$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.mft File: u-Sfy0H1Amo1v2yTuR_f88iMc24.mft (raw, json) Hash identifier: SXA52GPJIUxXOmJZgOtu/xEWlroNontvYlU93+1+tsM= Subject key identifier: 57:47:F9:CF:70:B6:E9:27:31:80:F0:90:93:E3:B7:92:A3:05:ED:08 Authority key identifier: BB:E4:9F:CB:41:F5:02:6A:35:BF:6C:93:B9:1F:DF:F3:C8:8C:73:6E Certificate issuer: /CN=A91DEA56/serialNumber=BBE49FCB41F5026A35BF6C93B91FDFF3C88C736E Certificate serial: 088B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.mft Manifest number: 0877 Signing time: Sat 26 Apr 2025 20:23:26 +0000 Manifest this update: Sat 26 Apr 2025 20:23:25 +0000 Manifest next update: Sat 03 May 2025 20:23:25 +0000 Files and hashes: 1: u-Sfy0H1Amo1v2yTuR_f88iMc24.crl (hash: QMSULlF2uw64juNc5Iiq1FzXsMyEJdnjL7F+fiIDalA=) 2: 660823EABF3C11EAAF328582C4F9AE02.roa (hash: McY2AJFANrzWmI75qEuoRVmbI5bYcHMLwYH623aHbh0=) 3: 65051AB6BF3C11EAAF328582C4F9AE02.roa (hash: 4sHi+d6qz1n7lwCxnRDnO0jNP13ZRhYE6FAGlfuub+c=) 4: 65877060BF3C11EAAF328582C4F9AE02.roa (hash: 8Ve/Cl0hRolwdHsLuG0VDkNM1FdRmkmQ9YowmP0sm+M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.crl rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2187 (0x88b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEA56, serialNumber=BBE49FCB41F5026A35BF6C93B91FDFF3C88C736E Validity Not Before: Apr 26 20:23:25 2025 GMT Not After : May 3 20:23:25 2025 GMT Subject: CN=680d40bd-eb81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:d7:57:21:0d:ba:0c:04:81:30:d2:72:ca:00: 38:35:ac:0f:01:2d:d9:88:f9:6d:f5:18:5c:9c:52: 62:9a:da:d2:4d:c7:4a:80:fc:61:bb:c4:70:50:21: d6:93:23:f5:3c:f0:3f:4c:c9:d9:6d:8b:55:5b:a8: 42:6a:17:db:4c:46:55:56:dc:12:4f:f0:08:04:fc: 74:38:33:95:b3:d5:22:6f:4d:8a:64:09:b7:8a:29: e4:79:96:09:99:15:55:44:9d:40:c2:86:66:30:36: 9b:84:72:97:35:e3:40:d5:0d:58:da:81:16:b1:9c: 85:8c:14:85:89:12:7f:cb:28:54:7e:14:5d:41:6d: fb:a6:e6:33:a8:dc:03:f5:e5:00:25:f8:9b:01:86: 61:9d:f6:e5:ad:9e:a9:85:c0:3d:93:d4:b7:08:50: 18:58:98:8d:c1:17:29:a1:10:bb:62:f6:74:8c:ff: af:fd:c6:26:d0:23:c8:dc:03:1d:0e:11:00:a4:d0: d5:b8:c9:92:e5:83:bd:c3:00:9a:15:6e:d5:7b:90: 5b:e0:04:37:8d:3c:39:f1:d1:c0:3b:16:31:a9:c6: b8:3b:ea:f9:b1:05:e9:88:a6:f8:b8:53:6e:06:de: 37:1e:1b:a0:0f:44:fb:9d:ef:c7:89:de:3b:df:08: 15:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:47:F9:CF:70:B6:E9:27:31:80:F0:90:93:E3:B7:92:A3:05:ED:08 X509v3 Authority Key Identifier: keyid:BB:E4:9F:CB:41:F5:02:6A:35:BF:6C:93:B9:1F:DF:F3:C8:8C:73:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:1d:1d:d1:2b:f0:5c:d4:05:83:42:82:ca:6c:06:24:d0:91: 43:13:f6:8f:b8:5c:41:34:c7:1f:88:86:d5:57:3d:2a:b9:8d: 55:92:3c:82:91:f9:b8:6c:4a:68:c8:a4:55:b9:96:27:25:0a: 5e:b3:fc:03:b0:42:50:53:86:55:0e:ca:58:65:57:81:b6:4b: dc:0f:9b:ac:30:16:ae:24:a5:39:54:0a:d2:89:44:e4:52:dc: 90:f6:fa:2a:93:52:6a:72:73:44:c4:32:ae:1d:b9:91:b6:15: 5a:5f:dd:f4:4d:37:46:5b:6c:6d:26:a3:00:ac:65:89:b8:7b: d4:45:89:13:a8:99:c0:82:f1:f9:eb:6c:b4:9d:48:cd:cc:9c: 70:04:f1:85:ad:c5:86:86:5b:f0:ea:bf:d0:11:7e:13:93:47: 09:2d:8b:d2:15:7c:dd:4d:a4:90:ed:6d:7f:50:e8:61:23:68: 6e:6e:89:a1:47:ea:5d:b5:1e:2a:d0:23:38:4d:e3:cd:ea:0b: 09:cf:0e:2e:ea:9d:7e:d6:2f:d0:94:2e:21:4a:12:7c:19:70: d9:c9:09:fe:e9:9d:29:44:13:30:32:25:76:bf:22:39:68:4b: 40:05:f5:a9:20:40:5c:39:99:08:05:64:33:5d:e1:04:14:c8: 0c:e7:22:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVBNTYxMTAvBgNVBAUTKEJCRTQ5RkNCNDFGNTAyNkEzNUJGNkM5M0I5MUZERkYz Qzg4QzczNkUwHhcNMjUwNDI2MjAyMzI1WhcNMjUwNTAzMjAyMzI1WjAYMRYwFAYD VQQDEw02ODBkNDBiZC1lYjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9ddXIQ26DASBMNJyygA4NawPAS3ZiPlt9RhcnFJimtrSTcdKgPxhu8RwUCHW kyP1PPA/TMnZbYtVW6hCahfbTEZVVtwST/AIBPx0ODOVs9Uib02KZAm3iinkeZYJ mRVVRJ1AwoZmMDabhHKXNeNA1Q1Y2oEWsZyFjBSFiRJ/yyhUfhRdQW37puYzqNwD 9eUAJfibAYZhnfblrZ6phcA9k9S3CFAYWJiNwRcpoRC7YvZ0jP+v/cYm0CPI3AMd DhEApNDVuMmS5YO9wwCaFW7Ve5Bb4AQ3jTw58dHAOxYxqca4O+r5sQXpiKb4uFNu Bt43HhugD0T7ne/Hid473wgVOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFdH+c9w tuknMYDwkJPjt5KjBe0IMB8GA1UdIwQYMBaAFLvkn8tB9QJqNb9sk7kf3/PIjHNu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUE1Ni82ODQ2NjdGNEJG M0ExMUVBOTRBRTRFN0NDNEY5QUUwMi91LVNmeTBIMUFtbzF2MnlUdVJfZjg4aU1j MjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UtU2Z5MEgxQW1vMXYyeVR1Ul9mODhpTWMyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUE1Ni82ODQ2NjdGNEJGM0ExMUVBOTRBRTRFN0NDNEY5QUUwMi91LVNmeTBIMUFt bzF2MnlUdVJfZjg4aU1jMjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChHR3RK/Bc1AWDQoLKbAYk0JFDE/aPuFxBNMcfiIbVVz0quY1VkjyC kfm4bEpoyKRVuZYnJQpes/wDsEJQU4ZVDspYZVeBtkvcD5usMBauJKU5VArSiUTk UtyQ9voqk1JqcnNExDKuHbmRthVaX930TTdGW2xtJqMArGWJuHvURYkTqJnAgvH5 62y0nUjNzJxwBPGFrcWGhlvw6r/QEX4Tk0cJLYvSFXzdTaSQ7W1/UOhhI2hubomh R+pdtR4q0CM4TePN6gsJzw4u6p1+1i/QlC4hShJ8GXDZyQn+6Z0pRBMwMiV2vyI5 aEtABfWpIEBcOZkIBWQzXeEEFMgM5yL5 -----END CERTIFICATE-----Generated at Sun Apr 27 00:14:12 2025 by rpki-client on console.sobornost.net