$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.mft File: TnWast4kVGn4MRuSc7VVOH51CpA.mft (raw, json) Hash identifier: f3N1co5dCKTTIEh6yvKW8jZPeVdsNQRoH2smSw4zanc= Subject key identifier: 45:8A:80:A3:01:A9:8B:85:F6:39:9A:5D:02:CB:95:E7:64:68:CD:B6 Authority key identifier: 4E:75:9A:B2:DE:24:54:69:F8:31:1B:92:73:B5:55:38:7E:75:0A:90 Certificate issuer: /CN=A91DF233/serialNumber=4E759AB2DE245469F8311B9273B555387E750A90 Certificate serial: 4B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TnWast4kVGn4MRuSc7VVOH51CpA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.mft Manifest number: 4A Signing time: Fri 25 Apr 2025 06:21:27 +0000 Manifest this update: Fri 25 Apr 2025 06:21:26 +0000 Manifest next update: Fri 02 May 2025 06:21:26 +0000 Files and hashes: 1: TnWast4kVGn4MRuSc7VVOH51CpA.crl (hash: VCcwFoV9byCZSkZF2HMeeT8HXqvZZT8py/au7R6xKTg=) 2: 1FE0E016B37D11EFBDE18263C4F9AE02.roa (hash: i4QqretrMrfllRlkSz0xUOac9qaskNbaHtNPO9MoQA0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.crl rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TnWast4kVGn4MRuSc7VVOH51CpA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF233, serialNumber=4E759AB2DE245469F8311B9273B555387E750A90 Validity Not Before: Apr 25 06:21:26 2025 GMT Not After : May 2 06:21:26 2025 GMT Subject: CN=680b29e6-6fb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c3:00:b8:61:1f:c5:a9:9e:7d:da:a1:8a:96: e3:74:67:e0:f0:8b:25:84:96:76:20:11:cd:62:ec: 39:64:a9:db:a1:e3:86:6b:5c:d9:7d:8d:f0:8a:1f: bb:aa:ea:92:32:a7:af:cc:74:ef:69:b0:d5:38:05: 5e:3f:23:10:d9:d2:7e:ec:13:d3:53:a7:e6:b6:94: 2a:25:8d:bb:27:ee:c2:be:0d:1b:65:88:42:bd:95: f7:fe:d0:48:90:86:3e:bd:38:e6:66:51:a2:dd:b0: 54:9b:6b:09:b4:60:ad:a3:79:0d:96:43:14:65:d4: 48:ff:d7:eb:a8:c9:47:6c:67:1a:76:32:98:7f:bb: 03:3b:6f:b5:73:83:6f:41:d9:9d:0e:cd:5a:e5:d0: 64:9b:83:98:c5:e1:90:25:a8:9c:30:c4:d0:fd:b0: 1d:51:04:e9:ea:0b:48:d6:64:19:bd:40:71:59:fe: b7:32:d1:6c:21:57:f9:52:32:4e:7e:45:da:fc:30: d1:7d:cf:dc:57:cb:8b:fe:e7:91:d7:dd:a9:63:2c: 85:3f:94:f6:fa:69:4f:6d:f0:97:fc:80:3b:67:be: f3:9b:8a:69:aa:c8:72:78:ed:d7:be:5d:ab:7b:3d: 58:05:18:4c:05:54:6d:6a:fb:14:9a:7e:e1:14:a8: ed:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:8A:80:A3:01:A9:8B:85:F6:39:9A:5D:02:CB:95:E7:64:68:CD:B6 X509v3 Authority Key Identifier: keyid:4E:75:9A:B2:DE:24:54:69:F8:31:1B:92:73:B5:55:38:7E:75:0A:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TnWast4kVGn4MRuSc7VVOH51CpA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:77:0b:39:62:5d:e0:15:96:9a:8b:20:5e:35:e2:d5:2b:58: 