$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft File: K1F8a3njzrA4nUGrxeziEH_sU_s.mft (raw, json) Hash identifier: hdCh99tK+mKjNleA/qHmMRaziva3NWLyupdy+DyXWqI= Subject key identifier: CB:DE:DB:E6:90:0B:14:D9:C0:CE:35:96:4B:CE:FC:9E:BA:F4:BB:CB Authority key identifier: 2B:51:7C:6B:79:E3:CE:B0:38:9D:41:AB:C5:EC:E2:10:7F:EC:53:FB Certificate issuer: /CN=A91E2A61/serialNumber=2B517C6B79E3CEB0389D41ABC5ECE2107FEC53FB Certificate serial: 03A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft Manifest number: 039A Signing time: Sun 27 Apr 2025 00:25:36 +0000 Manifest this update: Sun 27 Apr 2025 00:25:35 +0000 Manifest next update: Sun 04 May 2025 00:25:35 +0000 Files and hashes: 1: K1F8a3njzrA4nUGrxeziEH_sU_s.crl (hash: xVaLZjssxZjWM4T8woS3HVzlh6Fe9zYcqtKlwxm6cYs=) 2: B0F9178297B811ECA8AA4230C4F9AE02.roa (hash: 7UvGO2r60JLS/okHiWx8rHAHMyUcsuX/jNwXXCmMBho=) 3: 0E1EAB66961011ECA540626AC4F9AE02.roa (hash: TzVnkqN0tq39UUa2lfdZqlKLVdLg+S4NlfoqQ2G24uU=) 4: 457D2B5A28DC11ED839D6243C4F9AE02.roa (hash: 4G2u0IIjNz0CyenUMTN7OBV5SwfSrRJSXkJu6HMP/+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.crl rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 00:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 935 (0x3a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2A61, serialNumber=2B517C6B79E3CEB0389D41ABC5ECE2107FEC53FB Validity Not Before: Apr 27 00:25:35 2025 GMT Not After : May 4 00:25:35 2025 GMT Subject: CN=680d797f-5a23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9c:e0:ff:fe:99:31:c6:ba:ea:cc:26:c2:b7: 16:37:27:7e:44:3a:13:b2:8f:e9:9e:35:25:5f:d5: 9c:39:9b:a6:83:9f:97:85:bf:29:78:07:d1:5e:e7: df:cd:9d:75:8a:b7:16:4a:7e:3d:1a:c7:73:05:62: 6a:4e:c8:53:af:b5:f8:3c:fe:d1:67:33:b5:89:b5: 32:8a:00:fb:b6:b0:aa:24:d3:55:9f:3a:03:95:b5: b9:52:dc:10:0c:e7:48:ea:46:66:98:24:95:4d:52: d9:a7:1e:9e:02:55:a0:6f:84:20:9e:28:57:03:41: e3:4b:14:d7:c4:43:8e:4f:4c:9b:21:fd:65:5e:c4: 41:5f:14:7d:02:fd:ed:2e:78:45:19:f0:ee:43:72: b9:cb:7a:95:a4:3f:af:1b:41:1c:61:33:a5:84:38: 9a:bd:c6:5f:e1:16:d0:5a:82:c6:3c:98:10:84:51: ef:a5:85:02:f9:60:33:06:d2:b7:a3:4e:4b:e7:21: 2b:3a:43:c7:a4:7b:9b:8a:9d:ca:d8:5b:6b:d6:87: 63:b2:f6:f5:61:18:80:38:5b:d1:43:17:2a:f3:21: 1d:43:b3:9f:fe:4c:d2:bc:cd:b5:e7:e4:0d:15:63: 7f:9d:fc:0a:3b:d3:c6:38:4e:79:c9:d9:d1:f4:f0: bb:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:DE:DB:E6:90:0B:14:D9:C0:CE:35:96:4B:CE:FC:9E:BA:F4:BB:CB X509v3 Authority Key Identifier: keyid:2B:51:7C:6B:79:E3:CE:B0:38:9D:41:AB:C5:EC:E2:10:7F:EC:53:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:80:fd:17:94:b9:01:11:46:52:e5:68:94:7f:b9:de:a4:46: 9e:34:b1:0f:9c:47:e1:6e:ca:82:49:aa:0c:35:1d:fa:26:be: e2:d3:fe:52:0f:1a:14:fc:c8:9c:f9:ae:39:e2:52:42:5a:05: ac:99:99:ed:74:2b:9a:3a:ea:c8:2e:6e:9e:dd:38:5f:d6:0a: d8:bc:69:3a:61:b6:ac:ca:da:9d:0e:38:d3:84:3a:c8:63:24: a9:cf:37:62:72:ce:47:aa:e3:01:cd:3a:1d:5d:c1:06:77:73: 5f:e8:1f:e1:d9:c2:3a:66:96:5b:9e:84:d4:45:71:00:7c:79: 98:48:3b:bb:3d:72:5b:d9:69:2a:51:21:d9:44:f7:11:f7:21: 5d:ed:f6:3e:b0:35:a0:19:86:0e:69:13:ca:c2:d4:21:59:6b: 4e:f6:49:53:16:5c:a3:5a:6b:c2:2e:23:e0:2a:18:38:04:f8: 53:46:6c:77:70:29:35:20:1b:e0:4e:95:a7:34:29:c8:6e:da: a5:23:39:81:95:e5:88:af:d6:04:d4:d6:1e:60:11:54:b0:6a: c9:0e:da:65:6e:1a:10:43:57:4a:97:61:55:c7:ed:17:6b:75: 7f:98:7e:f1:5f:ac:86:d2:65:31:13:1c:8a:dd:d5:6d:df:b3: 33:b6:64:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJBNjExMTAvBgNVBAUTKDJCNTE3QzZCNzlFM0NFQjAzODlENDFBQkM1RUNFMjEw N0ZFQzUzRkIwHhcNMjUwNDI3MDAyNTM1WhcNMjUwNTA0MDAyNTM1WjAYMRYwFAYD VQQDEw02ODBkNzk3Zi01YTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs5zg//6ZMca66swmwrcWNyd+RDoTso/pnjUlX9WcOZumg5+Xhb8peAfRXuff zZ11ircWSn49GsdzBWJqTshTr7X4PP7RZzO1ibUyigD7trCqJNNVnzoDlbW5UtwQ DOdI6kZmmCSVTVLZpx6eAlWgb4QgnihXA0HjSxTXxEOOT0ybIf1lXsRBXxR9Av3t LnhFGfDuQ3K5y3qVpD+vG0EcYTOlhDiavcZf4RbQWoLGPJgQhFHvpYUC+WAzBtK3 o05L5yErOkPHpHubip3K2Ftr1odjsvb1YRiAOFvRQxcq8yEdQ7Of/kzSvM215+QN FWN/nfwKO9PGOE55ydnR9PC7TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMve2+aQ CxTZwM41lkvO/J669LvLMB8GA1UdIwQYMBaAFCtRfGt5486wOJ1Bq8Xs4hB/7FP7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkE2MS9FREMwOEZFNjk2 MEIxMUVDQkJFNEJFNjRDNEY5QUUwMi9LMUY4YTNuanpyQTRuVUdyeGV6aUVIX3NV X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0sxRjhhM25qenJBNG5VR3J4ZXppRUhfc1Vfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkE2MS9FREMwOEZFNjk2MEIxMUVDQkJFNEJFNjRDNEY5QUUwMi9LMUY4YTNuanpy QTRuVUdyeGV6aUVIX3NVX3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8gP0XlLkBEUZS5WiUf7nepEaeNLEPnEfhbsqCSaoMNR36Jr7i0/5S DxoU/Mic+a454lJCWgWsmZntdCuaOurILm6e3Thf1grYvGk6YbasytqdDjjThDrI YySpzzdics5HquMBzTodXcEGd3Nf6B/h2cI6ZpZbnoTURXEAfHmYSDu7PXJb2Wkq USHZRPcR9yFd7fY+sDWgGYYOaRPKwtQhWWtO9klTFlyjWmvCLiPgKhg4BPhTRmx3 cCk1IBvgTpWnNCnIbtqlIzmBleWIr9YE1NYeYBFUsGrJDtplbhoQQ1dKl2FVx+0X a3V/mH7xX6yG0mUxExyK3dVt37MztmTB -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:15 2025 by rpki-client on console.sobornost.net