$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/TN7H1CHxboUWcqgSOd0Y_IweOVY.mft File: TN7H1CHxboUWcqgSOd0Y_IweOVY.mft (raw, json) Hash identifier: 7NEJ6DQCd8WtXRKRZhLHSnsV6r7cLJNwZic7LL1xvZw= Subject key identifier: F5:25:4F:AC:75:17:21:69:8C:C4:A1:B3:F4:91:7A:F4:F5:D1:13:CA Authority key identifier: 4C:DE:C7:D4:21:F1:6E:85:16:72:A8:12:39:DD:18:FC:8C:1E:39:56 Certificate issuer: /CN=A91D0A62/serialNumber=4CDEC7D421F16E851672A81239DD18FC8C1E3956 Certificate serial: 04B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TN7H1CHxboUWcqgSOd0Y_IweOVY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/TN7H1CHxboUWcqgSOd0Y_IweOVY.mft Manifest number: 04B2 Signing time: Sat 26 Apr 2025 23:32:36 +0000 Manifest this update: Sat 26 Apr 2025 23:32:35 +0000 Manifest next update: Sat 03 May 2025 23:32:35 +0000 Files and hashes: 1: TN7H1CHxboUWcqgSOd0Y_IweOVY.crl (hash: Dp1ewWoAs03EfWJcTG6ymOV38NWKrxv4r0DlaQcPf8I=) 2: C54BA97E283311ECBE887F3BC4F9AE02.roa (hash: XOTWPX30EoXJqKV6109bwG+UksO95BBHigXDmFEItd0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/TN7H1CHxboUWcqgSOd0Y_IweOVY.crl rsync://rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/TN7H1CHxboUWcqgSOd0Y_IweOVY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TN7H1CHxboUWcqgSOd0Y_IweOVY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 23:32:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1206 (0x4b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0A62, serialNumber=4CDEC7D421F16E851672A81239DD18FC8C1E3956 Validity Not Before: Apr 26 23:32:35 2025 GMT Not After : May 3 23:32:35 2025 GMT Subject: CN=680d6d13-8c14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:02:d2:35:ad:05:79:69:65:89:ce:2b:c3:f9: 9c:3f:9a:b3:68:e6:e9:0b:91:50:74:12:19:48:82: 33:ca:3e:77:fd:47:49:02:ba:97:67:b5:a8:ec:6d: 09:e4:30:82:f1:41:49:7c:a2:20:c4:f5:75:5d:e6: 84:ce:90:2e:e4:e9:1f:c1:c6:9d:7a:c6:e1:2b:d4: 59:66:bc:85:7c:09:8a:36:18:6d:fb:7f:fd:57:0e: d1:80:61:57:f4:9c:0b:4f:bf:9f:2e:75:c6:12:ab: ca:18:13:8a:14:87:db:41:f0:81:b3:22:68:65:1c: 37:12:b5:f1:9c:da:bc:ac:24:df:e8:f2:78:fc:48: 0d:03:92:a6:12:ab:78:22:98:38:ef:7b:d9:b3:fd: 41:6d:b1:33:a9:f5:ee:db:7f:c0:e9:b2:f2:9f:6f: 1e:14:ff:08:14:e8:13:46:ce:04:02:31:06:ce:6d: 71:fd:1d:1f:3c:08:7f:cd:7c:20:52:13:a3:eb:27: 10:a5:20:57:3b:0f:21:c9:0d:6d:d9:60:d0:ea:41: 51:4e:f5:40:2d:85:7c:ac:34:71:72:42:cb:0e:44: ab:74:77:8d:60:64:70:76:3c:e4:15:fd:55:82:c7: 0e:aa:35:b0:b9:78:5e:6f:9d:f1:67:34:c8:01:d2: 43:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:25:4F:AC:75:17:21:69:8C:C4:A1:B3:F4:91:7A:F4:F5:D1:13:CA X509v3 Authority Key Identifier: keyid:4C:DE:C7:D4:21:F1:6E:85:16:72:A8:12:39:DD:18:FC:8C:1E:39:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/TN7H1CHxboUWcqgSOd0Y_IweOVY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TN7H1CHxboUWcqgSOd0Y_IweOVY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/TN7H1CHxboUWcqgSOd0Y_IweOVY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:42:9e:fd:c4:cf:3c:81:b9:18:10:98:0e:00:55:2f:f0:c6: 20:b2:37:78:b1:6a:f1:84:03:de:b0:d1:66:f7:91:89:02:e1: 5d:c5:84:b1:b1:78:98:af:27:86:2b:91:55:60:51:a6:2a:32: 7b:27:88:97:96:a5:f5:a3:84:08:21:ec:32:b0:67:42:f5:a8: c1:94:3f:20:fa:c5:68:40:90:38:22:a0:81:96:9f:2d:e6:c8: 6c:e0:eb:e2:10:8b:f8:5c:bd:1f:b0:fb:b4:66:9b:0f:31:4f: bf:3c:74:de:a8:1f:00:4f:ba:01:a8:4b:eb:67:53:97:40:95: 3e:95:2f:9f:c1:9c:23:3c:24:a5:d7:81:33:16:df:57:c9:02: 41:f3:11:6a:ba:aa:e5:d9:71:4d:c1:69:31:d7:e3:40:ad:87: 99:91:b8:fe:41:2d:5d:bc:ef:7c:d5:6c:12:07:1d:e9:6d:42: c0:a5:25:46:c5:cc:9d:73:5c:11:04:6b:8d:e8:3a:e8:06:3f: e1:05:45:ae:73:ab:ac:e9:e6:78:3f:00:7d:d9:01:4d:11:bc: 2b:a1:61:3b:dd:f4:04:05:23:d8:fe:83:90:94:ac:4a:3a:13: 9e:24:0c:31:8b:04:30:fc:99:66:3f:35:a6:0a:57:cf:73:f1: e6:47:1d:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBBNjIxMTAvBgNVBAUTKDRDREVDN0Q0MjFGMTZFODUxNjcyQTgxMjM5REQxOEZD OEMxRTM5NTYwHhcNMjUwNDI2MjMzMjM1WhcNMjUwNTAzMjMzMjM1WjAYMRYwFAYD VQQDEw02ODBkNmQxMy04YzE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ALSNa0FeWllic4rw/mcP5qzaObpC5FQdBIZSIIzyj53/UdJArqXZ7Wo7G0J 5DCC8UFJfKIgxPV1XeaEzpAu5OkfwcadesbhK9RZZryFfAmKNhht+3/9Vw7RgGFX 9JwLT7+fLnXGEqvKGBOKFIfbQfCBsyJoZRw3ErXxnNq8rCTf6PJ4/EgNA5KmEqt4 Ipg473vZs/1BbbEzqfXu23/A6bLyn28eFP8IFOgTRs4EAjEGzm1x/R0fPAh/zXwg UhOj6ycQpSBXOw8hyQ1t2WDQ6kFRTvVALYV8rDRxckLLDkSrdHeNYGRwdjzkFf1V gscOqjWwuXheb53xZzTIAdJD/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPUlT6x1 FyFpjMShs/SRevT10RPKMB8GA1UdIwQYMBaAFEzex9Qh8W6FFnKoEjndGPyMHjlW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEE2Mi8xRkE5NkRBMDI4 MzExMUVDOTdBMDEzMTZDNEY5QUUwMi9UTjdIMUNIeGJvVVdjcWdTT2QwWV9Jd2VP VlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RON0gxQ0h4Ym9VV2NxZ1NPZDBZX0l3ZU9WWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEE2Mi8xRkE5NkRBMDI4MzExMUVDOTdBMDEzMTZDNEY5QUUwMi9UTjdIMUNIeGJv VVdjcWdTT2QwWV9Jd2VPVlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaQp79xM88gbkYEJgOAFUv8MYgsjd4sWrxhAPesNFm95GJAuFdxYSx sXiYryeGK5FVYFGmKjJ7J4iXlqX1o4QIIewysGdC9ajBlD8g+sVoQJA4IqCBlp8t 5shs4OviEIv4XL0fsPu0ZpsPMU+/PHTeqB8AT7oBqEvrZ1OXQJU+lS+fwZwjPCSl 14EzFt9XyQJB8xFquqrl2XFNwWkx1+NArYeZkbj+QS1dvO981WwSBx3pbULApSVG xcydc1wRBGuN6DroBj/hBUWuc6us6eZ4PwB92QFNEbwroWE73fQEBSPY/oOQlKxK OhOeJAwxiwQw/JlmPzWmClfPc/HmRx3t -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:12 2025 by rpki-client on console.sobornost.net