$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.mft File: _qFPI_25d6xkidIQbjXgI7KJaNw.mft (raw, json) Hash identifier: cyr3PLumWoXzQcA6lixpQxa6s/TtBk0oVTbQy+3C4Lw= Subject key identifier: 54:55:97:B8:A0:DF:82:B2:07:33:3C:9B:49:F3:A0:FE:BF:DD:5D:52 Authority key identifier: FE:A1:4F:23:FD:B9:77:AC:64:89:D2:10:6E:35:E0:23:B2:89:68:DC Certificate issuer: /CN=A91DDCB6/serialNumber=FEA14F23FDB977AC6489D2106E35E023B28968DC Certificate serial: 086F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qFPI_25d6xkidIQbjXgI7KJaNw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.mft Manifest number: 0857 Signing time: Sat 26 Apr 2025 20:31:34 +0000 Manifest this update: Sat 26 Apr 2025 20:31:33 +0000 Manifest next update: Sat 03 May 2025 20:31:33 +0000 Files and hashes: 1: _qFPI_25d6xkidIQbjXgI7KJaNw.crl (hash: 3GMkTRd/WOLQrHsUmtdX7wNpUjQsxW5WWD5d5GCS4E0=) 2: 9CB5878688DD11ECAC36C11FC4F9AE02.roa (hash: AdjuOXYS3zA7izh/H5q+WmUmDKawZvVShn5CM75yFQs=) 3: 2086256888B911ECAC54E716C4F9AE02.roa (hash: /smgLTvvzRlAwFgnnrG53rcZxe+TUuxudK7zpLwd5hk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.crl rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qFPI_25d6xkidIQbjXgI7KJaNw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2159 (0x86f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDCB6, serialNumber=FEA14F23FDB977AC6489D2106E35E023B28968DC Validity Not Before: Apr 26 20:31:33 2025 GMT Not After : May 3 20:31:33 2025 GMT Subject: CN=680d42a5-941a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e3:44:2c:be:8e:19:51:57:ac:4b:39:91:f1: 21:a7:70:7a:77:20:4d:eb:39:2e:fa:08:60:60:f1: d9:08:ee:67:35:91:3b:09:86:ff:89:0f:80:b0:a6: 8d:24:2f:30:69:4f:b5:a6:c9:ff:82:83:55:1c:68: 18:0d:e0:5b:6d:6b:36:9c:13:73:12:88:86:97:c1: aa:2e:78:8e:fa:f8:22:71:bc:70:25:fc:6c:40:38: ea:88:00:b1:59:56:47:ba:b9:8d:3c:43:58:95:01: d4:a8:e0:8a:03:f8:c9:e9:74:3d:20:08:55:e8:24: 60:d7:b6:74:5d:7d:a1:bd:c3:51:17:5d:bf:b9:1b: 69:68:41:40:dd:e4:6c:a4:37:24:ba:fd:f7:2e:19: a7:a7:95:8f:5f:fc:74:9e:58:fd:15:ca:ef:96:9c: b7:7a:1d:2e:07:c4:72:df:3a:29:ee:78:c0:74:24: 21:e0:8b:36:e4:07:78:2d:8d:88:79:02:ee:b8:5b: 3e:01:de:7e:38:86:09:74:64:c0:a4:2e:49:a8:55: 04:68:7e:bd:e6:cc:e4:cd:0a:53:36:7a:31:71:af: 3d:17:30:f8:08:54:13:d6:5c:cb:0b:18:1a:c5:91: 9e:e2:bb:e0:fe:03:6f:0a:e3:34:23:12:2d:b5:21: 83:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:55:97:B8:A0:DF:82:B2:07:33:3C:9B:49:F3:A0:FE:BF:DD:5D:52 X509v3 Authority Key Identifier: keyid:FE:A1:4F:23:FD:B9:77:AC:64:89:D2:10:6E:35:E0:23:B2:89:68:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qFPI_25d6xkidIQbjXgI7KJaNw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:ec:0c:e2:25:45:b4:88:2d:59:27:97:95:2a:a5:85:1d:f0: be:33:86:b9:42:5f:c9:af:e5:a1:bc:89:21:ee:c2:65:b2:97: 40:01:74:ed:59:e3:4e:e4:b6:93:7a:f5:2f:75:46:8b:d9:40: 47:31:b2:b1:5e:9a:2c:67:94:15:f1:a3:ff:42:80:1c:ec:51: 85:17:ae:5e:24:ec:99:08:4f:44:23:fb:fe:0e:9d:56:2f:06: 5a:d4:c9:27:66:e0:7f:e2:a3:dc:a8:cb:be:a3:72:e4:52:f8: ef:ba:8d:86:d7:34:17:c7:8b:4f:ee:fb:b9:b7:4b:56:89:f7: 53:48:db:c1:27:48:16:df:8f:04:20:f2:f0:00:11:e1:80:51: 12:e3:8d:85:a5:44:09:a0:26:d5:c3:7a:a8:7a:69:bb:52:85: 4c:4c:c8:52:68:31:c1:e4:bb:ef:2d:01:c9:d2:8d:55:db:f4: 7c:30:38:9e:f9:61:6f:4c:c5:e2:99:07:62:42:f6:13:d6:8c: be:5d:40:44:b5:13:9f:8f:66:53:04:ea:04:4c:b1:09:0e:7c: 27:3c:d7:0f:fd:f2:6e:09:bc:af:c6:fe:1d:95:17:f4:5c:03: 1a:52:c8:40:41:52:fa:4b:4f:3a:71:6e:dc:d6:90:65:18:25: 26:14:31:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCG8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERDQjYxMTAvBgNVBAUTKEZFQTE0RjIzRkRCOTc3QUM2NDg5RDIxMDZFMzVFMDIz QjI4OTY4REMwHhcNMjUwNDI2MjAzMTMzWhcNMjUwNTAzMjAzMTMzWjAYMRYwFAYD VQQDEw02ODBkNDJhNS05NDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1uNELL6OGVFXrEs5kfEhp3B6dyBN6zku+ghgYPHZCO5nNZE7CYb/iQ+AsKaN JC8waU+1psn/goNVHGgYDeBbbWs2nBNzEoiGl8GqLniO+vgicbxwJfxsQDjqiACx WVZHurmNPENYlQHUqOCKA/jJ6XQ9IAhV6CRg17Z0XX2hvcNRF12/uRtpaEFA3eRs pDckuv33Lhmnp5WPX/x0nlj9Fcrvlpy3eh0uB8Ry3zop7njAdCQh4Is25Ad4LY2I eQLuuFs+Ad5+OIYJdGTApC5JqFUEaH695szkzQpTNnoxca89FzD4CFQT1lzLCxga xZGe4rvg/gNvCuM0IxIttSGDWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFRVl7ig 34KyBzM8m0nzoP6/3V1SMB8GA1UdIwQYMBaAFP6hTyP9uXesZInSEG414COyiWjc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENCNi9GMDc3NTk4RUND M0QxMUVBOEJDNDVDMjlDNEY5QUUwMi9fcUZQSV8yNWQ2eGtpZElRYmpYZ0k3S0ph TncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19xRlBJXzI1ZDZ4a2lkSVFialhnSTdLSmFOdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RENCNi9GMDc3NTk4RUNDM0QxMUVBOEJDNDVDMjlDNEY5QUUwMi9fcUZQSV8yNWQ2 eGtpZElRYmpYZ0k3S0phTncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBP7AziJUW0iC1ZJ5eVKqWFHfC+M4a5Ql/Jr+WhvIkh7sJlspdAAXTt WeNO5LaTevUvdUaL2UBHMbKxXposZ5QV8aP/QoAc7FGFF65eJOyZCE9EI/v+Dp1W LwZa1MknZuB/4qPcqMu+o3LkUvjvuo2G1zQXx4tP7vu5t0tWifdTSNvBJ0gW348E IPLwABHhgFES442FpUQJoCbVw3qoemm7UoVMTMhSaDHB5LvvLQHJ0o1V2/R8MDie +WFvTMXimQdiQvYT1oy+XUBEtROfj2ZTBOoETLEJDnwnPNcP/fJuCbyvxv4dlRf0 XAMaUshAQVL6S086cW7c1pBlGCUmFDFl -----END CERTIFICATE-----Generated at Sun Apr 27 00:14:12 2025 by rpki-client on console.sobornost.net