$ rpki-client -vvf rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft File: r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft (raw, json) Hash identifier: 0WS69qGH93IAprtRQ+7yXzYgA8etz4Z408zpZ2ntjMk= Subject key identifier: F7:97:F1:D7:F5:FC:EF:C6:09:CA:94:DE:52:E0:ED:9C:CE:46:2C:E9 Authority key identifier: AF:C3:17:47:67:E4:EA:FC:4D:EE:0F:49:25:A1:C6:5C:DC:59:FA:2A Certificate issuer: /CN=A91C064C/serialNumber=AFC3174767E4EAFC4DEE0F4925A1C65CDC59FA2A Certificate serial: 0127 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8MXR2fk6vxN7g9JJaHGXNxZ-io.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft Manifest number: 0123 Signing time: Fri 25 Apr 2025 03:47:23 +0000 Manifest this update: Fri 25 Apr 2025 03:47:22 +0000 Manifest next update: Fri 02 May 2025 03:47:22 +0000 Files and hashes: 1: r8MXR2fk6vxN7g9JJaHGXNxZ-io.crl (hash: SoZ0u0lLyPeHcgvFVGS0lvxxvV4F46QybGEuFCuJ/Ag=) 2: 583FA34E672E11EEB31AC02CC4F9AE02.roa (hash: UDY5XZZpboPOe4PuKIjoZcv8Z+maPhsL8V3N8OWNJu4=) 3: 810B798472CC11EEA1A5574DC4F9AE02.roa (hash: QxDb9utS5i/B8urK72tRRFJFcT0cVUwBUSamNqzNfT0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.crl rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8MXR2fk6vxN7g9JJaHGXNxZ-io.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 295 (0x127) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C064C, serialNumber=AFC3174767E4EAFC4DEE0F4925A1C65CDC59FA2A Validity Not Before: Apr 25 03:47:22 2025 GMT Not After : May 2 03:47:22 2025 GMT Subject: CN=680b05ca-9b62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bc:0a:81:8b:f1:36:ab:79:79:e1:34:30:f4: b3:73:a6:eb:2a:db:31:30:c4:ca:4e:7f:cd:a0:86: e0:a5:aa:49:fe:15:24:81:ed:77:f7:c2:49:e2:df: 89:25:7b:89:af:7a:e3:46:9b:dd:1f:73:90:fb:3e: 24:50:45:0d:76:8c:7e:ca:6c:ae:82:11:37:ab:d5: 13:7e:8f:73:e8:c9:6f:fa:b8:c9:93:7c:2f:61:2b: db:12:04:ea:3f:51:d3:55:94:26:6b:5d:48:b6:34: e9:b7:6f:2a:2e:e9:88:98:3e:9a:4d:dc:3d:dd:e3: ee:df:7d:61:23:3f:23:b3:b7:46:a2:08:e3:78:48: ea:3c:c1:e6:a3:df:62:3a:df:4d:bb:6d:01:cf:bf: 62:e5:7b:81:53:de:ca:cc:fa:8d:15:fe:35:95:b5: f4:48:3a:f2:56:39:45:fc:89:bb:95:aa:5b:63:75: 74:dc:4b:17:ea:86:b0:7b:c5:f2:80:b1:b9:62:51: 93:1c:16:1d:96:ac:af:ff:e0:19:b2:95:b5:33:bc: d5:1e:f1:e4:b3:5a:0c:ea:bd:07:22:17:e7:ce:9c: 5a:f4:34:df:30:3f:ae:26:ca:98:bc:5b:83:1a:08: de:68:c6:50:f2:b7:a2:1e:0b:43:de:3d:4a:0a:f8: 29:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:97:F1:D7:F5:FC:EF:C6:09:CA:94:DE:52:E0:ED:9C:CE:46:2C:E9 X509v3 Authority Key Identifier: keyid:AF:C3:17:47:67:E4:EA:FC:4D:EE:0F:49:25:A1:C6:5C:DC:59:FA:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8MXR2fk6vxN7g9JJaHGXNxZ-io.