$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.mft File: -2uUY2HwxcguKwZ0DUuosLmTU_g.mft (raw, json) Hash identifier: e0Zju96LIQcGhuNweDNTzSLhud5ibaEewftRYMdmylo= Subject key identifier: 99:D3:43:B7:4C:5B:16:09:5F:6E:7E:22:B2:5E:E9:3D:26:3E:25:D8 Authority key identifier: FB:6B:94:63:61:F0:C5:C8:2E:2B:06:74:0D:4B:A8:B0:B9:93:53:F8 Certificate issuer: /CN=A91C6A35/serialNumber=FB6B946361F0C5C82E2B06740D4BA8B0B99353F8 Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-2uUY2HwxcguKwZ0DUuosLmTU_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.mft Manifest number: 35 Signing time: Sun 27 Apr 2025 06:25:30 +0000 Manifest this update: Sun 27 Apr 2025 06:25:30 +0000 Manifest next update: Sun 04 May 2025 06:25:30 +0000 Files and hashes: 1: -2uUY2HwxcguKwZ0DUuosLmTU_g.crl (hash: l9UpTHEExKm/jny1REGu0KavvjK96DmXyed7MN6COIs=) 2: 06D77958D49411EFA8DF5E69C4F9AE02.roa (hash: SIysPbQ0shw6SImSP7LGItvtceoka+GBhE2dzjDub+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.crl rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-2uUY2HwxcguKwZ0DUuosLmTU_g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6A35, serialNumber=FB6B946361F0C5C82E2B06740D4BA8B0B99353F8 Validity Not Before: Apr 27 06:25:30 2025 GMT Not After : May 4 06:25:30 2025 GMT Subject: CN=680dcdda-bb29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:4b:03:fc:94:51:a6:a7:16:d0:1d:1a:75:f4: cb:74:82:c3:58:d6:49:9d:1d:84:41:85:8f:67:66: 94:47:62:33:6d:8a:36:68:85:e4:a3:93:0e:66:b4: bc:16:01:34:7f:32:e7:91:b9:1f:ee:b3:09:fb:83: 42:0b:aa:b7:63:f8:4e:b5:f7:2f:4f:38:b3:b9:9f: fa:41:d5:19:ac:ed:be:96:28:93:18:7a:6f:6c:aa: 3d:73:4a:ae:29:5b:3e:f7:f3:56:82:f7:c3:6b:5f: 31:2e:cb:61:9f:2a:d9:99:5c:be:c4:03:64:84:3d: a1:c7:18:5d:77:63:83:87:59:03:f1:fb:d1:41:3f: fb:95:21:0c:c9:bb:5c:16:a3:de:a9:75:21:ef:4a: 13:a5:03:02:c4:df:bf:7c:9b:c7:fd:69:d1:dc:dc: a9:f7:62:42:c5:3a:79:dc:95:54:44:54:d5:5d:fb: 46:7b:98:c8:cb:70:e0:62:cb:06:ff:10:90:55:0c: 21:fb:7f:bd:f8:2c:88:b3:f2:94:4d:2c:79:44:2f: 85:e8:a3:5d:8a:f8:74:c3:35:1f:e0:d3:7c:74:4b: 23:17:30:aa:4d:d7:a1:c3:f6:94:dc:e6:15:3d:e5: ad:2e:81:34:cd:75:35:fd:7d:c9:f0:8d:74:e2:6f: 37:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:D3:43:B7:4C:5B:16:09:5F:6E:7E:22:B2:5E:E9:3D:26:3E:25:D8 X509v3 Authority Key Identifier: keyid:FB:6B:94:63:61:F0:C5:C8:2E:2B:06:74:0D:4B:A8:B0:B9:93:53:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-2uUY2HwxcguKwZ0DUuosLmTU_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:90:8c:9d:aa:a8:51:54:97:3d:04:3d:88:bd:a6:d2:dc:0a: 