$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft File: 2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft (raw, json) Hash identifier: RiJ7xgfsZ0Sm43z/6pi3StG4YedHH4HN8DL6BwNEvbs= Subject key identifier: 39:06:48:31:EC:8D:3C:CB:27:43:A3:5D:0A:B3:32:17:94:12:AA:54 Authority key identifier: D8:4B:CD:6C:58:09:27:9B:CB:CC:0A:56:AD:4A:16:83:23:0F:43:3E Certificate issuer: /CN=A91BE374/serialNumber=D84BCD6C5809279BCBCC0A56AD4A1683230F433E Certificate serial: 019F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft Manifest number: 019B Signing time: Sun 27 Apr 2025 02:21:48 +0000 Manifest this update: Sun 27 Apr 2025 02:21:48 +0000 Manifest next update: Sun 04 May 2025 02:21:48 +0000 Files and hashes: 1: 2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl (hash: gserLixfpRixopsSw1kcz81WDrEt7aOljqlWZjqxiO4=) 2: A6CBF914AC3411EDB324F037C4F9AE02.roa (hash: mUitWyAia7OYZSrqATEphyypaSxSHUc51lFfEosaW+E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:21:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 415 (0x19f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE374, serialNumber=D84BCD6C5809279BCBCC0A56AD4A1683230F433E Validity Not Before: Apr 27 02:21:48 2025 GMT Not After : May 4 02:21:48 2025 GMT Subject: CN=680d94bc-d87b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2f:32:fb:fa:4c:db:40:a7:c3:3d:8c:bc:81: 01:2a:10:87:92:47:d1:c7:4a:b4:bc:83:a2:31:1b: 42:69:83:de:c1:55:7d:a1:9f:87:7c:b8:e4:31:9c: 01:ac:c3:0e:0b:6f:43:ea:1b:1d:2a:30:80:f8:7c: ae:2c:b6:fb:9d:58:35:e9:97:86:f2:33:8b:bb:48: a8:f1:d2:da:2b:89:29:65:15:fe:db:63:23:44:a7: e2:65:2c:14:75:8c:7d:e6:14:9d:71:a2:e2:50:cc: 36:b9:31:a2:13:37:3e:0d:5e:97:09:a6:f1:23:d5: cc:0c:d6:25:66:eb:12:ff:4b:7a:f1:58:36:76:f2: 3e:64:b9:91:6d:f5:b7:c2:9a:fa:83:d6:e8:a6:12: 4e:56:bf:dd:31:fe:70:1c:c9:72:ce:a2:e9:c4:f5: 1d:ea:4c:71:de:15:65:96:26:76:b9:04:cd:bb:9e: fd:07:0e:d6:0f:8f:eb:8e:d6:45:96:fd:b0:8c:67: f1:38:fa:5a:83:f7:17:b1:74:31:1d:b4:58:1d:d6: d7:84:b5:9a:76:1d:b9:f3:d7:85:93:7c:16:36:a0: e0:1c:4c:3a:8d:13:78:fc:55:0c:1a:7c:61:a2:1b: 39:17:de:d5:b8:31:97:29:4f:92:e0:e9:40:ed:60: 4c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:06:48:31:EC:8D:3C:CB:27:43:A3:5D:0A:B3:32:17:94:12:AA:54 X509v3 Authority Key Identifier: keyid:D8:4B:CD:6C:58:09:27:9B:CB:CC:0A:56:AD:4A:16:83:23:0F:43:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:fe:c1:2f:ee:89:be:51:57:f1:0b:0f:69:dd:42:a0:c3:2e: 