$ rpki-client -vvf rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft File: k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft (raw, json) Hash identifier: 3CznMk5/atjCDaPfUBVa8RlIb74q6wKPatazQuYq3Kg= Subject key identifier: 59:2E:DF:72:80:64:9D:30:1C:A9:B8:20:7C:29:40:00:BE:3D:D1:1B Authority key identifier: 93:C0:58:A0:DF:17:73:01:24:59:16:4B:5A:80:D8:53:72:C7:E2:92 Certificate issuer: /CN=A91C56FB/serialNumber=93C058A0DF1773012459164B5A80D85372C7E292 Certificate serial: 1443 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft Manifest number: 1427 Signing time: Sat 26 Apr 2025 16:52:54 +0000 Manifest this update: Sat 26 Apr 2025 16:52:53 +0000 Manifest next update: Sat 03 May 2025 16:52:53 +0000 Files and hashes: 1: k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl (hash: SSk57C4Vtwlcs17ZTjJTZW9ugElN8aeY20AuDv85yrs=) 2: 6BB6EF78EB5F11ECB4060F86C4F9AE02.roa (hash: TyzdfixbvhgTgVbeTj4apy/zB+wf6IDh1/Lzfu3rZJM=) 3: B6DA2BD8E33F11EB9832A354C4F9AE02.roa (hash: 0LjZpONzgJ6xRmwAyv6QVE86pcOrLtlD9gU4D1tfLto=) 4: B7F93F86E33F11EB9832A354C4F9AE02.roa (hash: z0fyXCO60lkejMfyEE4mQL9l0P7nQ3XY65wfTKmQOmg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 16:52:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5187 (0x1443) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C56FB, serialNumber=93C058A0DF1773012459164B5A80D85372C7E292 Validity Not Before: Apr 26 16:52:53 2025 GMT Not After : May 3 16:52:53 2025 GMT Subject: CN=680d0f65-d1f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:07:fd:78:45:74:b8:84:e7:05:ea:9e:57:ac: 25:fe:58:ed:cf:ec:14:82:63:f4:fd:fa:0d:59:6b: 50:3d:d7:05:e6:60:d4:77:80:23:0d:ae:2a:33:a5: 42:3b:50:c6:e3:dc:09:c9:70:7d:24:b6:4b:9b:1b: 92:59:d9:ee:76:07:6c:9b:93:ba:19:e4:55:8a:f3: 97:78:78:66:23:c9:6e:97:c4:83:08:c3:95:12:31: a3:66:7f:ba:88:ad:2c:10:b8:98:eb:23:35:36:72: a5:86:e0:23:b0:ed:bc:bb:bc:e4:b3:05:39:2e:bb: 8e:3a:85:20:ad:5a:0c:0d:9f:c6:35:ee:72:48:a8: 74:38:b4:70:15:fc:5c:95:bf:d9:13:bd:8a:18:1b: 94:c0:e5:2d:b7:d6:f8:f1:b0:5f:31:d3:4e:4f:bc: 53:f7:ce:cd:0e:e5:f3:df:b9:3e:8b:d0:79:7a:52: 41:fb:19:b4:73:cd:bc:1c:fe:51:a0:2e:3a:64:41: 77:39:cc:eb:63:06:fb:b9:42:ff:cd:a5:52:79:de: 5b:55:92:24:ba:1a:86:27:f3:61:2a:45:ff:9a:fd: 84:02:1e:5c:80:0c:34:a2:39:ed:6a:75:be:61:8f: 30:37:da:c4:64:9f:41:b9:88:51:7a:06:f3:61:e2: 44:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:2E:DF:72:80:64:9D:30:1C:A9:B8:20:7C:29:40:00:BE:3D:D1:1B X509v3 Authority Key Identifier: keyid:93:C0:58:A0:DF:17:73:01:24:59:16:4B:5A:80:D8:53:72:C7:E2:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:0c:ba:0f:19:ea:e3:4c:1d:5d:2c:e5:7a:a7:ce:fe:46:28: de:f5:dd:54:ae:e6:a9:73:57:0b:66:56:80:f7:91:22:36:c9: 81:bb:ac:0a:02:45:eb:84:fa:cc:6b:97:41:00:87:96:a4:2c: 64:fe:24:1f:51:f5:2c:2d:07:96:e3:f5:38:a7:70:66:85:51: d7:24:25:65:99:4b:f1:9b:0a:fa:da:fc:1d:9f:68:4e:37:ed: ea:4b:55:9d:fc:f6:90:f7:f9:4b:30:27:bd:66:a0:79:27:df: 5e:c9:2a:28:f0:a8:de:7e:5b:b8:b8:4d:d5:dd:07:80:50:06: 20:ec:99:20:35:25:46:32:45:f9:0c:63:cb:b4:c7:fc:6c:00: f0:b5:d3:5a:c3:6a:66:4d:78:e3:e9:45:24:90:da:8b:58:50: b3:fe:e6:b7:01:19:45:b5:f3:a8:47:2a:25:95:3f:78:ae:ca: 50:0f:b9:d1:27:69:00:85:d4:e6:05:5a:f5:8d:eb:4a:f9:98: 9b:2e:24:51:56:8c:71:b3:7e:68:96:81:20:bf:66:ea:b9:f2: b5:44:8c:f0:34:e3:65:94:32:32:d4:5b:d1:21:c5:58:42:d6: a7:2d:0a:5a:2d:98:a6:0a:24:03:18:64:11:fb:3a:6b:c8:09: 30:0b:5d:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFEMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzU2RkIxMTAvBgNVBAUTKDkzQzA1OEEwREYxNzczMDEyNDU5MTY0QjVBODBEODUz NzJDN0UyOTIwHhcNMjUwNDI2MTY1MjUzWhcNMjUwNTAzMTY1MjUzWjAYMRYwFAYD VQQDEw02ODBkMGY2NS1kMWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuwf9eEV0uITnBeqeV6wl/ljtz+wUgmP0/foNWWtQPdcF5mDUd4AjDa4qM6VC O1DG49wJyXB9JLZLmxuSWdnudgdsm5O6GeRVivOXeHhmI8lul8SDCMOVEjGjZn+6 iK0sELiY6yM1NnKlhuAjsO28u7zkswU5LruOOoUgrVoMDZ/GNe5ySKh0OLRwFfxc lb/ZE72KGBuUwOUtt9b48bBfMdNOT7xT987NDuXz37k+i9B5elJB+xm0c828HP5R oC46ZEF3OczrYwb7uUL/zaVSed5bVZIkuhqGJ/NhKkX/mv2EAh5cgAw0ojntanW+ YY8wN9rEZJ9BuYhRegbzYeJEzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFku33KA ZJ0wHKm4IHwpQAC+PdEbMB8GA1UdIwQYMBaAFJPAWKDfF3MBJFkWS1qA2FNyx+KS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTZGQi9FOUY1MTA0Njc4 M0ExMUU4OTA3RDUyMUFDNEY5QUUwMi9rOEJZb044WGN3RWtXUlpMV29EWVUzTEg0 cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s4QllvTjhYY3dFa1dSWkxXb0RZVTNMSDRwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTZGQi9FOUY1MTA0Njc4M0ExMUU4OTA3RDUyMUFDNEY5QUUwMi9rOEJZb044WGN3 RWtXUlpMV29EWVUzTEg0cEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlDLoPGerjTB1dLOV6p87+Rije9d1Uruapc1cLZlaA95EiNsmBu6wK AkXrhPrMa5dBAIeWpCxk/iQfUfUsLQeW4/U4p3BmhVHXJCVlmUvxmwr62vwdn2hO N+3qS1Wd/PaQ9/lLMCe9ZqB5J99eySoo8Kjeflu4uE3V3QeAUAYg7JkgNSVGMkX5 DGPLtMf8bADwtdNaw2pmTXjj6UUkkNqLWFCz/ua3ARlFtfOoRyollT94rspQD7nR J2kAhdTmBVr1jetK+ZibLiRRVoxxs35oloEgv2bqufK1RIzwNONllDIy1FvRIcVY QtanLQpaLZimCiQDGGQR+zpryAkwC10b -----END CERTIFICATE-----Generated at Sat Apr 26 21:02:01 2025 by rpki-client on console.sobornost.net