$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft File: mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft (raw, json) Hash identifier: TxeZOm3qV1TE2TBWBn93/3ldOEWP4h6mo0Ln5jyY1yo= Subject key identifier: 7F:F2:F1:C4:1F:2B:52:D9:92:A7:68:E7:45:B0:1D:E2:A4:ED:03:F7 Authority key identifier: 98:9F:89:D6:8C:86:83:4A:F8:2D:9D:27:D1:6E:55:C0:9A:6E:F7:BC Certificate issuer: /CN=A91BE6D3/serialNumber=989F89D68C86834AF82D9D27D16E55C09A6EF7BC Certificate serial: 048F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft Manifest number: 048A Signing time: Sat 26 Apr 2025 23:40:52 +0000 Manifest this update: Sat 26 Apr 2025 23:40:51 +0000 Manifest next update: Sat 03 May 2025 23:40:51 +0000 Files and hashes: 1: mJ-J1oyGg0r4LZ0n0W5VwJpu97w.crl (hash: rwOZ9h+h4/T1mjaUwYz/JOSeQCcKLarWKh/StW0sAV4=) 2: FB782FD2721311EE8754E20FC4F9AE02.roa (hash: vSYCfM+ntYW7G9aAaLxoQnL6y+A35VWVI2iBiGFSPJA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.crl rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 23:40:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1167 (0x48f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE6D3, serialNumber=989F89D68C86834AF82D9D27D16E55C09A6EF7BC Validity Not Before: Apr 26 23:40:51 2025 GMT Not After : May 3 23:40:51 2025 GMT Subject: CN=680d6f03-a21d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2f:71:43:fb:83:ca:73:c9:ce:8a:de:0e:0a: 27:a5:eb:3c:aa:40:9c:da:25:ba:69:b6:3b:21:1e: a0:37:ea:65:e5:07:e9:33:3a:35:b2:b3:87:b4:09: c3:01:42:ed:ee:09:2e:d9:a4:f4:0e:fc:9b:46:0a: 34:4c:8c:ac:38:ff:45:4d:f2:34:4c:4f:d4:08:ee: fc:d1:62:95:bd:ec:cd:54:03:dd:39:f9:8e:53:1d: 07:11:c1:e1:f0:b7:dd:88:7b:bd:09:6a:37:4b:25: 33:d3:54:ea:dd:63:4c:d2:aa:81:2d:84:15:9a:92: 57:44:bd:53:43:f5:05:e7:3c:0b:b3:55:ca:8f:de: bd:bb:13:75:13:6b:aa:8c:38:47:6e:b7:9c:4c:f8: ba:b1:25:b9:6f:38:34:95:8e:f1:94:a1:5c:47:ec: 17:86:b0:bb:7a:fe:48:07:01:ea:95:49:28:60:86: 6d:57:80:20:fe:c7:bb:a7:b5:dc:6a:64:0d:6c:2a: 2f:5a:d4:c9:54:1c:1d:02:36:b7:04:03:34:bf:55: ab:f0:a9:62:d6:9d:7d:a7:16:ce:d8:6a:ad:4e:99: b6:00:dd:0c:e5:c3:d5:8e:ae:18:99:44:e2:9e:96: dc:fa:56:5f:10:54:b5:cc:ff:bf:27:20:7f:4a:5e: 05:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:F2:F1:C4:1F:2B:52:D9:92:A7:68:E7:45:B0:1D:E2:A4:ED:03:F7 X509v3 Authority Key Identifier: keyid:98:9F:89:D6:8C:86:83:4A:F8:2D:9D:27:D1:6E:55:C0:9A:6E:F7:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:32:e7:d8:8d:9b:9e:76:18:93:06:92:cc:ae:59:62:55:20: 