$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.mft File: 6qltynQw36Rxyim4Q4NsHIDlQ54.mft (raw, json) Hash identifier: amJaMj7Z75XAkq1u+oriszI7R1ioZR2kc0RVnYIvh9A= Subject key identifier: FC:18:FC:A1:D7:88:65:E4:E7:F5:39:B1:D1:85:CA:2A:E9:28:7A:5E Authority key identifier: EA:A9:6D:CA:74:30:DF:A4:71:CA:29:B8:43:83:6C:1C:80:E5:43:9E Certificate issuer: /CN=A91BB87C/serialNumber=EAA96DCA7430DFA471CA29B843836C1C80E5439E Certificate serial: 0C86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qltynQw36Rxyim4Q4NsHIDlQ54.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.mft Manifest number: 0C73 Signing time: Mon 28 Apr 2025 18:33:16 +0000 Manifest this update: Mon 28 Apr 2025 18:33:16 +0000 Manifest next update: Mon 05 May 2025 18:33:16 +0000 Files and hashes: 1: 6qltynQw36Rxyim4Q4NsHIDlQ54.crl (hash: DdBAdYmbEU6c/q/Q470ZhF6ROVC0SXif/PsYvKgTZHo=) 2: 5B01916AD15911EE8B8BB151C4F9AE02.roa (hash: exEpVAv7OmSBv6nfn1Ng6Vrt5eD/dXr6N+PdK8CnaV0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.crl rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qltynQw36Rxyim4Q4NsHIDlQ54.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 18:27:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3206 (0xc86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB87C, serialNumber=EAA96DCA7430DFA471CA29B843836C1C80E5439E Validity Not Before: Apr 28 18:33:16 2025 GMT Not After : May 5 18:33:16 2025 GMT Subject: CN=680fc9ec-61b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8a:a3:9d:75:3d:56:16:a9:71:00:ea:07:3c: 11:7a:76:47:bd:fa:02:b8:0e:7a:c5:cc:07:fa:92: 70:8e:6d:dd:35:e0:b8:30:74:c0:f6:eb:13:58:cd: 77:c9:3c:fd:58:32:94:17:2c:80:0f:59:d1:fd:e4: 1f:72:d0:fb:cf:a6:47:c7:25:bb:a4:31:7b:95:56: c5:4d:4d:75:ed:fc:80:98:45:2d:9e:37:e2:f1:a9: 24:1d:45:36:5b:2e:96:a3:d0:49:9a:b6:36:6b:14: 5a:65:84:b5:37:b9:9c:df:0d:f6:e8:c2:0f:1b:5a: 84:a1:03:89:c7:49:56:bf:1b:94:ea:6b:fa:95:c4: 9d:d8:a4:de:81:76:4e:19:05:a5:79:3b:88:9b:68: 95:62:99:01:df:6c:63:06:80:39:2b:1a:98:58:85: 31:d7:3f:3c:46:79:89:3b:c6:e8:90:fa:88:1b:97: 58:60:dc:7c:34:c0:cc:6f:6f:08:68:fe:97:97:4d: e0:1b:8b:d0:fc:00:c3:8c:dc:dc:90:84:93:68:1a: 5b:af:6a:2d:7f:96:08:11:e5:95:79:08:3e:a6:82: e9:57:21:ae:42:e4:5a:dd:07:88:5c:e7:42:f9:f2: 93:41:52:d3:bf:06:4f:50:52:84:96:29:d3:92:55: 65:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:18:FC:A1:D7:88:65:E4:E7:F5:39:B1:D1:85:CA:2A:E9:28:7A:5E X509v3 Authority Key Identifier: keyid:EA:A9:6D:CA:74:30:DF:A4:71:CA:29:B8:43:83:6C:1C:80:E5:43:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qltynQw36Rxyim4Q4NsHIDlQ54.