$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.mft File: Ktu3GxFSPKM5Ll832dx2shHb4IM.mft (raw, json) Hash identifier: PXgIUzCXfJ3go1th5BOX1kGgQ23rj/tXzR1YicfLs0Y= Subject key identifier: F5:5B:D4:93:90:1F:D7:0E:CB:46:B2:5E:99:F7:73:20:B0:16:28:CD Authority key identifier: 2A:DB:B7:1B:11:52:3C:A3:39:2E:5F:37:D9:DC:76:B2:11:DB:E0:83 Certificate issuer: /CN=A91C8347/serialNumber=2ADBB71B11523CA3392E5F37D9DC76B211DBE083 Certificate serial: E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ktu3GxFSPKM5Ll832dx2shHb4IM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.mft Manifest number: D7 Signing time: Wed 23 Apr 2025 04:58:02 +0000 Manifest this update: Wed 23 Apr 2025 04:58:01 +0000 Manifest next update: Wed 30 Apr 2025 04:58:01 +0000 Files and hashes: 1: Ktu3GxFSPKM5Ll832dx2shHb4IM.crl (hash: h0bWemeDaf86e+b/hCEEMR9cFPNjMoEMOrEtSrF8jEY=) 2: 34C7EB4010F411EFB4CD9614C4F9AE02.roa (hash: fhHN+wika6qw4BQ5YkJmWVk33R5FKnY5aL2UuUzBHhw=) 3: F4777FBEEDDA11EF9731160CC4F9AE02.roa (hash: /1+2xPWqZMP3cO+rD339mV/1/rVWVDweL8VvbjIWd3Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.crl rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ktu3GxFSPKM5Ll832dx2shHb4IM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 04:47:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 233 (0xe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8347, serialNumber=2ADBB71B11523CA3392E5F37D9DC76B211DBE083 Validity Not Before: Apr 23 04:58:01 2025 GMT Not After : Apr 30 04:58:01 2025 GMT Subject: CN=68087359-fdd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e1:40:a6:e7:c4:09:6d:15:58:ae:c9:ae:52: 73:0b:51:6f:ed:fd:d4:2f:0c:55:30:6c:cc:3f:6b: c7:6e:05:9f:b8:e2:ff:5c:13:9e:bd:ce:05:a9:52: 88:d0:aa:9a:4d:17:fa:07:b7:8c:f2:ec:42:ea:a7: 1e:e1:93:0d:e1:e8:09:8c:68:fc:3d:bc:9c:2f:e5: 51:7b:0b:27:b0:18:98:ee:91:97:19:08:f4:b9:21: 77:99:e7:e2:e1:fd:d2:4f:7c:1b:24:47:f4:a1:9c: 68:7c:2a:2d:4b:4d:23:1a:71:aa:fb:d0:6d:7f:9b: ac:af:30:37:c7:1b:6a:dd:31:6d:5e:34:5c:62:23: 98:e8:2e:2f:b1:15:3c:20:56:7a:f4:d0:60:91:80: 53:eb:e1:ac:cc:57:a8:a1:57:5d:59:ac:65:3d:b7: ae:72:4c:2b:f6:1f:6b:32:d6:93:3f:b8:38:15:6e: 25:61:87:45:44:55:6f:01:8c:40:8f:77:73:02:03: 3a:2e:6c:0a:90:10:71:7d:00:c8:11:7e:97:7f:82: a9:56:16:8d:99:5f:f4:88:ae:e0:92:3d:44:86:54: 05:11:03:49:c5:3c:51:e9:38:e9:b9:cd:14:23:b9: 60:b6:da:bf:07:b9:9c:da:85:41:18:56:e0:11:2b: e8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:5B:D4:93:90:1F:D7:0E:CB:46:B2:5E:99:F7:73:20:B0:16:28:CD X509v3 Authority Key Identifier: