$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.mft File: inP7xm5uPo6rLV_CtomRCR8CHkU.mft (raw, json) Hash identifier: thhuOGTSf0tSHSSe1Cdc//m8WmCjifS8TTYz0a/zgHk= Subject key identifier: 38:80:AF:BF:4A:DC:CC:F5:E2:EB:F8:5B:59:E2:D7:E4:A5:37:8D:2E Authority key identifier: 8A:73:FB:C6:6E:6E:3E:8E:AB:2D:5F:C2:B6:89:91:09:1F:02:1E:45 Certificate issuer: /CN=A91DD309/serialNumber=8A73FBC66E6E3E8EAB2D5FC2B68991091F021E45 Certificate serial: 1BEE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inP7xm5uPo6rLV_CtomRCR8CHkU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.mft Manifest number: 1BD4 Signing time: Mon 28 Apr 2025 16:21:13 +0000 Manifest this update: Mon 28 Apr 2025 16:21:12 +0000 Manifest next update: Mon 05 May 2025 16:21:12 +0000 Files and hashes: 1: inP7xm5uPo6rLV_CtomRCR8CHkU.crl (hash: AXEgDnx2lncmSGGGdnSZVmxjG/UYEwrnGJo0j+SwSGw=) 2: 5949B76C00DB11E8A9CA373DC4F9AE02.roa (hash: uYIH2Df820V7sq00NPl6eOckfu5/+u+T1sNhFFho9vo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.crl rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inP7xm5uPo6rLV_CtomRCR8CHkU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 16:21:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7150 (0x1bee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD309, serialNumber=8A73FBC66E6E3E8EAB2D5FC2B68991091F021E45 Validity Not Before: Apr 28 16:21:12 2025 GMT Not After : May 5 16:21:12 2025 GMT Subject: CN=680faaf9-684d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:3c:b0:9d:e5:c6:2f:47:fa:0c:d8:ae:e3:80: f0:1d:61:f6:0a:e1:79:02:d5:b4:b9:a8:6e:cf:4c: b2:33:99:0c:4d:05:15:40:82:21:49:28:f4:41:b9: 01:d2:8a:d6:2a:97:a4:1b:2f:cd:e6:e5:61:c8:f2: f0:5f:39:e9:33:50:f9:33:1e:2f:3e:25:96:7b:04: 15:ab:35:87:6d:b0:28:7d:4e:22:62:3f:bd:b9:fa: c0:e0:e7:9e:80:09:4d:90:1d:74:df:e9:e7:71:8b: af:90:39:3c:51:3e:11:58:62:68:bf:95:62:ce:25: 25:b5:fa:45:76:8c:ab:01:09:94:c4:1b:7e:8f:2b: 06:d7:70:92:e8:95:ba:30:c3:44:33:96:07:b1:ab: c7:1c:7f:bb:07:e4:4a:68:1d:ac:c4:9b:40:0b:d3: 27:18:81:6f:22:b0:30:bc:72:7a:9c:ac:d3:ed:70: df:b1:99:63:eb:d1:9c:3c:4d:9e:b5:39:1c:86:20: 4b:45:9d:b9:58:b2:ce:13:11:c4:fe:c2:30:c0:1c: 0e:c1:8b:5f:b7:91:7f:cd:99:91:8c:0a:b3:76:47: 02:ad:58:a3:1c:80:98:9d:ce:28:52:79:ad:74:13: ce:ef:2c:9d:69:7a:a2:19:56:1d:a9:42:11:e8:24: 50:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:80:AF:BF:4A:DC:CC:F5:E2:EB:F8:5B:59:E2:D7:E4:A5:37:8D:2E X509v3 Authority Key Identifier: keyid:8A:73:FB:C6:6E:6E:3E:8E:AB:2D:5F:C2:B6:89:91:09:1F:02:1E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inP7xm5uPo6rLV_CtomRCR8CHkU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:2a:82:d7:c1:a5:56:f7:f5:ef:82:0e:8a:98:0b:66:b5:27: 3e:64:63:17:3f:34:11:96:b7:28:ec:ec:8e:aa:ef:51:6d:a0: 12:0d:b0:9f:08:fc:f5:60:71:50:d2:c6:91:56:21:fc:c0:8b: 46:a9:e9:30:f8:f4:26:be:66:2c:62:d0:f7:80:5f:96:0b:b2: 25:fd:f0:16:0a:f5:e0:bd:bd:c1:4f:26:f9:b7:69:11:8c:33: 3d:1f:e7:af:5d:93:6c:2b:fa:55:aa:10:34:91:47:86:19:cf: ec:f4:3a:99:6a:fb:96:7f:c7:10:16:ac:e1:e5:74:93:04:8a: ec:55:9a:a6:b8:18:08:55:fd:9c:ae:69:a1:f1:65:3f:56:98: ae:60:20:b5:d7:c9:fb:ec:e8:b8:a4:55:ef:0d:6d:5b:4b:1f: 6f:2c:11:c7:c7:45:a9:cf:34:79:1e:65:03:47:95:16:45:82: 1c:72:6e:93:94:95:3d:3a:08:08:22:d0:79:8e:6e:6a:09:4b: c8:08:f5:eb:93:53:66:cb:74:f7:e0:56:3e:f8:1a:0e:35:77: 43:b6:a2:fc:2d:7d:38:5b:2a:42:24:72:15:08:53:9d:00:cd: b3:18:06:47:15:50:c8:3c:7b:cc:40:43:cd:b7:dc:29:50:19: c3:0f:48:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG+4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQzMDkxMTAvBgNVBAUTKDhBNzNGQkM2NkU2RTNFOEVBQjJENUZDMkI2ODk5MTA5 MUYwMjFFNDUwHhcNMjUwNDI4MTYyMTEyWhcNMjUwNTA1MTYyMTEyWjAYMRYwFAYD VQQDEw02ODBmYWFmOS02ODRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3zywneXGL0f6DNiu44DwHWH2CuF5AtW0uahuz0yyM5kMTQUVQIIhSSj0QbkB 0orWKpekGy/N5uVhyPLwXznpM1D5Mx4vPiWWewQVqzWHbbAofU4iYj+9ufrA4Oee gAlNkB103+nncYuvkDk8UT4RWGJov5ViziUltfpFdoyrAQmUxBt+jysG13CS6JW6 MMNEM5YHsavHHH+7B+RKaB2sxJtAC9MnGIFvIrAwvHJ6nKzT7XDfsZlj69GcPE2e tTkchiBLRZ25WLLOExHE/sIwwBwOwYtft5F/zZmRjAqzdkcCrVijHICYnc4oUnmt dBPO7yydaXqiGVYdqUIR6CRQEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDiAr79K 3Mz14uv4W1ni1+SlN40uMB8GA1UdIwQYMBaAFIpz+8Zubj6Oqy1fwraJkQkfAh5F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDMwOS8xRkQ2QTZFRUZB NjkxMUU2OEVDMTIzMzNDNEY5QUUwMi9pblA3eG01dVBvNnJMVl9DdG9tUkNSOENI a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2luUDd4bTV1UG82ckxWX0N0b21SQ1I4Q0hrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDMwOS8xRkQ2QTZFRUZBNjkxMUU2OEVDMTIzMzNDNEY5QUUwMi9pblA3eG01dVBv NnJMVl9DdG9tUkNSOENIa1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2KoLXwaVW9/Xvgg6KmAtmtSc+ZGMXPzQRlrco7OyOqu9RbaASDbCf CPz1YHFQ0saRViH8wItGqekw+PQmvmYsYtD3gF+WC7Il/fAWCvXgvb3BTyb5t2kR jDM9H+evXZNsK/pVqhA0kUeGGc/s9DqZavuWf8cQFqzh5XSTBIrsVZqmuBgIVf2c rmmh8WU/VpiuYCC118n77Oi4pFXvDW1bSx9vLBHHx0WpzzR5HmUDR5UWRYIccm6T lJU9OggIItB5jm5qCUvICPXrk1Nmy3T34FY++BoONXdDtqL8LX04WypCJHIVCFOd AM2zGAZHFVDIPHvMQEPNt9wpUBnDD0iX -----END CERTIFICATE-----Generated at Mon Apr 28 20:11:11 2025 by rpki-client on console.sobornost.net