$ rpki-client -vvf rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft File: cB88FPCtfu9l000APNwZJGSM3jc.mft (raw, json) Hash identifier: venUlAf6CBvBfyCHHaWpEk9Zo4opXSO4tjc+vayafaQ= Subject key identifier: 27:DF:F7:1B:DA:3D:55:B6:89:ED:1E:32:92:57:23:C3:CA:85:0C:30 Authority key identifier: 70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37 Certificate issuer: /CN=A91C63A6/serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37 Certificate serial: 03B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft Manifest number: 0398 Signing time: Sun 27 Apr 2025 00:27:30 +0000 Manifest this update: Sun 27 Apr 2025 00:27:29 +0000 Manifest next update: Sun 04 May 2025 00:27:29 +0000 Files and hashes: 1: cB88FPCtfu9l000APNwZJGSM3jc.crl (hash: fXdGSdn0NhRC6YN5VoBKvApYXdU71Yv4WqbVjW4Cj88=) 2: 7E16D3240B5011EE9A518C7BC4F9AE02.roa (hash: U0JaFB8CVVgKbLBmTTRMW+oeZZCXLA9kdsldXtwigwA=) 3: CDDEC562011711EEB15FDD2AC4F9AE02.roa (hash: PgsogDDZQkDovTqfqAZnCJjtewKfx64pNU23F3h3LOI=) 4: 2BF1D5F07E3511EE8CB63458C4F9AE02.roa (hash: xABbFnxjesSqqxHb5Z3LU/MaNyiAYDrCsWPlJjK46gQ=) 5: DF49B4400B4B11EEBAD3047AC4F9AE02.roa (hash: 5EplJ/qwJeqGMd35PNuR9x2zdZw/zJYIhHM0ma+2rK4=) 6: 513415BC400011EE88B66B4FC4F9AE02.roa (hash: La9bIBXUn7Pcc0HHfxEl2RzNwtBMPkoEmLR0KZnlaWs=) 7: 86550F680B4311EE8ABEE820C4F9AE02.roa (hash: yWfAEaYcbh5fjpOL87NsV9hi8Cg9epFjV+c+Su0AUew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 00:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 947 (0x3b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C63A6, serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37 Validity Not Before: Apr 27 00:27:29 2025 GMT Not After : May 4 00:27:29 2025 GMT Subject: CN=680d79f1-7a6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:85:b4:40:52:73:6d:00:e0:9f:aa:b3:7e:8d: ae:a8:a8:94:a7:fc:66:58:6d:d2:1f:f3:c8:ae:a7: 10:4a:ec:26:75:42:e4:6f:78:44:61:80:98:3a:e9: 1d:76:cb:37:ea:82:79:6b:b1:d8:6a:93:65:11:ee: 3b:d5:3d:96:2f:cc:30:12:ef:2b:15:7e:c3:8b:79: 94:62:99:06:dd:5c:0a:24:14:58:62:b7:2e:46:49: 1a:aa:c0:64:14:c6:e6:9b:05:b7:11:d2:d2:97:03: 58:e3:1c:44:84:ba:8b:3b:44:f4:83:d4:ca:95:48: 24:e4:5d:f9:69:49:cd:65:71:fd:6b:ec:a2:4b:4e: 4f:40:3c:b7:2b:ff:ab:bf:82:3d:82:ef:be:3c:fb: bb:f2:82:e1:29:53:c8:a9:db:94:f6:8e:e5:8e:14: f9:ba:4e:88:e9:c2:9a:b5:7f:2f:3c:7d:63:a7:df: 4a:a1:75:bf:f5:a9:e1:16:7a:a7:d8:e9:e6:10:21: 33:b1:7e:20:6a:76:87:a4:40:fa:45:d5:ce:4e:b0: 6b:a9:ea:83:45:d5:66:6c:82:9b:7d:7d:a6:69:80: 9c:2a:0d:be:e8:4c:c6:67:13:f9:43:a5:6a:cc:38: 17:00:ba:79:11:69:11:89:82:3d:8d:19:40:d7:1b: 