$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft File: -kF5Yn9bJllOVjA1Ogt3heDWksU.mft (raw, json) Hash identifier: BX+1HjIHY1d9zgubY7OBWoUPhZ+pF5dIZk/IHxTDXro= Subject key identifier: C7:F7:6F:A3:BE:30:05:F1:B5:4D:18:D2:EC:73:33:F8:74:37:D8:23 Authority key identifier: FA:41:79:62:7F:5B:26:59:4E:56:30:35:3A:0B:77:85:E0:D6:92:C5 Certificate issuer: /CN=A91C1621/serialNumber=FA4179627F5B26594E5630353A0B7785E0D692C5 Certificate serial: 34AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-kF5Yn9bJllOVjA1Ogt3heDWksU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft Manifest number: 3493 Signing time: Mon 28 Apr 2025 14:16:13 +0000 Manifest this update: Mon 28 Apr 2025 14:16:13 +0000 Manifest next update: Mon 05 May 2025 14:16:13 +0000 Files and hashes: 1: -kF5Yn9bJllOVjA1Ogt3heDWksU.crl (hash: kKsSldQvcRsVkQ+z2fhgyBq9dRGxLJjeMyPdkwnuyi0=) 2: CDE36D52DB9511E99F3F673EC4F9AE02.roa (hash: zbmIG6CT7ypIn3HcTtsDFC7ihfXsVyZlUb242ctePDw=) 3: BB8F87B4D4B011ECAA427351C4F9AE02.roa (hash: V6xVQh9iUu5NDnwtI8z/zA2tAozAKTEZViih6UdSdQ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.crl rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-kF5Yn9bJllOVjA1Ogt3heDWksU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 14:16:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13482 (0x34aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1621, serialNumber=FA4179627F5B26594E5630353A0B7785E0D692C5 Validity Not Before: Apr 28 14:16:13 2025 GMT Not After : May 5 14:16:13 2025 GMT Subject: CN=680f8dad-fead Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c1:4a:6f:20:40:9f:61:8f:4e:8a:2b:c3:08: a8:a8:e9:1a:6e:15:6c:53:66:73:f0:42:0a:bc:c4: e6:75:05:1f:f1:35:96:9e:18:d3:72:45:87:83:6b: b6:8f:df:e1:b9:a5:a3:dc:0b:72:17:19:e2:61:12: 78:e0:26:9a:3e:b1:72:3e:d6:9e:2e:d0:e5:e2:fa: 0c:e3:8b:51:04:35:86:b1:45:d4:23:b1:b5:7d:ec: eb:ec:f0:c9:5d:76:58:54:7e:eb:cd:8a:9c:5c:7d: 27:44:3d:c9:0c:bb:92:7e:a4:dd:a6:8c:70:8f:85: da:77:81:1c:99:9d:51:0c:e0:30:be:e7:94:98:3b: 96:71:b7:b4:3a:10:71:88:62:4f:64:ae:a6:b1:f7: 68:8c:f0:c8:32:df:09:40:a4:f7:97:db:b6:a4:02: 68:e6:e0:27:a8:2f:95:86:5d:e1:ca:f8:e1:94:35: 46:17:7e:df:29:96:df:b8:92:ba:5e:cf:e4:55:4f: 04:bc:3f:85:3f:78:8b:f1:0f:79:41:53:93:84:e3: 5b:55:66:87:3a:1f:d2:21:4f:b1:0d:31:0c:d7:91: 6e:6f:36:48:c2:b0:9f:fe:a3:0c:bf:ee:7b:d0:7b: 5b:21:66:64:d9:ea:1c:5a:0f:30:3d:c0:7c:4a:19: 5e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:F7:6F:A3:BE:30:05:F1:B5:4D:18:D2:EC:73:33:F8:74:37:D8:23 X509v3 Authority Key Identifier: keyid:FA:41:79:62:7F:5B:26:59:4E:56:30:35:3A:0B:77:85:E0:D6:92:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-kF5Yn9bJllOVjA1Ogt3heDWksU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:95:62:fe:b5:48:db:87:2d:58:27:71:58:61:c5:b8:b5:a6: 41:c9:44:82:19:ce:29:f0:9a:46:c6:df:f2:82:a7:7e:98:6b: a1:eb:65:50:f9:08:dc:d1:3b:0e:20:e8:bf:53:f6:44:9e:d0: 69:c3:23:f0:89:99:da:0b:cc:82:8e:86:96:a5:a9:55:69:7d: b6:0a:c1:fe:f1:84:56:f8:6a:7f:cd:4e:58:d6:37:5f:41:21: ed:b0:e3:9d:52:4b:5c:51:74:d4:db:aa:8d:e1:07:67:90:2c: 26:10:79:2a:d6:3a:7e:38:55:c0:e8:0d:00:8b:03:52:8b:09: a6:cf:42:2e:ac:cb:80:91:7b:7c:6c:73:70:b0:5a:30:91:0c: bf:84:84:31:5f:a6:50:7a:4d:62:5f:2b:9b:1f:7c:6a:d5:ab: 9b:9e:8d:73:b6:61:a5:cc:9b:8e:c0:8d:8b:a5:ef:0b:c1:d9: 7c:d3:9a:ff:f1:6b:93:8b:ea:dd:67:ea:5f:7c:1d:fa:b6:e1: bd:91:19:a6:ed:d9:2f:a7:46:9e:89:4d:36:4b:48:98:a7:bc: da:2f:f8:a1:af:cb:ee:e8:5b:1e:ca:b5:7b:9b:d7:ce:ec:f5: 74:d8:c3:33:b7:25:ca:72:c4:00:4c:95:48:37:ae:4f:7a:ac: c5:04:37:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE2MjExMTAvBgNVBAUTKEZBNDE3OTYyN0Y1QjI2NTk0RTU2MzAzNTNBMEI3Nzg1 RTBENjkyQzUwHhcNMjUwNDI4MTQxNjEzWhcNMjUwNTA1MTQxNjEzWjAYMRYwFAYD VQQDEw02ODBmOGRhZC1mZWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0cFKbyBAn2GPToorwwioqOkabhVsU2Zz8EIKvMTmdQUf8TWWnhjTckWHg2u2 j9/huaWj3AtyFxniYRJ44CaaPrFyPtaeLtDl4voM44tRBDWGsUXUI7G1fezr7PDJ XXZYVH7rzYqcXH0nRD3JDLuSfqTdpoxwj4Xad4EcmZ1RDOAwvueUmDuWcbe0OhBx iGJPZK6msfdojPDIMt8JQKT3l9u2pAJo5uAnqC+Vhl3hyvjhlDVGF37fKZbfuJK6 Xs/kVU8EvD+FP3iL8Q95QVOThONbVWaHOh/SIU+xDTEM15FubzZIwrCf/qMMv+57 0HtbIWZk2eocWg8wPcB8ShlenwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMf3b6O+ MAXxtU0Y0uxzM/h0N9gjMB8GA1UdIwQYMBaAFPpBeWJ/WyZZTlYwNToLd4Xg1pLF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTYyMS85OUQ2OERDRTFE NjkxMUUyQTQ2NDBEQTcwOEIwMkNEMi8ta0Y1WW45YkpsbE9WakExT2d0M2hlRFdr c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1rRjVZbjliSmxsT1ZqQTFPZ3QzaGVEV2tzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTYyMS85OUQ2OERDRTFENjkxMUUyQTQ2NDBEQTcwOEIwMkNEMi8ta0Y1WW45Ykps bE9WakExT2d0M2hlRFdrc1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAglWL+tUjbhy1YJ3FYYcW4taZByUSCGc4p8JpGxt/ygqd+mGuh62VQ +Qjc0TsOIOi/U/ZEntBpwyPwiZnaC8yCjoaWpalVaX22CsH+8YRW+Gp/zU5Y1jdf QSHtsOOdUktcUXTU26qN4QdnkCwmEHkq1jp+OFXA6A0AiwNSiwmmz0IurMuAkXt8 bHNwsFowkQy/hIQxX6ZQek1iXyubH3xq1aubno1ztmGlzJuOwI2Lpe8Lwdl805r/ 8WuTi+rdZ+pffB36tuG9kRmm7dkvp0aeiU02S0iYp7zaL/ihr8vu6FseyrV7m9fO 7PV02MMztyXKcsQATJVIN65PeqzFBDfj -----END CERTIFICATE-----Generated at Mon Apr 28 17:46:02 2025 by rpki-client on console.sobornost.net