$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft File: -9GoSKH4mo0k2wtoF6CH-y313wg.mft (raw, json) Hash identifier: pGhC2UOZniZC2p6h+EVfpf7WKc4kKeGAu1NZxRXWOeE= Subject key identifier: E1:34:FE:D9:1E:ED:9B:72:53:4E:4A:5A:5C:79:4A:76:21:13:34:8A Authority key identifier: FB:D1:A8:48:A1:F8:9A:8D:24:DB:0B:68:17:A0:87:FB:2D:F5:DF:08 Certificate issuer: /CN=A91BAFCE/serialNumber=FBD1A848A1F89A8D24DB0B6817A087FB2DF5DF08 Certificate serial: 019C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9GoSKH4mo0k2wtoF6CH-y313wg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft Manifest number: 0199 Signing time: Sun 27 Apr 2025 02:24:47 +0000 Manifest this update: Sun 27 Apr 2025 02:24:47 +0000 Manifest next update: Sun 04 May 2025 02:24:47 +0000 Files and hashes: 1: -9GoSKH4mo0k2wtoF6CH-y313wg.crl (hash: gpIhatRGkEvEyhtgdFRHyW6xM99ccsLPsjbeO+lGpKs=) 2: 37C8FE80B2A211ED9A5C4B53C4F9AE02.roa (hash: RFveBx12nYjQL7C6dI7Z0G+EUk4Kgzyh1OTU3yziD98=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.crl rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9GoSKH4mo0k2wtoF6CH-y313wg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:24:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 412 (0x19c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAFCE, serialNumber=FBD1A848A1F89A8D24DB0B6817A087FB2DF5DF08 Validity Not Before: Apr 27 02:24:47 2025 GMT Not After : May 4 02:24:47 2025 GMT Subject: CN=680d956f-044f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c6:26:2c:55:42:8d:44:06:9e:56:f9:04:ba: 87:48:9c:8a:80:0a:f7:b4:d8:20:e9:16:92:b4:af: 70:9d:b7:d8:4c:45:1c:61:f8:68:f2:4b:91:97:d1: eb:00:fc:ef:af:fa:a9:a1:e8:59:f0:2e:04:8b:0e: 88:36:c8:7a:d3:53:e9:e7:b2:67:86:26:6b:67:f1: 1a:c2:59:75:fa:3f:bd:88:60:1a:e7:94:37:0b:26: dd:5f:1c:4a:eb:fc:d6:cd:82:c7:c3:de:f8:cc:34: e0:5e:70:09:13:b4:3f:c1:67:5a:2a:11:5c:27:32: 09:85:2e:55:ad:1d:e0:55:78:2a:fa:dd:ff:20:a3: 52:6d:d3:83:47:62:0f:62:2b:16:5d:c9:ea:25:f3: 1e:5d:4f:b3:ec:f2:73:ed:e2:a3:c2:a9:ff:c4:ed: 95:f5:b2:84:94:e2:85:28:e0:fc:77:af:85:66:0f: 7b:78:a1:31:dd:10:9e:61:39:e3:e6:cc:47:1f:3d: 40:b6:f3:3b:bd:54:22:d5:f5:97:08:e9:c7:ea:05: 75:39:8c:9a:d7:97:85:26:71:a3:b7:cf:65:ad:94: 7f:54:bc:3c:8a:68:95:45:69:53:cc:9e:9b:a1:b5: 10:fa:9d:70:4d:17:11:20:5a:87:4a:15:b6:cb:02: f5:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:34:FE:D9:1E:ED:9B:72:53:4E:4A:5A:5C:79:4A:76:21:13:34:8A X509v3 Authority Key Identifier: keyid:FB:D1:A8:48:A1:F8:9A:8D:24:DB:0B:68:17:A0:87:FB:2D:F5:DF:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9GoSKH4mo0k2wtoF6CH-y313wg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:27:ee:10:c2:71:9d:82:b5:1f:1b:5e:4b:0f:73:1d:8d:75: 80:11:48:3a:62:d2:22:cc:bc:3a:97:2d:21:ab:5d:b2:8f:ae: 48:0e:e9:4f:8a:6f:0d:b1:16:3a:92:f3:f5:07:86:c2:dc:6a: 33:5a:bd:67:b4:47:8b:fa:ad:5a:b4:d3:ed:70:ef:3e:5f:de: cd:8c:f3:2e:7c:35:f5:66:b4:80:f2:a1:8b:00:2f:2f:45:13: f1:48:63:df:fd:ad:7b:25:56:8f:31:d6:3d:b7:69:1c:65:62: 86:93:81:9c:ad:e4:cf:e7:10:6d:a5:b8:b2:8d:7e:d1:15:39: d8:73:2e:5c:d8:e8:85:21:aa:2e:e5:73:79:d2:92:f3:4c:19: d9:f7:bb:b4:1a:37:77:e1:ab:1f:89:9d:5e:71:da:b6:c9:92: bd:07:08:c0:a1:f0:9e:97:84:79:66:7b:99:f0:e8:bf:c5:42: 01:57:ca:83:2d:1c:c2:1d:2f:7b:59:4c:de:e8:24:05:c4:e1: 98:0d:02:cd:5a:77:99:c1:fd:fe:08:db:76:5a:24:80:8e:74: 7d:c7:0f:0d:72:66:b3:00:de:1c:4a:af:bb:1d:d8:69:71:6f: 34:d0:8d:19:f2:34:15:b6:10:b8:19:c3:c9:be:13:f6:64:70: ec:7c:f7:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFGQ0UxMTAvBgNVBAUTKEZCRDFBODQ4QTFGODlBOEQyNERCMEI2ODE3QTA4N0ZC MkRGNURGMDgwHhcNMjUwNDI3MDIyNDQ3WhcNMjUwNTA0MDIyNDQ3WjAYMRYwFAYD VQQDEw02ODBkOTU2Zi0wNDRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt8YmLFVCjUQGnlb5BLqHSJyKgAr3tNgg6RaStK9wnbfYTEUcYfho8kuRl9Hr APzvr/qpoehZ8C4Eiw6INsh601Pp57JnhiZrZ/Eawll1+j+9iGAa55Q3CybdXxxK 6/zWzYLHw974zDTgXnAJE7Q/wWdaKhFcJzIJhS5VrR3gVXgq+t3/IKNSbdODR2IP YisWXcnqJfMeXU+z7PJz7eKjwqn/xO2V9bKElOKFKOD8d6+FZg97eKEx3RCeYTnj 5sxHHz1AtvM7vVQi1fWXCOnH6gV1OYya15eFJnGjt89lrZR/VLw8imiVRWlTzJ6b obUQ+p1wTRcRIFqHShW2ywL1OwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOE0/tke 7ZtyU05KWlx5SnYhEzSKMB8GA1UdIwQYMBaAFPvRqEih+JqNJNsLaBegh/st9d8I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUZDRS8yRDM0QzM5MkIy OUMxMUVEOThBODMxNEFDNEY5QUUwMi8tOUdvU0tING1vMGsyd3RvRjZDSC15MzEz d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy05R29TS0g0bW8wazJ3dG9GNkNILXkzMTN3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUZDRS8yRDM0QzM5MkIyOUMxMUVEOThBODMxNEFDNEY5QUUwMi8tOUdvU0tING1v MGsyd3RvRjZDSC15MzEzd2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHJ+4QwnGdgrUfG15LD3MdjXWAEUg6YtIizLw6ly0hq12yj65IDulP im8NsRY6kvP1B4bC3GozWr1ntEeL+q1atNPtcO8+X97NjPMufDX1ZrSA8qGLAC8v RRPxSGPf/a17JVaPMdY9t2kcZWKGk4GcreTP5xBtpbiyjX7RFTnYcy5c2OiFIaou 5XN50pLzTBnZ97u0Gjd34asfiZ1ecdq2yZK9BwjAofCel4R5ZnuZ8Oi/xUIBV8qD LRzCHS97WUze6CQFxOGYDQLNWneZwf3+CNt2WiSAjnR9xw8NcmazAN4cSq+7Hdhp cW800I0Z8jQVthC4GcPJvhP2ZHDsfPf6 -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:09 2025 by rpki-client on console.sobornost.net