$ rpki-client -vvf rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft File: k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft (raw, json) Hash identifier: VxPsfVxrA+3LD47dPx2DSiUZmkMY4e42T4eiD+md2Vw= Subject key identifier: 7C:E6:7E:66:5C:0F:13:A7:91:1E:86:24:18:38:AE:EC:F2:11:F2:C7 Authority key identifier: 93:7A:1B:5F:EB:0A:29:33:60:EA:4E:88:47:35:2E:7F:D3:6C:C7:A5 Certificate issuer: /CN=A91D73BB/serialNumber=937A1B5FEB0A293360EA4E8847352E7FD36CC7A5 Certificate serial: DB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft Manifest number: D6 Signing time: Sun 27 Apr 2025 04:30:33 +0000 Manifest this update: Sun 27 Apr 2025 04:30:33 +0000 Manifest next update: Sun 04 May 2025 04:30:33 +0000 Files and hashes: 1: k3obX-sKKTNg6k6IRzUuf9Nsx6U.crl (hash: t40vtuBd5r4lRaJ804pXtu08M+wM2CDSU9hEiFYMy30=) 2: CFE87CFEE74911EE9E36BA2AC4F9AE02.roa (hash: UKwsFEyPykSAjx1cUaIvhwF+WNkQjRemB2kUzANIKwE=) 3: E0C47044E18D11EE82E6CE22C4F9AE02.roa (hash: oHYJEFfD1Lon7ikYLeo6m1Hr1wIXkseOcXKkDnJ3sdE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.crl rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 219 (0xdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D73BB, serialNumber=937A1B5FEB0A293360EA4E8847352E7FD36CC7A5 Validity Not Before: Apr 27 04:30:33 2025 GMT Not After : May 4 04:30:33 2025 GMT Subject: CN=680db2e9-a937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5b:84:ca:36:6b:ba:60:19:34:dc:10:27:28: 85:84:83:83:9f:bb:64:a7:09:7b:f3:76:7f:c8:f0: 72:34:d7:7f:f2:bb:e5:78:f9:d0:27:ec:ee:9d:ad: 60:5a:b5:ff:34:cd:34:39:d1:58:9f:9d:95:60:2e: 88:fb:17:39:14:a2:eb:af:06:f5:fe:d5:ac:a6:a8: 1a:b0:02:f8:43:08:9c:89:3c:df:5b:7d:7e:3b:cd: 2e:a9:28:99:93:bf:76:99:cb:4a:17:ea:9b:7e:71: 48:13:02:9c:69:00:67:3a:a3:79:6e:bf:75:0d:ef: 67:5b:08:50:98:c3:88:74:09:95:48:a0:ab:97:25: 9b:d0:16:a7:4e:05:74:20:8a:47:c5:89:c2:90:65: a5:4a:8c:00:b1:6a:37:f2:5a:95:0b:e3:4a:3e:0a: 2a:16:54:36:c1:b0:73:2e:de:aa:d7:1c:83:58:19: 29:35:38:dc:a2:25:ac:ce:15:5f:f9:81:f7:1e:dd: 5e:00:60:2f:86:5f:6b:cb:82:00:1d:d3:bc:21:3b: 12:aa:43:c7:60:34:91:cb:f3:02:17:e7:e3:97:2e: 3e:87:90:84:8d:6c:9d:db:b9:89:42:32:e6:39:50: 25:c0:d2:46:79:34:92:3a:09:0e:5b:3d:97:6c:fa: f6:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:E6:7E:66:5C:0F:13:A7:91:1E:86:24:18:38:AE:EC:F2:11:F2:C7 X509v3 Authority Key Identifier: keyid:93:7A:1B:5F:EB:0A:29:33:60:EA:4E:88:47:35:2E:7F:D3:6C:C7:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:0b:26:16:a9:19:a2:2a:c6:9a:23:44:00:1e:ce:f5:1f:fb: f8:19:16:e7:4b:9d:21:bb:64:6a:66:c9:39:bd:fc:79:e5:23: 33:48:0a:d3:cf:ee:b5:17:5d:c1:1b:41:df:4f:ff:85:03:c3: f0:95:b4:54:95:1f:8b:0e:a0:10:00:3c:0f:3f:70:37:df:8a: 24:65:d0:c5:b1:08:ce:90:0d:12:35:cf:e7:87:df:4f:7b:9a: f6:72:4a:b4:a7:f0:e8:55:73:34:ae:0d:db:2a:74:ab:88:e6: a0:e9:26:a4:9c:de:58:60:92:01:c0:a2:52:3a:f6:70:2f:71: 61:f1:b5:a4:df:08:80:dc:60:f5:ec:b5:3b:e9:45:67:18:9e: 59:a8:5a:d9:e6:24:71:51:8e:4a:47:9f:2a:a2:52:2e:4c:29: d6:0c:f8:37:81:3a:e7:4f:dd:3f:1c:aa:b5:db:83:de:be:19: ec:28:d0:11:72:be:9f:ad:3f:b3:9d:d2:87:fc:13:a7:41:3a: b3:c2:14:92:52:7c:48:00:4b:71:57:18:4e:56:fa:b3:ff:cb: 3e:3e:5b:12:0e:e6:e8:50:09:47:e6:e0:95:f0:6c:b5:4f:41: 7d:bf:7b:68:fe:d0:3d:c6:e9:1c:ae:f2:d7:b6:31:a0:25:62: bf:81:a3:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDczQkIxMTAvBgNVBAUTKDkzN0ExQjVGRUIwQTI5MzM2MEVBNEU4ODQ3MzUyRTdG RDM2Q0M3QTUwHhcNMjUwNDI3MDQzMDMzWhcNMjUwNTA0MDQzMDMzWjAYMRYwFAYD VQQDEw02ODBkYjJlOS1hOTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqVuEyjZrumAZNNwQJyiFhIODn7tkpwl783Z/yPByNNd/8rvlePnQJ+zuna1g WrX/NM00OdFYn52VYC6I+xc5FKLrrwb1/tWspqgasAL4QwiciTzfW31+O80uqSiZ k792mctKF+qbfnFIEwKcaQBnOqN5br91De9nWwhQmMOIdAmVSKCrlyWb0BanTgV0 IIpHxYnCkGWlSowAsWo38lqVC+NKPgoqFlQ2wbBzLt6q1xyDWBkpNTjcoiWszhVf +YH3Ht1eAGAvhl9ry4IAHdO8ITsSqkPHYDSRy/MCF+fjly4+h5CEjWyd27mJQjLm OVAlwNJGeTSSOgkOWz2XbPr2BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHzmfmZc DxOnkR6GJBg4ruzyEfLHMB8GA1UdIwQYMBaAFJN6G1/rCikzYOpOiEc1Ln/TbMel MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzNCQi83RUQ1NzU4NkUx OEQxMUVFOTkwRkVDNEZDNEY5QUUwMi9rM29iWC1zS0tUTmc2azZJUnpVdWY5TnN4 NlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2szb2JYLXNLS1ROZzZrNklSelV1ZjlOc3g2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzNCQi83RUQ1NzU4NkUxOEQxMUVFOTkwRkVDNEZDNEY5QUUwMi9rM29iWC1zS0tU Tmc2azZJUnpVdWY5TnN4NlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDCyYWqRmiKsaaI0QAHs71H/v4GRbnS50hu2RqZsk5vfx55SMzSArT z+61F13BG0HfT/+FA8PwlbRUlR+LDqAQADwPP3A334okZdDFsQjOkA0SNc/nh99P e5r2ckq0p/DoVXM0rg3bKnSriOag6SaknN5YYJIBwKJSOvZwL3Fh8bWk3wiA3GD1 7LU76UVnGJ5ZqFrZ5iRxUY5KR58qolIuTCnWDPg3gTrnT90/HKq124PevhnsKNAR cr6frT+zndKH/BOnQTqzwhSSUnxIAEtxVxhOVvqz/8s+PlsSDuboUAlH5uCV8Gy1 T0F9v3to/tA9xukcrvLXtjGgJWK/gaMU -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:56 2025 by rpki-client on console.sobornost.net