89:a9:a6:93:75:f8:f4:92:2a:5f:7e:99:7a:d6:d1:06:ad:fb: 30:a0:fe:4f:e1:31:14:9d:bf:63:49:21:7e:1c:01:d4:fb:a0: 74:61:b2:f1:f5:93:e8:45:7f:05:c6:7d:e4:c5:50:4c:ce:62: 69:91:bd:4a:0e:7f:4b:2a:68:49:4f:32:73:0e:12:74:1e:8f: 3d:a9:f4:f3:6f:81:73:03:77:21:39:f9:d5:b3:94:33:1c:4d: 5d:13:11:59:b2:13:a8:bf:d0:8f:8f:99:3f:10:65:77:a5:de: 25:44:c9:08:87:93:a8:f7:e6:c6:7f:fc:fb:0e:c6:c1:35:9a: 1f:69:8b:7c:0b:36:28:7b:a9:a5:17:b2:26:30:f6:5a:22:9a: a5:6a:07:01:86:8a:44:a4:5a:64:ff:4a:cd:d3:f9:8a:8c:ba: cf:39:9d:bf:b2:69:72:58:30:27:3f:ee:38:77:b4:e5:fc:60: 73:c6:15:bd:95:9d:9e:b6:95:fc:a0:f4:13:a4:94:a1:b2:9f: 9a:fd:7d:f4:20:21:15:97:03:15:5a:34:aa:5f:b6:09:c4:20: 9f:ed:ca:b1:d6:8b:2b:48:72:2e:6b:f8:03:1b:63:95:08:9f: 2b:6f:a6:2b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NkEzNTExMC8GA1UEBRMoRkI2Qjk0NjM2MUYwQzVDODJFMkIwNjc0MEQ0QkE4QjBC OTkzNTNGODAeFw0yNTA0MjcwNjI1MzBaFw0yNTA1MDQwNjI1MzBaMBgxFjAUBgNV BAMTDTY4MGRjZGRhLWJiMjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCbSwP8lFGmpxbQHRp19Mt0gsNY1kmdHYRBhY9nZpRHYjNtijZoheSjkw5mtLwW ATR/MueRuR/uswn7g0ILqrdj+E619y9POLO5n/pB1Rms7b6WKJMYem9sqj1zSq4p Wz7381aC98NrXzEuy2GfKtmZXL7EA2SEPaHHGF13Y4OHWQPx+9FBP/uVIQzJu1wW o96pdSHvShOlAwLE3798m8f9adHc3Kn3YkLFOnnclVREVNVd+0Z7mMjLcOBiywb/ EJBVDCH7f734LIiz8pRNLHlEL4Xoo12K+HTDNR/g03x0SyMXMKpN16HD9pTc5hU9 5a0ugTTNdTX9fcnwjXTibzcRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmdNDt0xb Fglfbn4isl7pPSY+JdgwHwYDVR0jBBgwFoAU+2uUY2HwxcguKwZ0DUuosLmTU/gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2QTM1L0ExNTlGNzgyRDQ5 MjExRUZCNTY0REU2MkM0RjlBRTAyLy0ydVVZMkh3eGNndUt3WjBEVXVvc0xtVFVf Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLTJ1VVkySHd4Y2d1S3daMERVdW9zTG1UVV9nLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2 QTM1L0ExNTlGNzgyRDQ5MjExRUZCNTY0REU2MkM0RjlBRTAyLy0ydVVZMkh3eGNn dUt3WjBEVXVvc0xtVFVfZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAiQjJ2qqFFUlz0EPYi9ptLcCompppN1+PSSKl9+mXrW0Qat+zCg/k/h MRSdv2NJIX4cAdT7oHRhsvH1k+hFfwXGfeTFUEzOYmmRvUoOf0sqaElPMnMOEnQe jz2p9PNvgXMDdyE5+dWzlDMcTV0TEVmyE6i/0I+PmT8QZXel3iVEyQiHk6j35sZ/ /PsOxsE1mh9pi3wLNih7qaUXsiYw9loimqVqBwGGikSkWmT/Ss3T+YqMus85nb+y aXJYMCc/7jh3tOX8YHPGFb2VnZ62lfyg9BOklKGyn5r9ffQgIRWXAxVaNKpftgnE IJ/tyrHWiytIci5r+AMbY5UInytvpis= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:55 2025 by rpki-client on console.sobornost.net