$ rpki-client -vvf rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft File: Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft (raw, json) Hash identifier: t/0PSfGwam+ZfQqlxlQJkShVE3fcPXuizAZCoLFcx7M= Subject key identifier: 42:92:34:3F:F5:68:88:E5:FC:B3:1A:84:D0:4E:87:43:0A:29:88:43 Authority key identifier: 5E:7D:D0:5A:9C:1B:E0:44:44:AC:E0:3F:E4:A9:20:26:80:4D:4B:2A Certificate issuer: /CN=A91D63EA/serialNumber=5E7DD05A9C1BE04444ACE03FE4A92026804D4B2A Certificate serial: 011A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft Manifest number: 010F Signing time: Sun 27 Apr 2025 03:58:40 +0000 Manifest this update: Sun 27 Apr 2025 03:58:39 +0000 Manifest next update: Sun 04 May 2025 03:58:39 +0000 Files and hashes: 1: Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl (hash: /UM8xnZ/dAqYHmQMQfDuScEl7jI1IytPr0BzNmKRpls=) 2: 2B6413D4670811EF9D46FA4FC4F9AE02.roa (hash: pEMsHg7hpkICm+xaNCW+Re7HwXfnTTFuauFbRpCHC+4=) 3: 21047C70672211EF998AEF2BC4F9AE02.roa (hash: 3NZc5h6ed9BUlmgYjohUHdHLn8ZtKRYjymamcmwqc6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 282 (0x11a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D63EA, serialNumber=5E7DD05A9C1BE04444ACE03FE4A92026804D4B2A Validity Not Before: Apr 27 03:58:39 2025 GMT Not After : May 4 03:58:39 2025 GMT Subject: CN=680dab70-4505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:85:ac:98:54:bb:95:e7:77:fa:34:e7:da:3d: 68:9c:dd:a3:08:ee:42:b8:c0:2b:d4:33:da:bc:4a: c5:d6:1b:46:03:4f:31:dc:99:a3:08:5c:85:a0:ea: a1:39:04:67:a0:bf:78:dc:df:8b:9f:0b:89:0d:db: 38:12:9b:90:e1:56:e4:0d:95:73:b5:23:bd:08:d4: ed:a5:02:d8:4a:f4:cf:19:76:ed:25:01:75:86:f8: a0:2d:13:63:a8:93:aa:6a:55:e5:da:df:41:43:34: 48:44:1b:de:f2:1e:49:7f:b1:ac:ba:12:91:84:9f: 5a:52:0a:a8:4f:12:d5:be:05:37:85:86:fe:ca:d1: ec:75:0d:af:f3:84:98:8e:0b:90:30:d6:aa:05:b7: 7a:16:2c:bd:3b:a7:67:51:aa:05:bf:6b:d7:40:f4: 7d:25:bb:41:6d:b9:40:83:00:b2:b2:ea:ac:bc:3b: 28:71:b3:c0:bf:b7:ab:4e:a7:03:d7:38:63:33:c4: 4f:33:c8:5f:74:eb:c6:b7:93:52:f3:03:93:01:d1: c3:62:2e:a9:3f:e1:59:59:3e:87:0e:70:eb:aa:42: a8:d5:37:75:d5:f0:52:6d:56:50:c3:04:e5:fc:2a: c8:45:58:46:22:d6:79:ba:ab:a4:23:e7:b4:1f:6f: a9:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:92:34:3F:F5:68:88:E5:FC:B3:1A:84:D0:4E:87:43:0A:29:88:43 X509v3 Authority Key Identifier: keyid:5E:7D:D0:5A:9C:1B:E0:44:44:AC:E0:3F:E4:A9:20:26:80:4D:4B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:f2:16:8e:53:b3:65:ed:41:e2:a0:ff:94:d1:52:ed:57:20: 