$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.mft File: 57QbPSVuxr0M5xIbNw3kdBuDXmE.mft (raw, json) Hash identifier: 0iQsL48bmSeymAV31XMRqGy67OriailJ852Ke1X1zc4= Subject key identifier: 8A:BF:53:02:79:DF:79:E7:50:B2:1D:88:A2:CF:82:A0:90:28:2D:41 Authority key identifier: E7:B4:1B:3D:25:6E:C6:BD:0C:E7:12:1B:37:0D:E4:74:1B:83:5E:61 Certificate issuer: /CN=A91C6A39/serialNumber=E7B41B3D256EC6BD0CE7121B370DE4741B835E61 Certificate serial: 0DEF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57QbPSVuxr0M5xIbNw3kdBuDXmE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.mft Manifest number: 0DE0 Signing time: Mon 28 Apr 2025 18:06:10 +0000 Manifest this update: Mon 28 Apr 2025 18:06:09 +0000 Manifest next update: Mon 05 May 2025 18:06:09 +0000 Files and hashes: 1: 57QbPSVuxr0M5xIbNw3kdBuDXmE.crl (hash: 49W0ScEPBW/HDYJenZ/zQYWEUyQWAGpAd7zM0MiwZaw=) 2: 032B593EB1C511E9A4B3CE25C4F9AE02.roa (hash: f/BgI5BL/1PcY7ExwBK48s2FrmJ9kEJMRjBuMiCgse4=) 3: 0F56E156828C11EDA6BCA176C4F9AE02.roa (hash: 6jQR+LA7AhS3kcRLFdYcgiTc91j8m964KZdBUexFMD8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.crl rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57QbPSVuxr0M5xIbNw3kdBuDXmE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 18:06:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3567 (0xdef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6A39, serialNumber=E7B41B3D256EC6BD0CE7121B370DE4741B835E61 Validity Not Before: Apr 28 18:06:09 2025 GMT Not After : May 5 18:06:09 2025 GMT Subject: CN=680fc391-568b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:08:64:49:da:fa:e4:36:9a:4c:a3:f6:d5:7f: 43:c2:eb:43:cf:82:16:7e:07:0d:7b:3d:9d:2d:ea: e8:c0:59:d4:29:40:4f:42:3b:d6:e4:0f:8e:10:4f: f3:52:41:5b:69:98:cb:69:e4:28:be:a4:eb:e4:31: 84:33:2f:82:dd:49:a6:aa:42:f2:5d:3b:d5:3c:d8: 9a:a3:bf:3e:b8:4c:6e:c5:6c:1e:78:ba:69:24:e6: ef:26:d4:1a:2d:d6:10:ef:dc:b6:b0:7d:fa:1d:d0: 93:80:31:80:b4:90:3b:31:c9:b7:cb:5e:a4:91:37: 45:3b:6a:1b:14:8f:81:cd:28:73:3e:36:c4:f3:c0: 13:ea:e0:d3:c1:4f:d4:42:70:7e:06:e8:f2:cb:79: 62:6c:be:1b:1d:37:33:d9:3a:e5:44:92:da:25:f9: 3a:97:bd:04:46:a0:29:89:11:43:3e:c9:fc:3c:76: da:4f:22:d2:ad:1c:92:c5:e6:18:15:7b:46:82:d5: 78:b0:c0:fd:07:97:55:9d:ea:68:38:18:02:c9:3e: b8:65:e3:1f:97:02:f2:89:88:34:73:04:dd:de:d1: af:3f:d3:fa:0f:4d:91:44:80:ec:88:4b:34:15:80: 82:22:74:ca:e2:3e:e8:57:60:20:cb:fa:6c:27:3e: 07:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:BF:53:02:79:DF:79:E7:50:B2:1D:88:A2:CF:82:A0:90:28:2D:41 X509v3 Authority Key Identifier: keyid:E7:B4:1B:3D:25:6E:C6:BD:0C:E7:12:1B:37:0D:E4:74:1B:83:5E:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57QbPSVuxr0M5xIbNw3kdBuDXmE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d6:b5:69:14:1b:73:5b:cc:0a:9f:13:38:75:3c:14:5a:46:58: 7a:b1:90:92:82:d9:4f:35:f4:90:63:fd:b8:c4:64:74:65:5e: 38:58:7b:d3:c7:ce:c4:f1:9c:2f:af:a1:7d:02:5e:04:57:95: e1:7a:ab:22:d6:17:dc:03:78:02:48:24:5e:03:95:08:89:80: 87:f0:e1:6c:b1:ca:d6:6d:a1:29:e6:46:59:82:6f:8f:20:97: 89:e4:de:96:ad:48:ab:32:99:09:42:07:ff:a3:f8:eb:b6:08: 0c:c2:1a:71:fb:37:90:fc:65:30:5c:da:84:a8:84:2f:27:ca: b7:6d:03:3c:27:6c:c0:d9:87:0c:9e:75:e9:f0:07:2e:4f:b7: 38:5d:f1:6a:22:25:03:21:f6:b2:d8:fc:1a:c5:25:5f:c0:55: 16:d2:db:72:59:b4:c0:34:d4:bc:0c:71:1d:ae:7b:76:3b:38: a8:26:91:58:ab:f9:13:05:69:28:0d:79:96:ca:f0:b1:81:11: e0:a3:a1:3d:e5:29:b0:16:ef:d1:6b:cf:79:f6:01:2d:22:2d: a1:73:63:45:d6:c0:7d:20:93:e6:56:ef:6b:40:f1:b1:13:14: 82:ef:c2:09:e0:78:0f:cf:d3:26:3f:15:74:1f:6a:71:f0:2f: 84:cb:b2:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZBMzkxMTAvBgNVBAUTKEU3QjQxQjNEMjU2RUM2QkQwQ0U3MTIxQjM3MERFNDc0 MUI4MzVFNjEwHhcNMjUwNDI4MTgwNjA5WhcNMjUwNTA1MTgwNjA5WjAYMRYwFAYD VQQDEw02ODBmYzM5MS01NjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvAhkSdr65DaaTKP21X9DwutDz4IWfgcNez2dLerowFnUKUBPQjvW5A+OEE/z UkFbaZjLaeQovqTr5DGEMy+C3UmmqkLyXTvVPNiao78+uExuxWweeLppJObvJtQa LdYQ79y2sH36HdCTgDGAtJA7Mcm3y16kkTdFO2obFI+BzShzPjbE88AT6uDTwU/U QnB+Bujyy3libL4bHTcz2TrlRJLaJfk6l70ERqApiRFDPsn8PHbaTyLSrRySxeYY FXtGgtV4sMD9B5dVnepoOBgCyT64ZeMflwLyiYg0cwTd3tGvP9P6D02RRIDsiEs0 FYCCInTK4j7oV2Agy/psJz4H5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIq/UwJ5 33nnULIdiKLPgqCQKC1BMB8GA1UdIwQYMBaAFOe0Gz0lbsa9DOcSGzcN5HQbg15h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkEzOS83MzBGMDBCMkIx QzQxMUU5QkVDQjE4MjVDNEY5QUUwMi81N1FiUFNWdXhyME01eEliTncza2RCdURY bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzU3UWJQU1Z1eHIwTTV4SWJOdzNrZEJ1RFhtRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkEzOS83MzBGMDBCMkIxQzQxMUU5QkVDQjE4MjVDNEY5QUUwMi81N1FiUFNWdXhy ME01eEliTncza2RCdURYbUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDWtWkUG3NbzAqfEzh1PBRaRlh6sZCSgtlPNfSQY/24xGR0ZV44WHvT x87E8Zwvr6F9Al4EV5Xheqsi1hfcA3gCSCReA5UIiYCH8OFsscrWbaEp5kZZgm+P IJeJ5N6WrUirMpkJQgf/o/jrtggMwhpx+zeQ/GUwXNqEqIQvJ8q3bQM8J2zA2YcM nnXp8AcuT7c4XfFqIiUDIfay2PwaxSVfwFUW0ttyWbTANNS8DHEdrnt2OzioJpFY q/kTBWkoDXmWyvCxgRHgo6E95SmwFu/Ra8959gEtIi2hc2NF1sB9IJPmVu9rQPGx ExSC78IJ4HgPz9MmPxV0H2px8C+Ey7In -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:58 2025 by rpki-client on console.sobornost.net