$ rpki-client -vvf rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.mft File: 3IDIXlEBCJqyQl0_yRd5haASXG4.mft (raw, json) Hash identifier: oi7sYQHJlFEU0zaGclAwmMjDp391VVxPjpMQvFTgd0o= Subject key identifier: F7:DD:76:93:2D:E2:DC:3F:95:BF:DE:18:F5:44:84:AB:48:55:7F:B7 Authority key identifier: DC:80:C8:5E:51:01:08:9A:B2:42:5D:3F:C9:17:79:85:A0:12:5C:6E Certificate issuer: /CN=A91D74A6/serialNumber=DC80C85E5101089AB2425D3FC9177985A0125C6E Certificate serial: 4B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3IDIXlEBCJqyQl0_yRd5haASXG4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.mft Manifest number: 43 Signing time: Fri 25 Apr 2025 06:34:45 +0000 Manifest this update: Fri 25 Apr 2025 06:34:44 +0000 Manifest next update: Fri 02 May 2025 06:34:44 +0000 Files and hashes: 1: 3IDIXlEBCJqyQl0_yRd5haASXG4.crl (hash: C1eS60AdJzw3Vcx+G6tr2CTrN0DDLVlu7kfYaycVsxI=) 2: 727850D8D3EF11EFB596E00CC4F9AE02.roa (hash: hvte1LGzH8lQs5HlVIeT4otbezAzwXIr7d7vqIECmd8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.crl rsync://rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3IDIXlEBCJqyQl0_yRd5haASXG4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D74A6, serialNumber=DC80C85E5101089AB2425D3FC9177985A0125C6E Validity Not Before: Apr 25 06:34:44 2025 GMT Not After : May 2 06:34:44 2025 GMT Subject: CN=680b2d05-45a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:de:da:0c:88:fe:83:b7:3e:b9:3b:6c:f3:0b: 30:fd:a0:39:bd:26:24:be:3a:08:86:b6:dc:62:8f: 80:1b:cf:f3:15:72:74:50:eb:41:6d:32:5c:b8:f2: de:df:90:70:9c:3e:e9:48:27:20:0a:59:a3:7b:28: 78:de:83:b6:63:9b:a7:e9:ab:14:1e:9a:a2:1b:b1: 1b:db:ca:92:1b:ff:a5:dc:3f:36:ee:49:f4:4a:14: f1:d7:d4:7c:b9:69:ce:3b:8d:51:2c:84:bc:45:89: 51:c7:75:08:93:b0:08:80:0b:9f:58:f9:c9:2f:a9: 92:58:77:dd:38:7e:b0:f4:5f:92:5a:08:0c:8f:9b: ae:c8:e0:ff:fc:04:9a:14:64:af:3b:c7:aa:4f:23: 5d:48:7a:9c:1f:bc:76:6e:3a:7c:3e:35:7b:5c:f0: 26:48:8b:09:7b:65:82:d8:99:1c:0b:fb:d8:28:d1: c4:00:e1:f7:4b:61:85:a7:db:37:ed:65:2d:b2:de: 7c:ab:2b:d0:ce:cc:89:b5:50:f1:61:8d:5a:48:bf: 44:bf:c1:5b:df:95:1a:12:ee:f5:72:5f:73:21:82: 88:93:11:64:cc:64:72:71:5a:c2:00:8e:27:b6:29: 44:6c:fa:f2:fd:9c:a1:19:7a:b3:f8:9c:7c:8e:5c: 6f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:DD:76:93:2D:E2:DC:3F:95:BF:DE:18:F5:44:84:AB:48:55:7F:B7 X509v3 Authority Key Identifier: keyid:DC:80:C8:5E:51:01:08:9A:B2:42:5D:3F:C9:17:79:85:A0:12:5C:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3IDIXlEBCJqyQl0_yRd5haASXG4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:3b:86:80:e4:5d:f6:45:b8:44:09:f0:6a:49:13:69:e7:d2: 