$ rpki-client -vvf rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft File: xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft (raw, json) Hash identifier: 9LEtCaE4gr3jiujfy/ThT09SP0eeZWycjXUv6Cpw1gs= Subject key identifier: 70:4B:0A:35:EF:7C:53:C1:30:68:90:A3:C6:43:7B:EF:F7:D9:DD:54 Authority key identifier: C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39 Certificate issuer: /CN=A91D51A0/serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539 Certificate serial: 041E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft Manifest number: 03F2 Signing time: Sun 27 Apr 2025 00:14:29 +0000 Manifest this update: Sun 27 Apr 2025 00:14:28 +0000 Manifest next update: Sun 04 May 2025 00:14:28 +0000 Files and hashes: 1: xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl (hash: uNd2xCBhlA2z3TzeVCV0kDvf96wIYw1kSaajksJ4yOI=) 2: 5CA964A68AC111EC91D19A11C4F9AE02.roa (hash: JDhvBxRe3WYJ1iKQKnxqCUD2z2C21JJ9nqsXsWXBpYM=) 3: 6F8A81CCF30C11ED94750772C4F9AE02.roa (hash: QNRRPIEXpBXbzOjvogyb/5EofzlDIH5pOqmalYkDTHw=) 4: 86131D8AEA5D11ED80641166C4F9AE02.roa (hash: pOC7yi76swQlUgILehboMwNcNI7fxV+UlNvd0wZTls0=) 5: 8FD0B12E400311EEBF5A8B52C4F9AE02.roa (hash: QSRbYccf6zSEHa0HsQVgKCVz5nS1O8L5U8Elot2Xz40=) 6: D46B2C087F8711EC81E76A59C4F9AE02.roa (hash: R3jOsVUDlgPUNcLVjE2JxsnxeughPhg0TvY+Ytf4478=) 7: D83192B0152B11EE85ED4B1DC4F9AE02.roa (hash: 8STPYAJJhsqxveLpZRzmdl9yhMuww2dhMQO1WbQeNbU=) 8: 5F14A15442D111EF8424E65BC4F9AE02.roa (hash: +sir/1Ip5eUjrTrKzP4T0efIjhcNSv/WtmTYay9OtXs=) 9: C3261EF826DF11ED94E18118C4F9AE02.roa (hash: 7KI+xGonwsZRICria/4CZwlDNlRIuXU/wVts22Crf9U=) 10: 350FEB88D40611EDADEE3D1EC4F9AE02.roa (hash: fPCfFsxMUqOAvLJmkWjc+RPsiCNLjQ233XGNCqOiY/w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 00:14:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1054 (0x41e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D51A0, serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539 Validity Not Before: Apr 27 00:14:28 2025 GMT Not After : May 4 00:14:28 2025 GMT Subject: CN=680d76e5-9399 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:06:ea:c3:d2:52:13:67:d1:03:84:8e:10:10: ee:78:8b:0d:1d:39:4f:cd:ec:14:5a:9d:b4:92:df: 61:97:11:69:ca:a3:ce:f2:01:22:c0:01:53:53:5e: d1:63:d8:63:af:54:4f:99:c6:ac:a0:a7:26:5a:c1: 38:00:b4:fa:bb:42:f0:17:24:48:50:00:c8:e7:ec: 54:1b:f3:e8:c8:f9:51:98:c6:e1:11:86:61:2c:65: 3e:42:55:ca:7c:19:f1:63:4d:a7:13:f2:c3:c0:f0: b8:f6:d1:b7:75:da:6a:12:a0:b3:24:e5:a9:88:ac: d7:6d:a4:44:5d:9a:af:38:1c:19:73:67:cc:55:47: 21:92:32:7b:ba:f6:34:bb:f6:8e:cc:f9:5b:17:26: f9:8e:00:f5:ef:65:db:fe:84:a2:b7:8e:dd:37:e2: d0:52:9c:f8:14:ef:3b:b6:41:3d:55:e0:9c:c0:bc: 8f:49:fc:ca:4f:0f:74:c0:43:89:65:c0:03:e5:7b: f8:30:60:9d:e3:17:b8:23:3f:bd:bc:44:54:62:e8: 