$ rpki-client -vvf rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft File: 23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft (raw, json) Hash identifier: LMXK2vCgGG8yFuAqWfEC1mDzMDy9r7pI1EUqT6ufKvU= Subject key identifier: 6B:08:CF:84:77:17:8E:BA:8D:C6:A0:3A:9E:F9:99:C6:FE:E6:52:C5 Authority key identifier: DB:78:D9:F9:35:8E:56:7D:30:6E:E3:BD:1E:AC:74:8E:96:06:BF:8F Certificate issuer: /CN=A91D72CC/serialNumber=DB78D9F9358E567D306EE3BD1EAC748E9606BF8F Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23jZ-TWOVn0wbuO9Hqx0jpYGv48.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft Manifest number: 0E18 Signing time: Mon 28 Apr 2025 18:06:29 +0000 Manifest this update: Mon 28 Apr 2025 18:06:28 +0000 Manifest next update: Mon 05 May 2025 18:06:28 +0000 Files and hashes: 1: 23jZ-TWOVn0wbuO9Hqx0jpYGv48.crl (hash: HDoi33JGpjinS0LaVJZAjQ8chfBVONmQ5+IFpe0so2U=) 2: DEDE6B3CC8A911EFB805FB63C4F9AE02.roa (hash: vEfRiQNE3h/B834WLq9GOeXPVajCjfh3DLWpODG+4Jw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.crl rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23jZ-TWOVn0wbuO9Hqx0jpYGv48.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 18:06:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D72CC, serialNumber=DB78D9F9358E567D306EE3BD1EAC748E9606BF8F Validity Not Before: Apr 28 18:06:28 2025 GMT Not After : May 5 18:06:28 2025 GMT Subject: CN=680fc3a5-646a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e3:a1:9c:36:16:b9:4d:1f:bc:68:fe:55:64: cc:c0:33:86:fe:8c:58:35:1d:77:12:d2:b8:e4:89: 00:fb:b6:bb:95:0d:de:20:fe:8c:0b:e9:93:c9:d5: dc:2d:4e:e5:e6:06:72:cc:19:79:f1:85:47:b9:6d: c5:10:69:52:68:c3:06:3d:62:fe:6e:28:11:9d:e6: dd:fd:94:88:1d:5c:33:2e:36:0f:6c:12:b2:19:ce: 50:e5:4b:2b:66:df:89:09:25:3f:de:88:c7:3b:98: 4f:62:a5:99:60:b4:12:a5:52:8a:39:18:81:51:4c: 52:50:f0:68:6a:93:24:2a:a6:7e:cb:13:8e:3e:1d: 48:cb:eb:3e:0f:78:7c:db:c1:6e:de:21:f6:14:ac: 6b:5a:2c:87:e6:1c:70:09:0e:0e:58:c8:8a:22:80: a0:67:4d:2e:2d:23:dc:0f:33:0e:e9:57:67:80:ff: 25:f4:47:9f:0d:54:38:3e:dd:85:47:69:f8:43:7a: b4:e6:0f:ad:6c:63:23:39:91:ea:80:dc:4b:0a:30: c9:92:23:4d:01:0c:12:a5:01:a9:2b:5f:61:3a:c9: 27:ef:09:88:68:7a:7e:99:52:77:ab:1a:48:fc:12: ce:c6:15:7d:7d:26:83:c4:5e:6a:7c:02:02:af:fc: 70:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:08:CF:84:77:17:8E:BA:8D:C6:A0:3A:9E:F9:99:C6:FE:E6:52:C5 X509v3 Authority Key Identifier: keyid:DB:78:D9:F9:35:8E:56:7D:30:6E:E3:BD:1E:AC:74:8E:96:06:BF:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23jZ-TWOVn0wbuO9Hqx0jpYGv48.