$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0FCB/92DFFC78816911EF8213FB0CC4F9AE02/TLUe6HyCLo5ssFQoTLB-TPJPkhs.mft File: TLUe6HyCLo5ssFQoTLB-TPJPkhs.mft (raw, json) Hash identifier: U1KdvA+9pAoom6vpuq33r2W7Pg66RDWRcuDdH6G+s+8= Subject key identifier: C7:0A:B9:E0:A9:CF:85:2D:0D:B7:96:38:52:EA:3A:A1:F2:0F:EF:96 Authority key identifier: 4C:B5:1E:E8:7C:82:2E:8E:6C:B0:54:28:4C:B0:7E:4C:F2:4F:92:1B Certificate issuer: /CN=A91D0FCB/serialNumber=4CB51EE87C822E8E6CB054284CB07E4CF24F921B Certificate serial: 6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLUe6HyCLo5ssFQoTLB-TPJPkhs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0FCB/92DFFC78816911EF8213FB0CC4F9AE02/TLUe6HyCLo5ssFQoTLB-TPJPkhs.mft Manifest number: 6B Signing time: Sun 27 Apr 2025 05:43:36 +0000 Manifest this update: Sun 27 Apr 2025 05:43:36 +0000 Manifest next update: Sun 04 May 2025 05:43:36 +0000 Files and hashes: 1: TLUe6HyCLo5ssFQoTLB-TPJPkhs.crl (hash: to72OP6LnIHzbdmovPNt2kOLaCH8BETBWMCvL6pD0TY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0FCB/92DFFC78816911EF8213FB0CC4F9AE02/TLUe6HyCLo5ssFQoTLB-TPJPkhs.crl rsync://rpki.apnic.net/member_repository/A91D0FCB/92DFFC78816911EF8213FB0CC4F9AE02/TLUe6HyCLo5ssFQoTLB-TPJPkhs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLUe6HyCLo5ssFQoTLB-TPJPkhs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 107 (0x6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0FCB, serialNumber=4CB51EE87C822E8E6CB054284CB07E4CF24F921B Validity Not Before: Apr 27 05:43:36 2025 GMT Not After : May 4 05:43:36 2025 GMT Subject: CN=680dc408-e225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b6:db:2f:e5:06:a3:91:2f:f5:c5:64:68:cd: 92:e9:30:86:bd:b3:5c:60:86:d8:fc:c1:4c:ea:05: 45:f9:09:e3:e2:93:53:90:38:9d:36:4d:18:91:bd: 59:04:f6:7d:1b:c2:3f:df:0c:0c:5a:16:0b:60:8c: b2:4e:0e:7c:6a:8d:9c:ff:87:12:d4:81:d5:89:b6: 88:b9:e3:4e:71:50:42:3f:c7:68:6a:e0:1a:fa:29: 2a:a9:31:90:59:cd:87:12:93:7b:9d:64:3b:09:e0: 70:d3:9b:e2:43:83:5c:0e:08:84:9f:9e:0b:9a:4a: a9:ce:c9:61:89:a8:68:69:34:c3:b7:c9:c8:03:56: 71:25:96:bf:9e:04:bc:1b:1f:c0:5a:17:3c:e8:31: 5e:93:96:50:b4:14:9a:6b:93:9b:0d:89:83:81:96: 71:08:ef:62:2f:9f:5d:6f:f9:0f:4d:70:82:b5:e2: 9c:70:fb:aa:0d:8e:a1:dc:8e:a4:d6:73:3a:c3:73: 20:f2:48:f6:49:b6:d6:d9:3b:f6:b6:39:66:08:85: 55:72:53:e7:ea:14:a4:8a:71:e3:36:9a:3f:97:3e: 6b:aa:33:ce:a8:67:a5:59:9d:cb:64:2d:40:d5:4e: 9a:b6:05:27:79:db:3b:07:0e:5d:e9:b7:4a:f4:7c: 55:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:0A:B9:E0:A9:CF:85:2D:0D:B7:96:38:52:EA:3A:A1:F2:0F:EF:96 X509v3 Authority Key Identifier: