$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft File: 4ed5yzH_53MaM7Xrfq_GsqvbROM.mft (raw, json) Hash identifier: xJngmXquSMw98IWVFf9aCxS7ylOH2wqQ+1lfPSF/r4g= Subject key identifier: E1:58:A6:49:EB:96:67:2B:5B:C6:48:BA:0A:22:38:8A:F3:C1:F7:5A Authority key identifier: E1:E7:79:CB:31:FF:E7:73:1A:33:B5:EB:7E:AF:C6:B2:AB:DB:44:E3 Certificate issuer: /CN=A91D3737/serialNumber=E1E779CB31FFE7731A33B5EB7EAFC6B2ABDB44E3 Certificate serial: 0150 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft Manifest number: 0148 Signing time: Sun 27 Apr 2025 03:14:43 +0000 Manifest this update: Sun 27 Apr 2025 03:14:42 +0000 Manifest next update: Sun 04 May 2025 03:14:42 +0000 Files and hashes: 1: 4ed5yzH_53MaM7Xrfq_GsqvbROM.crl (hash: Zb/zG4Y1k5J6Odrthh175uXutXU3k74TJTsaqzFamS0=) 2: 9E6C93C6372311EEACE5BF61C4F9AE02.roa (hash: TQNp4VPkd2Y3kuSHIh/mgixwhnfBshqTtBcaPCauLtM=) 3: 9F1B80CA372311EEACE5BF61C4F9AE02.roa (hash: GR3/5CWBDLCFuFXDR1pBqo7ZS4ZffgNTqP5rw3l7jgE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.crl rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 336 (0x150) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3737, serialNumber=E1E779CB31FFE7731A33B5EB7EAFC6B2ABDB44E3 Validity Not Before: Apr 27 03:14:42 2025 GMT Not After : May 4 03:14:42 2025 GMT Subject: CN=680da122-11ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4f:95:7c:e7:b5:ba:4b:f3:69:81:72:c8:4d: 86:05:d0:89:f0:36:51:df:8c:61:1f:4c:b3:d6:90: 07:10:c9:27:7c:15:88:2f:36:1b:c1:fa:34:29:5a: 82:ae:0f:88:21:f5:3a:a6:0e:9e:b4:51:6d:71:a5: ed:cb:5c:53:19:72:7c:d9:2d:38:82:e7:99:7b:7b: 43:0e:85:d6:86:9f:5f:27:ff:cf:a6:54:8d:52:41: 35:e5:39:c7:b6:f4:36:2b:9d:26:01:57:91:18:9e: 80:aa:ec:5c:6f:d6:c6:1a:6a:a3:88:43:37:2c:eb: 87:92:32:37:fd:70:4c:b8:92:f2:f8:57:8f:de:30: 52:9b:3f:a4:88:70:5a:4c:a9:51:ea:d1:50:13:09: 7e:da:4b:94:29:a8:eb:64:72:5b:9d:ca:91:17:93: 71:25:34:0c:fa:5e:6c:9b:a6:9b:c0:7a:64:52:e1: bf:e2:be:4e:a0:7f:82:f7:9d:89:5f:a8:ce:fa:1f: c2:06:c6:1d:ca:4b:a8:11:c8:77:0d:5a:97:9d:ed: a9:b1:8c:a9:48:61:63:77:4f:d9:2c:3d:1c:fb:a6: 86:65:ac:a0:7b:17:41:0c:c3:0f:bb:a8:2b:cc:d9: 32:11:74:a4:cf:93:e4:00:0f:92:af:60:30:88:cb: 29:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:58:A6:49:EB:96:67:2B:5B:C6:48:BA:0A:22:38:8A:F3:C1:F7:5A X509v3 Authority Key Identifier: keyid:E1:E7:79:CB:31:FF:E7:73:1A:33:B5:EB:7E:AF:C6:B2:AB:DB:44:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:d8:ce:0e:90:77:8c:7c:37:66:3d:b4:90:3a:13:3c:22:5d: 