57:c8:ca:92:d3:06:90:ef:7b:d9:65:75:63:57:39:9e:15:b1: 6b:55:e6:69:89:62:16:d4:ea:8f:ce:62:a4:bf:ef:ee:54:d8: 8e:63:13:1f:89:60:83:93:0d:d6:00:ac:d3:48:9d:c2:f5:37: ec:07:09:58:9d:15:4a:e5:03:a1:b5:18:b2:81:d5:49:e6:87: b2:c7:0e:02:54:6f:2e:2d:22:1d:ce:b4:f3:18:4e:f0:1c:3f: 6e:96:26:96:95:85:16:a9:d6:af:e5:b1:cc:f6:58:db:3c:c9: 78:2d:60:ad:ef:2d:4b:c1:82:7d:67:f5:f5:9f:f8:04:c9:db: 40:34:e8:a1:c3:a1:af:19:f3:4a:dd:ed:30:10:a4:84:e0:89: 97:ce:38:dc:e9:4d:6c:14:89:28:ba:f4:2a:36:25:0b:e2:4e: d6:a3:82:b8:16:dd:51:4b:3d:71:79:c4:dd:b4:2b:cf:78:f8: 34:17:b2:e7:c2:4c:4f:a9:8b:a8:fc:92:40:06:85:47:3c:ba: fb:90:75:ca:8d:f5:37:ba:0d:1b:91:77:e6:86:ab:49:88:9a: 65:73:50:6c:5d:6b:cb:6c:3b:f5:d3:2d:b7:1a:c4:44:0e:19: ed:49:8e:68 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RjIzMzExMC8GA1UEBRMoNEU3NTlBQjJERTI0NTQ2OUY4MzExQjkyNzNCNTU1Mzg3 RTc1MEE5MDAeFw0yNTA0MjUwNjIxMjZaFw0yNTA1MDIwNjIxMjZaMBgxFjAUBgNV BAMTDTY4MGIyOWU2LTZmYjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2wwC4YR/FqZ592qGKluN0Z+DwiyWElnYgEc1i7Dlkqduh44ZrXNl9jfCKH7uq 6pIyp6/MdO9psNU4BV4/IxDZ0n7sE9NTp+a2lColjbsn7sK+DRtliEK9lff+0EiQ hj69OOZmUaLdsFSbawm0YK2jeQ2WQxRl1Ej/1+uoyUdsZxp2Mph/uwM7b7Vzg29B 2Z0OzVrl0GSbg5jF4ZAlqJwwxND9sB1RBOnqC0jWZBm9QHFZ/rcy0WwhV/lSMk5+ Rdr8MNF9z9xXy4v+55HX3aljLIU/lPb6aU9t8Jf8gDtnvvObimmqyHJ47de+Xat7 PVgFGEwFVG1q+xSafuEUqO1pAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURYqAowGp i4X2OZpdAsuV52RozbYwHwYDVR0jBBgwFoAUTnWast4kVGn4MRuSc7VVOH51CpAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURGMjMzLzA4RjA1MjYwQjM3 ODExRUY4ODMyMkIwRkM0RjlBRTAyL1RuV2FzdDRrVkduNE1SdVNjN1ZWT0g1MUNw QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVG5XYXN0NGtWR240TVJ1U2M3VlZPSDUxQ3BBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURG MjMzLzA4RjA1MjYwQjM3ODExRUY4ODMyMkIwRkM0RjlBRTAyL1RuV2FzdDRrVkdu NE1SdVNjN1ZWT0g1MUNwQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF53CzliXeAVlpqLIF414tUrWFfIypLTBpDve9lldWNXOZ4VsWtV5mmJ YhbU6o/OYqS/7+5U2I5jEx+JYIOTDdYArNNIncL1N+wHCVidFUrlA6G1GLKB1Unm h7LHDgJUby4tIh3OtPMYTvAcP26WJpaVhRap1q/lscz2WNs8yXgtYK3vLUvBgn1n 9fWf+ATJ20A06KHDoa8Z80rd7TAQpITgiZfOONzpTWwUiSi69Co2JQviTtajgrgW 3VFLPXF5xN20K894+DQXsufCTE+pi6j8kkAGhUc8uvuQdcqN9Te6DRuRd+aGq0mI mmVzUGxda8tsO/XTLbcaxEQOGe1Jjmg= -----END CERTIFICATE-----Generated at Fri Apr 25 08:25:15 2025 by rpki-client on console.sobornost.net