keyid:4C:B5:1E:E8:7C:82:2E:8E:6C:B0:54:28:4C:B0:7E:4C:F2:4F:92:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0FCB/92DFFC78816911EF8213FB0CC4F9AE02/TLUe6HyCLo5ssFQoTLB-TPJPkhs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLUe6HyCLo5ssFQoTLB-TPJPkhs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0FCB/92DFFC78816911EF8213FB0CC4F9AE02/TLUe6HyCLo5ssFQoTLB-TPJPkhs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:5b:4f:b7:b4:84:41:30:b5:3d:c3:84:dc:47:69:7b:73:8d: ce:2f:9d:c6:c5:bd:0f:a7:00:3c:5b:0e:06:6d:a3:89:d8:aa: 64:50:71:41:d8:4b:e2:e2:a7:af:7d:81:05:d0:1f:d2:37:51: 9d:05:f7:8c:52:86:f2:b5:57:6f:57:c0:ed:fd:3e:0f:68:47: 75:d4:94:1f:16:a7:82:3d:30:d2:8d:af:e4:06:26:a7:28:c7: cd:49:c5:e9:b8:30:78:aa:4b:e9:3a:52:63:61:9f:99:c6:0a: d2:5c:71:ed:92:ae:15:83:81:aa:49:d8:79:8d:44:75:1c:e8: 8e:46:d3:f2:9a:e4:76:34:d1:65:92:fa:51:2d:ab:eb:01:e2: a4:5d:7b:bb:91:51:c8:a1:f8:80:03:21:82:15:87:3f:c8:d6: fa:67:87:ea:d8:36:e6:31:04:23:24:0d:5a:8a:8c:ed:46:6b: 05:e1:41:26:df:56:66:d7:6c:69:ac:62:bc:16:5c:0c:37:35: 98:49:f7:4e:1f:8d:01:86:d3:83:a6:de:56:af:da:73:74:9d: 92:d3:22:81:7a:5e:76:54:0d:c6:e3:07:df:7a:bf:1a:4c:49: ac:33:67:9e:9a:bf:dd:f1:3f:64:56:ee:1f:b4:c8:e7:09:03: 12:9c:34:df -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MEZDQjExMC8GA1UEBRMoNENCNTFFRTg3QzgyMkU4RTZDQjA1NDI4NENCMDdFNENG MjRGOTIxQjAeFw0yNTA0MjcwNTQzMzZaFw0yNTA1MDQwNTQzMzZaMBgxFjAUBgNV BAMTDTY4MGRjNDA4LWUyMjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYttsv5QajkS/1xWRozZLpMIa9s1xghtj8wUzqBUX5CePik1OQOJ02TRiRvVkE 9n0bwj/fDAxaFgtgjLJODnxqjZz/hxLUgdWJtoi5405xUEI/x2hq4Br6KSqpMZBZ zYcSk3udZDsJ4HDTm+JDg1wOCISfnguaSqnOyWGJqGhpNMO3ycgDVnEllr+eBLwb H8BaFzzoMV6TllC0FJprk5sNiYOBlnEI72Ivn11v+Q9NcIK14pxw+6oNjqHcjqTW czrDcyDySPZJttbZO/a2OWYIhVVyU+fqFKSKceM2mj+XPmuqM86oZ6VZnctkLUDV Tpq2BSd52zsHDl3pt0r0fFV1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxwq54KnP hS0Nt5Y4Uuo6ofIP75YwHwYDVR0jBBgwFoAUTLUe6HyCLo5ssFQoTLB+TPJPkhsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQwRkNCLzkyREZGQzc4ODE2 OTExRUY4MjEzRkIwQ0M0RjlBRTAyL1RMVWU2SHlDTG81c3NGUW9UTEItVFBKUGto cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVExVZTZIeUNMbzVzc0ZRb1RMQi1UUEpQa2hzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQw RkNCLzkyREZGQzc4ODE2OTExRUY4MjEzRkIwQ0M0RjlBRTAyL1RMVWU2SHlDTG81 c3NGUW9UTEItVFBKUGtocy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACNbT7e0hEEwtT3DhNxHaXtzjc4vncbFvQ+nADxbDgZto4nYqmRQcUHY S+Lip699gQXQH9I3UZ0F94xShvK1V29XwO39Pg9oR3XUlB8Wp4I9MNKNr+QGJqco x81Jxem4MHiqS+k6UmNhn5nGCtJcce2SrhWDgapJ2HmNRHUc6I5G0/Ka5HY00WWS +lEtq+sB4qRde7uRUcih+IADIYIVhz/I1vpnh+rYNuYxBCMkDVqKjO1GawXhQSbf VmbXbGmsYrwWXAw3NZhJ904fjQGG04Om3lav2nN0nZLTIoF6XnZUDcbjB996vxpM SawzZ56av93xP2RW7h+0yOcJAxKcNN8= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:56 2025 by rpki-client on console.sobornost.net