$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft File: a-rAl7V48XydcRl3ez9RFPvglxs.mft (raw, json) Hash identifier: 9qxa2/C8D2AggnBRMET+1E0OhJu20Hv32NKGK4yQnKU= Subject key identifier: AC:29:91:D8:6D:E5:EC:B0:31:09:8E:EF:77:2C:D3:BB:08:39:66:AE Authority key identifier: 6B:EA:C0:97:B5:78:F1:7C:9D:71:19:77:7B:3F:51:14:FB:E0:97:1B Certificate issuer: /CN=A91C5A9F/serialNumber=6BEAC097B578F17C9D7119777B3F5114FBE0971B Certificate serial: 0C9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rAl7V48XydcRl3ez9RFPvglxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft Manifest number: 0C87 Signing time: Mon 28 Apr 2025 18:29:18 +0000 Manifest this update: Mon 28 Apr 2025 18:29:17 +0000 Manifest next update: Mon 05 May 2025 18:29:17 +0000 Files and hashes: 1: a-rAl7V48XydcRl3ez9RFPvglxs.crl (hash: Ovd2Tk3XiH+ki+CMo3MVyg5JRB6L47yAxposv9e1aRk=) 2: 498956B8FFC411EEB2369013C4F9AE02.roa (hash: w5Dpoxz9EcTss3nAI8ZMtrwKEHayowiUIHwPNhpEFMM=) 3: 48B3316EFFC411EEB2369013C4F9AE02.roa (hash: Fswv/F/vaivrwx2kQ/qe3AmxF+uS0o5WMUgISHj2Mxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.crl rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rAl7V48XydcRl3ez9RFPvglxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 18:27:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3229 (0xc9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5A9F, serialNumber=6BEAC097B578F17C9D7119777B3F5114FBE0971B Validity Not Before: Apr 28 18:29:17 2025 GMT Not After : May 5 18:29:17 2025 GMT Subject: CN=680fc8fd-ba1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:3a:89:28:4a:cd:80:d3:54:ba:9b:34:a5:77: 34:b4:25:dd:b2:d6:4c:df:3c:81:57:db:3c:fe:a8: 87:5b:71:0e:ad:80:30:90:7d:df:ae:28:93:8b:b4: 20:e2:54:be:79:b1:6b:06:b5:3a:a7:be:18:c9:92: b5:c9:bb:0a:da:f6:7e:b3:43:37:dc:e8:f7:e3:76: f2:22:67:9b:b6:e6:bf:d9:25:79:e9:f0:16:8b:96: 44:bc:37:7b:af:1a:cf:18:15:d3:d8:9c:74:9d:fd: 58:20:82:b1:01:84:67:17:34:76:34:1f:0d:59:b7: 38:05:59:b0:82:66:ef:bc:02:1a:85:31:d4:59:43: 3c:d0:2e:76:3d:34:79:27:e3:e2:8a:81:b4:1c:33: 1c:33:3e:dd:9b:f8:a2:25:fd:b0:89:99:0a:3f:57: ca:e0:2b:bd:5d:6e:04:73:e4:cd:85:b0:42:40:4d: e2:df:47:37:c7:3b:cf:39:11:f0:ce:cf:e1:4e:ea: e1:8a:eb:f2:9b:fa:f3:13:7d:45:0d:85:4c:20:c9: c2:04:c3:d9:4b:36:e8:42:9d:8f:7b:91:a9:fd:14: e8:9e:53:c2:98:d6:54:be:ed:dd:76:88:10:57:db: c8:f4:f1:29:0d:8e:68:4d:24:4a:ed:a8:99:62:f6: 5d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:29:91:D8:6D:E5:EC:B0:31:09:8E:EF:77:2C:D3:BB:08:39:66:AE X509v3 Authority Key Identifier: keyid:6B:EA:C0:97:B5:78:F1:7C:9D:71:19:77:7B:3F:51:14:FB:E0:97:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rAl7V48XydcRl3ez9RFPvglxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:12:69:3f:c9:a4:e2:71:fe:14:84:6e:8a:55:15:60:ba:55: c0:25:13:b9:bd:8c:40:54:ff:cf:6f:41:7c:d0:47:d7:e6:b2: 1a:ee:45:a7:6d:55:ed:5e:65:93:46:92:9a:17:3a:be:53:7d: bc:66:0f:96:10:88:c5:b8:1e:8f:7d:08:cc:ea:87:81:30:be: fb:6b:c5:80:a6:64:75:04:a8:7b:4f:8c:c4:a2:cd:a2:cd:ca: 29:41:2a:c3:82:56:be:84:5b:04:7a:a1:a2:ed:b6:2e:b0:da: 0f:7a:79:21:64:a2:1a:11:2d:ea:f3:4f:db:3d:42:4c:5c:29: dd:d2:54:16:a0:1b:3c:c7:e1:1d:c2:2a:38:b3:d0:93:fa:3b: aa:3b:44:d7:5d:3a:fc:0c:1d:74:6f:c3:e6:2b:9f:b2:59:7b: b7:e0:44:57:3f:a7:2c:f1:5d:6c:e0:ab:39:ce:c2:d1:fa:7b: 67:5a:e2:c0:d7:f8:6c:1d:17:a8:a8:e8:57:49:64:0d:62:73: 10:c2:3f:f8:6f:75:c3:75:fb:fe:ab:f0:77:03:f4:a2:6f:b0: 4b:3f:0b:99:a7:96:c5:4c:9b:c1:0e:19:75:aa:46:24:62:1c: a3:75:73:04:e4:61:ff:51:d4:1a:c0:6f:09:d8:bc:18:e9:31: 58:42:3a:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVBOUYxMTAvBgNVBAUTKDZCRUFDMDk3QjU3OEYxN0M5RDcxMTk3NzdCM0Y1MTE0 RkJFMDk3MUIwHhcNMjUwNDI4MTgyOTE3WhcNMjUwNTA1MTgyOTE3WjAYMRYwFAYD VQQDEw02ODBmYzhmZC1iYTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4DqJKErNgNNUups0pXc0tCXdstZM3zyBV9s8/qiHW3EOrYAwkH3friiTi7Qg 4lS+ebFrBrU6p74YyZK1ybsK2vZ+s0M33Oj343byImebtua/2SV56fAWi5ZEvDd7 rxrPGBXT2Jx0nf1YIIKxAYRnFzR2NB8NWbc4BVmwgmbvvAIahTHUWUM80C52PTR5 J+PiioG0HDMcMz7dm/iiJf2wiZkKP1fK4Cu9XW4Ec+TNhbBCQE3i30c3xzvPORHw zs/hTurhiuvym/rzE31FDYVMIMnCBMPZSzboQp2Pe5Gp/RTonlPCmNZUvu3ddogQ V9vI9PEpDY5oTSRK7aiZYvZd2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKwpkdht 5eywMQmO73cs07sIOWauMB8GA1UdIwQYMBaAFGvqwJe1ePF8nXEZd3s/URT74Jcb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUE5Ri8wMjFBOTYwQ0Y2 NzgxMUU5QjUyMDk2MjVDNEY5QUUwMi9hLXJBbDdWNDhYeWRjUmwzZXo5UkZQdmds eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2EtckFsN1Y0OFh5ZGNSbDNlejlSRlB2Z2x4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUE5Ri8wMjFBOTYwQ0Y2NzgxMUU5QjUyMDk2MjVDNEY5QUUwMi9hLXJBbDdWNDhY eWRjUmwzZXo5UkZQdmdseHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEEmk/yaTicf4UhG6KVRVgulXAJRO5vYxAVP/Pb0F80EfX5rIa7kWn bVXtXmWTRpKaFzq+U328Zg+WEIjFuB6PfQjM6oeBML77a8WApmR1BKh7T4zEos2i zcopQSrDgla+hFsEeqGi7bYusNoPenkhZKIaES3q80/bPUJMXCnd0lQWoBs8x+Ed wio4s9CT+juqO0TXXTr8DB10b8PmK5+yWXu34ERXP6cs8V1s4Ks5zsLR+ntnWuLA 1/hsHReoqOhXSWQNYnMQwj/4b3XDdfv+q/B3A/Sib7BLPwuZp5bFTJvBDhl1qkYk YhyjdXME5GH/UdQawG8J2LwY6TFYQjqb -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:57 2025 by rpki-client on console.sobornost.net