79:36:6c:f6:38:36:90:ca:3a:b1:b9:68:6e:af:f9: 78:13:7a:a0:a3:eb:f0:73:95:87:5f:07:36:5b:23: ce:24:0e:3f:98:bc:9c:da:54:ef:fb:bf:14:e4:7c: f9:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:4B:0A:35:EF:7C:53:C1:30:68:90:A3:C6:43:7B:EF:F7:D9:DD:54 X509v3 Authority Key Identifier: keyid:C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:33:a5:2e:cd:fa:e2:13:cf:a5:b2:b9:5c:24:e5:70:23:d7: 95:c8:9d:0b:5d:f1:d6:70:f4:fc:a8:8d:10:3d:ea:54:12:85: 60:01:9c:9a:34:bf:6f:65:57:b5:d8:c8:97:93:be:89:5a:5e: 1c:fb:b1:f8:20:db:12:75:19:bf:c4:03:14:a2:81:45:72:ff: 6a:9f:1b:1f:d3:28:ed:6c:b8:57:39:8f:2d:1a:5f:2f:92:ea: 71:8b:7f:1f:73:40:ce:ac:19:7f:c6:3d:ac:05:fd:50:0d:01: 89:61:85:e3:4f:2e:1d:6b:e4:41:77:e4:7b:d5:48:ac:60:ea: 7d:6f:ca:00:a0:2b:51:00:06:d0:92:29:95:43:7f:88:c0:d9: da:da:7e:22:e7:01:18:61:dd:b6:08:ea:fc:0c:3b:e3:7e:fa: 7a:33:57:f8:dc:71:23:d6:6a:88:2f:e8:8d:49:9e:9a:a2:2b: d5:84:c6:4f:ef:12:e3:e8:75:1e:a4:46:d9:2f:6a:62:1b:1e: b5:49:f3:36:92:14:82:d0:27:1a:20:32:fa:27:44:ab:a3:9f: 91:a7:e0:48:9e:ad:55:01:e4:59:c4:cc:3e:8d:2f:f1:f2:93: bb:da:98:52:b2:95:63:a0:dc:48:2a:4b:c8:2d:7b:0c:5c:1d: 23:49:2e:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBB4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUxQTAxMTAvBgNVBAUTKEM2RUFCRUI5M0UxRDA2RTJDMzJFMUM0Q0JFMTQ3Q0ZC Mzk5OTI1MzkwHhcNMjUwNDI3MDAxNDI4WhcNMjUwNTA0MDAxNDI4WjAYMRYwFAYD VQQDEw02ODBkNzZlNS05Mzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvAbqw9JSE2fRA4SOEBDueIsNHTlPzewUWp20kt9hlxFpyqPO8gEiwAFTU17R Y9hjr1RPmcasoKcmWsE4ALT6u0LwFyRIUADI5+xUG/PoyPlRmMbhEYZhLGU+QlXK fBnxY02nE/LDwPC49tG3ddpqEqCzJOWpiKzXbaREXZqvOBwZc2fMVUchkjJ7uvY0 u/aOzPlbFyb5jgD172Xb/oSit47dN+LQUpz4FO87tkE9VeCcwLyPSfzKTw90wEOJ ZcAD5Xv4MGCd4xe4Iz+9vERUYuh5Nmz2ODaQyjqxuWhur/l4E3qgo+vwc5WHXwc2 WyPOJA4/mLyc2lTv+78U5Hz5/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHBLCjXv fFPBMGiQo8ZDe+/32d1UMB8GA1UdIwQYMBaAFMbqvrk+HQbiwy4cTL4UfPs5mSU5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTFBMC83QzUzOTEwQzdG ODQxMUVDODA1MThFNTFDNEY5QUUwMi94dXEtdVQ0ZEJ1TERMaHhNdmhSOC16bVpK VGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h1cS11VDRkQnVMRExoeE12aFI4LXptWkpUay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTFBMC83QzUzOTEwQzdGODQxMUVDODA1MThFNTFDNEY5QUUwMi94dXEtdVQ0ZEJ1 TERMaHhNdmhSOC16bVpKVGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbM6UuzfriE8+lsrlcJOVwI9eVyJ0LXfHWcPT8qI0QPepUEoVgAZya NL9vZVe12MiXk76JWl4c+7H4INsSdRm/xAMUooFFcv9qnxsf0yjtbLhXOY8tGl8v kupxi38fc0DOrBl/xj2sBf1QDQGJYYXjTy4da+RBd+R71UisYOp9b8oAoCtRAAbQ kimVQ3+IwNna2n4i5wEYYd22COr8DDvjfvp6M1f43HEj1mqIL+iNSZ6aoivVhMZP 7xLj6HUepEbZL2piGx61SfM2khSC0CcaIDL6J0Sro5+Rp+BInq1VAeRZxMw+jS/x 8pO72phSspVjoNxIKkvILXsMXB0jSS6m -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:13 2025 by rpki-client on console.sobornost.net