$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft File: 2IDvJluUDjHf7RxCrvUUS2RBNxc.mft (raw, json) Hash identifier: JLJMsVPglMr5+tEgd8e4Mh71AILPbgzm9Wza7nRvs0E= Subject key identifier: DC:88:99:DD:27:9D:A1:B2:80:64:44:A2:26:84:DB:C1:CE:38:6B:73 Authority key identifier: D8:80:EF:26:5B:94:0E:31:DF:ED:1C:42:AE:F5:14:4B:64:41:37:17 Certificate issuer: /CN=A91CFA8E/serialNumber=D880EF265B940E31DFED1C42AEF5144B64413717 Certificate serial: 0197 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft Manifest number: 0189 Signing time: Sun 27 Apr 2025 02:50:41 +0000 Manifest this update: Sun 27 Apr 2025 02:50:40 +0000 Manifest next update: Sun 04 May 2025 02:50:40 +0000 Files and hashes: 1: 2IDvJluUDjHf7RxCrvUUS2RBNxc.crl (hash: TdakMrZlQG5GrF05tGoOxy4jkMAo0qJnDrL8VEu8BPo=) 2: 61663178F88311EDB1DF555DC4F9AE02.roa (hash: fXSIWmh9V9F/x3Hddt6PPXIzX5rLMrps20QQT3eYyH8=) 3: 43E961E013E711EE8ECA2D3CC4F9AE02.roa (hash: 2uAnojTpBx/p6UzON5W2LUqPsm+IaZARqT6ypFNqC5M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.crl rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 407 (0x197) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFA8E, serialNumber=D880EF265B940E31DFED1C42AEF5144B64413717 Validity Not Before: Apr 27 02:50:40 2025 GMT Not After : May 4 02:50:40 2025 GMT Subject: CN=680d9b81-bd62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:05:2e:ab:96:11:c6:a2:12:e9:5f:f5:ba:e5: 55:2c:18:fd:8d:f9:56:d3:d3:f5:81:a0:9e:97:e2: d1:65:e7:38:60:cf:62:9b:c6:24:f9:60:b7:68:89: 0b:9d:9d:d9:fd:c9:35:72:6e:1b:71:2f:61:3a:27: bd:4f:96:be:7d:ac:74:7e:90:94:70:0b:33:d1:df: 50:66:e1:2b:67:c5:93:d3:b5:84:3d:64:90:f6:14: 50:e2:f3:69:18:79:56:00:c0:63:56:62:8d:b6:55: 42:ea:e1:3d:6e:65:7c:7f:15:15:a6:30:f9:9d:24: 4b:13:f5:14:e0:27:d6:ab:b3:72:6e:00:5a:6a:8c: b7:6a:e7:a2:39:be:61:3a:27:1b:c8:b8:88:c5:d2: be:ef:3a:af:1d:36:55:5d:b5:6f:c8:c4:80:41:32: 36:9e:43:cc:6e:76:46:e6:9b:e2:a7:95:6a:a8:82: a6:bb:77:62:08:61:10:26:3d:4b:36:f1:a1:a9:74: ab:76:08:a8:6f:3a:20:38:f7:41:3b:cf:a4:0b:5d: 54:eb:23:d0:02:f0:26:06:2d:ff:70:2c:f8:73:2a: f8:93:e1:01:05:e1:a8:48:cf:53:f4:82:db:65:d6: c6:ae:95:6e:63:a4:69:dd:31:03:4a:5f:83:79:36: 90:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:88:99:DD:27:9D:A1:B2:80:64:44:A2:26:84:DB:C1:CE:38:6B:73 X509v3 Authority Key Identifier: keyid:D8:80:EF:26:5B:94:0E:31:DF:ED:1C:42:AE:F5:14:4B:64:41:37:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:e8:21:9a:1c:77:bf:ee:46:1a:84:4a:5a:68:19:9f:b8:99: 