$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.mft File: 4UpZOzEqmIVz16Xd-uB_kSaTyII.mft (raw, json) Hash identifier: NFoU/QjTCE8JSnW5+0H4nCjS1HfGHv6+jX7jsALV3Gg= Subject key identifier: 10:3B:7F:8E:D7:C8:93:B4:FF:5E:07:A2:8B:17:62:56:67:E8:72:C4 Authority key identifier: E1:4A:59:3B:31:2A:98:85:73:D7:A5:DD:FA:E0:7F:91:26:93:C8:82 Certificate issuer: /CN=A91D4ACD/serialNumber=E14A593B312A988573D7A5DDFAE07F912693C882 Certificate serial: 77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UpZOzEqmIVz16Xd-uB_kSaTyII.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.mft Manifest number: 77 Signing time: Sun 27 Apr 2025 05:38:47 +0000 Manifest this update: Sun 27 Apr 2025 05:38:47 +0000 Manifest next update: Sun 04 May 2025 05:38:47 +0000 Files and hashes: 1: 4UpZOzEqmIVz16Xd-uB_kSaTyII.crl (hash: 0nbz/usT7PJf1By7El3Q75MdCFHpbmfOxN/LAz4hnIY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.crl rsync://rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UpZOzEqmIVz16Xd-uB_kSaTyII.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 119 (0x77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4ACD, serialNumber=E14A593B312A988573D7A5DDFAE07F912693C882 Validity Not Before: Apr 27 05:38:47 2025 GMT Not After : May 4 05:38:47 2025 GMT Subject: CN=680dc2e7-e99f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:af:66:26:b4:4a:ed:90:ee:f9:d1:62:44:af: 5e:22:90:c9:e9:c4:7c:3a:6d:11:9b:7b:b0:95:74: 10:ff:c4:5f:e3:80:68:da:c8:b8:ba:7c:14:bf:9b: f6:20:29:12:34:8e:9c:19:2a:24:da:35:69:69:72: bc:12:82:8e:ad:49:81:0b:e9:60:ba:8f:07:27:8a: 21:27:f1:99:32:d2:8a:ea:a6:b6:75:2b:39:be:94: f0:d3:4f:b5:21:c5:76:c2:8f:0b:ce:ac:d4:08:1a: 2d:a3:ea:12:aa:07:bf:13:53:c1:09:7f:82:13:79: d3:38:59:93:38:14:18:b1:32:5a:18:7f:d6:b9:9d: 6b:b3:16:4e:e2:31:b4:54:58:ae:2b:ed:f5:1a:41: 88:a4:1a:cf:b5:cc:66:e3:ba:80:0f:26:84:86:bc: 2b:b8:cf:33:02:56:f9:a2:74:d1:4b:a7:94:fb:b9: 74:42:e5:1c:02:db:01:0a:6d:b5:98:bf:12:7b:06: c4:43:a7:ac:0f:f5:ac:08:4f:fe:7e:be:cf:b1:17: 7e:c2:45:b7:85:65:b5:4e:5c:c8:ff:12:9b:fd:c0: 8b:69:ab:4b:cf:71:da:0c:bc:40:d3:3e:60:a8:0c: 3b:fc:49:d9:0e:82:e6:be:1d:90:ef:02:18:4f:69: 33:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:3B:7F:8E:D7:C8:93:B4:FF:5E:07:A2:8B:17:62:56:67:E8:72:C4 X509v3 Authority Key Identifier: keyid:E1:4A:59:3B:31:2A:98:85:73:D7:A5:DD:FA:E0:7F:91:26:93:C8:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UpZOzEqmIVz16Xd-uB_kSaTyII.