3f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:DF:F7:1B:DA:3D:55:B6:89:ED:1E:32:92:57:23:C3:CA:85:0C:30 X509v3 Authority Key Identifier: keyid:70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:e6:2e:b0:c9:8f:c0:25:dc:36:37:e2:7e:c7:43:92:87:16: 8f:d3:b1:40:69:a6:36:12:12:2f:48:9f:5f:7e:45:82:c6:64: d7:85:0b:53:b5:88:96:68:e0:de:87:b1:9b:4c:35:05:9d:bf: fb:09:1f:75:b9:a8:e7:35:98:77:c0:9c:3e:a5:51:b2:ec:ce: 78:b8:41:5f:10:e8:42:1a:88:d9:62:db:fe:59:db:52:e0:a0: f1:f9:33:99:1a:da:67:98:e4:bb:58:e1:ee:a2:a6:78:a2:0d: 5f:58:1f:75:a0:ce:ee:fa:e0:ad:a8:5a:03:e9:96:68:3a:c5: 32:59:f6:d7:d9:f8:c5:04:b4:96:dd:cf:07:34:7e:c2:15:3b: 9b:6d:78:cd:87:0f:0a:70:0c:73:ba:55:ea:05:34:4c:e5:e0: 66:d0:33:4e:0a:6c:a2:50:30:4b:90:be:dd:bb:99:76:4a:a6: 65:ae:20:a1:1f:c6:4b:f6:15:6d:74:45:01:89:55:43:df:55: dc:5d:73:df:31:1f:63:4c:a9:ed:16:07:54:22:e0:2a:f7:6a: b0:f6:c6:22:c5:cd:56:05:42:39:df:ad:47:e7:0c:91:43:48: 03:d0:2c:84:dd:80:3f:1f:74:25:20:09:4b:92:e1:69:05:7b: 3b:d8:32:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYzQTYxMTAvBgNVBAUTKDcwMUYzQzE0RjBBRDdFRUY2NUQzNEQwMDNDREMxOTI0 NjQ4Q0RFMzcwHhcNMjUwNDI3MDAyNzI5WhcNMjUwNTA0MDAyNzI5WjAYMRYwFAYD VQQDEw02ODBkNzlmMS03YTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsYW0QFJzbQDgn6qzfo2uqKiUp/xmWG3SH/PIrqcQSuwmdULkb3hEYYCYOukd dss36oJ5a7HYapNlEe471T2WL8wwEu8rFX7Di3mUYpkG3VwKJBRYYrcuRkkaqsBk FMbmmwW3EdLSlwNY4xxEhLqLO0T0g9TKlUgk5F35aUnNZXH9a+yiS05PQDy3K/+r v4I9gu++PPu78oLhKVPIqduU9o7ljhT5uk6I6cKatX8vPH1jp99KoXW/9anhFnqn 2OnmECEzsX4ganaHpED6RdXOTrBrqeqDRdVmbIKbfX2maYCcKg2+6EzGZxP5Q6Vq zDgXALp5EWkRiYI9jRlA1xs/xQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCff9xva PVW2ie0eMpJXI8PKhQwwMB8GA1UdIwQYMBaAFHAfPBTwrX7vZdNNADzcGSRkjN43 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjNBNi8wRDM5QzRFNDlB OUIxMUVDODJDNzBCMjBDNEY5QUUwMi9jQjg4RlBDdGZ1OWwwMDBBUE53WkpHU00z amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NCODhGUEN0ZnU5bDAwMEFQTndaSkdTTTNqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjNBNi8wRDM5QzRFNDlBOUIxMUVDODJDNzBCMjBDNEY5QUUwMi9jQjg4RlBDdGZ1 OWwwMDBBUE53WkpHU00zamMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/5i6wyY/AJdw2N+J+x0OShxaP07FAaaY2EhIvSJ9ffkWCxmTXhQtT tYiWaODeh7GbTDUFnb/7CR91uajnNZh3wJw+pVGy7M54uEFfEOhCGojZYtv+WdtS 4KDx+TOZGtpnmOS7WOHuoqZ4og1fWB91oM7u+uCtqFoD6ZZoOsUyWfbX2fjFBLSW 3c8HNH7CFTubbXjNhw8KcAxzulXqBTRM5eBm0DNOCmyiUDBLkL7du5l2SqZlriCh H8ZL9hVtdEUBiVVD31XcXXPfMR9jTKntFgdUIuAq92qw9sYixc1WBUI5361H5wyR Q0gD0CyE3YA/H3QlIAlLkuFpBXs72DK/ -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:10 2025 by rpki-client on console.sobornost.net