$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.mft File: 9pu293YHOZ_TQrEkyvjejeR_cw8.mft (raw, json) Hash identifier: B6nHl+W3KOn7JswCLqqI1m3D2HrDCFywWHkRXAl08Es= Subject key identifier: F6:73:CC:2F:6D:92:6B:CF:E2:E1:0F:96:A7:E1:19:42:02:34:AA:C2 Authority key identifier: F6:9B:B6:F7:76:07:39:9F:D3:42:B1:24:CA:F8:DE:8D:E4:7F:73:0F Certificate issuer: /CN=A91CBB1B/serialNumber=F69BB6F77607399FD342B124CAF8DE8DE47F730F Certificate serial: 01AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pu293YHOZ_TQrEkyvjejeR_cw8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.mft Manifest number: 01A7 Signing time: Sun 27 Apr 2025 02:20:23 +0000 Manifest this update: Sun 27 Apr 2025 02:20:22 +0000 Manifest next update: Sun 04 May 2025 02:20:22 +0000 Files and hashes: 1: 9pu293YHOZ_TQrEkyvjejeR_cw8.crl (hash: atPStwXTvoiw8lD3nzyZ5ic0UmUzhNEt4ziZ5GsWvb0=) 2: A606B22CA65211EDB3A5967CC4F9AE02.roa (hash: OlmuxEBq0fJDq+ub9McrhDdVwDRZLRD2yDkFBtrKAKM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.crl rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pu293YHOZ_TQrEkyvjejeR_cw8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:20:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 429 (0x1ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBB1B, serialNumber=F69BB6F77607399FD342B124CAF8DE8DE47F730F Validity Not Before: Apr 27 02:20:22 2025 GMT Not After : May 4 02:20:22 2025 GMT Subject: CN=680d9467-eaf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7c:71:f6:80:34:cd:1a:0a:f2:68:81:5a:53: d0:42:0a:b3:21:26:bb:ce:e7:ec:51:d4:2a:1c:49: 12:fd:04:e1:35:b0:b0:cd:fb:44:91:84:71:5a:a0: 60:88:15:a8:b3:5d:21:b6:3d:c6:9c:ff:99:3a:6a: 95:d0:ca:06:c5:23:b7:de:36:45:73:fc:f5:1a:24: 3f:7a:02:e0:1c:85:d8:78:02:a3:ec:b1:02:01:68: 2a:66:4e:05:d4:1d:00:27:4a:48:20:d5:c7:be:55: cb:f9:bb:1c:a3:88:ea:73:03:a8:51:99:79:ba:18: a2:1b:a0:43:07:29:00:bc:90:4e:48:aa:1d:7d:a5: ae:97:03:6a:35:f9:d8:e1:e4:de:94:67:df:f4:9a: a1:f2:ea:2c:ea:1d:8a:17:f9:81:c9:1e:b1:40:94: 5e:dc:5a:f8:57:99:9b:44:01:24:4f:48:41:d5:fb: 28:69:54:93:e9:45:68:ac:9b:0d:3e:5f:87:89:89: fe:6e:31:65:6f:17:f8:3f:fd:b6:45:83:6d:a6:92: bb:fc:da:a1:a4:e5:e4:25:67:a2:df:4d:07:e9:be: c7:69:ce:be:39:ea:71:c6:1e:e9:61:39:6c:09:50: d2:1f:87:73:97:50:eb:d9:c4:19:94:4b:0c:7d:cb: 12:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:73:CC:2F:6D:92:6B:CF:E2:E1:0F:96:A7:E1:19:42:02:34:AA:C2 X509v3 Authority Key Identifier: