$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft File: xE8qyrKneZlDFaqTsyPam0dce5o.mft (raw, json) Hash identifier: Rk3bmsEVwovspZGxvfhQ1BEpMk9msovd3J3VedYihL0= Subject key identifier: AE:92:0A:5F:23:BD:64:46:61:29:6A:70:98:CB:8F:10:63:B0:14:7A Authority key identifier: C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A Certificate issuer: /CN=A91BDCF1/serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A Certificate serial: 0396 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft Manifest number: 037F Signing time: Sun 27 Apr 2025 00:35:44 +0000 Manifest this update: Sun 27 Apr 2025 00:35:44 +0000 Manifest next update: Sun 04 May 2025 00:35:44 +0000 Files and hashes: 1: xE8qyrKneZlDFaqTsyPam0dce5o.crl (hash: naeQ3Bd1BnAGG6IbXaU15Hp/yi0RiMSlNqjsy+SVkKQ=) 2: 9ED423000B1211F08F4E1E7EC4F9AE02.roa (hash: 28RTGOVxaiYLARwHZ0Std1aK28GFPOrIsqNmVkJG6o8=) 3: 25985D28EE1411EFB4908431C4F9AE02.roa (hash: GsEWcWV51pwlPsxUODRoLwLibcUDu1FJ1giEHi8eZSw=) 4: 566BECC8EE1711EFB60E2F5CC4F9AE02.roa (hash: U6f6OEgNO9G7tnJE8PE9Soyl3bJOGu5+tt1ALRGB7dY=) 5: 4643A5E4703011EFA1A7CB20C4F9AE02.roa (hash: yVBPXlVIAQw/ZmFOINJVHLvyhTZymOOpSW7Tn3kbZWk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 00:35:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 918 (0x396) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDCF1, serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A Validity Not Before: Apr 27 00:35:44 2025 GMT Not After : May 4 00:35:44 2025 GMT Subject: CN=680d7be0-6c92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:96:a8:f1:aa:d8:f2:1c:bb:8a:87:2d:f5:b4: 6c:eb:48:47:4d:97:19:0a:c7:a6:65:75:97:c2:4a: d7:49:09:d0:35:f0:40:ed:31:34:19:ea:77:7c:d7: b2:e4:31:7c:f0:03:40:a1:8f:2d:03:9f:f7:3c:88: 61:3c:51:02:fc:2c:99:4d:78:17:f2:f2:33:15:ec: 79:5e:92:22:6e:55:57:78:d7:04:3a:87:26:fd:87: 63:2e:7f:da:75:70:9a:e3:36:15:ea:b6:ce:1a:06: 31:3d:36:8d:b7:b8:07:8a:7a:0d:48:39:26:54:25: 0f:17:cb:a2:93:1a:63:be:95:f5:c8:f5:8b:68:cc: 10:1f:c3:cc:a4:5d:62:58:82:d1:07:06:27:82:20: e5:8c:91:01:b8:58:c6:f6:5a:09:09:ea:b2:0e:76: 31:d7:e0:4d:c7:7f:74:59:46:fc:36:70:a9:44:3e: c0:b4:b8:01:fa:7c:ea:de:28:46:16:7f:e5:1c:9f: 37:10:91:d4:9f:fe:34:c5:ed:ad:b3:bf:16:23:ef: 9f:bf:03:b7:cd:c1:33:ea:98:ac:fc:e9:3d:72:44: 2d:5b:eb:04:70:69:18:b6:3b:63:94:0a:a7:0e:ff: 97:e9:2b:d8:1f:00:2e:02:8d:b7:6f:30:19:78:d7: 0b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:92:0A:5F:23:BD:64:46:61:29:6A:70:98:CB:8F:10:63:B0:14:7A X509v3 