$ rpki-client -vvf rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft File: 8Z8wAv-DH67Iwawl0cCgbjroATQ.mft (raw, json) Hash identifier: Ka23KqV9wrbCXTwIdLrD829tfkWh3dWhpmTpN9qHgf4= Subject key identifier: C5:54:47:52:2D:FA:A3:9A:2E:27:A8:90:EC:AC:3B:39:26:9F:32:CC Authority key identifier: F1:9F:30:02:FF:83:1F:AE:C8:C1:AC:25:D1:C0:A0:6E:3A:E8:01:34 Certificate issuer: /CN=A91C454C/serialNumber=F19F3002FF831FAEC8C1AC25D1C0A06E3AE80134 Certificate serial: 01DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft Manifest number: 01CE Signing time: Sun 27 Apr 2025 01:58:50 +0000 Manifest this update: Sun 27 Apr 2025 01:58:50 +0000 Manifest next update: Sun 04 May 2025 01:58:50 +0000 Files and hashes: 1: 8Z8wAv-DH67Iwawl0cCgbjroATQ.crl (hash: a7XHDYbTE0OGJDTkNlE9JlOZEXArFkvkpDTCGhnFFuo=) 2: 7CDCAF509CF211ED8BD2B02FC4F9AE02.roa (hash: u6i0aL0lGd+DkS8Cd1HM9x+4U1BJruGUogvC+Sy1wtw=) 3: 7BDFD4929CF211ED8BD2B02FC4F9AE02.roa (hash: IIRWaPut9Ga2CFDh4DoBpgMGLj7TDwhjoYp6oTvz8Zs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.crl rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 01:58:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 476 (0x1dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C454C, serialNumber=F19F3002FF831FAEC8C1AC25D1C0A06E3AE80134 Validity Not Before: Apr 27 01:58:50 2025 GMT Not After : May 4 01:58:50 2025 GMT Subject: CN=680d8f5a-b282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:8a:c1:c4:20:f5:07:cd:3b:e9:a0:d4:b5:89: f7:ed:45:ea:68:50:d9:9c:29:ed:5e:63:bb:53:53: dd:1a:8b:2b:c4:47:d7:20:cd:c0:fa:82:5e:e1:6f: 4d:66:fb:24:d1:1a:4a:6f:f2:b1:19:86:d0:35:52: 0f:ed:5a:3c:c9:39:2e:53:ee:93:17:96:75:6d:8e: 81:b7:2b:ae:09:64:4d:00:ee:f5:c4:96:ed:5e:03: 06:8f:92:b1:57:f2:97:f6:bb:f9:b6:b5:25:cc:47: 44:d1:b9:13:c3:b1:e9:17:85:02:98:5e:47:1b:bd: 30:6e:36:f1:cf:07:34:20:d8:68:c5:d4:cd:3b:46: 1d:c7:4f:c1:e1:c9:79:36:01:5f:eb:b6:a6:6e:af: a0:84:3a:a4:8e:28:ba:9c:9f:7e:49:a2:9b:3b:2a: 8f:95:c5:f3:b2:86:6f:01:f2:1e:db:35:e5:79:3f: 4d:93:82:25:af:21:7f:0c:e7:cc:57:4e:06:57:04: da:5f:ac:a5:5b:17:f4:83:a5:22:a6:a2:23:4c:87: d7:b2:ca:da:6f:b6:cf:13:45:35:9f:dd:27:23:0e: b6:66:3f:35:db:12:de:ec:84:2f:10:bf:d9:40:65: 0e:9c:8a:07:70:45:75:51:5a:52:7b:2e:53:fe:b9: 52:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:54:47:52:2D:FA:A3:9A:2E:27:A8:90:EC:AC:3B:39:26:9F:32:CC X509v3 Authority Key Identifier: keyid:F1:9F:30:02:FF:83:1F:AE:C8:C1:AC:25:D1:C0:A0:6E:3A:E8:01:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:1d:27:cd:a9:a4:63:1f:95:c0:ae:2b:12:78:65:fe:12:c9: 0d:7f:09:ec:c3:74:d9:34:f1:0c:d5:df:af:72:92:4e:28:ae: 31:df:b8:a4:44:5d:04:42:5c:c4:fa:5c:54:59:26:15:2e:9c: 32:79:e1:2f:83:b7:89:7f:ce:76:0d:af:2f:22:3f:8c:a6:6a: ac:49:0d:99:2e:5c:fc:52:7e:2e:fb:de:88:00:a5:4a:b6:bc: 90:d3:94:1a:65:6f:52:b0:93:84:11:d3:96:2a:c3:b6:c2:d2: 3b:6d:6a:20:7f:e3:e3:da:eb:75:84:ee:00:13:21:93:2d:4f: 17:f5:c8:ad:87:f8:60:2a:80:f6:bd:a2:03:17:66:fa:38:04: 9e:91:27:3f:75:ab:90:90:c3:d6:d5:9b:09:57:c4:de:13:56: 2d:fa:60:90:03:4a:aa:49:f7:97:6e:8f:d5:57:b7:fd:a3:87: 07:35:f5:f8:5f:9c:87:b3:46:92:47:b6:a3:21:d2:e2:b9:8b: 58:11:9a:ce:ef:53:a3:c4:be:26:08:b8:7d:da:06:48:9b:99: 15:e9:25:12:70:f6:4b:4b:4a:13:bd:11:bc:2d:32:d3:24:60: 2c:cf:c6:dd:31:97:70:95:14:c3:b6:34:52:ce:0f:29:14:6b: 62:65:9a:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ1NEMxMTAvBgNVBAUTKEYxOUYzMDAyRkY4MzFGQUVDOEMxQUMyNUQxQzBBMDZF M0FFODAxMzQwHhcNMjUwNDI3MDE1ODUwWhcNMjUwNTA0MDE1ODUwWjAYMRYwFAYD VQQDEw02ODBkOGY1YS1iMjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0orBxCD1B8076aDUtYn37UXqaFDZnCntXmO7U1PdGosrxEfXIM3A+oJe4W9N Zvsk0RpKb/KxGYbQNVIP7Vo8yTkuU+6TF5Z1bY6BtyuuCWRNAO71xJbtXgMGj5Kx V/KX9rv5trUlzEdE0bkTw7HpF4UCmF5HG70wbjbxzwc0INhoxdTNO0Ydx0/B4cl5 NgFf67ambq+ghDqkjii6nJ9+SaKbOyqPlcXzsoZvAfIe2zXleT9Nk4IlryF/DOfM V04GVwTaX6ylWxf0g6UipqIjTIfXssrab7bPE0U1n90nIw62Zj812xLe7IQvEL/Z QGUOnIoHcEV1UVpSey5T/rlSkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMVUR1It +qOaLieokOysOzkmnzLMMB8GA1UdIwQYMBaAFPGfMAL/gx+uyMGsJdHAoG466AE0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDU0Qy84MUZDOTY1MDZD MTIxMUVEODlGQzkyMEFDNEY5QUUwMi84Wjh3QXYtREg2N0l3YXdsMGNDZ2Jqcm9B VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhaOHdBdi1ESDY3SXdhd2wwY0NnYmpyb0FUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDU0Qy84MUZDOTY1MDZDMTIxMUVEODlGQzkyMEFDNEY5QUUwMi84Wjh3QXYtREg2 N0l3YXdsMGNDZ2Jqcm9BVFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9HSfNqaRjH5XArisSeGX+EskNfwnsw3TZNPEM1d+vcpJOKK4x37ik RF0EQlzE+lxUWSYVLpwyeeEvg7eJf852Da8vIj+MpmqsSQ2ZLlz8Un4u+96IAKVK tryQ05QaZW9SsJOEEdOWKsO2wtI7bWogf+Pj2ut1hO4AEyGTLU8X9cith/hgKoD2 vaIDF2b6OASekSc/dauQkMPW1ZsJV8TeE1Yt+mCQA0qqSfeXbo/VV7f9o4cHNfX4 X5yHs0aSR7ajIdLiuYtYEZrO71OjxL4mCLh92gZIm5kV6SUScPZLS0oTvRG8LTLT JGAsz8bdMZdwlRTDtjRSzg8pFGtiZZq2 -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:10 2025 by rpki-client on console.sobornost.net