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:14:e8:c2:53:bd:c3:3a:70:1f:0a:74:c8:48:e5:f2:a7:6a: 4c:72:f2:fe:22:28:6b:0e:49:79:33:69:5d:96:43:80:6f:83: eb:e0:ff:06:2c:e3:0e:8d:66:7d:62:4c:3d:4b:6c:3c:fc:64: ec:e5:cb:61:ef:1e:c0:a7:21:db:88:14:97:89:48:6b:76:d0: f1:b2:c6:17:e3:68:7d:7d:ca:57:e4:2a:07:8a:3e:15:01:08: 43:9f:0a:76:10:d1:a2:a7:0b:50:1a:73:f7:85:49:d7:7b:6d: b9:90:18:c8:28:76:c6:4f:5e:ca:48:26:1e:bb:37:e4:11:85: 34:65:f3:30:e7:84:a8:ef:40:cc:a8:2a:36:aa:24:64:bd:3f: b3:8b:69:50:f1:f7:42:ec:6d:10:6b:ae:c0:81:a2:2e:5d:26: c7:00:53:e7:06:89:68:b8:52:c7:36:44:85:d2:2f:d9:6d:db: 39:00:ec:1f:f2:ed:14:80:0d:8d:3e:b2:25:62:9b:c0:db:c1: cd:94:c0:71:7c:ee:1f:55:1f:01:d7:fd:58:6b:c8:4a:91:6e: 20:cb:1c:55:a3:c3:06:07:f4:2b:7c:30:b0:d3:61:e5:fd:70: b1:fc:ee:b3:1f:fb:ee:9c:18:3e:99:58:2e:ef:9b:86:42:12: f1:7b:bb:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA2NEMxMTAvBgNVBAUTKEFGQzMxNzQ3NjdFNEVBRkM0REVFMEY0OTI1QTFDNjVD REM1OUZBMkEwHhcNMjUwNDI1MDM0NzIyWhcNMjUwNTAyMDM0NzIyWjAYMRYwFAYD VQQDEw02ODBiMDVjYS05YjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtrwKgYvxNqt5eeE0MPSzc6brKtsxMMTKTn/NoIbgpapJ/hUkge1398JJ4t+J JXuJr3rjRpvdH3OQ+z4kUEUNdox+ymyughE3q9UTfo9z6Mlv+rjJk3wvYSvbEgTq P1HTVZQma11ItjTpt28qLumImD6aTdw93ePu331hIz8js7dGogjjeEjqPMHmo99i Ot9Nu20Bz79i5XuBU97KzPqNFf41lbX0SDryVjlF/Im7lapbY3V03EsX6oawe8Xy gLG5YlGTHBYdlqyv/+AZspW1M7zVHvHks1oM6r0HIhfnzpxa9DTfMD+uJsqYvFuD GgjeaMZQ8reiHgtD3j1KCvgpwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPeX8df1 /O/GCcqU3lLg7ZzORizpMB8GA1UdIwQYMBaAFK/DF0dn5Or8Te4PSSWhxlzcWfoq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDY0Qy82ODNDOUQ5ODY3 MkQxMUVFOUM4MDlGMTJDNEY5QUUwMi9yOE1YUjJmazZ2eE43ZzlKSmFIR1hOeFot aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I4TVhSMmZrNnZ4TjdnOUpKYUhHWE54Wi1pby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDY0Qy82ODNDOUQ5ODY3MkQxMUVFOUM4MDlGMTJDNEY5QUUwMi9yOE1YUjJmazZ2 eE43ZzlKSmFIR1hOeFotaW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbFOjCU73DOnAfCnTISOXyp2pMcvL+IihrDkl5M2ldlkOAb4Pr4P8G LOMOjWZ9Ykw9S2w8/GTs5cth7x7ApyHbiBSXiUhrdtDxssYX42h9fcpX5CoHij4V AQhDnwp2ENGipwtQGnP3hUnXe225kBjIKHbGT17KSCYeuzfkEYU0ZfMw54So70DM qCo2qiRkvT+zi2lQ8fdC7G0Qa67AgaIuXSbHAFPnBolouFLHNkSF0i/Zbds5AOwf 8u0UgA2NPrIlYpvA28HNlMBxfO4fVR8B1/1Ya8hKkW4gyxxVo8MGB/QrfDCw02Hl /XCx/O6zH/vunBg+mVgu75uGQhLxe7uQ -----END CERTIFICATE-----Generated at Fri Apr 25 08:25:07 2025 by rpki-client on console.sobornost.net