$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.mft File: 4vF3N7hMH2eGnAOkf4xBn9QgAWw.mft (raw, json) Hash identifier: azL2lB65TKpBQmBL0mIuBBEpUlEksmcbYgc0K3TpE6Q= Subject key identifier: F8:46:C6:5E:F9:A0:00:97:F5:A5:72:5B:A7:25:18:EA:9F:B2:C0:D1 Authority key identifier: E2:F1:77:37:B8:4C:1F:67:86:9C:03:A4:7F:8C:41:9F:D4:20:01:6C Certificate issuer: /CN=A91E1604/serialNumber=E2F17737B84C1F67869C03A47F8C419FD420016C Certificate serial: 99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vF3N7hMH2eGnAOkf4xBn9QgAWw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.mft Manifest number: 98 Signing time: Sun 27 Apr 2025 05:10:23 +0000 Manifest this update: Sun 27 Apr 2025 05:10:22 +0000 Manifest next update: Sun 04 May 2025 05:10:22 +0000 Files and hashes: 1: 4vF3N7hMH2eGnAOkf4xBn9QgAWw.crl (hash: uTTi0+kGdc36QlT3/KuWHshAxb2Nf2soGpbmWEe/lQc=) 2: 0B725F44496D11EF9F7F2116C4F9AE02.roa (hash: cLMsRe3bjQqt9KTlSv77ZsvirHU5HvmwxB64rB3nwQc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.crl rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vF3N7hMH2eGnAOkf4xBn9QgAWw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 153 (0x99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1604, serialNumber=E2F17737B84C1F67869C03A47F8C419FD420016C Validity Not Before: Apr 27 05:10:22 2025 GMT Not After : May 4 05:10:22 2025 GMT Subject: CN=680dbc3e-dd63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:39:37:5f:7b:23:3b:d4:23:db:ec:bd:75:f0: e2:a3:2e:c0:24:b7:33:d5:46:c1:f2:3e:67:04:9c: fa:81:2b:ca:63:15:55:41:74:7e:3a:08:83:1d:21: 80:8f:d6:41:f9:33:7f:d2:59:a7:df:35:f5:bc:6d: 4f:3e:cd:0b:2e:c3:3f:65:8a:97:7d:ca:fa:ac:a2: 0b:de:db:31:33:55:36:a9:74:36:22:96:51:80:15: b5:63:bc:57:cc:cb:4f:ce:97:c1:f7:5c:78:55:06: cc:07:5e:2f:50:2c:63:0b:ed:58:9e:90:cf:4f:3c: de:3c:13:0d:6a:1c:3d:41:eb:56:33:3f:2d:07:94: 23:29:b9:a4:98:11:0a:79:a8:8b:fb:86:38:b6:de: 69:17:bc:aa:43:5b:bf:0f:0f:83:90:1b:fc:03:6b: cb:73:a2:c4:8a:4d:4e:94:33:d9:89:05:f4:e1:6c: 70:50:d2:c7:3b:b1:a6:02:49:69:24:12:b4:24:83: 6d:82:ed:f1:8d:be:ea:c1:ab:61:09:81:01:dd:28: a6:5e:e6:f0:80:ec:09:bb:fd:85:90:a0:76:6d:1c: 1d:e5:32:25:d8:c5:4f:6d:47:b7:6b:fc:a4:45:7b: 8e:82:52:f3:0a:15:0f:47:38:d4:14:e3:f8:dc:11: 2c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:46:C6:5E:F9:A0:00:97:F5:A5:72:5B:A7:25:18:EA:9F:B2:C0:D1 X509v3 Authority Key Identifier: keyid:E2:F1:77:37:B8:4C:1F:67:86:9C:03:A4:7F:8C:41:9F:D4:20:01:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vF3N7hMH2eGnAOkf4xBn9QgAWw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:4a:3c:f4:3c:47:66:04:a3:02:55:4d:c5:e6:74:ec:42:35: 30:f1:47:36:ee:c4:02:0c:d7:48:c0:50:0f:25:9a:df:70:b4: f1:00:b7:1f:12:53:96:56:7e:83:b4:c9:47:da:21:4c:eb:da: 8a:a7:ce:22:63:4a:bc:57:a0:3c:b3:00:69:df:df:8e:1c:2f: c3:d8:79:4e:4f:6d:a1:c7:e0:d3:9e:ec:62:a5:62:d4:55:32: d7:f5:d1:2b:25:a4:72:ca:b3:11:fb:bd:d9:6e:ac:a6:38:f9: db:15:8f:09:0e:94:24:40:55:ce:d8:cf:17:0d:e6:d7:ca:1a: 56:87:3e:18:2a:9b:98:43:0a:63:1a:03:41:c8:01:e2:70:f0: cb:24:ff:a7:50:ad:15:72:88:e6:c3:c9:41:de:f5:46:64:00: 8f:fe:8d:5b:4c:95:2f:66:c2:f8:70:87:74:62:ab:6c:a1:cb: 74:57:4f:a5:e0:13:a6:63:05:a2:85:98:e9:b1:1a:94:2d:88: b3:d5:8a:4d:1a:5e:5f:bf:bb:b7:5a:7e:ca:d4:39:e3:d7:0a: c7:20:f2:1c:5d:e5:67:ba:39:8a:dc:4f:ac:d4:88:56:22:cb: c6:0f:bb:20:1d:8f:e6:d6:29:23:b1:63:5a:d8:f4:52:fd:eb: d0:4f:96:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE2MDQxMTAvBgNVBAUTKEUyRjE3NzM3Qjg0QzFGNjc4NjlDMDNBNDdGOEM0MTlG RDQyMDAxNkMwHhcNMjUwNDI3MDUxMDIyWhcNMjUwNTA0MDUxMDIyWjAYMRYwFAYD VQQDEw02ODBkYmMzZS1kZDYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwTk3X3sjO9Qj2+y9dfDioy7AJLcz1UbB8j5nBJz6gSvKYxVVQXR+OgiDHSGA j9ZB+TN/0lmn3zX1vG1PPs0LLsM/ZYqXfcr6rKIL3tsxM1U2qXQ2IpZRgBW1Y7xX zMtPzpfB91x4VQbMB14vUCxjC+1YnpDPTzzePBMNahw9QetWMz8tB5QjKbmkmBEK eaiL+4Y4tt5pF7yqQ1u/Dw+DkBv8A2vLc6LEik1OlDPZiQX04WxwUNLHO7GmAklp JBK0JINtgu3xjb7qwathCYEB3SimXubwgOwJu/2FkKB2bRwd5TIl2MVPbUe3a/yk RXuOglLzChUPRzjUFOP43BEs8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPhGxl75 oACX9aVyW6clGOqfssDRMB8GA1UdIwQYMBaAFOLxdze4TB9nhpwDpH+MQZ/UIAFs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTYwNC8xMjBDMkM3NDND RUIxMUVGOTRFMjRGNTlDNEY5QUUwMi80dkYzTjdoTUgyZUduQU9rZjR4Qm45UWdB V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR2RjNON2hNSDJlR25BT2tmNHhCbjlRZ0FXdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTYwNC8xMjBDMkM3NDNDRUIxMUVGOTRFMjRGNTlDNEY5QUUwMi80dkYzTjdoTUgy ZUduQU9rZjR4Qm45UWdBV3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACSjz0PEdmBKMCVU3F5nTsQjUw8Uc27sQCDNdIwFAPJZrfcLTxALcf ElOWVn6DtMlH2iFM69qKp84iY0q8V6A8swBp39+OHC/D2HlOT22hx+DTnuxipWLU VTLX9dErJaRyyrMR+73ZbqymOPnbFY8JDpQkQFXO2M8XDebXyhpWhz4YKpuYQwpj GgNByAHicPDLJP+nUK0Vcojmw8lB3vVGZACP/o1bTJUvZsL4cId0Yqtsoct0V0+l 4BOmYwWihZjpsRqULYiz1YpNGl5fv7u3Wn7K1Dnj1wrHIPIcXeVnujmK3E+s1IhW IsvGD7sgHY/m1ikjsWNa2PRS/evQT5bF -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:57 2025 by rpki-client on console.sobornost.net