$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft File: MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft (raw, json) Hash identifier: OvvvhXb6zUDpokswVydzxE5HX9ZKNfgwyW0zjzoFcxQ= Subject key identifier: 30:57:4B:2C:C1:43:50:05:3F:8F:8D:D1:EB:AD:22:61:FD:66:CF:D1 Authority key identifier: 32:61:86:18:24:4C:8D:6B:4B:A6:0A:2F:ED:97:23:B9:98:D9:A1:70 Certificate issuer: /CN=A91CEBAA/serialNumber=32618618244C8D6B4BA60A2FED9723B998D9A170 Certificate serial: 01B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft Manifest number: 019F Signing time: Sun 27 Apr 2025 02:36:04 +0000 Manifest this update: Sun 27 Apr 2025 02:36:03 +0000 Manifest next update: Sun 04 May 2025 02:36:03 +0000 Files and hashes: 1: MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl (hash: BWT3t94vNwJdUUJLSmSQ6gz10Nybtv1IrEdVwo60Dlw=) 2: 7F52DF541CF011F0ACBEBD22C4F9AE02.roa (hash: T+JOCtPDki/xHSSeZ1AMylOFrQqsxCA9cKvI0yaY7C0=) 3: 73CB38E81CF011F0B59DB522C4F9AE02.roa (hash: llOCDx1EbOCJWqDxiCkgBWEB8PNLgQ3QGDsGfn8WZKY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:36:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 435 (0x1b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEBAA, serialNumber=32618618244C8D6B4BA60A2FED9723B998D9A170 Validity Not Before: Apr 27 02:36:03 2025 GMT Not After : May 4 02:36:03 2025 GMT Subject: CN=680d9814-d368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f6:d1:7d:09:24:1c:f5:b1:23:ea:f3:2d:78: 2c:d9:a1:4f:e3:79:67:26:b2:6c:bd:75:41:a8:56: 04:50:01:c2:6c:4c:d5:2c:c6:49:ce:fe:70:e7:64: 7f:89:9a:02:3b:a5:9f:e7:de:97:0a:6e:ea:93:93: 38:63:ce:8f:b1:19:91:52:f4:b1:bf:1c:fe:cb:ff: d5:63:df:c1:a5:04:33:85:f7:26:17:5b:52:61:fe: 11:69:f8:de:26:5a:bf:4d:c0:3e:44:9b:88:e8:d6: 73:83:ae:14:2e:7f:0f:f8:7a:6b:93:19:c6:78:35: ca:90:16:33:3d:c3:5f:0c:5c:0b:b1:73:5f:c6:ba: fb:0a:09:5f:67:14:40:68:28:cf:4d:22:06:79:6b: f5:26:c0:d9:7e:32:e5:99:9d:33:d8:e2:70:9b:e9: 85:6a:1d:3d:19:20:36:7b:09:21:a3:38:ec:87:37: 5a:01:d5:94:06:63:e2:92:b6:67:ee:be:37:e0:db: ab:29:6f:df:03:9a:34:5b:ac:f9:60:cf:4b:4a:7e: 3d:64:51:67:ec:f4:ab:f7:d2:81:ae:e4:c1:9c:c2: fa:12:5c:1b:ae:27:4f:23:83:15:1d:bb:77:bf:dc: 04:ab:95:cf:ed:2c:58:6e:06:08:df:5a:b0:99:f7: f9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:57:4B:2C:C1:43:50:05:3F:8F:8D:D1:EB:AD:22:61:FD:66:CF:D1 X509v3 Authority Key Identifier: keyid:32:61:86:18:24:4C:8D:6B:4B:A6:0A:2F:ED:97:23:B9:98:D9:A1:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:9a:45:08:32:f2:d4:de:19:33:0d:3f:75:24:35:ef:21:30: c7:a4:0f:4c:d0:b7:64:90:2c:f5:f9:58:6f:d6:53:52:e7:a9: 33:db:45:c5:af:b1:45:dd:64:90:d5:18:91:4c:fa:9f:ef:72: 2c:80:3f:ec:8b:86:53:64:9a:9a:aa:05:3f:91:81:f2:f7:65: f7:1f:8b:58:0a:07:ca:9f:a9:00:6c:a9:4e:a4:34:7e:f3:61: 78:13:b4:1f:45:41:02:0a:29:9f:26:8f:1e:90:ad:1f:d1:53: c3:e1:50:c9:5d:72:28:ea:53:3a:47:54:64:89:8d:f7:ef:30: 59:db:83:d0:ff:93:ba:3d:ad:57:52:78:9f:af:db:e4:1f:53: 75:27:3a:1a:3b:3e:03:cd:c2:5d:0c:46:aa:ea:57:43:7d:b7: 9d:55:22:0e:75:ad:c4:87:3e:2a:86:c3:ce:79:44:b2:f3:2a: ec:fb:f3:20:fe:55:3e:e5:72:c3:14:2b:44:4d:54:fe:c1:b5: 16:1f:09:8c:c7:ff:2b:e4:c8:24:73:b5:63:76:4f:ec:ff:fb: 58:cc:15:de:1f:41:25:ac:19:4d:5c:4f:63:0e:50:43:0d:68: 67:2c:0d:90:fe:4d:a6:ef:ea:81:0d:05:d6:01:e0:4e:34:37: 79:60:2d:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VCQUExMTAvBgNVBAUTKDMyNjE4NjE4MjQ0QzhENkI0QkE2MEEyRkVEOTcyM0I5 OThEOUExNzAwHhcNMjUwNDI3MDIzNjAzWhcNMjUwNTA0MDIzNjAzWjAYMRYwFAYD VQQDEw02ODBkOTgxNC1kMzY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp/bRfQkkHPWxI+rzLXgs2aFP43lnJrJsvXVBqFYEUAHCbEzVLMZJzv5w52R/ iZoCO6Wf596XCm7qk5M4Y86PsRmRUvSxvxz+y//VY9/BpQQzhfcmF1tSYf4Rafje Jlq/TcA+RJuI6NZzg64ULn8P+HprkxnGeDXKkBYzPcNfDFwLsXNfxrr7CglfZxRA aCjPTSIGeWv1JsDZfjLlmZ0z2OJwm+mFah09GSA2ewkhozjshzdaAdWUBmPikrZn 7r434NurKW/fA5o0W6z5YM9LSn49ZFFn7PSr99KBruTBnML6ElwbridPI4MVHbt3 v9wEq5XP7SxYbgYI31qwmff5VQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDBXSyzB Q1AFP4+N0eutImH9Zs/RMB8GA1UdIwQYMBaAFDJhhhgkTI1rS6YKL+2XI7mY2aFw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUJBQS8yQ0ZEMzcxMkND RDAxMUVEOTgyNTJFNzVDNEY5QUUwMi9NbUdHR0NSTWpXdExwZ292N1pjanVaalpv WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01tR0dHQ1JNald0THBnb3Y3WmNqdVpqWm9YQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUJBQS8yQ0ZEMzcxMkNDRDAxMUVEOTgyNTJFNzVDNEY5QUUwMi9NbUdHR0NSTWpX dExwZ292N1pjanVaalpvWEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2mkUIMvLU3hkzDT91JDXvITDHpA9M0LdkkCz1+Vhv1lNS56kz20XF r7FF3WSQ1RiRTPqf73IsgD/si4ZTZJqaqgU/kYHy92X3H4tYCgfKn6kAbKlOpDR+ 82F4E7QfRUECCimfJo8ekK0f0VPD4VDJXXIo6lM6R1RkiY337zBZ24PQ/5O6Pa1X Unifr9vkH1N1JzoaOz4DzcJdDEaq6ldDfbedVSIOda3Ehz4qhsPOeUSy8yrs+/Mg /lU+5XLDFCtETVT+wbUWHwmMx/8r5Mgkc7Vjdk/s//tYzBXeH0ElrBlNXE9jDlBD DWhnLA2Q/k2m7+qBDQXWAeBONDd5YC2f -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:12 2025 by rpki-client on console.sobornost.net