02:94:26:bc:04:f3:9b:50:12:aa:58:e4:97:3b:09:dc:8a:37: d1:14:07:ce:5f:79:13:bb:10:ca:79:86:94:29:de:13:8f:d7: 28:27:13:d8:9a:ed:1c:b7:41:d0:80:02:96:eb:52:29:46:f4: 11:7c:76:b0:ef:a3:cc:c1:bb:dc:e9:8c:10:fd:d8:a9:fc:23: f7:fb:8d:5d:c5:07:c1:ee:cd:fd:8f:0c:e8:4e:e5:90:96:75: 87:09:fe:49:ac:e2:38:17:40:0e:77:90:f2:d5:57:09:75:6d: 4a:02:ec:32:1e:6d:8a:e3:57:f5:70:9e:39:6f:a6:96:02:b9: c1:a5:8d:9e:43:bb:ce:20:86:50:39:6d:6b:53:45:80:39:d5: a9:16:a3:00:d4:6d:3b:3c:da:85:d4:05:e4:dd:58:0a:b0:88: 53:41:2a:88:08:f5:36:29:ec:3a:e2:b1:a5:5d:5e:fe:dc:7b: 20:17:a8:5c:f5:28:e9:0c:54:3a:b3:74:dd:11:33:29:6a:38: ab:70:e7:9c:47:80:6a:01:26:bd:c2:07:2b:ba:21:bc:54:6b: b2:5e:4c:be:6e:d2:81:47:f2:19:3b:4b:79:62:63:85:55:eb: 9f:de:43:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYzRUExMTAvBgNVBAUTKDVFN0REMDVBOUMxQkUwNDQ0NEFDRTAzRkU0QTkyMDI2 ODA0RDRCMkEwHhcNMjUwNDI3MDM1ODM5WhcNMjUwNTA0MDM1ODM5WjAYMRYwFAYD VQQDEw02ODBkYWI3MC00NTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA04WsmFS7led3+jTn2j1onN2jCO5CuMAr1DPavErF1htGA08x3JmjCFyFoOqh OQRnoL943N+LnwuJDds4EpuQ4VbkDZVztSO9CNTtpQLYSvTPGXbtJQF1hvigLRNj qJOqalXl2t9BQzRIRBve8h5Jf7GsuhKRhJ9aUgqoTxLVvgU3hYb+ytHsdQ2v84SY jguQMNaqBbd6Fiy9O6dnUaoFv2vXQPR9JbtBbblAgwCysuqsvDsocbPAv7erTqcD 1zhjM8RPM8hfdOvGt5NS8wOTAdHDYi6pP+FZWT6HDnDrqkKo1Td11fBSbVZQwwTl /CrIRVhGItZ5uqukI+e0H2+puQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEKSND/1 aIjl/LMahNBOh0MKKYhDMB8GA1UdIwQYMBaAFF590FqcG+BERKzgP+SpICaATUsq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjNFQS81MEE0Mjg5RTk1 RkYxMUVFQTZBNEY3MEFDNEY5QUUwMi9YbjNRV3B3YjRFUkVyT0FfNUtrZ0pvQk5T eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1huM1FXcHdiNEVSRXJPQV81S2tnSm9CTlN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjNFQS81MEE0Mjg5RTk1RkYxMUVFQTZBNEY3MEFDNEY5QUUwMi9YbjNRV3B3YjRF UkVyT0FfNUtrZ0pvQk5TeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB88haOU7Nl7UHioP+U0VLtVyAClCa8BPObUBKqWOSXOwncijfRFAfO X3kTuxDKeYaUKd4Tj9coJxPYmu0ct0HQgAKW61IpRvQRfHaw76PMwbvc6YwQ/dip /CP3+41dxQfB7s39jwzoTuWQlnWHCf5JrOI4F0AOd5Dy1VcJdW1KAuwyHm2K41f1 cJ45b6aWArnBpY2eQ7vOIIZQOW1rU0WAOdWpFqMA1G07PNqF1AXk3VgKsIhTQSqI CPU2Kew64rGlXV7+3HsgF6hc9SjpDFQ6s3TdETMpajircOecR4BqASa9wgcruiG8 VGuyXky+btKBR/IZO0t5YmOFVeuf3kM2 -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:13 2025 by rpki-client on console.sobornost.net