$ rpki-client -vvf rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft File: 8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft (raw, json) Hash identifier: wXBhBYFP1ymxaFbae2o9JVAWm+62siNCiPPL6hwgyXE= Subject key identifier: 29:A1:DF:82:ED:EA:25:C1:ED:34:EE:53:5D:6F:CA:57:5B:5A:0D:4B Authority key identifier: F0:7F:B1:3E:F9:1E:22:11:B0:FE:BC:85:5A:DD:AF:30:1B:06:71:A4 Certificate issuer: /CN=A91D087E/serialNumber=F07FB13EF91E2211B0FEBC855ADDAF301B0671A4 Certificate serial: 0C46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft Manifest number: 0C3D Signing time: Mon 28 Apr 2025 18:41:25 +0000 Manifest this update: Mon 28 Apr 2025 18:41:25 +0000 Manifest next update: Mon 05 May 2025 18:41:25 +0000 Files and hashes: 1: 8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl (hash: c3RlXGSIkbSmkscOzolFB6jlI7wohFVfRQN29tFPXO8=) 2: 8A7C342604FE11EAB778E81CC4F9AE02.roa (hash: W5qhrk3NsiS79KgqelHi0v6nSmVUxngvNJSR/yTxWhg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 18:27:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3142 (0xc46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D087E, serialNumber=F07FB13EF91E2211B0FEBC855ADDAF301B0671A4 Validity Not Before: Apr 28 18:41:25 2025 GMT Not After : May 5 18:41:25 2025 GMT Subject: CN=680fcbd5-6639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b4:a1:e6:ca:fd:5c:2f:f8:62:0e:6a:bc:5a: ab:e2:c1:1b:a0:fc:f2:f2:a6:06:a4:ab:d3:32:20: f6:36:3a:87:3d:43:31:93:9c:bf:92:a6:52:d4:d6: 0d:6d:d4:4d:42:0d:12:7e:3b:b0:dc:f1:97:5c:65: e1:f4:cb:a9:1e:ec:7b:2f:da:fd:01:aa:29:c3:eb: 63:68:cb:ee:24:2a:2a:92:0f:3e:6c:4f:d7:d2:3b: 89:91:b9:2f:3f:91:52:23:47:e6:ab:23:d5:df:94: 73:d8:80:25:b2:d3:b2:a3:16:cd:5e:59:6b:4d:0d: d3:ec:35:97:4b:15:a2:95:11:43:0d:dc:68:a6:46: 14:c2:ad:a2:3d:0c:84:e1:35:32:1c:8c:c8:d2:8a: d5:38:a4:1e:32:cc:46:8d:5c:08:05:78:9e:e9:19: e6:28:6f:96:75:9e:6f:33:46:fc:49:54:ed:e6:73: 9d:37:e0:71:41:53:40:10:fb:03:2f:21:36:ca:5b: 5f:e7:77:f3:ce:64:0a:7f:38:67:ce:6b:4a:5f:96: c3:9c:ad:41:06:3a:81:3b:47:55:7c:b4:d5:9b:e9: b3:4a:20:6d:21:3a:06:c1:c8:35:73:89:0b:01:ab: 2d:94:34:89:30:c1:5c:02:96:b1:54:2b:78:af:de: 34:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:A1:DF:82:ED:EA:25:C1:ED:34:EE:53:5D:6F:CA:57:5B:5A:0D:4B X509v3 Authority Key Identifier: keyid:F0:7F:B1:3E:F9:1E:22:11:B0:FE:BC:85:5A:DD:AF:30:1B:06:71:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:99:a0:b3:52:d6:dc:f2:02:0d:e7:27:ec:47:c3:39:3b:9a: c6:02:69:f0:20:88:c0:ae:93:d1:e5:51:5c:53:50:a8:00:63: 60:69:fb:72:95:ef:95:11:49:f5:d4:a3:b6:3a:9e:be:ea:13: 99:b5:0d:aa:7f:f5:7d:f4:14:57:b3:78:88:11:92:d6:ec:6c: 8d:44:a7:8c:e6:43:17:69:20:aa:a8:8d:3b:ca:bb:62:f0:d3: bd:e5:bc:d1:10:2f:04:c3:d4:73:0e:4b:a1:db:c5:19:69:07: 20:00:1a:be:46:6e:24:93:82:6f:91:51:6c:20:8a:d4:0d:79: 68:32:95:8a:21:f8:3a:88:29:51:49:4c:13:9a:c8:1b:de:c6: 87:22:c1:79:01:de:a8:30:2c:24:b3:6e:97:21:1e:6b:42:07: ca:15:ee:16:ee:1c:3a:91:f3:98:80:1e:60:79:6f:c3:f9:44: c7:39:10:66:e3:3f:4e:cc:f5:f3:6e:7a:d5:96:5f:a1:86:d5: 51:49:b3:a7:0b:c6:d0:3e:92:b7:38:d9:2e:89:1d:b9:3f:1f: e0:bf:3e:f4:e5:32:69:72:c1:f2:e9:6c:dd:62:04:55:fd:2d: 79:ac:42:cb:6c:b4:61:54:05:77:18:51:69:8e:c3:be:7c:4d: 39:01:0b:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA4N0UxMTAvBgNVBAUTKEYwN0ZCMTNFRjkxRTIyMTFCMEZFQkM4NTVBRERBRjMw MUIwNjcxQTQwHhcNMjUwNDI4MTg0MTI1WhcNMjUwNTA1MTg0MTI1WjAYMRYwFAYD VQQDEw02ODBmY2JkNS02NjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxLSh5sr9XC/4Yg5qvFqr4sEboPzy8qYGpKvTMiD2NjqHPUMxk5y/kqZS1NYN bdRNQg0Sfjuw3PGXXGXh9MupHux7L9r9Aaopw+tjaMvuJCoqkg8+bE/X0juJkbkv P5FSI0fmqyPV35Rz2IAlstOyoxbNXllrTQ3T7DWXSxWilRFDDdxopkYUwq2iPQyE 4TUyHIzI0orVOKQeMsxGjVwIBXie6RnmKG+WdZ5vM0b8SVTt5nOdN+BxQVNAEPsD LyE2yltf53fzzmQKfzhnzmtKX5bDnK1BBjqBO0dVfLTVm+mzSiBtIToGwcg1c4kL AastlDSJMMFcApaxVCt4r940uwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCmh34Lt 6iXB7TTuU11vyldbWg1LMB8GA1UdIwQYMBaAFPB/sT75HiIRsP68hVrdrzAbBnGk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDg3RS9CMDE5RjFDQTA0 RkMxMUVBOENBRUQ0MTVDNEY5QUUwMi84SC14UHZrZUloR3dfcnlGV3Qydk1Cc0dj YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhILXhQdmtlSWhHd19yeUZXdDJ2TUJzR2NhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDg3RS9CMDE5RjFDQTA0RkMxMUVBOENBRUQ0MTVDNEY5QUUwMi84SC14UHZrZUlo R3dfcnlGV3Qydk1Cc0djYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVmaCzUtbc8gIN5yfsR8M5O5rGAmnwIIjArpPR5VFcU1CoAGNgafty le+VEUn11KO2Op6+6hOZtQ2qf/V99BRXs3iIEZLW7GyNRKeM5kMXaSCqqI07yrti 8NO95bzREC8Ew9RzDkuh28UZaQcgABq+Rm4kk4JvkVFsIIrUDXloMpWKIfg6iClR SUwTmsgb3saHIsF5Ad6oMCwks26XIR5rQgfKFe4W7hw6kfOYgB5geW/D+UTHORBm 4z9OzPXzbnrVll+hhtVRSbOnC8bQPpK3ONkuiR25Px/gvz705TJpcsHy6WzdYgRV /S15rELLbLRhVAV3GFFpjsO+fE05AQuT -----END CERTIFICATE-----Generated at Mon Apr 28 20:11:00 2025 by rpki-client on console.sobornost.net