$ rpki-client -vvf rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.mft File: Fq85Z82e72n-cs9m28bg-wDKONQ.mft (raw, json) Hash identifier: oR/0+iWtXIxLrtPRL7ZOkJmtQ4B4W41gdUbwM00FIc4= Subject key identifier: C3:8C:9A:41:78:23:F5:D9:96:F7:E8:BA:53:82:1C:BB:A0:17:8B:D2 Authority key identifier: 16:AF:39:67:CD:9E:EF:69:FE:72:CF:66:DB:C6:E0:FB:00:CA:38:D4 Certificate issuer: /CN=A91D34D0/serialNumber=16AF3967CD9EEF69FE72CF66DBC6E0FB00CA38D4 Certificate serial: 91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fq85Z82e72n-cs9m28bg-wDKONQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.mft Manifest number: 91 Signing time: Fri 25 Apr 2025 05:26:55 +0000 Manifest this update: Fri 25 Apr 2025 05:26:55 +0000 Manifest next update: Fri 02 May 2025 05:26:55 +0000 Files and hashes: 1: Fq85Z82e72n-cs9m28bg-wDKONQ.crl (hash: 5tb6Pb5bV7VanyXOk1pbIapp86TzyVYCOo/6dMpOtA0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.crl rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fq85Z82e72n-cs9m28bg-wDKONQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 145 (0x91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D34D0, serialNumber=16AF3967CD9EEF69FE72CF66DBC6E0FB00CA38D4 Validity Not Before: Apr 25 05:26:55 2025 GMT Not After : May 2 05:26:55 2025 GMT Subject: CN=680b1d1f-f646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ff:7d:67:d1:16:57:c2:92:78:05:e4:b5:d2: 1d:cc:ad:48:d5:99:a1:53:7d:02:50:c7:d5:dd:3d: e1:32:0f:52:73:c9:54:f1:ad:5c:46:8d:9e:59:c3: b5:40:8f:9f:bd:83:2d:95:db:5c:38:dd:8b:ea:cf: 81:90:a2:48:e5:15:f1:8d:b4:4c:c1:91:e2:73:0a: b7:21:d2:24:df:88:14:73:31:c9:70:d7:5d:5c:3d: 1c:92:e3:12:91:1c:c0:c3:29:3e:e1:5a:19:32:71: 2e:22:91:d3:cb:db:61:20:1e:80:54:8e:fa:2e:3e: ee:c7:56:ec:40:8e:cd:08:84:0f:9e:47:2a:92:14: a3:e9:a7:3a:22:8a:b9:cd:2a:fe:8a:35:7e:eb:bb: 7a:65:34:c1:9d:51:05:fc:e2:cc:12:b9:79:98:d6: 78:1a:e3:bb:42:15:c4:2d:1b:3d:c5:a4:f8:be:7f: 2c:b7:8a:ab:6e:dd:2d:0b:86:c9:ae:38:65:69:72: 69:ac:ef:9e:56:72:db:49:34:e0:b5:82:cd:dd:e2: 3e:67:90:e3:0b:84:70:1f:49:9e:86:10:82:e9:f0: 8a:a7:1d:80:4e:2a:d0:91:71:00:ac:62:bb:3f:b0: dd:66:7b:81:05:4b:ec:e1:90:bd:34:53:80:31:66: 67:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:8C:9A:41:78:23:F5:D9:96:F7:E8:BA:53:82:1C:BB:A0:17:8B:D2 X509v3 Authority Key Identifier: keyid:16:AF:39:67:CD:9E:EF:69:FE:72:CF:66:DB:C6:E0:FB:00:CA:38:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fq85Z82e72n-cs9m28bg-wDKONQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:1c:03:ee:c6:6d:16:5e:e9:b5:71:7b:cd:e4:48:48:34:75: d8:20:cf:c4:77:d2:9c:bd:7d:17:e2:13:0f:53:30:2f:98:26: e7:46:99:f3:10:e6:ed:b1:02:41:b8:32:e4:00:1d:45:c3:e7: 2c:f5:d3:f7:b8:34:0d:71:ff:02:73:8a:fd:fa:f1:eb:3f:c0: e6:a7:41:14:58:b0:2b:ad:69:fe:88:5f:cc:73:1b:49:7f:0e: 21:00:87:2c:47:de:82:61:65:59:e1:41:eb:7a:5a:21:e7:10: cc:93:2c:50:1a:f2:54:75:3a:b6:da:fb:05:4e:b4:bc:14:e5: dd:5c:7b:26:70:e3:ec:95:b8:e3:d4:50:ba:89:9f:54:e2:9e: 2e:06:d3:21:2c:64:53:26:e1:4e:58:c8:14:ca:6a:b7:b5:f0: 58:dc:19:62:49:05:27:c5:26:7d:fa:ee:36:5f:1f:35:2b:7d: 43:0e:c1:e2:5a:c7:57:55:7a:41:3d:99:c5:8f:25:aa:69:9b: 69:61:99:f8:04:cd:8f:61:7e:81:6d:b0:e7:cc:b9:c3:3a:fd: 50:1a:20:4c:f7:81:8a:38:71:3e:b1:37:38:a1:0d:9f:0d:88: 64:8c:ca:63:a2:98:b6:e0:a3:75:8c:20:a5:76:9f:d7:db:92: 5c:9a:e1:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM0RDAxMTAvBgNVBAUTKDE2QUYzOTY3Q0Q5RUVGNjlGRTcyQ0Y2NkRCQzZFMEZC MDBDQTM4RDQwHhcNMjUwNDI1MDUyNjU1WhcNMjUwNTAyMDUyNjU1WjAYMRYwFAYD VQQDEw02ODBiMWQxZi1mNjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsv99Z9EWV8KSeAXktdIdzK1I1ZmhU30CUMfV3T3hMg9Sc8lU8a1cRo2eWcO1 QI+fvYMtldtcON2L6s+BkKJI5RXxjbRMwZHicwq3IdIk34gUczHJcNddXD0ckuMS kRzAwyk+4VoZMnEuIpHTy9thIB6AVI76Lj7ux1bsQI7NCIQPnkcqkhSj6ac6Ioq5 zSr+ijV+67t6ZTTBnVEF/OLMErl5mNZ4GuO7QhXELRs9xaT4vn8st4qrbt0tC4bJ rjhlaXJprO+eVnLbSTTgtYLN3eI+Z5DjC4RwH0mehhCC6fCKpx2ATirQkXEArGK7 P7DdZnuBBUvs4ZC9NFOAMWZnswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMOMmkF4 I/XZlvfoulOCHLugF4vSMB8GA1UdIwQYMBaAFBavOWfNnu9p/nLPZtvG4PsAyjjU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzREMC9GNTQwM0VGMjQ1 QjcxMUVGQTNEOUEwNDlDNEY5QUUwMi9GcTg1WjgyZTcybi1jczltMjhiZy13REtP TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZxODVaODJlNzJuLWNzOW0yOGJnLXdES09OUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzREMC9GNTQwM0VGMjQ1QjcxMUVGQTNEOUEwNDlDNEY5QUUwMi9GcTg1WjgyZTcy bi1jczltMjhiZy13REtPTlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBHAPuxm0WXum1cXvN5EhINHXYIM/Ed9KcvX0X4hMPUzAvmCbnRpnz EObtsQJBuDLkAB1Fw+cs9dP3uDQNcf8Cc4r9+vHrP8Dmp0EUWLArrWn+iF/McxtJ fw4hAIcsR96CYWVZ4UHreloh5xDMkyxQGvJUdTq22vsFTrS8FOXdXHsmcOPslbjj 1FC6iZ9U4p4uBtMhLGRTJuFOWMgUymq3tfBY3BliSQUnxSZ9+u42Xx81K31DDsHi WsdXVXpBPZnFjyWqaZtpYZn4BM2PYX6BbbDnzLnDOv1QGiBM94GKOHE+sTc4oQ2f DYhkjMpjopi24KN1jCCldp/X25JcmuHt -----END CERTIFICATE-----Generated at Fri Apr 25 08:25:12 2025 by rpki-client on console.sobornost.net