$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft File: 8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft (raw, json) Hash identifier: 9B6XB0U/E64Ujg6QuSQz+X6yZZhoFdBYY1Otm4UzqPU= Subject key identifier: A2:9C:BE:B5:CD:BB:F8:71:A0:7B:07:D2:49:4E:9D:EB:14:5E:68:E5 Authority key identifier: F1:5D:11:79:0B:0E:75:35:74:06:61:1D:C5:70:58:F6:9D:C5:78:A0 Certificate issuer: /CN=A91D09BC/serialNumber=F15D11790B0E75357406611DC57058F69DC578A0 Certificate serial: 5E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8V0ReQsOdTV0BmEdxXBY9p3FeKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft Manifest number: 59 Signing time: Sun 27 Apr 2025 06:03:36 +0000 Manifest this update: Sun 27 Apr 2025 06:03:35 +0000 Manifest next update: Sun 04 May 2025 06:03:35 +0000 Files and hashes: 1: 8V0ReQsOdTV0BmEdxXBY9p3FeKA.crl (hash: TT5PO8I8TKabUhP6T5s6q4MThtsNsUxiMd9KLAn1fsg=) 2: D660AB1CD87D11EF9992CD41C4F9AE02.roa (hash: WnrI0aIYZih3vM/sW5dubGcnSTElOMwHaTB7siLqQR0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.crl rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8V0ReQsOdTV0BmEdxXBY9p3FeKA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D09BC, serialNumber=F15D11790B0E75357406611DC57058F69DC578A0 Validity Not Before: Apr 27 06:03:35 2025 GMT Not After : May 4 06:03:35 2025 GMT Subject: CN=680dc8b8-52d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f2:d2:66:4f:f7:7d:e5:ed:d2:d5:61:b7:dc: 4f:b9:81:42:97:c8:9b:f2:56:dc:a5:16:d3:d7:11: 0b:aa:8f:9e:af:34:a7:81:08:66:ef:cd:45:57:88: 2c:db:6c:3a:26:51:61:b3:b2:2a:43:52:e6:6e:27: 46:a5:b4:bf:fe:e4:29:98:9c:63:7c:be:0b:d0:86: ee:37:ee:67:87:bd:48:10:ec:c9:9a:4a:74:7f:d6: 18:cf:76:68:7e:3b:9f:76:e6:bd:bb:7c:ab:ce:7f: 06:0a:a9:9c:22:12:36:4d:d0:a9:09:07:f9:d8:c8: 67:d5:6c:ee:51:f1:65:8c:10:03:10:22:f0:86:12: 07:92:48:02:1a:0c:06:c2:e8:0c:20:5d:7c:13:1b: 11:2f:dc:13:f1:5a:09:70:2d:67:45:6f:f7:7c:56: 53:e7:82:ef:e4:b8:95:ea:33:dc:4e:27:90:2a:35: 09:cd:6c:d9:64:0e:bf:37:e2:96:fd:52:cd:73:f9: b2:a0:bd:ae:d1:2c:2c:9a:49:3d:ad:5f:b9:18:87: ec:1b:28:0a:a7:c6:13:49:68:d9:16:f3:52:05:36: 67:f3:fd:b4:9f:b3:4c:d7:77:35:61:6b:f3:ca:f7: f0:f7:bb:87:ec:ab:30:aa:d9:8f:db:fd:ba:e8:c6: 57:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:9C:BE:B5:CD:BB:F8:71:A0:7B:07:D2:49:4E:9D:EB:14:5E:68:E5 X509v3 Authority Key Identifier: keyid:F1:5D:11:79:0B:0E:75:35:74:06:61:1D:C5:70:58:F6:9D:C5:78:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8V0ReQsOdTV0BmEdxXBY9p3FeKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:a3:39:74:5c:12:54:06:56:1d:62:da:0c:0b:8f:e5:ea:8b: 