$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft File: GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft (raw, json) Hash identifier: MyslbwWLaX3M1paZ2aUSEJOiseigkJLmEVQ6pmCYlIA= Subject key identifier: 6F:D4:2E:B0:B4:4A:5D:C9:B7:A7:E6:92:E0:08:B3:56:67:EA:1E:9D Authority key identifier: 18:DC:53:1D:44:F0:59:62:E9:7F:23:84:57:36:14:1D:3E:02:68:1B Certificate issuer: /CN=A91DDCB6/serialNumber=18DC531D44F05962E97F23845736141D3E02681B Certificate serial: 0693 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft Manifest number: 0688 Signing time: Sat 26 Apr 2025 20:31:38 +0000 Manifest this update: Sat 26 Apr 2025 20:31:38 +0000 Manifest next update: Sat 03 May 2025 20:31:38 +0000 Files and hashes: 1: GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl (hash: ETU37E4SDztl1xfBTRnVFuleh8sugY+hEVjtI81ZkkA=) 2: 48D65BC2D28F11EB9F83683DC4F9AE02.roa (hash: QWVO48Lwadq4KUtj+VF2u0phUptaO0Lunt38Hpl0ScQ=) 3: 00756F7E63F011EC987F5B19C4F9AE02.roa (hash: lAVQxnaIpb4+FR/69nne2013Hk4eswtCR3VSmU3tbJU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:13:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1683 (0x693) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDCB6, serialNumber=18DC531D44F05962E97F23845736141D3E02681B Validity Not Before: Apr 26 20:31:38 2025 GMT Not After : May 3 20:31:38 2025 GMT Subject: CN=680d42aa-6854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:86:b4:a3:0b:53:02:3b:a6:14:3d:7f:dd:6a: 46:c2:f4:35:ae:89:09:b6:47:12:04:29:16:0b:22: 90:58:f0:42:c4:94:42:c5:4e:e3:8b:c3:f3:c8:bd: 7f:e1:30:8b:73:7f:9e:9a:56:28:3a:d3:58:cc:60: 0b:b9:35:d4:e0:18:ac:26:e6:6c:d7:b8:52:66:90: 86:4f:b6:15:1d:7a:f3:2c:98:a1:45:94:5d:4a:17: 02:51:f5:ca:91:8c:0e:c5:e0:77:42:ef:6b:00:47: e2:13:79:85:e7:e0:f9:67:93:58:ae:ea:44:ae:7a: c3:ef:41:39:69:6d:db:42:ff:ec:8d:5f:ba:8a:ed: fd:c8:db:3d:a8:f7:27:31:88:6c:a0:60:06:95:7a: bb:f3:54:44:9a:7d:93:62:fb:b0:7c:b5:cf:50:fd: 50:ad:5c:19:97:95:f7:d6:65:24:ae:a4:d9:b0:d3: 21:21:8d:06:54:b2:c7:8d:8b:6e:6d:e7:5c:63:0d: 0f:b5:6e:10:2d:5d:c9:6e:e9:f6:ba:81:cd:7e:03: 4d:9e:a4:f6:61:ca:f6:de:be:40:55:b1:e9:86:69: dd:45:29:fb:45:72:ca:d8:c9:85:57:00:11:0a:5c: df:d1:d4:b7:21:c5:99:7c:3f:1d:01:e7:ce:0a:73: 4c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:D4:2E:B0:B4:4A:5D:C9:B7:A7:E6:92:E0:08:B3:56:67:EA:1E:9D X509v3 Authority Key Identifier: keyid:18:DC:53:1D:44:F0:59:62:E9:7F:23:84:57:36:14:1D:3E:02:68:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:ec:25:1c:8a:a3:2d:2e:f4:4d:a9:a5:cc:68:65:a3:c8:95: 48:69:71:bd:53:b8:30:08:59:bf:96:3a:53:19:3a:84:f3:5f: 6e:11:bf:29:ee:16:ab:21:22:64:91:02:b1:b0:b4:dc:16:e9: be:58:92:f7:25:dc:06:a9:a5:70:48:12:64:5f:7d:de:2b:b6: fb:43:16:f8:d8:a5:07:45:d4:2b:05:2a:e3:92:d3:59:e9:02: 6c:3e:12:7f:86:4a:06:1d:54:36:98:0f:4b:e2:ba:bf:a0:46: 07:02:9f:d6:a8:94:42:32:1c:69:1b:f8:23:36:0d:51:52:f1: 53:7c:a1:64:a8:ce:9b:00:70:ff:f7:ef:52:1c:5d:bb:da:50: 97:f8:85:ce:cb:fc:a7:4f:36:c3:bd:1e:a7:b8:2f:c1:0d:81: 4f:9e:51:0e:67:dc:01:08:88:97:03:81:f3:91:18:06:34:d6: f1:32:25:61:28:0f:d6:2e:19:2f:4e:7b:c4:a0:67:95:bc:20: 37:29:14:b7:d2:ac:84:cd:62:07:1d:3b:c7:3a:2f:fd:b9:3b: 72:86:d0:ef:ff:0e:ea:0e:3c:8f:8d:4e:cd:61:78:0b:a5:76: ee:cc:c7:6d:2d:73:8c:f2:f5:4e:61:e9:b8:3d:0a:ca:9d:24: 74:91:2f:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERDQjYxMTAvBgNVBAUTKDE4REM1MzFENDRGMDU5NjJFOTdGMjM4NDU3MzYxNDFE M0UwMjY4MUIwHhcNMjUwNDI2MjAzMTM4WhcNMjUwNTAzMjAzMTM4WjAYMRYwFAYD VQQDEw02ODBkNDJhYS02ODU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwIa0owtTAjumFD1/3WpGwvQ1rokJtkcSBCkWCyKQWPBCxJRCxU7ji8PzyL1/ 4TCLc3+emlYoOtNYzGALuTXU4BisJuZs17hSZpCGT7YVHXrzLJihRZRdShcCUfXK kYwOxeB3Qu9rAEfiE3mF5+D5Z5NYrupErnrD70E5aW3bQv/sjV+6iu39yNs9qPcn MYhsoGAGlXq781REmn2TYvuwfLXPUP1QrVwZl5X31mUkrqTZsNMhIY0GVLLHjYtu bedcYw0PtW4QLV3Jbun2uoHNfgNNnqT2Ycr23r5AVbHphmndRSn7RXLK2MmFVwAR Clzf0dS3IcWZfD8dAefOCnNMHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG/ULrC0 Sl3Jt6fmkuAIs1Zn6h6dMB8GA1UdIwQYMBaAFBjcUx1E8Fli6X8jhFc2FB0+Amgb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENCNi82RTlBQzgwNjcx RDgxMUVCODA0NzcyMURDNEY5QUUwMi9HTnhUSFVUd1dXTHBmeU9FVnpZVUhUNENh QnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0dOeFRIVVR3V1dMcGZ5T0VWellVSFQ0Q2FCcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RENCNi82RTlBQzgwNjcxRDgxMUVCODA0NzcyMURDNEY5QUUwMi9HTnhUSFVUd1dX THBmeU9FVnpZVUhUNENhQnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQ7CUciqMtLvRNqaXMaGWjyJVIaXG9U7gwCFm/ljpTGTqE819uEb8p 7harISJkkQKxsLTcFum+WJL3JdwGqaVwSBJkX33eK7b7Qxb42KUHRdQrBSrjktNZ 6QJsPhJ/hkoGHVQ2mA9L4rq/oEYHAp/WqJRCMhxpG/gjNg1RUvFTfKFkqM6bAHD/ 9+9SHF272lCX+IXOy/ynTzbDvR6nuC/BDYFPnlEOZ9wBCIiXA4HzkRgGNNbxMiVh KA/WLhkvTnvEoGeVvCA3KRS30qyEzWIHHTvHOi/9uTtyhtDv/w7qDjyPjU7NYXgL pXbuzMdtLXOM8vVOYem4PQrKnSR0kS+v -----END CERTIFICATE-----Generated at Sun Apr 27 00:14:12 2025 by rpki-client on console.sobornost.net