$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1CB1/3F4A5A2EEA0811EF9D339B29C4F9AE02/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.mft File: Bj4BJ0cqfipvhHBAnJuCOQX6_o4.mft (raw, json) Hash identifier: 3ubmuRLz8+D5Tj/juzmt76eTEc1wGNAE96Qt1vaasfw= Subject key identifier: 1E:DF:59:B6:40:71:C0:42:0B:E9:D4:E4:DA:10:49:8F:78:CB:F9:C2 Authority key identifier: 06:3E:01:27:47:2A:7E:2A:6F:84:70:40:9C:9B:82:39:05:FA:FE:8E Certificate issuer: /CN=A91E1CB1/serialNumber=063E0127472A7E2A6F8470409C9B823905FAFE8E Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1CB1/3F4A5A2EEA0811EF9D339B29C4F9AE02/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.mft Manifest number: 27 Signing time: Sun 27 Apr 2025 06:34:57 +0000 Manifest this update: Sun 27 Apr 2025 06:34:56 +0000 Manifest next update: Sun 04 May 2025 06:34:56 +0000 Files and hashes: 1: Bj4BJ0cqfipvhHBAnJuCOQX6_o4.crl (hash: PQzYoAAtEH0qV0UMDEWpYE7MeGE0e1XI+kCTeaoPCZI=) 2: 8291E388EA0811EFB385192AC4F9AE02.roa (hash: XpmAeXpdeuf94znt4qbum8GMVNKKeabDl6UX2Jbwn48=) 3: 8322D244EA0811EFB385192AC4F9AE02.roa (hash: +QMIG68CS6n8ZD6zVSU18xTMohd0BVQ46zSHjpuk0xY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1CB1/3F4A5A2EEA0811EF9D339B29C4F9AE02/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.crl rsync://rpki.apnic.net/member_repository/A91E1CB1/3F4A5A2EEA0811EF9D339B29C4F9AE02/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1CB1, serialNumber=063E0127472A7E2A6F8470409C9B823905FAFE8E Validity Not Before: Apr 27 06:34:56 2025 GMT Not After : May 4 06:34:56 2025 GMT Subject: CN=680dd010-ba44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e6:8f:f1:2f:e8:12:35:97:a6:4d:73:73:e8: e8:c7:ec:a3:52:12:31:e6:68:87:b6:77:f1:65:ab: 01:0a:8a:27:4a:ed:c4:59:8a:ad:18:9a:57:35:88: 7c:b5:2e:d7:b1:ca:11:8f:b3:68:3e:37:de:90:cb: b4:46:08:8d:ec:ca:f3:5d:f5:ab:98:20:35:64:82: b3:8f:57:35:c9:55:c5:cc:28:bb:3b:23:83:7d:52: 49:1d:70:b4:c5:8b:6e:dd:d7:33:b1:b6:46:b9:c5: b7:a1:3e:ed:c8:ab:49:ff:1c:94:b8:12:78:06:21: ef:10:5c:e2:ed:ac:c2:df:b0:72:9d:60:ff:55:65: 58:0d:7c:6a:28:fa:f3:e7:f8:21:a2:a1:35:86:c9: 9a:6f:f6:bb:bf:60:63:b0:f7:b0:06:d3:33:97:4d: a8:3e:52:9b:c2:d9:72:80:c9:c3:84:56:2d:85:0b: 14:5a:82:4e:25:15:7f:d8:e5:74:8b:c9:92:85:25: 73:bd:3e:0d:cc:b7:ca:0c:80:67:1f:b9:5e:17:15: 8b:91:82:e0:06:47:99:be:36:80:e6:92:d8:b8:de: 05:bc:1c:6a:1c:69:ed:b9:94:f3:90:66:33:ea:37: e7:e3:17:94:61:c1:06:d7:e0:48:77:4a:ad:7f:ac: e7:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:DF:59:B6:40:71:C0:42:0B:E9:D4:E4:DA:10:49:8F:78:CB:F9:C2 X509v3 Authority Key Identifier: keyid:06:3E:01:27:47:2A:7E:2A:6F:84:70:40:9C:9B:82:39:05:FA:FE:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1CB1/3F4A5A2EEA0811EF9D339B29C4F9AE02/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1CB1/3F4A5A2EEA0811EF9D339B29C4F9AE02/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:10:95:4b:83:75:0c:f5:c6:ff:21:56:c8:3a:8a:a4:a0:40: a7:ab:3a:3a:6f:57:52:a7:9e:49:bd:71:47:07:6c:00:7c:34: 09:93:8a:ce:b5:51:eb:65:44:10:d9:87:e2:4e:17:17:19:72: 16:cd:cb:12:1d:ed:60:92:6b:ec:54:bd:c8:d5:41:ac:af:e9: 32:97:46:8a:1d:76:65:8d:a0:30:ec:e2:94:7b:d1:68:b7:f4: 24:b2:ab:e6:b9:4a:b8:a2:11:22:87:54:d5:89:f1:75:7d:fe: aa:0c:30:a2:e5:67:54:be:19:33:e0:2e:37:ae:60:47:d6:6f: e0:88:25:7a:0c:83:f4:82:f1:7e:ca:45:e1:eb:31:07:0c:20: 64:a4:c2:82:d6:4b:c7:9b:d9:a8:3a:99:cb:c6:ad:32:eb:1b: e5:88:85:19:f1:46:06:3a:28:41:0f:c6:7c:79:ce:e8:0d:74: 25:7b:66:75:a0:a8:71:f9:6c:e5:2c:23:9a:da:8d:7e:66:75: bb:5d:dd:83:89:02:bb:78:41:3f:18:d9:16:e9:a9:d5:04:f3: 9d:1a:b3:ce:b8:ff:08:5d:fa:ca:08:b5:bc:56:bf:dc:cf:bf: 45:5b:da:7e:0e:f9:ee:f9:96:5e:cf:9e:de:42:81:45:e0:22: 4a:7f:40:fb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MUNCMTExMC8GA1UEBRMoMDYzRTAxMjc0NzJBN0UyQTZGODQ3MDQwOUM5QjgyMzkw NUZBRkU4RTAeFw0yNTA0MjcwNjM0NTZaFw0yNTA1MDQwNjM0NTZaMBgxFjAUBgNV BAMTDTY4MGRkMDEwLWJhNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCy5o/xL+gSNZemTXNz6OjH7KNSEjHmaIe2d/FlqwEKiidK7cRZiq0Ymlc1iHy1 LtexyhGPs2g+N96Qy7RGCI3syvNd9auYIDVkgrOPVzXJVcXMKLs7I4N9UkkdcLTF i27d1zOxtka5xbehPu3Iq0n/HJS4EngGIe8QXOLtrMLfsHKdYP9VZVgNfGoo+vPn +CGioTWGyZpv9ru/YGOw97AG0zOXTag+UpvC2XKAycOEVi2FCxRagk4lFX/Y5XSL yZKFJXO9Pg3Mt8oMgGcfuV4XFYuRguAGR5m+NoDmkti43gW8HGocae25lPOQZjPq N+fjF5RhwQbX4Eh3Sq1/rOeLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHt9ZtkBx wEIL6dTk2hBJj3jL+cIwHwYDVR0jBBgwFoAUBj4BJ0cqfipvhHBAnJuCOQX6/o4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUxQ0IxLzNGNEE1QTJFRUEw ODExRUY5RDMzOUIyOUM0RjlBRTAyL0JqNEJKMGNxZmlwdmhIQkFuSnVDT1FYNl9v NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQmo0QkowY3FmaXB2aEhCQW5KdUNPUVg2X280LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUx Q0IxLzNGNEE1QTJFRUEwODExRUY5RDMzOUIyOUM0RjlBRTAyL0JqNEJKMGNxZmlw dmhIQkFuSnVDT1FYNl9vNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEgQlUuDdQz1xv8hVsg6iqSgQKerOjpvV1Knnkm9cUcHbAB8NAmTis61 UetlRBDZh+JOFxcZchbNyxId7WCSa+xUvcjVQayv6TKXRooddmWNoDDs4pR70Wi3 9CSyq+a5SriiESKHVNWJ8XV9/qoMMKLlZ1S+GTPgLjeuYEfWb+CIJXoMg/SC8X7K ReHrMQcMIGSkwoLWS8eb2ag6mcvGrTLrG+WIhRnxRgY6KEEPxnx5zugNdCV7ZnWg qHH5bOUsI5rajX5mdbtd3YOJArt4QT8Y2RbpqdUE850as864/whd+soItbxWv9zP v0Vb2n4O+e75ll7Pnt5CgUXgIkp/QPs= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:57 2025 by rpki-client on console.sobornost.net