77:36:ad:a6:f2:13:4e:40:57:32:e3:c7:05:ae:87:51:1c:a2: cb:06:82:50:cc:75:45:8d:b8:a3:06:e0:34:f1:f0:d2:0f:bd: 12:38:d0:c0:b8:6a:ca:68:12:9a:6d:fa:e9:d7:ae:ea:de:30: b2:0a:77:4a:37:58:3b:ff:a1:84:e2:66:31:0c:3a:6f:a4:f8: 41:3f:65:ea:72:a4:ac:86:fb:a2:7e:d4:00:4e:22:05:e5:65: c4:dc:60:60:1e:de:2b:9b:a1:3c:a2:96:f0:b0:f1:e0:61:80: b1:5c:6e:22:22:95:15:10:a7:f6:f7:48:c5:c3:d9:1e:36:ee: c8:21:b7:5e:d6:cd:e2:3e:c2:b5:16:cd:e0:5c:e2:6e:93:ff: 09:77:f3:35:80:58:c9:0e:a6:e9:41:05:3c:f2:0e:f3:42:ec: 07:68:3d:d9:57:32:60:69:d7:0b:b9:9b:98:77:b0:e6:a9:05: 0e:6e:d7:14:6f:07:ba:fe:d5:3f:3e:f1:9c:10:df:e4:30:56: cf:d6:2d:d2:b6:24:34:2a:e2:23:93:cd:91:99:af:97:75:61: d4:b9:96:9e:25:43:a8:21:2b:51:e5:65:12:1f:e2:5c:ce:97: f0:68:29:55 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MDlCQzExMC8GA1UEBRMoRjE1RDExNzkwQjBFNzUzNTc0MDY2MTFEQzU3MDU4RjY5 REM1NzhBMDAeFw0yNTA0MjcwNjAzMzVaFw0yNTA1MDQwNjAzMzVaMBgxFjAUBgNV BAMTDTY4MGRjOGI4LTUyZDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQ8tJmT/d95e3S1WG33E+5gUKXyJvyVtylFtPXEQuqj56vNKeBCGbvzUVXiCzb bDomUWGzsipDUuZuJ0altL/+5CmYnGN8vgvQhu437meHvUgQ7MmaSnR/1hjPdmh+ O5925r27fKvOfwYKqZwiEjZN0KkJB/nYyGfVbO5R8WWMEAMQIvCGEgeSSAIaDAbC 6AwgXXwTGxEv3BPxWglwLWdFb/d8VlPngu/kuJXqM9xOJ5AqNQnNbNlkDr834pb9 Us1z+bKgva7RLCyaST2tX7kYh+wbKAqnxhNJaNkW81IFNmfz/bSfs0zXdzVha/PK 9/D3u4fsqzCq2Y/b/broxldhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUopy+tc27 +HGgewfSSU6d6xReaOUwHwYDVR0jBBgwFoAU8V0ReQsOdTV0BmEdxXBY9p3FeKAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQwOUJDL0NCODgyRTdFQTcw NzExRUY5OUE1Nzc0MUM0RjlBRTAyLzhWMFJlUXNPZFRWMEJtRWR4WEJZOXAzRmVL QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvOFYwUmVRc09kVFYwQm1FZHhYQlk5cDNGZUtBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQw OUJDL0NCODgyRTdFQTcwNzExRUY5OUE1Nzc0MUM0RjlBRTAyLzhWMFJlUXNPZFRW MEJtRWR4WEJZOXAzRmVLQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABajOXRcElQGVh1i2gwLj+Xqi3c2rabyE05AVzLjxwWuh1EcossGglDM dUWNuKMG4DTx8NIPvRI40MC4aspoEppt+unXrureMLIKd0o3WDv/oYTiZjEMOm+k +EE/ZepypKyG+6J+1ABOIgXlZcTcYGAe3iuboTyilvCw8eBhgLFcbiIilRUQp/b3 SMXD2R427sght17WzeI+wrUWzeBc4m6T/wl38zWAWMkOpulBBTzyDvNC7AdoPdlX MmBp1wu5m5h3sOapBQ5u1xRvB7r+1T8+8ZwQ3+QwVs/WLdK2JDQq4iOTzZGZr5d1 YdS5lp4lQ6ghK1HlZRIf4lzOl/BoKVU= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:56 2025 by rpki-client on console.sobornost.net