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:53:de:cf:77:92:21:6a:6c:bf:70:24:0a:ae:cb:e6:c0:5d: fc:62:14:10:3a:6d:94:8a:b0:61:50:c1:5b:f3:37:91:91:02: 63:4e:ee:4d:69:18:73:ec:d0:8e:95:a1:1c:e4:6f:50:2c:94: 6e:77:71:67:59:ba:c5:9d:56:d8:bc:31:23:a6:74:96:5e:ae: 53:1d:34:1f:f2:ed:72:34:fb:bf:93:20:d3:56:6b:93:16:90: 2d:65:b4:fc:10:a3:ee:8e:7e:5c:bf:89:4c:77:7a:39:07:4a: 54:80:1a:7a:4e:44:ee:5b:99:6c:9d:66:90:d5:0b:7c:bc:ef: 35:77:50:4c:69:6c:77:22:7d:94:a8:1e:2d:7c:12:24:70:a7: ea:c5:3e:3c:c8:87:ed:9d:9d:ee:f2:64:24:e0:95:1a:e8:e3: 80:0c:f2:ef:ef:f7:86:c5:2c:9a:2a:f3:66:be:f7:2f:8e:e5: 24:fa:b5:d6:69:8d:02:aa:a7:05:1a:68:36:c6:1c:79:c9:1b: b3:cd:2c:4b:0c:bc:ee:27:11:57:5b:0f:a9:be:69:ea:51:6c: b7:56:8b:68:9c:51:e9:e5:75:7a:2e:c7:0b:0e:24:f2:73:72: 09:73:1e:41:01:3d:73:2f:3a:5c:2a:dd:09:f8:33:e5:e7:b0: 28:9b:b8:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI4N0MxMTAvBgNVBAUTKEVBQTk2RENBNzQzMERGQTQ3MUNBMjlCODQzODM2QzFD ODBFNTQzOUUwHhcNMjUwNDI4MTgzMzE2WhcNMjUwNTA1MTgzMzE2WjAYMRYwFAYD VQQDEw02ODBmYzllYy02MWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu4qjnXU9VhapcQDqBzwRenZHvfoCuA56xcwH+pJwjm3dNeC4MHTA9usTWM13 yTz9WDKUFyyAD1nR/eQfctD7z6ZHxyW7pDF7lVbFTU117fyAmEUtnjfi8akkHUU2 Wy6Wo9BJmrY2axRaZYS1N7mc3w326MIPG1qEoQOJx0lWvxuU6mv6lcSd2KTegXZO GQWleTuIm2iVYpkB32xjBoA5KxqYWIUx1z88RnmJO8bokPqIG5dYYNx8NMDMb28I aP6Xl03gG4vQ/ADDjNzckISTaBpbr2otf5YIEeWVeQg+poLpVyGuQuRa3QeIXOdC +fKTQVLTvwZPUFKElinTklVlmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPwY/KHX iGXk5/U5sdGFyirpKHpeMB8GA1UdIwQYMBaAFOqpbcp0MN+kccopuEODbByA5UOe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjg3Qy82M0Q5MDMxMkZD MDIxMUU5QTQxOUYzNDBDNEY5QUUwMi82cWx0eW5RdzM2Unh5aW00UTROc0hJRGxR NTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZxbHR5blF3MzZSeHlpbTRRNE5zSElEbFE1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Qjg3Qy82M0Q5MDMxMkZDMDIxMUU5QTQxOUYzNDBDNEY5QUUwMi82cWx0eW5RdzM2 Unh5aW00UTROc0hJRGxRNTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDU97Pd5Ihamy/cCQKrsvmwF38YhQQOm2UirBhUMFb8zeRkQJjTu5N aRhz7NCOlaEc5G9QLJRud3FnWbrFnVbYvDEjpnSWXq5THTQf8u1yNPu/kyDTVmuT FpAtZbT8EKPujn5cv4lMd3o5B0pUgBp6TkTuW5lsnWaQ1Qt8vO81d1BMaWx3In2U qB4tfBIkcKfqxT48yIftnZ3u8mQk4JUa6OOADPLv7/eGxSyaKvNmvvcvjuUk+rXW aY0CqqcFGmg2xhx5yRuzzSxLDLzuJxFXWw+pvmnqUWy3VotonFHp5XV6LscLDiTy c3IJcx5BAT1zLzpcKt0J+DPl57Aom7gk -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:56 2025 by rpki-client on console.sobornost.net