78:ea:61:68:2a:8d:fa:65:b3:a5:3a:73:0c:2c:21:11:3b:a4: 35:4a:05:7f:e1:63:af:80:ad:33:7a:90:30:45:86:65:e4:d7: 8a:4b:12:82:46:43:53:b0:88:40:a1:e3:ce:91:4e:81:d7:25: df:b6:4e:36:84:ef:a4:56:48:f3:70:77:7f:c8:30:1a:8e:d9: 4e:b5:be:d3:84:72:1c:9a:15:52:c4:9d:d4:dc:63:0a:c5:3d: d2:45:81:fd:d1:e9:e7:dd:9e:7f:6c:20:92:c5:12:28:ab:a7: 99:ac:03:c5:1f:aa:ad:f9:10:8c:0d:e2:c8:ae:15:35:ef:6a: 0d:01:ed:43:b1:d9:3d:f0:81:c1:19:6b:fc:a7:a5:02:8a:cc: 34:2d:73:34:78:1b:32:7f:9e:d0:15:0a:f5:65:a8:d4:81:16: 45:5b:b4:14:1b:cb:5d:2f:3c:85:7f:65:cc:b4:ef:04:cd:33: ba:a6:41:d3:dc:88:a3:06:71:a4:cc:7a:04:99:e3:da:0f:ff: 92:24:66:6d:8f:0d:5c:19:75:4c:a6:45:16:d5:5b:8a:f5:97: f2:40:55:01:de:04:6a:dd:64:aa:e2:3b:fa:64:0b:76:01:5b: 05:40:bc:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZBOEUxMTAvBgNVBAUTKEQ4ODBFRjI2NUI5NDBFMzFERkVEMUM0MkFFRjUxNDRC NjQ0MTM3MTcwHhcNMjUwNDI3MDI1MDQwWhcNMjUwNTA0MDI1MDQwWjAYMRYwFAYD VQQDEw02ODBkOWI4MS1iZDYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAygUuq5YRxqIS6V/1uuVVLBj9jflW09P1gaCel+LRZec4YM9im8Yk+WC3aIkL nZ3Z/ck1cm4bcS9hOie9T5a+fax0fpCUcAsz0d9QZuErZ8WT07WEPWSQ9hRQ4vNp GHlWAMBjVmKNtlVC6uE9bmV8fxUVpjD5nSRLE/UU4CfWq7NybgBaaoy3aueiOb5h OicbyLiIxdK+7zqvHTZVXbVvyMSAQTI2nkPMbnZG5pvip5VqqIKmu3diCGEQJj1L NvGhqXSrdgiobzogOPdBO8+kC11U6yPQAvAmBi3/cCz4cyr4k+EBBeGoSM9T9ILb ZdbGrpVuY6Rp3TEDSl+DeTaQNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNyImd0n naGygGREoiaE28HOOGtzMB8GA1UdIwQYMBaAFNiA7yZblA4x3+0cQq71FEtkQTcX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkE4RS82MUJBRDhFMEY4 N0UxMUVEOTBEODQ0NUNDNEY5QUUwMi8ySUR2Smx1VURqSGY3UnhDcnZVVVMyUkJO eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJJRHZKbHVVRGpIZjdSeENydlVVUzJSQk54Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkE4RS82MUJBRDhFMEY4N0UxMUVEOTBEODQ0NUNDNEY5QUUwMi8ySUR2Smx1VURq SGY3UnhDcnZVVVMyUkJOeGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA36CGaHHe/7kYahEpaaBmfuJl46mFoKo36ZbOlOnMMLCERO6Q1SgV/ 4WOvgK0zepAwRYZl5NeKSxKCRkNTsIhAoePOkU6B1yXftk42hO+kVkjzcHd/yDAa jtlOtb7ThHIcmhVSxJ3U3GMKxT3SRYH90enn3Z5/bCCSxRIoq6eZrAPFH6qt+RCM DeLIrhU172oNAe1Dsdk98IHBGWv8p6UCisw0LXM0eBsyf57QFQr1ZajUgRZFW7QU G8tdLzyFf2XMtO8EzTO6pkHT3IijBnGkzHoEmePaD/+SJGZtjw1cGXVMpkUW1VuK 9ZfyQFUB3gRq3WSq4jv6ZAt2AVsFQLwZ -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:12 2025 by rpki-client on console.sobornost.net