21:8a:47:81:9c:1f:63:cf:63:63:3b:44:ad:e0:26:53:49:52: 3d:71:be:4c:2c:8e:40:f2:dd:5e:5d:c1:c3:67:0b:6f:63:95: 72:ab:49:9e:f5:3b:f9:9f:75:42:f4:16:65:42:a0:1d:aa:2a: 3d:bf:e8:ff:37:8c:68:14:fd:bd:ad:b0:20:33:5e:f8:cc:be: 99:24:2a:d5:88:d4:e5:d0:cc:b2:02:23:33:71:3f:36:1b:9a: 7d:0f:10:6c:ab:57:4b:8c:04:0f:e3:3e:7c:55:f8:e4:48:16: a2:bd:57:76:65:d8:c4:ea:50:e7:da:5c:51:b6:8d:20:65:80: f8:b6:9d:aa:e7:fa:2f:4b:e1:f8:e3:a9:95:d9:d6:21:d0:8e: 35:13:5d:52:6e:2f:38:52:86:7e:c4:52:e9:98:39:cd:93:d1: 67:3a:d3:4d:43:1f:07:0e:b6:fb:a0:62:50:b1:98:82:d5:fd: 56:23:a6:be:4c:d1:f2:3f:6b:ef:8e:5c:e6:54:3d:86:24:c2: a9:a7:a4:9c:79:13:1e:1b:1a:04:ea:2f:1e:eb:dd:c6:80:08: b2:60:1b:be:a9:2f:bf:5e:39:61:35:90:50:c2:c9:9f:71:eb: e1:f4:40:23 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NzRBNjExMC8GA1UEBRMoREM4MEM4NUU1MTAxMDg5QUIyNDI1RDNGQzkxNzc5ODVB MDEyNUM2RTAeFw0yNTA0MjUwNjM0NDRaFw0yNTA1MDIwNjM0NDRaMBgxFjAUBgNV BAMTDTY4MGIyZDA1LTQ1YTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDO3toMiP6Dtz65O2zzCzD9oDm9JiS+OgiGttxij4Abz/MVcnRQ60FtMly48t7f kHCcPulIJyAKWaN7KHjeg7Zjm6fpqxQemqIbsRvbypIb/6XcPzbuSfRKFPHX1Hy5 ac47jVEshLxFiVHHdQiTsAiAC59Y+ckvqZJYd904frD0X5JaCAyPm67I4P/8BJoU ZK87x6pPI11IepwfvHZuOnw+NXtc8CZIiwl7ZYLYmRwL+9go0cQA4fdLYYWn2zft ZS2y3nyrK9DOzIm1UPFhjVpIv0S/wVvflRoS7vVyX3MhgoiTEWTMZHJxWsIAjie2 KURs+vL9nKEZerP4nHyOXG8FAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9912ky3i 3D+Vv94Y9USEq0hVf7cwHwYDVR0jBBgwFoAU3IDIXlEBCJqyQl0/yRd5haASXG4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ3NEE2LzcxNzFCQkYyRDE5 QzExRUY4M0NFQUQzQ0M0RjlBRTAyLzNJRElYbEVCQ0pxeVFsMF95UmQ1aGFBU1hH NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvM0lESVhsRUJDSnF5UWwwX3lSZDVoYUFTWEc0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ3 NEE2LzcxNzFCQkYyRDE5QzExRUY4M0NFQUQzQ0M0RjlBRTAyLzNJRElYbEVCQ0px eVFsMF95UmQ1aGFBU1hHNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAU7hoDkXfZFuEQJ8GpJE2nn0iGKR4GcH2PPY2M7RK3gJlNJUj1xvkws jkDy3V5dwcNnC29jlXKrSZ71O/mfdUL0FmVCoB2qKj2/6P83jGgU/b2tsCAzXvjM vpkkKtWI1OXQzLICIzNxPzYbmn0PEGyrV0uMBA/jPnxV+ORIFqK9V3Zl2MTqUOfa XFG2jSBlgPi2narn+i9L4fjjqZXZ1iHQjjUTXVJuLzhShn7EUumYOc2T0Wc6001D HwcOtvugYlCxmILV/VYjpr5M0fI/a++OXOZUPYYkwqmnpJx5Ex4bGgTqLx7r3caA CLJgG76pL79eOWE1kFDCyZ9x6+H0QCM= -----END CERTIFICATE-----Generated at Fri Apr 25 08:25:14 2025 by rpki-client on console.sobornost.net