$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft File: 8XD1e07KEpakIh1wemTkKYk7h9Q.mft (raw, json) Hash identifier: HmocayyRHoF6gWtYufcBlXGoiS3/tmfEQKoCbbpss0Y= Subject key identifier: 28:69:4A:94:2A:52:2E:0A:AE:47:07:97:C5:5D:35:A2:A6:0B:A0:CE Authority key identifier: F1:70:F5:7B:4E:CA:12:96:A4:22:1D:70:7A:64:E4:29:89:3B:87:D4 Certificate issuer: /CN=A91C4F28/serialNumber=F170F57B4ECA1296A4221D707A64E429893B87D4 Certificate serial: 010E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft Manifest number: 010A Signing time: Sun 27 Apr 2025 03:53:20 +0000 Manifest this update: Sun 27 Apr 2025 03:53:20 +0000 Manifest next update: Sun 04 May 2025 03:53:20 +0000 Files and hashes: 1: 8XD1e07KEpakIh1wemTkKYk7h9Q.crl (hash: SiJjY8bY4fcew/UvFJiA59wKqHx064gT03yZc+d/Tck=) 2: B59362A28D5C11EEADDC522EC4F9AE02.roa (hash: sPbI4s6oqdRUOiNi18Y1/q6iWjlYMVf5hdTw+xVFaMo=) 3: 6DAB109E8DF111EEA5BB4A1BC4F9AE02.roa (hash: AVP7CNVml5F9ogjZv8lDcpc3+J0u+jj8KPjr/y0/brc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.crl rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 270 (0x10e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4F28, serialNumber=F170F57B4ECA1296A4221D707A64E429893B87D4 Validity Not Before: Apr 27 03:53:20 2025 GMT Not After : May 4 03:53:20 2025 GMT Subject: CN=680daa30-4ce7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e2:ec:f7:67:99:e7:09:fe:f6:74:1d:8f:86: 99:df:2c:25:a3:8a:5f:22:2b:c1:31:24:5f:84:ed: 33:8a:6b:6b:f8:7a:bd:08:ec:2c:72:0d:80:74:f0: 87:23:d6:a3:c7:8b:67:4a:45:9c:0b:79:bf:99:3c: 87:4b:05:e6:c3:16:17:86:77:a1:e1:68:77:43:32: de:ac:cf:14:80:53:23:e3:6e:f2:00:9c:57:00:10: bc:13:c8:15:75:0b:3f:1b:46:51:bc:67:fa:ce:15: e0:6e:fa:b6:4b:ff:6d:96:3c:33:9c:c5:a5:9b:46: cb:a6:85:53:ac:a5:99:c2:58:49:f3:d5:35:a9:6d: ef:09:37:ef:75:01:d3:cc:15:e6:8e:55:f8:5b:d9: f5:a3:30:12:d6:ae:b3:da:da:1a:ad:c1:e7:9a:b9: db:74:17:cb:7d:da:fb:74:ea:7a:84:e6:b3:32:26: ad:1d:e7:cd:4a:6c:90:c3:3e:30:0c:09:12:28:2b: 79:d8:7d:47:e2:b3:b0:4f:d5:e3:06:17:30:f5:35: 84:6f:54:d9:aa:c1:81:e8:1b:aa:dd:f2:58:60:07: da:37:62:61:18:71:43:1a:67:4b:d1:8b:ec:1b:7e: d8:a6:49:ee:8d:d8:03:7a:8c:34:e4:3e:67:fc:86: a2:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:69:4A:94:2A:52:2E:0A:AE:47:07:97:C5:5D:35:A2:A6:0B:A0:CE X509v3 Authority Key Identifier: keyid:F1:70:F5:7B:4E:CA:12:96:A4:22:1D:70:7A:64:E4:29:89:3B:87:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:78:79:13:8b:3f:e1:af:1c:4f:d5:59:4b:ac:4a:1d:c0:54: b0:7c:6d:d1:a7:12:ca:d4:78:a4:bf:88:31:35:ca:4c:1b:68: 94:92:dd:17:4a:9c:eb:b9:8a:07:0d:a0:43:bb:02:90:02:b7: cd:77:5d:28:88:75:26:bf:84:5d:80:f2:bb:df:b0:61:90:ad: da:05:21:dd:9b:7f:9c:45:c7:55:e4:79:65:a5:a4:3e:dc:39: a7:55:f7:de:84:e1:24:06:1f:af:33:c2:ef:e9:08:26:41:54: 06:c6:a5:4e:95:0c:23:7a:58:15:49:90:4f:db:7b:44:b2:e0: a1:1a:4e:26:a7:b9:73:e2:b0:a4:6e:16:a6:79:5f:af:cb:e0: 5c:c4:df:05:10:7f:81:dd:01:30:ba:af:60:14:8b:0c:01:44: 1c:29:fc:09:90:44:27:56:18:3e:3e:b9:c8:d0:31:ce:5e:79: e9:72:d3:7f:e2:69:bc:c2:25:b9:b7:17:59:ea:b2:27:b6:73: b2:93:67:bc:ba:ec:2b:72:bd:99:20:2c:ab:12:c2:e8:87:f1: 2d:65:96:89:4c:14:f5:8a:a5:4b:d9:68:39:ed:7d:c1:5d:e9: e7:9b:d6:4e:52:e9:e7:49:4f:02:7a:7b:4f:6e:39:77:9f:28: 14:cd:d9:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRGMjgxMTAvBgNVBAUTKEYxNzBGNTdCNEVDQTEyOTZBNDIyMUQ3MDdBNjRFNDI5 ODkzQjg3RDQwHhcNMjUwNDI3MDM1MzIwWhcNMjUwNTA0MDM1MzIwWjAYMRYwFAYD VQQDEw02ODBkYWEzMC00Y2U3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnuLs92eZ5wn+9nQdj4aZ3ywlo4pfIivBMSRfhO0zimtr+Hq9COwscg2AdPCH I9ajx4tnSkWcC3m/mTyHSwXmwxYXhneh4Wh3QzLerM8UgFMj427yAJxXABC8E8gV dQs/G0ZRvGf6zhXgbvq2S/9tljwznMWlm0bLpoVTrKWZwlhJ89U1qW3vCTfvdQHT zBXmjlX4W9n1ozAS1q6z2toarcHnmrnbdBfLfdr7dOp6hOazMiatHefNSmyQwz4w DAkSKCt52H1H4rOwT9XjBhcw9TWEb1TZqsGB6Buq3fJYYAfaN2JhGHFDGmdL0Yvs G37YpknujdgDeow05D5n/IaisQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFChpSpQq Ui4KrkcHl8VdNaKmC6DOMB8GA1UdIwQYMBaAFPFw9XtOyhKWpCIdcHpk5CmJO4fU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEYyOC9GNTdGRDBCODhE NTYxMUVFOTc4N0U3ODNDNEY5QUUwMi84WEQxZTA3S0VwYWtJaDF3ZW1Ua0tZazdo OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhYRDFlMDdLRXBha0loMXdlbVRrS1lrN2g5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEYyOC9GNTdGRDBCODhENTYxMUVFOTc4N0U3ODNDNEY5QUUwMi84WEQxZTA3S0Vw YWtJaDF3ZW1Ua0tZazdoOVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjeHkTiz/hrxxP1VlLrEodwFSwfG3RpxLK1Hikv4gxNcpMG2iUkt0X SpzruYoHDaBDuwKQArfNd10oiHUmv4RdgPK737BhkK3aBSHdm3+cRcdV5HllpaQ+ 3DmnVffehOEkBh+vM8Lv6QgmQVQGxqVOlQwjelgVSZBP23tEsuChGk4mp7lz4rCk bhameV+vy+BcxN8FEH+B3QEwuq9gFIsMAUQcKfwJkEQnVhg+PrnI0DHOXnnpctN/ 4mm8wiW5txdZ6rIntnOyk2e8uuwrcr2ZICyrEsLoh/EtZZaJTBT1iqVL2Wg57X3B Xennm9ZOUunnSU8CentPbjl3nygUzdn+ -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:10 2025 by rpki-client on console.sobornost.net