$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft File: AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft (raw, json) Hash identifier: ipnxAzO3MiST5iE2LwW6iaVbzkYaW6Pb7w41ltMidyI= Subject key identifier: C1:A7:FD:B7:01:5B:BD:17:5D:0C:59:23:0D:08:6F:E8:E0:A1:6E:AC Authority key identifier: 01:7D:8D:B8:A7:88:74:AB:2F:9A:D9:7D:E5:7A:FD:E1:BE:16:7D:44 Certificate issuer: /CN=A91C2F8C/serialNumber=017D8DB8A78874AB2F9AD97DE57AFDE1BE167D44 Certificate serial: 69 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft Manifest number: 68 Signing time: Sun 27 Apr 2025 05:47:01 +0000 Manifest this update: Sun 27 Apr 2025 05:47:00 +0000 Manifest next update: Sun 04 May 2025 05:47:00 +0000 Files and hashes: 1: AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl (hash: 29MCXH2Y+BSD6o0erCRJEqglQbbYqw7I8K/4owvJD1A=) 2: CEB2CA5686E011EF81BE1A7FC4F9AE02.roa (hash: 6Kn2Tc8nx8bkTt0Gnf962Qu64Px5Cncotr8SgT4Ke8I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 105 (0x69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2F8C, serialNumber=017D8DB8A78874AB2F9AD97DE57AFDE1BE167D44 Validity Not Before: Apr 27 05:47:00 2025 GMT Not After : May 4 05:47:00 2025 GMT Subject: CN=680dc4d5-d1f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:da:d6:3d:df:65:4a:b4:d6:c6:98:55:20:0c: 3e:17:39:c9:d5:87:e2:8f:a3:dd:1f:93:62:76:3a: 5d:2f:ac:48:43:39:41:1a:3d:c9:e7:a2:8c:c3:7b: 7d:54:49:bd:a8:ac:34:0a:ca:fd:82:d5:16:c6:08: e2:cf:3b:9c:89:98:47:9b:5b:19:29:61:28:ad:be: 1c:d4:8c:a3:85:74:f3:ac:9f:5f:4e:6e:05:a5:28: 5a:c9:f1:42:da:3e:7b:26:c6:37:eb:fe:d8:5d:48: 69:51:ca:05:36:76:30:98:b1:0f:c1:ac:99:1f:45: e0:99:43:7e:d8:97:9a:e5:d5:90:22:c1:d5:3f:11: bc:17:1c:8c:e7:f6:6c:eb:43:86:47:79:fe:9d:02: c5:e3:41:0b:44:b7:ca:90:29:eb:d7:17:e9:d6:a5: 53:b7:34:32:f5:cf:cc:8d:15:2a:fb:5f:a5:27:d4: 5c:47:6b:82:0a:c8:06:49:d5:a1:5e:ac:6a:12:2d: 96:db:22:62:f4:ad:f4:8b:f8:dc:49:74:35:83:6b: 04:f0:23:9e:df:86:d1:e8:9a:ce:fa:8a:6e:33:d0: d8:47:7f:48:5f:21:41:a8:b8:b5:d2:76:f1:62:44: e6:30:d3:9b:60:49:5c:a6:c5:73:39:2a:c0:c5:fc: 69:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:A7:FD:B7:01:5B:BD:17:5D:0C:59:23:0D:08:6F:E8:E0:A1:6E:AC X509v3 Authority Key Identifier: keyid:01:7D:8D:B8:A7:88:74:AB:2F:9A:D9:7D:E5:7A:FD:E1:BE:16:7D:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:00:17:24:90:f0:86:5d:1e:e8:e0:91:0c:92:27:33:c7:dc: a8:c8:82:31:84:bb:84:06:ea:27:36:bd:8e:56:6f:c7:7a:e3: 2b:ca:95:7f:67:91:9f:aa:1d:8c:68:08:a8:cb:62:bc:76:4f: 87:7b:32:e1:50:c3:37:c4:79:df:27:09:80:e4:2f:ae:59:cf: f5:6d:3d:9e:5f:3f:26:bd:25:2c:b3:20:1a:cd:b7:96:a2:87: 6b:61:12:63:f3:31:59:3f:fd:ce:b0:ec:c9:20:35:c5:93:98: 4a:45:75:77:85:96:66:69:5a:63:a9:94:d2:6e:a0:43:33:c8: 9f:1d:94:55:94:0f:e6:22:e0:0d:7b:03:4a:c8:e0:74:5e:0a: e9:9e:30:ca:ba:7f:39:b9:21:28:ee:16:00:29:ae:3a:9b:3a: 3f:02:c3:5d:4b:4e:29:98:60:1e:8b:0a:8f:e6:e9:aa:95:a2: e6:22:88:f0:4d:24:98:be:76:15:4f:df:d2:4b:16:86:31:24: b2:76:20:66:75:42:ab:4f:7e:22:3b:a1:60:a3:83:1f:f6:79: ee:87:94:13:1f:5b:be:bb:1a:d7:4d:8c:15:89:8b:ad:72:93: 0f:17:fb:e8:fe:0b:9a:0c:15:a1:b8:db:eb:46:9a:98:11:a7: 8f:f2:43:a0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MkY4QzExMC8GA1UEBRMoMDE3RDhEQjhBNzg4NzRBQjJGOUFEOTdERTU3QUZERTFC RTE2N0Q0NDAeFw0yNTA0MjcwNTQ3MDBaFw0yNTA1MDQwNTQ3MDBaMBgxFjAUBgNV BAMTDTY4MGRjNGQ1LWQxZjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD02tY932VKtNbGmFUgDD4XOcnVh+KPo90fk2J2Ol0vrEhDOUEaPcnnoozDe31U Sb2orDQKyv2C1RbGCOLPO5yJmEebWxkpYSitvhzUjKOFdPOsn19ObgWlKFrJ8ULa Pnsmxjfr/thdSGlRygU2djCYsQ/BrJkfReCZQ37Yl5rl1ZAiwdU/EbwXHIzn9mzr Q4ZHef6dAsXjQQtEt8qQKevXF+nWpVO3NDL1z8yNFSr7X6Un1FxHa4IKyAZJ1aFe rGoSLZbbImL0rfSL+NxJdDWDawTwI57fhtHoms76im4z0NhHf0hfIUGouLXSdvFi ROYw05tgSVymxXM5KsDF/GnRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwaf9twFb vRddDFkjDQhv6OChbqwwHwYDVR0jBBgwFoAUAX2NuKeIdKsvmtl95Xr94b4WfUQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMyRjhDLzU1NzlCOUIwODZF MDExRUY5QjZCMTc3RUM0RjlBRTAyL0FYMk51S2VJZEtzdm10bDk1WHI5NGI0V2ZV US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQVgyTnVLZUlkS3N2bXRsOTVYcjk0YjRXZlVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMy RjhDLzU1NzlCOUIwODZFMDExRUY5QjZCMTc3RUM0RjlBRTAyL0FYMk51S2VJZEtz dm10bDk1WHI5NGI0V2ZVUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEMAFySQ8IZdHujgkQySJzPH3KjIgjGEu4QG6ic2vY5Wb8d64yvKlX9n kZ+qHYxoCKjLYrx2T4d7MuFQwzfEed8nCYDkL65Zz/VtPZ5fPya9JSyzIBrNt5ai h2thEmPzMVk//c6w7MkgNcWTmEpFdXeFlmZpWmOplNJuoEMzyJ8dlFWUD+Yi4A17 A0rI4HReCumeMMq6fzm5ISjuFgAprjqbOj8Cw11LTimYYB6LCo/m6aqVouYiiPBN JJi+dhVP39JLFoYxJLJ2IGZ1QqtPfiI7oWCjgx/2ee6HlBMfW767GtdNjBWJi61y kw8X++j+C5oMFaG42+tGmpgRp4/yQ6A= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:55 2025 by rpki-client on console.sobornost.net