keyid:2A:DB:B7:1B:11:52:3C:A3:39:2E:5F:37:D9:DC:76:B2:11:DB:E0:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ktu3GxFSPKM5Ll832dx2shHb4IM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:94:0f:1f:0a:a9:24:5a:3f:c0:a3:3b:19:b7:43:54:bf:d2: 6b:9e:9a:7f:70:dd:c9:ed:7c:b7:68:55:67:3b:b7:7a:11:b2: a6:d8:9e:e5:d2:48:a9:1d:6d:1d:39:bd:31:3e:cb:fc:00:33: 3e:3e:0a:c0:1b:9a:65:45:f7:ac:9e:c7:ca:9e:cf:44:2c:49: 90:d9:b0:85:43:b5:13:0b:05:0e:aa:ab:9a:4e:e4:86:b6:ea: 29:43:29:08:4a:99:29:ca:93:11:50:0a:6b:6c:53:7c:12:44: 6d:dd:57:60:1a:94:1c:dc:00:09:b2:c0:f1:1c:93:09:33:c5: e9:2a:5c:0f:e6:66:c7:cb:c5:a7:15:02:06:4d:14:81:93:bb: a7:ef:e5:7e:16:52:3e:8a:65:8d:56:d8:16:e9:69:f4:6b:9a: 68:3a:e1:81:41:f0:ab:28:56:54:6b:0f:b8:72:42:97:92:03: 03:6a:5f:1c:44:7d:9b:43:53:27:19:73:1f:de:de:46:7b:4f: cd:a7:b8:2a:79:36:05:eb:20:ae:1c:8e:4b:5d:96:f4:e4:f9: 6d:08:c4:a9:e8:54:16:de:18:c2:cd:90:84:96:9e:30:d2:23: fa:e2:0b:19:2d:cc:59:2f:22:65:fa:8a:89:74:41:3f:96:70: 49:f6:b2:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgzNDcxMTAvBgNVBAUTKDJBREJCNzFCMTE1MjNDQTMzOTJFNUYzN0Q5REM3NkIy MTFEQkUwODMwHhcNMjUwNDIzMDQ1ODAxWhcNMjUwNDMwMDQ1ODAxWjAYMRYwFAYD VQQDEw02ODA4NzM1OS1mZGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAweFApufECW0VWK7JrlJzC1Fv7f3ULwxVMGzMP2vHbgWfuOL/XBOevc4FqVKI 0KqaTRf6B7eM8uxC6qce4ZMN4egJjGj8PbycL+VRewsnsBiY7pGXGQj0uSF3mefi 4f3ST3wbJEf0oZxofCotS00jGnGq+9Btf5usrzA3xxtq3TFtXjRcYiOY6C4vsRU8 IFZ69NBgkYBT6+GszFeooVddWaxlPbeuckwr9h9rMtaTP7g4FW4lYYdFRFVvAYxA j3dzAgM6LmwKkBBxfQDIEX6Xf4KpVhaNmV/0iK7gkj1EhlQFEQNJxTxR6Tjpuc0U I7lgttq/B7mc2oVBGFbgESvoEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPVb1JOQ H9cOy0ayXpn3cyCwFijNMB8GA1UdIwQYMBaAFCrbtxsRUjyjOS5fN9ncdrIR2+CD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODM0Ny9DM0U3MjE5MEY5 QTkxMUVFQTgyQTc5MUFDNEY5QUUwMi9LdHUzR3hGU1BLTTVMbDgzMmR4MnNoSGI0 SU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t0dTNHeEZTUEtNNUxsODMyZHgyc2hIYjRJTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODM0Ny9DM0U3MjE5MEY5QTkxMUVFQTgyQTc5MUFDNEY5QUUwMi9LdHUzR3hGU1BL TTVMbDgzMmR4MnNoSGI0SU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKlA8fCqkkWj/AozsZt0NUv9Jrnpp/cN3J7Xy3aFVnO7d6EbKm2J7l 0kipHW0dOb0xPsv8ADM+PgrAG5plRfesnsfKns9ELEmQ2bCFQ7UTCwUOqquaTuSG tuopQykISpkpypMRUAprbFN8EkRt3VdgGpQc3AAJssDxHJMJM8XpKlwP5mbHy8Wn FQIGTRSBk7un7+V+FlI+imWNVtgW6Wn0a5poOuGBQfCrKFZUaw+4ckKXkgMDal8c RH2bQ1MnGXMf3t5Ge0/Np7gqeTYF6yCuHI5LXZb05PltCMSp6FQW3hjCzZCElp4w 0iP64gsZLcxZLyJl+oqJdEE/lnBJ9rIb -----END CERTIFICATE-----Generated at Wed Apr 23 06:36:00 2025 by rpki-client on console.sobornost.net