$ rpki-client -vvf rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft File: CROi4pwkcA4hQx4EweNJf9X5qAA.mft (raw, json) Hash identifier: t8yGSLPzt9aKH6GYxAzdDpmCa7yzfsfvTDO/3qwhsvE= Subject key identifier: 7C:C2:0F:53:2B:DF:90:A7:A2:D5:01:BC:61:FD:C0:44:15:D1:4E:53 Authority key identifier: 09:13:A2:E2:9C:24:70:0E:21:43:1E:04:C1:E3:49:7F:D5:F9:A8:00 Certificate issuer: /CN=A91D65C2/serialNumber=0913A2E29C24700E21431E04C1E3497FD5F9A800 Certificate serial: 0103 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft Manifest number: FA Signing time: Sun 27 Apr 2025 04:08:57 +0000 Manifest this update: Sun 27 Apr 2025 04:08:57 +0000 Manifest next update: Sun 04 May 2025 04:08:56 +0000 Files and hashes: 1: CROi4pwkcA4hQx4EweNJf9X5qAA.crl (hash: N9zR4+aQ8qkpi1jUb88LLDuZkybBPau0mBbG5/FOKj0=) 2: C3A53484B06011EEA1D18B7FC4F9AE02.roa (hash: 6BXa0l0XZh/eGvl4ynq5V2Aj3lZVf/u92wrWO9e9+lA=) 3: AA134FD6BD1411EE95F45624C4F9AE02.roa (hash: 0ui5S8hmz9C0Ock78UXOuJaT2l8PyKzUulCehXJDbXM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.crl rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 259 (0x103) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D65C2, serialNumber=0913A2E29C24700E21431E04C1E3497FD5F9A800 Validity Not Before: Apr 27 04:08:57 2025 GMT Not After : May 4 04:08:56 2025 GMT Subject: CN=680dadd9-01d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8a:6c:78:68:cc:58:d6:aa:9e:dc:76:c0:44: 33:e1:ac:b1:01:7c:3e:ea:da:8b:8c:2b:dd:d9:f5: 05:64:d9:d9:d3:41:6a:44:e2:ca:00:11:2b:c6:80: 36:75:c5:88:4e:ed:f9:44:b4:e9:69:89:b9:b8:63: 4e:9f:db:ec:72:3b:81:2d:22:f1:53:74:0a:58:b0: 5f:3d:68:31:ef:9f:bf:14:ad:3c:7e:24:f2:1e:f2: 64:99:11:38:1b:20:e9:e3:e9:27:04:e5:06:20:5d: 08:74:c8:fe:c9:d9:2d:5f:54:10:a0:98:ed:e6:e1: 58:fe:bb:63:d1:b7:d5:74:95:75:48:1a:8f:61:6e: 17:aa:53:0b:51:0d:eb:dd:7c:7e:84:24:58:ab:80: 2c:cb:5b:86:23:da:e6:7a:ca:ed:dd:73:a9:bf:f4: 4a:cd:0a:b3:f2:cb:ab:23:38:da:fc:45:bb:fc:22: 11:75:04:36:ea:46:3c:69:40:c5:f7:a5:62:2c:95: 99:83:b6:fd:bc:00:e9:cf:18:3f:fb:b3:9d:06:ad: 44:f1:21:f2:30:57:98:05:09:00:2a:13:63:ce:ac: 89:31:24:f2:d2:50:6c:e5:5e:24:81:53:ff:94:31: ea:05:68:63:87:00:e7:1d:59:eb:ab:cb:a8:d2:51: 74:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:C2:0F:53:2B:DF:90:A7:A2:D5:01:BC:61:FD:C0:44:15:D1:4E:53 X509v3 Authority Key Identifier: keyid:09:13:A2:E2:9C:24:70:0E:21:43:1E:04:C1:E3:49:7F:D5:F9:A8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:ee:cd:b2:d6:22:83:37:bd:79:da:60:87:a7:3f:e2:78:f8: af:11:b5:7a:7f:88:f2:0d:3c:87:86:9d:43:c0:b6:6e:eb:83: 52:7b:0c:9d:8e:3a:48:14:14:69:a9:22:3a:af:61:1c:a5:01: 2f:42:08:ef:0a:e8:b2:a0:ee:fa:a3:2e:f3:09:32:4a:f9:b5: 57:2f:b7:00:76:a2:ec:a3:bc:9f:b1:ee:cb:89:9e:8d:60:00: f2:45:5f:64:51:91:e3:37:25:0c:74:dd:d5:f7:c0:9c:19:ab: 5c:25:cb:2e:e2:26:4e:25:d7:68:71:ae:97:41:96:10:4c:e4: 02:d6:c2:e0:22:5d:d4:a3:54:d6:9f:0f:a3:f5:17:4f:5a:7e: 70:fd:80:94:b2:11:54:94:45:9a:91:98:69:77:7b:4f:02:96: 1b:77:c3:bd:23:47:ab:32:91:8d:53:2f:2d:d6:34:5f:f7:8a: ae:91:8c:7b:a6:75:b0:02:84:e1:de:56:54:78:cf:92:0c:0b: 01:4d:db:dc:45:0b:5c:6b:5d:d8:d5:7b:37:5c:49:6a:9e:56: 1d:10:f8:e1:39:e4:22:fa:7a:81:f1:2c:3f:a9:37:a8:5b:8b: 12:97:c3:8b:ec:5a:90:bf:57:b0:30:28:5f:04:16:29:0b:ff: b6:58:40:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY1QzIxMTAvBgNVBAUTKDA5MTNBMkUyOUMyNDcwMEUyMTQzMUUwNEMxRTM0OTdG RDVGOUE4MDAwHhcNMjUwNDI3MDQwODU3WhcNMjUwNTA0MDQwODU2WjAYMRYwFAYD VQQDEw02ODBkYWRkOS0wMWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArIpseGjMWNaqntx2wEQz4ayxAXw+6tqLjCvd2fUFZNnZ00FqROLKABErxoA2 dcWITu35RLTpaYm5uGNOn9vscjuBLSLxU3QKWLBfPWgx75+/FK08fiTyHvJkmRE4 GyDp4+knBOUGIF0IdMj+ydktX1QQoJjt5uFY/rtj0bfVdJV1SBqPYW4XqlMLUQ3r 3Xx+hCRYq4Asy1uGI9rmesrt3XOpv/RKzQqz8surIzja/EW7/CIRdQQ26kY8aUDF 96ViLJWZg7b9vADpzxg/+7OdBq1E8SHyMFeYBQkAKhNjzqyJMSTy0lBs5V4kgVP/ lDHqBWhjhwDnHVnrq8uo0lF0aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHzCD1Mr 35CnotUBvGH9wEQV0U5TMB8GA1UdIwQYMBaAFAkTouKcJHAOIUMeBMHjSX/V+agA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjVDMi83NkVFNzk1Q0Iw NjAxMUVFQkJCRjY1N0NDNEY5QUUwMi9DUk9pNHB3a2NBNGhReDRFd2VOSmY5WDVx QUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NST2k0cHdrY0E0aFF4NEV3ZU5KZjlYNXFBQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjVDMi83NkVFNzk1Q0IwNjAxMUVFQkJCRjY1N0NDNEY5QUUwMi9DUk9pNHB3a2NB NGhReDRFd2VOSmY5WDVxQUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBC7s2y1iKDN7152mCHpz/iePivEbV6f4jyDTyHhp1DwLZu64NSewyd jjpIFBRpqSI6r2EcpQEvQgjvCuiyoO76oy7zCTJK+bVXL7cAdqLso7yfse7LiZ6N YADyRV9kUZHjNyUMdN3V98CcGatcJcsu4iZOJddoca6XQZYQTOQC1sLgIl3Uo1TW nw+j9RdPWn5w/YCUshFUlEWakZhpd3tPApYbd8O9I0erMpGNUy8t1jRf94qukYx7 pnWwAoTh3lZUeM+SDAsBTdvcRQtca13Y1Xs3XElqnlYdEPjhOeQi+nqB8Sw/qTeo W4sSl8OL7FqQv1ewMChfBBYpC/+2WEBT -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:56 2025 by rpki-client on console.sobornost.net