$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft File: s2uXFySjur2JC3VFmJM3IPly_q8.mft (raw, json) Hash identifier: TYuc8xNKGX+RWLysQuLqQB1GpTO8xZSy222wsRYSLdo= Subject key identifier: 3C:8E:53:F3:D8:1C:62:AF:B4:A7:D2:64:25:2F:38:73:3D:B8:B2:92 Authority key identifier: B3:6B:97:17:24:A3:BA:BD:89:0B:75:45:98:93:37:20:F9:72:FE:AF Certificate issuer: /CN=A91CE558/serialNumber=B36B971724A3BABD890B754598933720F972FEAF Certificate serial: 0B4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft Manifest number: 0AF4 Signing time: Sat 26 Apr 2025 19:20:50 +0000 Manifest this update: Sat 26 Apr 2025 19:20:49 +0000 Manifest next update: Sat 03 May 2025 19:20:49 +0000 Files and hashes: 1: s2uXFySjur2JC3VFmJM3IPly_q8.crl (hash: opFhNu1f409fLfvIZvuQhFFX2U3y1r69KIuO4/Xx5s0=) 2: 466891560ADA11ECBFAECB29C4F9AE02.roa (hash: NDMWr6ROve032HDCvpKDnE+3M7NstRNL4WiBRR7Uc9w=) 3: F1EB46D2717F11EEB3FA0A5EC4F9AE02.roa (hash: /I1TFcJCz5aMzQNmIqNgkjKowqxPj9xlaCCXIBXOcD0=) 4: A7470BFC33A711EBA4313B36C4F9AE02.roa (hash: Z21inXGgFSeaHgz7iITM/kziF7zP/P4QOKxWDnYdlJ8=) 5: D992FDD49B4811EFA17EB17FC4F9AE02.roa (hash: 1gtmRzqYdhmA8CchuwScykbthJY4rmebTYSAnt6uzqg=) 6: B66F0C58817111EFB121970CC4F9AE02.roa (hash: lkpsOB7nfXsffwnZ1aU9Jr6eTZNpX/TpTJZNQqUrOs8=) 7: C1ACB1E819EF11EC84DBF462C4F9AE02.roa (hash: dhvSYCoAete6HzssYv/JSdKEV/Z2KYxpkGxKw9YFSAY=) 8: 966FD4648D2411EF9914EF63C4F9AE02.roa (hash: dGWItSoIfDWTw5ONmMmmwGOtu0hUpDaFw6KptrVVUfk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.crl rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2891 (0xb4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE558, serialNumber=B36B971724A3BABD890B754598933720F972FEAF Validity Not Before: Apr 26 19:20:49 2025 GMT Not After : May 3 19:20:49 2025 GMT Subject: CN=680d3212-4784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9b:2e:fd:38:66:70:e7:6d:1d:40:3a:1b:32: 39:49:cc:26:85:de:5a:15:39:eb:ed:45:54:94:f2: ad:3b:f1:29:76:54:f4:e6:ae:8a:df:83:fe:fc:f6: 08:14:6f:83:ce:4d:8f:38:38:18:db:c7:f4:18:81: b1:5d:71:e1:ee:af:4e:58:0f:aa:7a:35:1f:30:b0: 3b:da:eb:ad:b1:a0:30:b4:6c:8e:aa:fa:84:0d:d2: 28:ba:8a:87:e9:ca:02:4d:06:3f:82:68:c4:a6:6e: bf:f6:ef:d6:ae:01:48:78:79:85:19:29:2e:59:0e: 2b:2f:86:cb:17:a1:2f:d1:ee:bc:bf:e6:21:cc:74: b9:66:a6:65:ae:5c:4b:75:47:6d:d9:0e:06:f1:63: c6:0c:9b:60:2a:3c:24:3c:25:51:c9:ed:d2:d0:ab: 23:18:d0:8a:1f:b9:50:95:b7:55:d4:1d:1f:c5:0e: 4d:49:ca:2f:d2:23:37:54:ea:f6:47:57:44:d6:c1: a2:6e:b9:c6:58:6d:8b:23:ef:18:96:0e:50:e3:6a: 4e:7b:51:bc:2a:7b:93:fd:81:e5:94:97:5f:21:b0: 15:90:de:a2:e7:96:cc:99:35:0a:7c:9f:bb:4e:fa: ad:3a:02:d5:c0:8c:44:11:f7:8d:aa:2a:86:eb:6d: 55:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:8E:53:F3:D8:1C:62:AF:B4:A7:D2:64:25:2F:38:73:3D:B8:B2:92 X509v3 Authority Key Identifier: keyid:B3:6B:97:17:24:A3:BA:BD:89:0B:75:45:98:93:37:20:F9:72:FE:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:af:69:29:0f:55:4f:a4:05:7d:ce:8b:f6:db:fe:17:c8:e5: da:b2:bf:91:26:12:02:60:9b:0f:ab:e5:29:b5:c0:35:fe:e7: 5a:50:48:10:44:92:4c:69:9c:d9:3b:ab:23:b4:a9:70:58:80: c7:f7:2a:f4:fa:6b:03:83:6f:7e:93:ad:6a:dc:49:cf:30:66: c3:70:1c:26:2a:62:b0:39:98:99:7a:7e:30:41:33:aa:58:ea: 74:10:34:e2:d5:4c:f4:ce:9a:12:4f:50:74:05:91:db:ee:b0: 90:b5:e3:ff:c0:fe:6c:2f:e6:b6:de:e1:e1:ca:92:ca:ab:a2: ba:ca:14:98:0f:7f:29:01:9b:4d:64:a5:61:7d:92:d1:58:d8: 37:f2:ad:3c:4c:1e:f9:19:93:55:29:32:3b:6d:f2:63:44:b8: 48:70:37:ea:90:87:ef:8d:b5:42:1c:5a:68:04:b5:ef:8f:08: 0e:fd:36:1e:d5:2f:22:80:04:37:f1:77:2a:0d:77:ac:bc:e1: 73:aa:75:c1:1d:ed:6a:ce:ad:dd:1d:69:8b:3b:98:8c:6a:c1: a2:5a:3f:76:9e:29:1c:a0:e7:d7:67:12:2f:ae:f0:2e:3e:29: 27:b8:7f:38:26:60:5e:75:73:af:ce:0f:31:35:eb:e8:3b:42: f3:57:1a:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U1NTgxMTAvBgNVBAUTKEIzNkI5NzE3MjRBM0JBQkQ4OTBCNzU0NTk4OTMzNzIw Rjk3MkZFQUYwHhcNMjUwNDI2MTkyMDQ5WhcNMjUwNTAzMTkyMDQ5WjAYMRYwFAYD VQQDEw02ODBkMzIxMi00Nzg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp5su/ThmcOdtHUA6GzI5Scwmhd5aFTnr7UVUlPKtO/EpdlT05q6K34P+/PYI FG+Dzk2PODgY28f0GIGxXXHh7q9OWA+qejUfMLA72uutsaAwtGyOqvqEDdIouoqH 6coCTQY/gmjEpm6/9u/WrgFIeHmFGSkuWQ4rL4bLF6Ev0e68v+YhzHS5ZqZlrlxL dUdt2Q4G8WPGDJtgKjwkPCVRye3S0KsjGNCKH7lQlbdV1B0fxQ5NScov0iM3VOr2 R1dE1sGibrnGWG2LI+8Ylg5Q42pOe1G8KnuT/YHllJdfIbAVkN6i55bMmTUKfJ+7 TvqtOgLVwIxEEfeNqiqG621VwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDyOU/PY HGKvtKfSZCUvOHM9uLKSMB8GA1UdIwQYMBaAFLNrlxcko7q9iQt1RZiTNyD5cv6v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTU1OC8zREYxNEYwODUz OTQxMUVBQkY2QjRGNUZDNEY5QUUwMi9zMnVYRnlTanVyMkpDM1ZGbUpNM0lQbHlf cTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MydVhGeVNqdXIySkMzVkZtSk0zSVBseV9xOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTU1OC8zREYxNEYwODUzOTQxMUVBQkY2QjRGNUZDNEY5QUUwMi9zMnVYRnlTanVy MkpDM1ZGbUpNM0lQbHlfcTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACr2kpD1VPpAV9zov22/4XyOXasr+RJhICYJsPq+UptcA1/udaUEgQ RJJMaZzZO6sjtKlwWIDH9yr0+msDg29+k61q3EnPMGbDcBwmKmKwOZiZen4wQTOq WOp0EDTi1Uz0zpoST1B0BZHb7rCQteP/wP5sL+a23uHhypLKq6K6yhSYD38pAZtN ZKVhfZLRWNg38q08TB75GZNVKTI7bfJjRLhIcDfqkIfvjbVCHFpoBLXvjwgO/TYe 1S8igAQ38XcqDXesvOFzqnXBHe1qzq3dHWmLO5iMasGiWj92nikcoOfXZxIvrvAu PiknuH84JmBedXOvzg8xNevoO0LzVxqS -----END CERTIFICATE-----Generated at Sun Apr 27 00:14:10 2025 by rpki-client on console.sobornost.net