Authority Key Identifier: keyid:C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:7d:db:39:2d:10:92:23:80:ff:76:0b:da:4f:10:84:67:bc: 73:9d:a1:70:aa:60:04:4c:ac:bd:76:82:42:89:f4:90:46:5a: 84:35:92:f4:59:89:fc:8e:69:9e:39:bd:64:b6:cc:b9:0b:1b: be:41:b8:71:16:ed:ce:0a:ed:4a:ed:d4:94:d9:b3:43:3c:eb: 43:1c:e6:ee:eb:5e:9c:f1:c2:02:a8:71:10:25:c0:40:49:5b: 87:58:e0:cf:ee:d5:d8:0c:c5:39:5b:11:97:b0:94:ef:ee:e1: ad:c2:38:4e:fe:b1:eb:eb:ff:55:17:40:b7:e7:53:36:0c:bd: 55:e9:4f:6e:88:70:b9:6a:de:48:1f:3b:da:5a:53:ca:5d:22: 99:3e:e8:11:fa:10:71:0f:b9:de:60:9c:a9:e0:8f:ac:3e:0f: e7:54:c1:96:c8:03:3a:4b:c6:23:bb:f1:41:9e:f0:dd:38:2f: 0f:c3:5b:c0:75:c6:a6:d6:5c:22:b5:dd:23:de:8b:65:67:45: d5:35:ce:d5:33:dc:6a:25:7a:89:dc:f2:eb:b7:b0:3d:b5:56: 20:4d:ab:03:87:4e:4e:11:cd:2b:18:82:9c:98:7b:79:53:ad: 61:84:49:33:c8:ff:c6:af:32:67:a3:c6:b6:57:1e:b6:9d:35: 78:69:15:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRDRjExMTAvBgNVBAUTKEM0NEYyQUNBQjJBNzc5OTk0MzE1QUE5M0IzMjNEQTlC NDc1QzdCOUEwHhcNMjUwNDI3MDAzNTQ0WhcNMjUwNTA0MDAzNTQ0WjAYMRYwFAYD VQQDEw02ODBkN2JlMC02YzkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZao8arY8hy7ioct9bRs60hHTZcZCsemZXWXwkrXSQnQNfBA7TE0Gep3fNey 5DF88ANAoY8tA5/3PIhhPFEC/CyZTXgX8vIzFex5XpIiblVXeNcEOocm/YdjLn/a dXCa4zYV6rbOGgYxPTaNt7gHinoNSDkmVCUPF8uikxpjvpX1yPWLaMwQH8PMpF1i WILRBwYngiDljJEBuFjG9loJCeqyDnYx1+BNx390WUb8NnCpRD7AtLgB+nzq3ihG Fn/lHJ83EJHUn/40xe2ts78WI++fvwO3zcEz6pis/Ok9ckQtW+sEcGkYtjtjlAqn Dv+X6SvYHwAuAo23bzAZeNcLtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK6SCl8j vWRGYSlqcJjLjxBjsBR6MB8GA1UdIwQYMBaAFMRPKsqyp3mZQxWqk7Mj2ptHXHua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRENGMS9FQjU5MTEyMkE4 M0MxMUVDQTNBNEYzMjVDNEY5QUUwMi94RThxeXJLbmVabERGYXFUc3lQYW0wZGNl NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hFOHF5cktuZVpsREZhcVRzeVBhbTBkY2U1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RENGMS9FQjU5MTEyMkE4M0MxMUVDQTNBNEYzMjVDNEY5QUUwMi94RThxeXJLbmVa bERGYXFUc3lQYW0wZGNlNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEfds5LRCSI4D/dgvaTxCEZ7xznaFwqmAETKy9doJCifSQRlqENZL0 WYn8jmmeOb1ktsy5Cxu+QbhxFu3OCu1K7dSU2bNDPOtDHObu616c8cICqHEQJcBA SVuHWODP7tXYDMU5WxGXsJTv7uGtwjhO/rHr6/9VF0C351M2DL1V6U9uiHC5at5I HzvaWlPKXSKZPugR+hBxD7neYJyp4I+sPg/nVMGWyAM6S8Yju/FBnvDdOC8Pw1vA dcam1lwitd0j3otlZ0XVNc7VM9xqJXqJ3PLrt7A9tVYgTasDh05OEc0rGIKcmHt5 U61hhEkzyP/GrzJno8a2Vx62nTV4aRWj -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:09 2025 by rpki-client on console.sobornost.net