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:b9:ee:a2:6f:de:69:ee:6a:0c:f9:19:29:71:56:e1:77:a9: 22:4f:46:f3:c5:05:0d:0a:a9:86:56:d5:5e:aa:05:b4:3f:7e: 22:a3:f4:4a:f3:7c:ad:5b:c5:ce:94:76:b8:a6:f0:9a:a1:b9: ad:6c:fb:df:d8:f6:c1:c4:e7:e6:be:ac:d0:d1:80:ae:28:65: 73:da:62:d1:da:f4:47:76:e0:75:a9:77:6e:dd:09:ec:3d:12: e4:68:5f:4e:aa:2e:27:4b:c0:ad:52:d3:d9:38:25:82:d3:03: a2:c3:49:27:6a:4f:f7:0c:bf:1b:32:1f:90:c4:1a:f8:9b:94: 41:b6:a4:82:62:df:e1:42:8f:a6:ba:65:30:5c:85:f3:a6:e5: 01:2a:7a:66:fb:63:45:b1:c4:32:a2:e7:f9:fd:66:49:f2:79: c1:a4:3f:83:d1:76:da:73:f0:51:a7:13:62:11:14:6b:d7:fe: 85:4c:2d:b9:e1:7b:7e:cd:c4:fb:68:57:8e:d5:1e:d7:52:19: 87:96:92:d3:f5:29:b8:e1:46:03:bd:2c:d2:c7:79:b0:d2:4b: ae:31:84:12:ee:73:19:77:41:59:9d:4e:8f:fe:b2:19:41:3a: b6:aa:91:d0:d3:c7:4e:eb:26:9f:3d:10:14:15:72:84:34:4c: 74:8c:5a:b1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NzJDQzExMC8GA1UEBRMoREI3OEQ5RjkzNThFNTY3RDMwNkVFM0JEMUVBQzc0OEU5 NjA2QkY4RjAeFw0yNTA0MjgxODA2MjhaFw0yNTA1MDUxODA2MjhaMBgxFjAUBgNV BAMTDTY4MGZjM2E1LTY0NmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCq46GcNha5TR+8aP5VZMzAM4b+jFg1HXcS0rjkiQD7truVDd4g/owL6ZPJ1dwt TuXmBnLMGXnxhUe5bcUQaVJowwY9Yv5uKBGd5t39lIgdXDMuNg9sErIZzlDlSytm 34kJJT/eiMc7mE9ipZlgtBKlUoo5GIFRTFJQ8GhqkyQqpn7LE44+HUjL6z4PeHzb wW7eIfYUrGtaLIfmHHAJDg5YyIoigKBnTS4tI9wPMw7pV2eA/yX0R58NVDg+3YVH afhDerTmD61sYyM5keqA3EsKMMmSI00BDBKlAakrX2E6ySfvCYhoen6ZUnerGkj8 Es7GFX19JoPEXmp8AgKv/HA9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUawjPhHcX jrqNxqA6nvmZxv7mUsUwHwYDVR0jBBgwFoAU23jZ+TWOVn0wbuO9Hqx0jpYGv48w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ3MkNDLzQzMzBBQzlDQjM2 RDExRTk4MjQ2RUQwQUM0RjlBRTAyLzIzalotVFdPVm4wd2J1TzlIcXgwanBZR3Y0 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMjNqWi1UV09WbjB3YnVPOUhxeDBqcFlHdjQ4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ3 MkNDLzQzMzBBQzlDQjM2RDExRTk4MjQ2RUQwQUM0RjlBRTAyLzIzalotVFdPVm4w d2J1TzlIcXgwanBZR3Y0OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACm57qJv3mnuagz5GSlxVuF3qSJPRvPFBQ0KqYZW1V6qBbQ/fiKj9Erz fK1bxc6Udrim8Jqhua1s+9/Y9sHE5+a+rNDRgK4oZXPaYtHa9Ed24HWpd27dCew9 EuRoX06qLidLwK1S09k4JYLTA6LDSSdqT/cMvxsyH5DEGviblEG2pIJi3+FCj6a6 ZTBchfOm5QEqemb7Y0WxxDKi5/n9ZknyecGkP4PRdtpz8FGnE2IRFGvX/oVMLbnh e37NxPtoV47VHtdSGYeWktP1KbjhRgO9LNLHebDSS64xhBLucxl3QVmdTo/+shlB OraqkdDTx07rJp89EBQVcoQ0THSMWrE= -----END CERTIFICATE-----Generated at Mon Apr 28 20:11:01 2025 by rpki-client on console.sobornost.net