$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.mft File: XnKqfVsdVjLl0z_scvp0M_Sc4po.mft (raw, json) Hash identifier: raFPmvtQRuixKxtsHSOcm4Pa85z9DA/bKPaVUylJR1w= Subject key identifier: 8B:CE:58:E1:90:62:07:1E:FD:6A:78:69:34:22:EE:B6:DF:93:91:80 Authority key identifier: 5E:72:AA:7D:5B:1D:56:32:E5:D3:3F:EC:72:FA:74:33:F4:9C:E2:9A Certificate issuer: /CN=A91C9E82/serialNumber=5E72AA7D5B1D5632E5D33FEC72FA7433F49CE29A Certificate serial: 0159 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.mft Manifest number: 013C Signing time: Wed 23 Apr 2025 03:50:19 +0000 Manifest this update: Wed 23 Apr 2025 03:50:18 +0000 Manifest next update: Wed 30 Apr 2025 03:50:18 +0000 Files and hashes: 1: XnKqfVsdVjLl0z_scvp0M_Sc4po.crl (hash: cnl9irdautGQvvXKQ8PVLCjV4WNFoiCQ+F1Ld3FdemQ=) 2: 36C31E00637111EEA51CA05EC4F9AE02.roa (hash: VRlasPmFdnGQ7jXmsGRiZ9YkkvB4UEQJbRXUpRC4bL8=) 3: 00E626A4A57611EF98285E5FC4F9AE02.roa (hash: ebTeaPrWBlAg+bHK7CkBFu5kiy7GaQn9QlJ0VdT4JzQ=) 4: 98BE8828663D11EE8CBBAE7CC4F9AE02.roa (hash: qOQvPOfqQOexW3Sxvhsqmm5W1KEN72YTFSt5Z0QktXg=) 5: 99341DD6663D11EE8CBBAE7CC4F9AE02.roa (hash: pidH+xtb8OXyN3SlmzLiBUdr0SQho8QbaXQpLP6w5rQ=) 6: 678C24C0663F11EEBD955D43C4F9AE02.roa (hash: LMxslHx0hj+eRPegweO/Q77RiY35syFR40MU3J+sT8s=) 7: 9830B6D8663D11EE8CBBAE7CC4F9AE02.roa (hash: Wa8VD0lmDOwdth5KoUIOfMLBdB57aoMl1cYAfCOjMXs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.crl rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 03:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 345 (0x159) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9E82, serialNumber=5E72AA7D5B1D5632E5D33FEC72FA7433F49CE29A Validity Not Before: Apr 23 03:50:18 2025 GMT Not After : Apr 30 03:50:18 2025 GMT Subject: CN=6808637a-d192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ea:a5:9b:99:89:ec:7f:13:57:aa:f0:56:5d: 35:f3:08:df:0e:05:6d:df:44:74:af:ac:c7:5b:ab: 26:33:d9:bd:37:2c:e3:f7:26:c5:30:de:7e:4c:6d: 86:90:6e:c9:5a:31:e8:48:49:eb:61:ad:c6:14:50: 49:8d:a0:ad:1a:dd:9b:d5:f1:cf:3b:84:5e:7b:73: cc:05:67:ab:31:eb:89:2c:8a:37:26:ab:15:4a:e6: 8c:48:e2:4e:bb:ba:b6:43:6f:e0:82:61:67:b2:b7: 84:be:30:c2:54:0f:ae:d9:46:90:5f:d9:32:21:56: 3d:be:3d:04:03:be:9d:00:75:bb:ab:80:e4:21:1f: 17:53:fd:51:b9:42:35:d9:0c:a5:fc:e6:48:8b:e1: f8:90:35:47:34:29:0a:04:3d:c3:85:4f:5d:6e:a8: 08:65:16:95:ca:c6:f5:7d:f8:d5:c9:db:ad:ad:6e: a2:12:e6:b2:2e:4f:a9:a0:13:0a:26:83:44:8e:1c: 2a:40:57:c2:96:c6:e8:78:71:84:09:29:54:dc:e8: 7d:5a:12:39:95:2e:0d:10:91:79:da:2d:02:7f:6d: 22:41:5e:74:5d:fe:64:5a:68:14:d1:50:72:78:b4: 9b:54:5e:dd:96:56:0d:71:ac:3f:af:39:27:74:3c: b3:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:CE:58:E1:90:62:07:1E:FD:6A:78:69:34:22:EE:B6:DF:93:91:80 X509v3 Authority Key Identifier: keyid:5E:72:AA:7D:5B:1D:56:32:E5:D3:3F:EC:72:FA:74:33:F4:9C:E2:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:d6:93:f1:87:1c:a8:f8:86:82:35:56:46:ab:b6:a3:a3:ea: ea:dd:ec:07:d0:b1:50:39:38:50:02:26:66:74:5b:ef:60:e2: 9d:44:e9:f0:a5:63:3a:e5:4f:f3:46:02:2f:c1:90:c3:53:bf: 51:f2:fb:f4:3f:8f:b5:3d:7d:a4:a3:7f:3a:61:a2:a7:4f:8a: a8:27:82:7c:65:4d:79:e0:47:5a:13:5f:d1:1d:6c:ae:4a:28: b6:07:4f:40:f8:e9:4a:d8:a1:69:66:66:61:4f:7f:19:68:21: d3:12:cd:2e:77:76:72:6a:48:dc:09:10:6f:1d:12:11:61:04: 21:5d:15:90:90:9b:68:0e:8f:55:2a:e4:30:b2:ee:91:91:f7: ab:b2:0b:8a:ce:a0:b5:06:bd:2b:95:e6:0a:99:59:eb:40:b1: 34:cb:03:0b:c8:d0:4d:78:c5:fa:ce:d3:7a:5a:ed:06:e6:57: 16:d5:6e:ef:86:13:8a:7b:bf:2e:c1:24:a5:74:57:52:ca:f1: 26:67:71:12:66:30:1b:d3:ed:f7:9e:1e:34:18:f8:00:a9:f9: 09:26:7e:c0:50:2f:b4:12:64:ae:f7:6f:d9:31:0b:f6:e1:ad: f8:5b:e7:b9:28:f8:6f:6c:69:11:f0:dd:2c:74:01:d5:df:cd: 68:0c:70:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlFODIxMTAvBgNVBAUTKDVFNzJBQTdENUIxRDU2MzJFNUQzM0ZFQzcyRkE3NDMz RjQ5Q0UyOUEwHhcNMjUwNDIzMDM1MDE4WhcNMjUwNDMwMDM1MDE4WjAYMRYwFAYD VQQDEw02ODA4NjM3YS1kMTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1eqlm5mJ7H8TV6rwVl018wjfDgVt30R0r6zHW6smM9m9Nyzj9ybFMN5+TG2G kG7JWjHoSEnrYa3GFFBJjaCtGt2b1fHPO4Ree3PMBWerMeuJLIo3JqsVSuaMSOJO u7q2Q2/ggmFnsreEvjDCVA+u2UaQX9kyIVY9vj0EA76dAHW7q4DkIR8XU/1RuUI1 2Qyl/OZIi+H4kDVHNCkKBD3DhU9dbqgIZRaVysb1ffjVydutrW6iEuayLk+poBMK JoNEjhwqQFfClsboeHGECSlU3Oh9WhI5lS4NEJF52i0Cf20iQV50Xf5kWmgU0VBy eLSbVF7dllYNcaw/rzkndDyzIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIvOWOGQ Ygce/Wp4aTQi7rbfk5GAMB8GA1UdIwQYMBaAFF5yqn1bHVYy5dM/7HL6dDP0nOKa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUU4Mi9FQTdFNUZBNjYz NkYxMUVFOTdDNzRCNUNDNEY5QUUwMi9YbktxZlZzZFZqTGwwel9zY3ZwME1fU2M0 cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1huS3FmVnNkVmpMbDB6X3NjdnAwTV9TYzRwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUU4Mi9FQTdFNUZBNjYzNkYxMUVFOTdDNzRCNUNDNEY5QUUwMi9YbktxZlZzZFZq TGwwel9zY3ZwME1fU2M0cG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBs1pPxhxyo+IaCNVZGq7ajo+rq3ewH0LFQOThQAiZmdFvvYOKdROnw pWM65U/zRgIvwZDDU79R8vv0P4+1PX2ko386YaKnT4qoJ4J8ZU154EdaE1/RHWyu Sii2B09A+OlK2KFpZmZhT38ZaCHTEs0ud3ZyakjcCRBvHRIRYQQhXRWQkJtoDo9V KuQwsu6RkfersguKzqC1Br0rleYKmVnrQLE0ywMLyNBNeMX6ztN6Wu0G5lcW1W7v hhOKe78uwSSldFdSyvEmZ3ESZjAb0+33nh40GPgAqfkJJn7AUC+0EmSu92/ZMQv2 4a34W+e5KPhvbGkR8N0sdAHV381oDHBx -----END CERTIFICATE-----Generated at Wed Apr 23 06:36:00 2025 by rpki-client on console.sobornost.net