$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft File: T_-scXgTOS7hyHajIWceHWwqubQ.mft (raw, json) Hash identifier: BWigXSobfSZ1Dy/RlA9u61/lUSA6EqghaG/+2C5ulZM= Subject key identifier: 36:9E:E8:1E:BF:A6:39:58:14:35:65:B7:A0:FE:B2:BA:84:EA:36:98 Authority key identifier: 4F:FF:AC:71:78:13:39:2E:E1:C8:76:A3:21:67:1E:1D:6C:2A:B9:B4 Certificate issuer: /CN=A91CE39F/serialNumber=4FFFAC717813392EE1C876A321671E1D6C2AB9B4 Certificate serial: 07C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_-scXgTOS7hyHajIWceHWwqubQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft Manifest number: 07AE Signing time: Thu 24 Apr 2025 21:03:08 +0000 Manifest this update: Thu 24 Apr 2025 21:03:07 +0000 Manifest next update: Thu 01 May 2025 21:03:07 +0000 Files and hashes: 1: T_-scXgTOS7hyHajIWceHWwqubQ.crl (hash: sI+UN2xgaDnJMh+acqh615bzIhIsQQtlr7vwzJwn/j0=) 2: CAF5CED2E1A511EC8AB72944C4F9AE02.roa (hash: VwKaIz3U6aDghRoNhWv7S/G0XuOUWwKqRpkvmSggRD4=) 3: CC57D98CE1A511EC8AB72944C4F9AE02.roa (hash: KGmpX6V6GwHwuicQlQLq7ntPEMjkSVAxnjSlxc3wQ2A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.crl rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_-scXgTOS7hyHajIWceHWwqubQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:56:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1984 (0x7c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE39F, serialNumber=4FFFAC717813392EE1C876A321671E1D6C2AB9B4 Validity Not Before: Apr 24 21:03:07 2025 GMT Not After : May 1 21:03:07 2025 GMT Subject: CN=680aa70c-e71b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d8:36:c3:b2:28:a0:40:62:87:b6:77:14:89: 29:04:d4:60:02:c2:a3:3e:84:42:55:e8:aa:7d:65: 4f:8d:d4:1e:4a:e9:2c:46:e4:dc:03:49:9e:36:15: 9b:b1:b4:73:c3:7c:36:1c:46:85:fe:81:03:37:bb: f5:42:e6:54:2c:d1:07:4d:be:7a:f0:90:bb:a2:b8: 94:ee:4e:26:a6:0f:c8:83:68:1d:a5:66:a6:2f:c8: f5:e9:61:42:df:ab:ef:e3:84:70:1b:8e:73:c1:09: 0b:13:10:1e:2f:34:69:26:ac:b3:d0:7a:54:ec:0a: aa:1d:db:96:62:ea:8e:fe:92:f1:fe:07:aa:8b:74: 57:88:4a:35:fa:02:d2:18:20:9e:13:9b:d8:9f:d7: e8:76:8c:8d:b4:78:17:73:f9:1d:bf:07:72:96:db: 8a:ff:d9:6e:ac:f7:68:d6:de:57:38:fc:14:1b:24: 42:23:b8:48:05:ee:9d:bd:24:f5:ad:81:08:f9:d8: cc:aa:c7:14:4a:e1:9d:de:55:2f:ed:22:9a:d3:7f: a9:a1:3a:11:b2:e3:9f:d4:7d:0b:fe:c3:a6:74:1f: 37:5d:c8:c9:cb:8d:47:3c:ff:e5:78:eb:ec:27:56: fe:ba:40:fa:ea:ea:1b:1a:30:6d:11:a7:ba:f3:58: f8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:9E:E8:1E:BF:A6:39:58:14:35:65:B7:A0:FE:B2:BA:84:EA:36:98 X509v3 Authority Key Identifier: keyid:4F:FF:AC:71:78:13:39:2E:E1:C8:76:A3:21:67:1E:1D:6C:2A:B9:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_-scXgTOS7hyHajIWceHWwqubQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:9f:21:51:cd:92:e9:5d:62:c0:b9:c5:78:83:a2:f3:67:e5: ca:fc:4f:9c:72:9d:39:d7:8e:e1:97:6e:e3:5d:37:2e:60:d1: 9f:16:25:5c:49:9f:cf:22:31:db:30:be:8d:5b:2e:00:4a:3c: 4d:ac:9e:d1:89:c1:62:0c:57:e3:35:15:b7:52:f1:7f:f2:fe: 57:4a:7d:64:29:4b:3a:94:15:c5:1d:d3:b9:8b:33:fe:b0:9c: c2:4e:fa:43:e0:08:70:99:79:41:e8:0a:e6:7d:0e:9f:52:18: 97:a2:a7:ca:ca:2b:6a:f5:f2:ea:76:ef:66:7b:e9:27:a1:cf: 79:b3:89:a4:44:55:76:8d:fd:01:01:76:94:03:77:10:a3:ce: 71:6a:36:e4:4f:4d:96:ca:8d:b9:60:4b:4d:4c:dd:5b:78:9b: fc:d1:70:22:74:bd:ab:23:58:b2:d4:a0:e4:e2:53:20:3e:03: 34:df:e5:01:a9:8a:9d:41:00:19:e5:12:13:f1:01:b9:c5:75: e1:fc:f1:59:96:8c:26:e6:7f:2f:3c:8e:92:49:08:1a:db:0c: 00:51:e4:3b:90:e3:84:22:33:3a:58:a3:b9:a9:db:ea:37:35: f8:f4:08:55:ec:6e:c8:4b:dd:d2:ac:36:da:14:62:57:a3:62: 0d:54:84:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UzOUYxMTAvBgNVBAUTKDRGRkZBQzcxNzgxMzM5MkVFMUM4NzZBMzIxNjcxRTFE NkMyQUI5QjQwHhcNMjUwNDI0MjEwMzA3WhcNMjUwNTAxMjEwMzA3WjAYMRYwFAYD VQQDEw02ODBhYTcwYy1lNzFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq9g2w7IooEBih7Z3FIkpBNRgAsKjPoRCVeiqfWVPjdQeSuksRuTcA0meNhWb sbRzw3w2HEaF/oEDN7v1QuZULNEHTb568JC7oriU7k4mpg/Ig2gdpWamL8j16WFC 36vv44RwG45zwQkLExAeLzRpJqyz0HpU7AqqHduWYuqO/pLx/geqi3RXiEo1+gLS GCCeE5vYn9fodoyNtHgXc/kdvwdyltuK/9lurPdo1t5XOPwUGyRCI7hIBe6dvST1 rYEI+djMqscUSuGd3lUv7SKa03+poToRsuOf1H0L/sOmdB83XcjJy41HPP/leOvs J1b+ukD66uobGjBtEae681j4zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDae6B6/ pjlYFDVlt6D+srqE6jaYMB8GA1UdIwQYMBaAFE//rHF4Ezku4ch2oyFnHh1sKrm0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTM5Ri9DMTVDNDFCNEZE NTcxMUVBQkMzQ0EyNERDNEY5QUUwMi9UXy1zY1hnVE9TN2h5SGFqSVdjZUhXd3F1 YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RfLXNjWGdUT1M3aHlIYWpJV2NlSFd3cXViUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTM5Ri9DMTVDNDFCNEZENTcxMUVBQkMzQ0EyNERDNEY5QUUwMi9UXy1zY1hnVE9T N2h5SGFqSVdjZUhXd3F1YlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+nyFRzZLpXWLAucV4g6LzZ+XK/E+ccp05147hl27jXTcuYNGfFiVc SZ/PIjHbML6NWy4ASjxNrJ7RicFiDFfjNRW3UvF/8v5XSn1kKUs6lBXFHdO5izP+ sJzCTvpD4AhwmXlB6ArmfQ6fUhiXoqfKyitq9fLqdu9me+knoc95s4mkRFV2jf0B AXaUA3cQo85xajbkT02Wyo25YEtNTN1beJv80XAidL2rI1iy1KDk4lMgPgM03+UB qYqdQQAZ5RIT8QG5xXXh/PFZlowm5n8vPI6SSQga2wwAUeQ7kOOEIjM6WKO5qdvq NzX49AhV7G7IS93SrDbaFGJXo2INVIQo -----END CERTIFICATE-----Generated at Fri Apr 25 00:08:31 2025 by rpki-client on console.sobornost.net