$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft File: Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft (raw, json) Hash identifier: qRGO3ul01GDpeH+QYr9d4lFxw3WGzE1RF2OYCXE2VeM= Subject key identifier: 33:8C:D9:D5:E9:57:9B:C2:B4:92:41:E6:63:14:9B:5F:B1:AD:89:4A Authority key identifier: 42:9E:9B:DD:A2:96:62:00:03:CE:C5:EF:AB:B8:23:D3:03:FE:4F:71 Certificate issuer: /CN=A91BE1BC/serialNumber=429E9BDDA296620003CEC5EFABB823D303FE4F71 Certificate serial: 1016 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qp6b3aKWYgADzsXvq7gj0wP-T3E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft Manifest number: 1001 Signing time: Mon 28 Apr 2025 17:41:10 +0000 Manifest this update: Mon 28 Apr 2025 17:41:10 +0000 Manifest next update: Mon 05 May 2025 17:41:10 +0000 Files and hashes: 1: Qp6b3aKWYgADzsXvq7gj0wP-T3E.crl (hash: 7RmPM9xqT7T2hW4TqSg1f8bBEAlbJlgvovWJmZnRGd8=) 2: 58FDD2EA10C211EA977E7378C4F9AE02.roa (hash: ZNHHRF85+z4Is0+eLKcAwqdcHd29O7GXMUqQBRk0J/w=) 3: 8C2FEEE0708811ED95A9DC75C4F9AE02.roa (hash: N1sk6XLj5xgH93qOL/I5QuR42p2aQ914FnE3hKMRCac=) 4: 8B7BDC02708811ED95A9DC75C4F9AE02.roa (hash: 9+Gtcwt1HizyRVjiJLATuFRgohbLeetX6+Rnfri/zZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.crl rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qp6b3aKWYgADzsXvq7gj0wP-T3E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 17:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4118 (0x1016) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE1BC, serialNumber=429E9BDDA296620003CEC5EFABB823D303FE4F71 Validity Not Before: Apr 28 17:41:10 2025 GMT Not After : May 5 17:41:10 2025 GMT Subject: CN=680fbdb6-be60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:17:f4:9d:50:b1:ea:c7:d0:f3:f7:59:e3:cd: 56:e6:23:94:4d:ae:6c:5f:1c:e2:5a:db:72:bf:7b: 08:1a:8a:d4:b1:d0:10:77:a5:5e:a9:47:c9:16:d5: bb:1a:47:47:8c:68:e6:0f:65:1b:23:c9:d5:54:13: bc:86:56:4f:eb:84:29:05:2c:a6:de:f8:bf:f7:38: 81:61:db:c7:6d:c0:12:08:36:0d:d4:b3:7e:4c:75: ee:2a:72:f8:21:6f:3e:cd:ba:25:ca:29:78:5f:2d: c2:90:2a:ba:61:9b:92:2a:91:02:95:d9:ad:16:7a: 06:88:bd:70:9a:58:f8:d9:7b:aa:37:e3:19:24:cf: 92:f4:cd:00:df:5e:86:20:da:e2:47:e1:d1:b7:a3: d1:7c:94:ef:f1:5c:fb:5a:48:22:41:e8:57:46:31: 8d:a8:cb:ba:da:8d:cf:bf:fc:85:6b:0f:8d:b2:1d: e2:ff:ec:eb:a5:b5:14:61:31:18:0a:90:f4:87:69: 8e:f2:d4:33:e9:c9:c2:45:9d:35:1a:2e:84:e3:68: c8:2b:eb:30:63:d7:56:66:1e:28:25:a4:cf:67:f2: 7b:cd:06:2b:e9:27:fa:00:e4:bd:3a:5a:03:0c:f0: 86:de:db:24:41:13:fd:e2:b2:ae:8a:33:8d:dd:70: 05:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:8C:D9:D5:E9:57:9B:C2:B4:92:41:E6:63:14:9B:5F:B1:AD:89:4A X509v3 Authority Key Identifier: keyid:42:9E:9B:DD:A2:96:62:00:03:CE:C5:EF:AB:B8:23:D3:03:FE:4F:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qp6b3aKWYgADzsXvq7gj0wP-T3E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:5e:08:f5:ee:35:99:52:42:3f:54:a1:87:82:22:ca:7e:6c: 86:8d:f7:d2:5a:05:38:25:f6:bf:d7:b3:9e:1d:06:e9:6b:ab: b4:87:b9:f3:85:07:de:3c:3a:86:2e:36:bd:bf:66:89:1f:b8: 1a:3d:55:c0:c1:08:90:05:8d:f9:c0:25:32:f1:b2:ef:c8:74: 2f:99:a2:4f:bc:7c:5b:20:d7:bf:23:4f:6e:d7:08:43:48:5f: 5c:3b:c8:0e:5a:27:f6:bf:52:4b:f1:8d:e6:3b:37:a0:2d:f2: 2b:c2:11:fc:15:8e:6e:5c:9d:a5:1b:ee:fe:ae:62:3d:fb:dc: 12:bc:a8:fa:2f:02:b9:fb:df:21:38:81:fc:ee:c2:ca:5e:d5: 81:32:d2:f8:b6:ca:4f:3b:87:15:1c:69:a5:87:f3:de:d9:1b: e7:05:bb:e4:45:3d:7b:d4:26:d5:1b:71:ac:5c:46:a5:e2:e3: 68:0c:91:f2:db:e1:fd:a9:e2:76:00:74:c8:5d:c9:f0:c6:f9: 57:8a:cd:02:f6:07:26:9f:6a:08:3b:c6:3a:bf:02:89:93:0b: b2:b9:37:e7:5c:fa:c5:dc:41:68:b0:e9:27:f9:61:82:7c:6c: 21:73:ca:d3:58:8d:fd:07:19:40:66:e3:a3:b1:f2:45:5f:f3: 15:4c:cb:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEBYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkUxQkMxMTAvBgNVBAUTKDQyOUU5QkREQTI5NjYyMDAwM0NFQzVFRkFCQjgyM0Qz MDNGRTRGNzEwHhcNMjUwNDI4MTc0MTEwWhcNMjUwNTA1MTc0MTEwWjAYMRYwFAYD VQQDEw02ODBmYmRiNi1iZTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Rf0nVCx6sfQ8/dZ481W5iOUTa5sXxziWttyv3sIGorUsdAQd6VeqUfJFtW7 GkdHjGjmD2UbI8nVVBO8hlZP64QpBSym3vi/9ziBYdvHbcASCDYN1LN+THXuKnL4 IW8+zbolyil4Xy3CkCq6YZuSKpECldmtFnoGiL1wmlj42XuqN+MZJM+S9M0A316G INriR+HRt6PRfJTv8Vz7WkgiQehXRjGNqMu62o3Pv/yFaw+Nsh3i/+zrpbUUYTEY CpD0h2mO8tQz6cnCRZ01Gi6E42jIK+swY9dWZh4oJaTPZ/J7zQYr6Sf6AOS9OloD DPCG3tskQRP94rKuijON3XAF1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDOM2dXp V5vCtJJB5mMUm1+xrYlKMB8GA1UdIwQYMBaAFEKem92ilmIAA87F76u4I9MD/k9x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTFCQy84OTZDNkM0ODQ2 Q0UxMUU5OTI4NTBBM0NDNEY5QUUwMi9RcDZiM2FLV1lnQUR6c1h2cTdnajB3UC1U M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FwNmIzYUtXWWdBRHpzWHZxN2dqMHdQLVQzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTFCQy84OTZDNkM0ODQ2Q0UxMUU5OTI4NTBBM0NDNEY5QUUwMi9RcDZiM2FLV1ln QUR6c1h2cTdnajB3UC1UM0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEXgj17jWZUkI/VKGHgiLKfmyGjffSWgU4Jfa/17OeHQbpa6u0h7nz hQfePDqGLja9v2aJH7gaPVXAwQiQBY35wCUy8bLvyHQvmaJPvHxbINe/I09u1whD SF9cO8gOWif2v1JL8Y3mOzegLfIrwhH8FY5uXJ2lG+7+rmI9+9wSvKj6LwK5+98h OIH87sLKXtWBMtL4tspPO4cVHGmlh/Pe2RvnBbvkRT171CbVG3GsXEal4uNoDJHy 2+H9qeJ2AHTIXcnwxvlXis0C9gcmn2oIO8Y6vwKJkwuyuTfnXPrF3EFosOkn+WGC fGwhc8rTWI39BxlAZuOjsfJFX/MVTMtZ -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:56 2025 by rpki-client on console.sobornost.net