca:c6:79:ea:2f:df:83:22:31:6b:64:a5:4b: bd:9b:f9:e8:23:43:27:a2:0f:1b:3d:ee:7a:74:ee:b5:fd:9e: 28:a0:04:cc:99:c4:89:ad:84:46:48:73:a2:f5:7e:51:4e:d9: c8:a0:48:e9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC OUE3NzExMC8GA1UEBRMoRDNENzgzRUU0QzY5QkI1MDYzRkI1Q0Y1QjI2MjhCQzdC RUMzNzQ4QTAeFw0yNTA0MjcwMTE4MjdaFw0yNTA1MDQwMTE4MjdaMBgxFjAUBgNV BAMTDTY4MGQ4NWUzLTA5MzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCmd+ZOO2m38gEgtOe+rUwV6OK74yIDZS8MnIaaTQFVy5wMMAAoa5Hkc+pmXlGn P9JJSCdBgHDxcVRVMIqRpbZNs/5Tfrg5lYINiwWlrzshjGCWQiih5qd3Wh7TDMHg scf0akcJ1lUPLjjr06tbFLLmOR4V1rcPPQJaO7lqZ/94MPFfdGEzGsVJJ6HY8eJE +rZrQ79dhnLBVtw71YLperT2vYuF0tiCIfQvXawLGF9bb6Ytr36iba/Ghc+Ek85t Q7beVFmPKPoKi3wTSGGgrFSJ/9mMVFgoud8J432laLyTZh38P/Lzl/jhBGjXeEU3 mHQ0J8iObRR15/0kagiOdAG5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqAFtE8eh 0PNz27ScavRdHKOp92UwHwYDVR0jBBgwFoAU09eD7kxpu1Bj+1z1smKLx77DdIow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI5QTc3L0FCODUzNDQwN0Ez RjExRUZBMUMwRTAxNkM0RjlBRTAyLzA5ZUQ3a3hwdTFCai0xejFzbUtMeDc3RGRJ by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMDllRDdreHB1MUJqLTF6MXNtS0x4NzdEZElvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI5 QTc3L0FCODUzNDQwN0EzRjExRUZBMUMwRTAxNkM0RjlBRTAyLzA5ZUQ3a3hwdTFC ai0xejFzbUtMeDc3RGRJby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADVjeMMhoJcQZexOCCcqIUEFoLFmaa05EAOLqQPOkJcqQNLT5NbSzsJO SDCuIxn7UePMiX6LiFUksocMHltchk3TW4OKBOD0DwPDZ7VqwUTrD8S9lHfuevxH /W+HBm3DOVRz9iMl8EtHrHkJAKdtZJPm4PTiWAPRoBnMl7Cd6IkON/Fp3eDwxL9R mbeogVTMAa6gZUQ19OyZ+Ef/X8Q+qyo/396Q4eK+Hzc9O/q1Nz5UVJmZU263UdCo vbxoEnbfCxpmoYHUAB1CFDBHysZ56i/fgyIxa2SlS72b+egjQyeiDxs97np07rX9 niigBMyZxImthEZIc6L1flFO2cigSOk= -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:08 2025 by rpki-client on console.sobornost.net