8e:d3:18:70:72:98:fa:54:3c:6a:9a:12:00:b6:c3:a3:fc:94: a4:c3:b5:d9:60:91:7a:b7:bc:32:25:4d:42:1f:e3:0f:be:67: 78:f6:7e:26:8d:ad:44:18:31:c2:61:10:bf:b2:9a:68:df:58: f3:a8:8a:33:8f:9b:04:a1:84:ce:1d:06:84:e4:1c:d9:18:fa: 6e:0d:a9:73:d6:a0:16:b8:c7:2d:02:7c:d8:aa:37:da:ef:01: 43:4d:4e:90:e5:49:47:50:ca:67:43:54:0b:ce:4f:18:1a:da: 0b:8a:ec:28:00:29:7c:c1:dd:6a:0c:0a:30:91:0e:dc:0c:26: 3b:c8:3a:12:f9:4b:ad:ca:7c:c6:fa:e6:23:a2:2e:a2:9e:40: 71:47:72:da:dc:03:c6:1a:d8:f7:63:6d:f5:23:72:cb:23:ee: cf:57:c4:d2:53:2f:fc:d6:24:ea:aa:23:ee:d9:af:8e:5e:28: 1b:e1:28:85:a2:49:d2:fe:85:50:72:49:4c:24:0d:d5:64:0a: a2:9c:81:f9:e7:7a:17:a4:1e:c8:fd:f2:60:aa:c5:53:78:24: 4d:a7:da:ae:60:c2:ad:ec:6d:f3:f2:c9:70:f5:2b:76:3e:4b: 9b:9e:66:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM3MzcxMTAvBgNVBAUTKEUxRTc3OUNCMzFGRkU3NzMxQTMzQjVFQjdFQUZDNkIy QUJEQjQ0RTMwHhcNMjUwNDI3MDMxNDQyWhcNMjUwNTA0MDMxNDQyWjAYMRYwFAYD VQQDEw02ODBkYTEyMi0xMWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1E+VfOe1ukvzaYFyyE2GBdCJ8DZR34xhH0yz1pAHEMknfBWILzYbwfo0KVqC rg+IIfU6pg6etFFtcaXty1xTGXJ82S04gueZe3tDDoXWhp9fJ//PplSNUkE15TnH tvQ2K50mAVeRGJ6Aquxcb9bGGmqjiEM3LOuHkjI3/XBMuJLy+FeP3jBSmz+kiHBa TKlR6tFQEwl+2kuUKajrZHJbncqRF5NxJTQM+l5sm6abwHpkUuG/4r5OoH+C952J X6jO+h/CBsYdykuoEch3DVqXne2psYypSGFjd0/ZLD0c+6aGZaygexdBDMMPu6gr zNkyEXSkz5PkAA+Sr2AwiMsppwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOFYpknr lmcrW8ZIugoiOIrzwfdaMB8GA1UdIwQYMBaAFOHnecsx/+dzGjO1636vxrKr20Tj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzczNy84Mjk0MzYzRTMz NTExMUVFQTExRjkxMjZDNEY5QUUwMi80ZWQ1eXpIXzUzTWFNN1hyZnFfR3NxdmJS T00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRlZDV5ekhfNTNNYU03WHJmcV9Hc3F2YlJPTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzczNy84Mjk0MzYzRTMzNTExMUVFQTExRjkxMjZDNEY5QUUwMi80ZWQ1eXpIXzUz TWFNN1hyZnFfR3NxdmJST00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB72M4OkHeMfDdmPbSQOhM8Il2O0xhwcpj6VDxqmhIAtsOj/JSkw7XZ YJF6t7wyJU1CH+MPvmd49n4mja1EGDHCYRC/sppo31jzqIozj5sEoYTOHQaE5BzZ GPpuDalz1qAWuMctAnzYqjfa7wFDTU6Q5UlHUMpnQ1QLzk8YGtoLiuwoACl8wd1q DAowkQ7cDCY7yDoS+UutynzG+uYjoi6inkBxR3La3APGGtj3Y231I3LLI+7PV8TS Uy/81iTqqiPu2a+OXigb4SiFoknS/oVQcklMJA3VZAqinIH553oXpB7I/fJgqsVT eCRNp9quYMKt7G3z8slw9St2PkubnmZ1 -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:12 2025 by rpki-client on console.sobornost.net