63:93:cd:8c:31:58:0d:99:24:90:36:7d:ef:7b:da:9c:2b:c0: d9:9c:1c:8d:35:a7:86:08:3d:1a:c3:0b:1c:5f:a7:d8:08:3b: 0a:cf:3c:dd:b0:e7:10:d4:f5:65:60:ea:9a:17:3e:0c:81:fc: 2d:26:d7:a5:d2:eb:f9:ce:00:1d:67:cf:98:0f:48:45:2b:61: 88:4c:f2:d9:9a:25:9d:b9:7a:2b:c3:a4:f6:36:77:3f:21:40: 42:35:94:0d:6c:5a:3d:0a:60:51:5b:02:75:48:d9:98:9c:26: 76:02:77:af:60:81:60:74:23:bc:44:62:49:ce:f6:7a:f6:b8: 1d:4b:92:e6:bc:49:9f:db:a6:0e:3f:60:36:75:73:25:c9:1e: 37:46:b3:0f:f9:c8:cd:83:9f:ff:e8:0f:48:27:29:e2:78:2a: 63:8d:b7:12:ad:68:0c:d3:28:a9:d9:c6:a5:90:02:e0:88:bf: 67:62:fb:38:99:dc:ed:21:48:67:9f:12:25:5d:85:73:b2:b0: a3:72:ef:ed:e5:3c:b9:cb:46:d1:13:17:bc:93:41:97:62:51: f5:7e:2b:73:14:73:e2:0b:3a:48:28:ed:45:61:1e:6d:61:51: b2:54:32:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkU2RDMxMTAvBgNVBAUTKDk4OUY4OUQ2OEM4NjgzNEFGODJEOUQyN0QxNkU1NUMw OUE2RUY3QkMwHhcNMjUwNDI2MjM0MDUxWhcNMjUwNTAzMjM0MDUxWjAYMRYwFAYD VQQDEw02ODBkNmYwMy1hMjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1y9xQ/uDynPJzoreDgonpes8qkCc2iW6abY7IR6gN+pl5QfpMzo1srOHtAnD AULt7gku2aT0DvybRgo0TIysOP9FTfI0TE/UCO780WKVvezNVAPdOfmOUx0HEcHh 8LfdiHu9CWo3SyUz01Tq3WNM0qqBLYQVmpJXRL1TQ/UF5zwLs1XKj969uxN1E2uq jDhHbrecTPi6sSW5bzg0lY7xlKFcR+wXhrC7ev5IBwHqlUkoYIZtV4Ag/se7p7Xc amQNbCovWtTJVBwdAja3BAM0v1Wr8Kli1p19pxbO2GqtTpm2AN0M5cPVjq4YmUTi npbc+lZfEFS1zP+/JyB/Sl4FmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH/y8cQf K1LZkqdo50WwHeKk7QP3MB8GA1UdIwQYMBaAFJifidaMhoNK+C2dJ9FuVcCabve8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTZEMy9FRjkzODM1QTM3 OTIxMUVDOUM2QzlCNjlDNEY5QUUwMi9tSi1KMW95R2cwcjRMWjBuMFc1VndKcHU5 N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21KLUoxb3lHZzByNExaMG4wVzVWd0pwdTk3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTZEMy9FRjkzODM1QTM3OTIxMUVDOUM2QzlCNjlDNEY5QUUwMi9tSi1KMW95R2cw cjRMWjBuMFc1VndKcHU5N3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvMufYjZuedhiTBpLMrlliVSBjk82MMVgNmSSQNn3ve9qcK8DZnByN NaeGCD0awwscX6fYCDsKzzzdsOcQ1PVlYOqaFz4MgfwtJtel0uv5zgAdZ8+YD0hF K2GITPLZmiWduXorw6T2Nnc/IUBCNZQNbFo9CmBRWwJ1SNmYnCZ2AnevYIFgdCO8 RGJJzvZ69rgdS5LmvEmf26YOP2A2dXMlyR43RrMP+cjNg5//6A9IJynieCpjjbcS rWgM0yip2calkALgiL9nYvs4mdztIUhnnxIlXYVzsrCjcu/t5Ty5y0bRExe8k0GX YlH1fitzFHPiCzpIKO1FYR5tYVGyVDKQ -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:09 2025 by rpki-client on console.sobornost.net