$ rpki-client -vvf rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/A72QmhoVpFA9-tWUw8bem5RgTmY.mft File: A72QmhoVpFA9-tWUw8bem5RgTmY.mft (raw, json) Hash identifier: r7BpMqVaMH7AtnS/S1HEW5MYDBHZpZV1wtI6fkBZhtA= Subject key identifier: C1:4D:40:66:55:D1:2D:8C:96:F3:77:E6:92:B1:3E:BB:6C:77:60:89 Authority key identifier: 03:BD:90:9A:1A:15:A4:50:3D:FA:D5:94:C3:C6:DE:9B:94:60:4E:66 Certificate issuer: /CN=A91D873B/serialNumber=03BD909A1A15A4503DFAD594C3C6DE9B94604E66 Certificate serial: 0327 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A72QmhoVpFA9-tWUw8bem5RgTmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/A72QmhoVpFA9-tWUw8bem5RgTmY.mft Manifest number: 0320 Signing time: Sun 27 Apr 2025 00:47:55 +0000 Manifest this update: Sun 27 Apr 2025 00:47:55 +0000 Manifest next update: Sun 04 May 2025 00:47:55 +0000 Files and hashes: 1: A72QmhoVpFA9-tWUw8bem5RgTmY.crl (hash: xRPQ7Ri/BNnj/Nvq30vZlMBKsC34ykjp+EzwOdLI8Ak=) 2: E15CC33CD55011EFB17CB022C4F9AE02.roa (hash: YkgVY3NySYm4wFHmOVUk89wTvIIkdJt3TNVnKoMCNEA=) 3: 5409C188C6CB11ECB185E43EC4F9AE02.roa (hash: qkNJcqJasGm5DqRK6RDLwIc76BxJl9ChsFknMyrjOEQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/A72QmhoVpFA9-tWUw8bem5RgTmY.crl rsync://rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/A72QmhoVpFA9-tWUw8bem5RgTmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A72QmhoVpFA9-tWUw8bem5RgTmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 00:47:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 807 (0x327) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D873B, serialNumber=03BD909A1A15A4503DFAD594C3C6DE9B94604E66 Validity Not Before: Apr 27 00:47:55 2025 GMT Not After : May 4 00:47:55 2025 GMT Subject: CN=680d7ebb-ce89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:1e:21:ed:a4:bd:6c:0b:4f:dc:cc:3b:01:d0: 40:a9:bf:4b:92:8c:b3:49:01:08:e0:eb:b8:79:23: 12:65:d4:1c:d5:f3:f8:bb:93:e6:29:87:4e:dd:53: 8c:67:7a:e3:7f:fc:32:d9:8a:f2:8a:65:cd:cf:ef: 86:5f:46:27:b9:a6:b8:bf:9d:9a:61:15:4e:9c:12: 90:e5:3b:13:ef:5e:37:00:b5:1d:0d:eb:1b:60:b4: 2a:47:be:72:c6:c2:0c:93:11:2a:92:5f:73:32:e5: 5c:7c:0a:b0:fe:23:75:fc:c4:5a:c0:20:86:14:45: 9e:8c:66:4a:6f:be:b8:cf:04:cf:99:10:f6:c7:72: 58:3b:c4:3e:e1:34:b0:e6:4f:8d:85:20:4d:e2:17: f1:99:20:04:b7:b6:ee:12:01:0c:9c:41:01:c9:c1: 56:17:cd:ac:2d:26:ac:34:ba:e0:e9:1e:1b:0f:b7: 22:f7:76:c6:07:57:ec:5d:75:32:e7:e0:be:03:f5: 6c:cd:ed:0c:10:b2:16:02:9a:51:fe:d5:e6:ca:3b: 8d:83:57:79:27:7b:d4:52:12:59:27:7f:b7:ae:6e: 17:45:b8:14:6e:00:21:b5:c2:a2:be:fc:2d:b6:56: 18:37:1f:e3:03:a0:40:bf:77:aa:c0:9f:53:7d:7f: 46:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:4D:40:66:55:D1:2D:8C:96:F3:77:E6:92:B1:3E:BB:6C:77:60:89 X509v3 Authority Key Identifier: keyid:03:BD:90:9A:1A:15:A4:50:3D:FA:D5:94:C3:C6:DE:9B:94:60:4E:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/A72QmhoVpFA9-tWUw8bem5RgTmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A72QmhoVpFA9-tWUw8bem5RgTmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/A72QmhoVpFA9-tWUw8bem5RgTmY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:23:4e:5b:f4:57:df:01:27:c2:d9:46:91:77:a0:6c:78:2e: 5a:3c:de:e8:4c:1e:20:dd:20:8e:c5:e8:86:36:fe:b4:67:61: 79:8a:b2:a3:3f:85:6f:f5:21:3c:89:7f:91:93:12:a9:d0:7b: 64:be:ba:cf:d5:8a:e6:09:22:94:e8:29:68:24:07:21:1e:a6: a5:20:94:93:20:38:16:94:34:1c:55:ff:5e:6e:c2:e3:39:30: b2:f5:70:bf:03:72:c1:de:e2:eb:6f:b3:64:c4:6d:c9:89:27: c2:a8:a7:cc:51:26:b2:24:25:48:51:b7:75:2b:ad:8d:23:54: a3:07:b4:bd:ae:e0:74:13:52:7a:bd:5c:a8:db:31:6a:a6:2f: 7e:c5:cc:54:20:cf:91:73:94:85:5d:a7:ac:63:9c:cf:2f:09: fe:fb:7e:34:44:eb:88:71:ce:63:0c:be:92:57:6a:96:98:29: 04:0b:7b:d7:f5:0b:ef:fe:d7:b3:e3:5f:52:10:95:ef:15:56: 34:07:e2:61:bb:d6:13:6a:e7:9f:6d:cf:35:8b:78:7d:69:af: f4:49:02:7d:7c:44:0b:cc:2d:25:41:55:82:6a:79:72:d9:41: 45:6a:56:08:53:b4:29:95:d8:37:33:2c:57:e6:a8:f2:0b:6f: b3:bb:be:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAycwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg3M0IxMTAvBgNVBAUTKDAzQkQ5MDlBMUExNUE0NTAzREZBRDU5NEMzQzZERTlC OTQ2MDRFNjYwHhcNMjUwNDI3MDA0NzU1WhcNMjUwNTA0MDA0NzU1WjAYMRYwFAYD VQQDEw02ODBkN2ViYi1jZTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5R4h7aS9bAtP3Mw7AdBAqb9LkoyzSQEI4Ou4eSMSZdQc1fP4u5PmKYdO3VOM Z3rjf/wy2YryimXNz++GX0Ynuaa4v52aYRVOnBKQ5TsT7143ALUdDesbYLQqR75y xsIMkxEqkl9zMuVcfAqw/iN1/MRawCCGFEWejGZKb764zwTPmRD2x3JYO8Q+4TSw 5k+NhSBN4hfxmSAEt7buEgEMnEEBycFWF82sLSasNLrg6R4bD7ci93bGB1fsXXUy 5+C+A/Vsze0MELIWAppR/tXmyjuNg1d5J3vUUhJZJ3+3rm4XRbgUbgAhtcKivvwt tlYYNx/jA6BAv3eqwJ9TfX9GXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMFNQGZV 0S2MlvN35pKxPrtsd2CJMB8GA1UdIwQYMBaAFAO9kJoaFaRQPfrVlMPG3puUYE5m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODczQi80QTE2QkJEQUM2 MDQxMUVDQUE5NDU5NEJDNEY5QUUwMi9BNzJRbWhvVnBGQTktdFdVdzhiZW01UmdU bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E3MlFtaG9WcEZBOS10V1V3OGJlbTVSZ1RtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODczQi80QTE2QkJEQUM2MDQxMUVDQUE5NDU5NEJDNEY5QUUwMi9BNzJRbWhvVnBG QTktdFdVdzhiZW01UmdUbVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgI05b9FffASfC2UaRd6BseC5aPN7oTB4g3SCOxeiGNv60Z2F5irKj P4Vv9SE8iX+RkxKp0HtkvrrP1YrmCSKU6CloJAchHqalIJSTIDgWlDQcVf9ebsLj OTCy9XC/A3LB3uLrb7NkxG3JiSfCqKfMUSayJCVIUbd1K62NI1SjB7S9ruB0E1J6 vVyo2zFqpi9+xcxUIM+Rc5SFXaesY5zPLwn++340ROuIcc5jDL6SV2qWmCkEC3vX 9Qvv/tez419SEJXvFVY0B+Jhu9YTauefbc81i3h9aa/0SQJ9fEQLzC0lQVWCanly 2UFFalYIU7Qpldg3MyxX5qjyC2+zu76m -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:13 2025 by rpki-client on console.sobornost.net