$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft File: fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft (raw, json) Hash identifier: /jGvyauakRmCNIJoY9CPSpo7ARk47Fec1ADcOp48YJs= Subject key identifier: 0C:9D:BF:E3:66:E8:75:C3:46:D3:14:C4:42:3D:B4:16:66:1F:E6:F5 Authority key identifier: 7D:23:E7:5C:10:DF:65:71:BE:AC:17:F3:55:5E:1B:99:83:81:42:25 Certificate issuer: /CN=A91C6BF0/serialNumber=7D23E75C10DF6571BEAC17F3555E1B9983814225 Certificate serial: 018E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft Manifest number: 0F7D Signing time: Mon 28 Apr 2025 18:05:14 +0000 Manifest this update: Mon 28 Apr 2025 18:05:13 +0000 Manifest next update: Mon 05 May 2025 18:05:13 +0000 Files and hashes: 1: fSPnXBDfZXG-rBfzVV4bmYOBQiU.crl (hash: 6Yy7PFgNXdJg8/fknh/lL07/TVVaguZ71wcd5N3cUqA=) 2: 329274C4D31611EEA7F0475FC4F9AE02.roa (hash: pr44aMdjUjF3qJ5V59OemeYMLJZAouFtZX25Dx2aXA8=) 3: B4A14106974911EEBAFA257BC4F9AE02.roa (hash: Fb7LVlJG+JVdijAn+Ys69+wkABJKfcULX5Fgfk+/L5A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.crl rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 18:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 398 (0x18e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6BF0, serialNumber=7D23E75C10DF6571BEAC17F3555E1B9983814225 Validity Not Before: Apr 28 18:05:13 2025 GMT Not After : May 5 18:05:13 2025 GMT Subject: CN=680fc359-d382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:dd:92:46:73:29:9f:9c:c6:fa:a9:24:ad:56: 9a:36:2a:ff:cc:af:0c:6c:6d:47:3f:83:d0:6b:9e: dc:24:84:38:61:71:97:de:80:db:a0:ff:75:e1:99: 70:bd:a4:68:29:84:5b:60:6d:7f:fe:52:1a:e6:62: ee:f5:37:4e:d8:e7:48:97:5b:8c:97:96:43:55:ea: 4a:73:35:39:58:51:88:ad:69:38:29:84:73:46:59: 57:d4:2d:e9:d4:88:4c:29:07:3d:ee:45:5f:36:ef: 7d:ff:ff:1e:8e:3b:57:a6:24:d8:b3:e8:ee:03:d0: 7d:a5:9b:e1:74:b9:54:ce:68:33:c7:1d:82:cd:84: 9e:3b:74:91:7d:3b:5d:2d:1d:33:1d:97:49:c1:ab: 39:31:03:fa:4f:b5:53:a5:ee:af:c7:8c:bc:44:59: 0a:12:6f:a7:75:58:26:84:ee:4f:9a:63:36:fb:8a: 12:9b:9e:1e:0a:10:dd:78:e5:bc:1d:ea:b3:4e:2c: 02:5f:17:14:5e:29:e9:9a:0e:61:d5:b0:a5:ba:92: 4f:d0:9d:ac:15:93:17:c6:a3:71:d0:70:21:9f:f7: b2:bf:37:ff:90:7d:57:73:2f:72:04:01:5d:9b:a2: 36:97:ab:fa:cf:ce:79:90:e9:5f:ca:21:66:b5:d4: 6f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:9D:BF:E3:66:E8:75:C3:46:D3:14:C4:42:3D:B4:16:66:1F:E6:F5 X509v3 Authority Key Identifier: keyid:7D:23:E7:5C:10:DF:65:71:BE:AC:17:F3:55:5E:1B:99:83:81:42:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:01:a2:f1:37:5d:06:4a:e3:51:fd:dd:36:be:e0:eb:a3:1c: 2f:c2:68:a9:e3:b3:2d:85:c7:2c:57:c4:e7:6a:5e:c2:a1:ec: 4a:be:39:4c:92:83:5a:e2:d5:13:da:2f:ed:c8:82:ed:9b:8a: be:3e:5a:4a:6c:6b:2c:d8:7c:8c:bd:f9:e5:b8:5f:fc:81:35: 14:cb:e4:da:70:9e:04:b7:3a:dc:3a:5c:7d:5e:54:40:d2:42: 31:6f:35:73:a2:08:19:7a:9a:f1:1a:f0:73:ac:18:a4:3f:66: e5:43:78:3e:94:a4:80:6f:fa:e7:e9:00:9d:3a:bc:1a:e9:63: 2f:26:c3:60:b9:62:76:58:b2:bf:ed:48:9a:d3:c9:3a:6f:9b: 8d:d0:44:c7:30:44:de:b9:53:3b:9c:d0:18:1b:ab:6a:80:48: 9b:4a:66:1c:73:0f:c8:34:d4:6e:9b:33:c7:11:cb:be:61:f5: 4e:9b:6c:0b:b5:a5:f8:13:be:1f:d1:cb:ba:87:6a:15:7f:e7: e5:c6:33:05:4b:87:bd:8c:bf:c1:5d:b5:c2:1e:c3:e4:45:d7: d7:7f:ef:2c:a9:a5:e8:66:48:3d:46:ef:88:15:ea:0e:47:0a: 1b:de:f5:88:63:16:cd:cc:bd:16:07:b8:f2:6a:18:8e:72:bc: 21:b5:c4:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZCRjAxMTAvBgNVBAUTKDdEMjNFNzVDMTBERjY1NzFCRUFDMTdGMzU1NUUxQjk5 ODM4MTQyMjUwHhcNMjUwNDI4MTgwNTEzWhcNMjUwNTA1MTgwNTEzWjAYMRYwFAYD VQQDEw02ODBmYzM1OS1kMzgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvd2SRnMpn5zG+qkkrVaaNir/zK8MbG1HP4PQa57cJIQ4YXGX3oDboP914Zlw vaRoKYRbYG1//lIa5mLu9TdO2OdIl1uMl5ZDVepKczU5WFGIrWk4KYRzRllX1C3p 1IhMKQc97kVfNu99//8ejjtXpiTYs+juA9B9pZvhdLlUzmgzxx2CzYSeO3SRfTtd LR0zHZdJwas5MQP6T7VTpe6vx4y8RFkKEm+ndVgmhO5PmmM2+4oSm54eChDdeOW8 HeqzTiwCXxcUXinpmg5h1bClupJP0J2sFZMXxqNx0HAhn/eyvzf/kH1Xcy9yBAFd m6I2l6v6z855kOlfyiFmtdRvwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAydv+Nm 6HXDRtMUxEI9tBZmH+b1MB8GA1UdIwQYMBaAFH0j51wQ32VxvqwX81VeG5mDgUIl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkJGMC8xNDkxOTc0QUFF QkIxMUU5OEEzOTBCNTlDNEY5QUUwMi9mU1BuWEJEZlpYRy1yQmZ6VlY0Ym1ZT0JR aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZTUG5YQkRmWlhHLXJCZnpWVjRibVlPQlFpVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkJGMC8xNDkxOTc0QUFFQkIxMUU5OEEzOTBCNTlDNEY5QUUwMi9mU1BuWEJEZlpY Ry1yQmZ6VlY0Ym1ZT0JRaVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7AaLxN10GSuNR/d02vuDroxwvwmip47MthccsV8Tnal7CoexKvjlM koNa4tUT2i/tyILtm4q+PlpKbGss2HyMvfnluF/8gTUUy+TacJ4EtzrcOlx9XlRA 0kIxbzVzoggZeprxGvBzrBikP2blQ3g+lKSAb/rn6QCdOrwa6WMvJsNguWJ2WLK/ 7Uia08k6b5uN0ETHMETeuVM7nNAYG6tqgEibSmYccw/INNRumzPHEcu+YfVOm2wL taX4E74f0cu6h2oVf+flxjMFS4e9jL/BXbXCHsPkRdfXf+8sqaXoZkg9Ru+IFeoO Rwob3vWIYxbNzL0WB7jyahiOcrwhtcQd -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:58 2025 by rpki-client on console.sobornost.net