63:4a:06:fb:2f:69:bb:ca:0a:ac:1a:24:06:95:9f:35:16:16: d5:d8:cb:6c:53:e2:3f:6e:f2:d7:64:7e:94:4c:c0:8c:60:71: 7c:59:42:d4:cd:f3:da:47:f2:56:0a:c9:dc:3f:4d:33:5d:09: ac:85:a0:c2:3c:23:d7:13:fb:79:ad:07:3b:6b:d5:01:c6:9e: bf:b7:32:38:b6:d7:ed:ed:6f:e3:39:67:f6:c2:6a:58:e0:1d: c1:41:b1:5f:2b:b1:bc:6d:16:e0:12:0d:31:32:75:75:e6:82: f6:44:3a:96:bf:2b:88:f5:ed:3e:1c:36:0d:82:85:6c:41:d7: 40:75:53:c6:ec:c3:cf:ae:93:6e:8e:bb:77:04:63:f8:5b:71: bb:75:79:99:f1:de:02:2b:26:bd:15:7f:6d:9c:d2:c6:4d:03: 6e:a0:a2:7d:61:34:15:34:09:06:e8:56:f2:c5:fc:02:d0:11: 0a:96:19:53:dd:2e:75:90:2e:78:e9:c6:77:89:5f:c7:dd:66: fe:dd:cd:bf:42:4a:43:7d:00:c6:58:0e:c3:73:84:ab:e2:d5: 94:1e:94:70:d1:d5:b8:5d:13:01:5d:c4:84:ac:a4:b0:22:cf: 1f:f8:6e:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkUzNzQxMTAvBgNVBAUTKEQ4NEJDRDZDNTgwOTI3OUJDQkNDMEE1NkFENEExNjgz MjMwRjQzM0UwHhcNMjUwNDI3MDIyMTQ4WhcNMjUwNTA0MDIyMTQ4WjAYMRYwFAYD VQQDEw02ODBkOTRiYy1kODdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuC8y+/pM20Cnwz2MvIEBKhCHkkfRx0q0vIOiMRtCaYPewVV9oZ+HfLjkMZwB rMMOC29D6hsdKjCA+HyuLLb7nVg16ZeG8jOLu0io8dLaK4kpZRX+22MjRKfiZSwU dYx95hSdcaLiUMw2uTGiEzc+DV6XCabxI9XMDNYlZusS/0t68Vg2dvI+ZLmRbfW3 wpr6g9bophJOVr/dMf5wHMlyzqLpxPUd6kxx3hVlliZ2uQTNu579Bw7WD4/rjtZF lv2wjGfxOPpag/cXsXQxHbRYHdbXhLWadh2589eFk3wWNqDgHEw6jRN4/FUMGnxh ohs5F97VuDGXKU+S4OlA7WBM1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDkGSDHs jTzLJ0OjXQqzMheUEqpUMB8GA1UdIwQYMBaAFNhLzWxYCSeby8wKVq1KFoMjD0M+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTM3NC80MDYwMzU2MkFD MzExMUVEOTI4QjE5MzZDNEY5QUUwMi8yRXZOYkZnSko1dkx6QXBXclVvV2d5TVBR ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJFdk5iRmdKSjV2THpBcFdyVW9XZ3lNUFF6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTM3NC80MDYwMzU2MkFDMzExMUVEOTI4QjE5MzZDNEY5QUUwMi8yRXZOYkZnSko1 dkx6QXBXclVvV2d5TVBRejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCS/sEv7om+UVfxCw9p3UKgwy5jSgb7L2m7ygqsGiQGlZ81FhbV2Mts U+I/bvLXZH6UTMCMYHF8WULUzfPaR/JWCsncP00zXQmshaDCPCPXE/t5rQc7a9UB xp6/tzI4ttft7W/jOWf2wmpY4B3BQbFfK7G8bRbgEg0xMnV15oL2RDqWvyuI9e0+ HDYNgoVsQddAdVPG7MPPrpNujrt3BGP4W3G7dXmZ8d4CKya9FX9tnNLGTQNuoKJ9 YTQVNAkG6FbyxfwC0BEKlhlT3S51kC546cZ3iV/H3Wb+3c2/QkpDfQDGWA7Dc4Sr 4tWUHpRw0dW4XRMBXcSErKSwIs8f+G56 -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:09 2025 by rpki-client on console.sobornost.net