keyid:F6:9B:B6:F7:76:07:39:9F:D3:42:B1:24:CA:F8:DE:8D:E4:7F:73:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pu293YHOZ_TQrEkyvjejeR_cw8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:59:e4:cf:6d:b2:56:d8:93:b3:ac:93:3c:d9:4d:2d:85:7d: 5c:af:a1:84:5d:47:5b:0f:50:2f:4a:cd:b8:75:65:9f:05:e5: 3d:3d:2a:12:fa:68:11:3b:cb:96:e0:50:e6:4a:de:d5:20:40: e4:6a:f4:67:a0:a3:51:5c:a5:b9:45:7e:52:48:64:ac:3b:b6: fd:79:a1:67:81:8c:03:96:91:4c:34:0f:4d:6e:6e:ca:1e:9b: 15:02:69:bf:d9:96:27:e8:2c:ed:d4:77:98:ea:06:5f:80:1e: b1:74:d0:27:a4:a5:85:54:f1:24:c2:e1:34:18:21:fc:65:22: e5:53:5d:81:be:ed:9d:09:44:12:7d:0d:c6:44:a5:63:f8:5c: fd:6e:99:fe:88:0a:fd:d0:cd:02:30:5d:ae:20:ea:92:47:d7: fe:98:73:5f:db:1a:3c:51:30:2f:aa:f8:67:a2:59:d9:0f:86: 77:c7:b2:c6:ef:89:89:8d:e7:42:93:0e:c5:f8:d1:ce:84:ea: df:75:1e:ad:7f:67:9d:84:84:01:48:e9:b4:b2:a8:40:97:8b: fd:68:e9:2c:73:d2:79:66:c2:2b:f7:d0:18:2b:13:7a:44:22: 95:e6:8a:f9:8c:0a:09:87:c6:61:ea:76:0a:48:1d:13:92:05: e2:a5:01:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JCMUIxMTAvBgNVBAUTKEY2OUJCNkY3NzYwNzM5OUZEMzQyQjEyNENBRjhERThE RTQ3RjczMEYwHhcNMjUwNDI3MDIyMDIyWhcNMjUwNTA0MDIyMDIyWjAYMRYwFAYD VQQDEw02ODBkOTQ2Ny1lYWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAunxx9oA0zRoK8miBWlPQQgqzISa7zufsUdQqHEkS/QThNbCwzftEkYRxWqBg iBWos10htj3GnP+ZOmqV0MoGxSO33jZFc/z1GiQ/egLgHIXYeAKj7LECAWgqZk4F 1B0AJ0pIINXHvlXL+bsco4jqcwOoUZl5uhiiG6BDBykAvJBOSKodfaWulwNqNfnY 4eTelGff9Jqh8uos6h2KF/mByR6xQJRe3Fr4V5mbRAEkT0hB1fsoaVST6UVorJsN Pl+HiYn+bjFlbxf4P/22RYNtppK7/NqhpOXkJWei300H6b7Hac6+Oepxxh7pYTls CVDSH4dzl1Dr2cQZlEsMfcsSdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPZzzC9t kmvP4uEPlqfhGUICNKrCMB8GA1UdIwQYMBaAFPabtvd2Bzmf00KxJMr43o3kf3MP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkIxQi8yQUQxMzk4NkE2 NEYxMUVEOTgwMkNBNzZDNEY5QUUwMi85cHUyOTNZSE9aX1RRckVreXZqZWplUl9j dzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlwdTI5M1lIT1pfVFFyRWt5dmplamVSX2N3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkIxQi8yQUQxMzk4NkE2NEYxMUVEOTgwMkNBNzZDNEY5QUUwMi85cHUyOTNZSE9a X1RRckVreXZqZWplUl9jdzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGWeTPbbJW2JOzrJM82U0thX1cr6GEXUdbD1AvSs24dWWfBeU9PSoS +mgRO8uW4FDmSt7VIEDkavRnoKNRXKW5RX5SSGSsO7b9eaFngYwDlpFMNA9Nbm7K HpsVAmm/2ZYn6Czt1HeY6gZfgB6xdNAnpKWFVPEkwuE0GCH8ZSLlU12Bvu2dCUQS fQ3GRKVj+Fz9bpn+iAr90M0CMF2uIOqSR9f+mHNf2xo8UTAvqvhnolnZD4Z3x7LG 74mJjedCkw7F+NHOhOrfdR6tf2edhIQBSOm0sqhAl4v9aOksc9J5ZsIr99AYKxN6 RCKV5or5jAoJh8Zh6nYKSB0TkgXipQGj -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:11 2025 by rpki-client on console.sobornost.net