$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft File: sunaXrOJa-_A39Wn6zDbKTFLuhI.mft (raw, json) Hash identifier: p+W73HyhFyBACi5G4C9ZRoerFlsEMstj5vTM0VrcZQQ= Subject key identifier: 6C:87:A4:73:77:52:3F:44:E4:B8:9C:2A:0B:74:0E:29:6D:26:05:50 Authority key identifier: B2:E9:DA:5E:B3:89:6B:EF:C0:DF:D5:A7:EB:30:DB:29:31:4B:BA:12 Certificate issuer: /CN=A91BA941/serialNumber=B2E9DA5EB3896BEFC0DFD5A7EB30DB29314BBA12 Certificate serial: 5D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sunaXrOJa-_A39Wn6zDbKTFLuhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft Manifest number: 5A Signing time: Sun 27 Apr 2025 05:59:34 +0000 Manifest this update: Sun 27 Apr 2025 05:59:34 +0000 Manifest next update: Sun 04 May 2025 05:59:34 +0000 Files and hashes: 1: sunaXrOJa-_A39Wn6zDbKTFLuhI.crl (hash: 9Aozyg5drXoLrhk57LGjW5uRs6dsYG7mYp5SkK5cmks=) 2: 083E1314A0A111EF84620260C4F9AE02.roa (hash: 20U7R8Yje/fzXp5s/Ng4KAPvO8aTGVHHdc0Vt45hE8k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.crl rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sunaXrOJa-_A39Wn6zDbKTFLuhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 93 (0x5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA941, serialNumber=B2E9DA5EB3896BEFC0DFD5A7EB30DB29314BBA12 Validity Not Before: Apr 27 05:59:34 2025 GMT Not After : May 4 05:59:34 2025 GMT Subject: CN=680dc7c6-9821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fc:6d:6f:c4:ed:d3:e5:1f:fa:88:b3:e0:e4: 01:78:98:7b:2c:93:ea:98:0e:25:7d:8d:b6:45:93: 57:ba:5e:03:f0:8d:fb:3e:fe:02:37:a1:46:41:f6: 95:f7:0a:61:0c:95:0d:9f:42:7d:f4:5e:18:76:a0: e0:06:ce:fe:e2:a3:dc:26:bf:d9:e3:98:9b:b3:42: 8f:bb:89:05:4c:fb:75:04:e0:6b:91:0b:de:24:dc: 5b:69:d7:f5:7b:a7:5a:5d:d1:80:93:25:f0:ac:fe: e0:37:a7:5f:79:85:58:14:0d:e7:71:58:1c:f1:ef: 78:62:85:9e:2c:7e:a8:7d:8b:f1:88:c0:bc:cc:90: 2f:31:ca:c5:a9:61:bc:cc:ac:83:a9:02:9f:5d:cc: 5e:57:db:95:2f:4b:32:17:a9:96:67:96:50:3a:a3: 0e:f6:f4:0d:b7:6c:a4:39:4c:ae:10:eb:8c:90:38: 48:b4:8f:f3:ea:54:0c:32:f0:51:32:ac:0b:56:c1: d6:bb:af:32:b6:0c:41:8e:f9:9b:c8:a7:ea:a3:79: 85:00:c3:b8:0f:88:75:84:bb:4b:2c:88:4c:c5:ee: 1b:7d:71:2b:ee:8a:63:7b:e1:b3:23:75:ba:c5:e8: 08:43:30:bb:0e:43:0c:a1:be:d9:55:79:d8:ee:88: d9:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:87:A4:73:77:52:3F:44:E4:B8:9C:2A:0B:74:0E:29:6D:26:05:50 X509v3 Authority Key Identifier: keyid:B2:E9:DA:5E:B3:89:6B:EF:C0:DF:D5:A7:EB:30:DB:29:31:4B:BA:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sunaXrOJa-_A39Wn6zDbKTFLuhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:64:a6:26:95:45:22:a8:bb:50:24:7b:9d:c9:e4:72:06:64: b3:81:85:5b:99:0f:85:5d:68:41:d2:73:c7:87:b9:b1:06:90: ed:10:62:54:e0:ac:dd:51:1e:4c:12:18:6a:7b:bc:c3:06:22: b7:d4:98:d9:bc:87:b1:3b:1e:d8:96:c6:12:11:d1:bb:a8:c4: d3:c0:e4:07:ab:f8:08:3e:c8:d0:59:a8:22:7e:46:f7:ae:22: a0:0a:e5:f3:83:ab:bb:9e:94:40:5d:e0:43:b7:01:bb:dc:64: 04:d8:46:61:3c:22:f7:85:b2:b2:84:a8:64:4e:82:c9:e4:34: a0:b6:8d:14:3c:13:02:5b:14:8c:7c:47:88:d1:0f:f1:d3:11: 11:8d:7a:21:c0:29:53:01:06:81:9c:f6:02:7d:3c:be:7f:67: 21:7c:a4:2f:16:49:92:75:b7:09:be:5c:9f:f7:b8:d9:ec:01: 58:46:37:c7:10:18:b8:7e:5a:36:6b:0c:1b:fc:97:66:36:e0: 58:68:e4:7d:87:63:23:ee:3c:cd:9f:cf:cd:e9:84:25:79:cf: 30:18:07:1c:d6:84:96:99:a5:c2:de:fa:79:ce:48:7c:b9:45: b3:61:98:be:af:1e:19:f6:bd:ee:3a:7a:e6:94:2f:8d:2b:d2: 4a:1f:2b:82 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QTk0MTExMC8GA1UEBRMoQjJFOURBNUVCMzg5NkJFRkMwREZENUE3RUIzMERCMjkz MTRCQkExMjAeFw0yNTA0MjcwNTU5MzRaFw0yNTA1MDQwNTU5MzRaMBgxFjAUBgNV BAMTDTY4MGRjN2M2LTk4MjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4/G1vxO3T5R/6iLPg5AF4mHssk+qYDiV9jbZFk1e6XgPwjfs+/gI3oUZB9pX3 CmEMlQ2fQn30Xhh2oOAGzv7io9wmv9njmJuzQo+7iQVM+3UE4GuRC94k3Ftp1/V7 p1pd0YCTJfCs/uA3p195hVgUDedxWBzx73hihZ4sfqh9i/GIwLzMkC8xysWpYbzM rIOpAp9dzF5X25UvSzIXqZZnllA6ow729A23bKQ5TK4Q64yQOEi0j/PqVAwy8FEy rAtWwda7rzK2DEGO+ZvIp+qjeYUAw7gPiHWEu0ssiEzF7ht9cSvuimN74bMjdbrF 6AhDMLsOQwyhvtlVedjuiNnzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbIekc3dS P0TkuJwqC3QOKW0mBVAwHwYDVR0jBBgwFoAUsunaXrOJa+/A39Wn6zDbKTFLuhIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJBOTQxLzkzQUNBQjY0QTBB MDExRUY5MDUyMzI1RkM0RjlBRTAyL3N1bmFYck9KYS1fQTM5V242ekRiS1RGTHVo SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvc3VuYVhyT0phLV9BMzlXbjZ6RGJLVEZMdWhJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJB OTQxLzkzQUNBQjY0QTBBMDExRUY5MDUyMzI1RkM0RjlBRTAyL3N1bmFYck9KYS1f QTM5V242ekRiS1RGTHVoSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALNkpiaVRSKou1Ake53J5HIGZLOBhVuZD4VdaEHSc8eHubEGkO0QYlTg rN1RHkwSGGp7vMMGIrfUmNm8h7E7HtiWxhIR0buoxNPA5Aer+Ag+yNBZqCJ+Rveu IqAK5fODq7uelEBd4EO3AbvcZATYRmE8IveFsrKEqGROgsnkNKC2jRQ8EwJbFIx8 R4jRD/HTERGNeiHAKVMBBoGc9gJ9PL5/ZyF8pC8WSZJ1twm+XJ/3uNnsAVhGN8cQ GLh+WjZrDBv8l2Y24Fho5H2HYyPuPM2fz83phCV5zzAYBxzWhJaZpcLe+nnOSHy5 RbNhmL6vHhn2ve46euaUL40r0kofK4I= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:54 2025 by rpki-client on console.sobornost.net