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:25:9f:d5:18:cb:ad:2c:b4:61:21:aa:64:65:2c:7d:12:38: 40:c6:67:d4:c0:1f:6e:47:b6:d2:99:bf:63:45:bd:14:ae:fa: e7:30:fc:d2:52:a1:17:d5:fd:ca:93:a2:1c:56:6d:42:72:b5: fe:9c:08:3f:77:9e:94:44:73:08:e1:04:82:55:84:f7:bb:c9: dd:ee:db:0b:ed:c6:8b:ba:4a:c9:53:64:87:56:5f:d3:6a:70: 3e:79:fb:69:ee:e9:32:71:8f:60:19:d2:49:01:37:a6:b4:d9: a7:13:f7:3b:b2:35:9b:5d:b5:34:e0:43:e0:78:f9:59:e1:96: fa:60:0f:29:4c:cf:82:02:5d:56:84:67:4d:0e:40:8b:11:c2: b2:33:15:07:cc:28:b1:c5:46:2f:35:e3:3b:13:3b:92:d0:e0: 4d:17:09:ff:3d:0d:c0:6a:be:ef:3d:67:df:c7:39:46:d8:3b: 18:6b:3e:24:87:1b:54:b7:af:ad:f3:d0:f6:c8:f8:a4:59:07: f5:73:48:72:ac:27:87:b6:30:16:4d:d3:b4:68:d4:9e:14:c2: dd:85:38:1e:67:b8:e9:5b:d4:f0:b1:f8:b2:d7:90:4d:2e:85: cf:7b:6a:9a:1a:d0:ca:4a:ac:22:61:1c:a7:ee:e2:1e:a2:b5: 5d:e0:df:27 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NEFDRDExMC8GA1UEBRMoRTE0QTU5M0IzMTJBOTg4NTczRDdBNURERkFFMDdGOTEy NjkzQzg4MjAeFw0yNTA0MjcwNTM4NDdaFw0yNTA1MDQwNTM4NDdaMBgxFjAUBgNV BAMTDTY4MGRjMmU3LWU5OWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtr2YmtErtkO750WJEr14ikMnpxHw6bRGbe7CVdBD/xF/jgGjayLi6fBS/m/Yg KRI0jpwZKiTaNWlpcrwSgo6tSYEL6WC6jwcniiEn8Zky0orqprZ1Kzm+lPDTT7Uh xXbCjwvOrNQIGi2j6hKqB78TU8EJf4ITedM4WZM4FBixMloYf9a5nWuzFk7iMbRU WK4r7fUaQYikGs+1zGbjuoAPJoSGvCu4zzMCVvmidNFLp5T7uXRC5RwC2wEKbbWY vxJ7BsRDp6wP9awIT/5+vs+xF37CRbeFZbVOXMj/Epv9wItpq0vPcdoMvEDTPmCo DDv8SdkOgua+HZDvAhhPaTOlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEDt/jtfI k7T/XgeiixdiVmfocsQwHwYDVR0jBBgwFoAU4UpZOzEqmIVz16Xd+uB/kSaTyIIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0QUNELzI5MDMxQTNBNzU2 RTExRUY5Q0E0NkU1MUM0RjlBRTAyLzRVcFpPekVxbUlWejE2WGQtdUJfa1NhVHlJ SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNFVwWk96RXFtSVZ6MTZYZC11Ql9rU2FUeUlJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0 QUNELzI5MDMxQTNBNzU2RTExRUY5Q0E0NkU1MUM0RjlBRTAyLzRVcFpPekVxbUlW ejE2WGQtdUJfa1NhVHlJSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGsln9UYy60stGEhqmRlLH0SOEDGZ9TAH25HttKZv2NFvRSu+ucw/NJS oRfV/cqTohxWbUJytf6cCD93npREcwjhBIJVhPe7yd3u2wvtxou6SslTZIdWX9Nq cD55+2nu6TJxj2AZ0kkBN6a02acT9zuyNZtdtTTgQ+B4+VnhlvpgDylMz4ICXVaE Z00OQIsRwrIzFQfMKLHFRi814zsTO5LQ4E0XCf89DcBqvu89Z9/HOUbYOxhrPiSH G1S3r63z0PbI+KRZB/VzSHKsJ4e2MBZN07Ro1J4Uwt2FOB5nuOlb1PCx+LLXkE0u hc97apoa0MpKrCJhHKfu4h6itV3g3yc= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:56 2025 by rpki-client on console.sobornost.net