$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft File: fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft (raw, json) Hash identifier: Vy5/hjaWE8FZQtdT6Efiy0+TWywiZX5f6lRRXkH/eWM= Subject key identifier: 54:53:1A:A9:A6:69:CA:0F:74:30:69:63:D0:81:85:13:DF:11:16:8E Authority key identifier: 7C:63:B2:83:D9:B8:A0:6E:EA:D0:62:1B:82:3E:D0:F4:E6:99:DD:F4 Certificate issuer: /CN=A91E2AE5/serialNumber=7C63B283D9B8A06EEAD0621B823ED0F4E699DDF4 Certificate serial: 14BF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft Manifest number: 14AE Signing time: Mon 28 Apr 2025 15:38:11 +0000 Manifest this update: Mon 28 Apr 2025 15:38:11 +0000 Manifest next update: Mon 05 May 2025 15:38:11 +0000 Files and hashes: 1: fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.crl (hash: SWLl5NFDBvck+puKdmS4c310uXnpReExpcYumQtE7hM=) 2: C163B1881A4711EDA547FE24C4F9AE02.roa (hash: YyHC9fQHplsWKxQpqgQ61v95ti092y+Fsw7rZXStZmE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.crl rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 14:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5311 (0x14bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2AE5, serialNumber=7C63B283D9B8A06EEAD0621B823ED0F4E699DDF4 Validity Not Before: Apr 28 15:38:11 2025 GMT Not After : May 5 15:38:11 2025 GMT Subject: CN=680fa0e3-07f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7e:ac:c7:15:5e:73:e2:ae:63:32:30:87:c5: 7c:59:db:7b:ec:5a:75:9d:7a:f6:ac:40:7a:fe:f5: 83:e5:29:85:98:17:82:c7:e1:3f:4b:67:68:e0:89: 25:e8:4d:2c:f9:0e:63:33:08:ec:b3:25:65:0c:1c: 2f:db:8b:8a:5a:8d:89:07:aa:9f:21:f0:cf:89:73: 3b:91:b5:35:45:fc:30:a0:21:47:90:c5:5f:86:89: 33:22:ae:30:8c:38:af:70:85:38:19:fc:91:9f:25: 9d:a5:0d:d4:77:16:25:ae:91:24:75:82:c9:a6:98: 77:d8:81:84:1d:5d:7c:0f:d0:c9:af:3d:be:09:4c: 3f:a2:4b:41:c6:1e:54:f6:18:1e:da:25:fe:2d:84: 33:6b:fa:15:51:1b:1f:2c:ce:a7:e4:d7:17:60:c4: 82:7b:50:d1:02:fe:13:f0:7b:69:86:25:44:e7:a3: f6:7e:52:96:30:81:16:cb:4b:98:20:07:63:55:00: 47:02:89:b1:1d:ed:6e:67:fc:1f:ae:21:3b:be:53: 54:69:46:a2:c5:95:fd:f1:5b:62:0b:a4:90:35:57: f3:f4:93:e4:f1:e8:82:f1:17:2e:15:d6:3e:5d:a1: ee:79:7c:76:b9:7d:40:41:9b:34:63:1b:4f:f4:fe: 01:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:53:1A:A9:A6:69:CA:0F:74:30:69:63:D0:81:85:13:DF:11:16:8E X509v3 Authority Key Identifier: keyid:7C:63:B2:83:D9:B8:A0:6E:EA:D0:62:1B:82:3E:D0:F4:E6:99:DD:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:a4:41:e4:68:ce:e7:42:58:61:95:70:3f:d4:f5:7f:af:1b: cf:a1:bc:3f:89:b2:43:59:b5:0a:d6:41:92:13:b5:4c:4f:3f: 8a:07:f9:5e:d2:84:ba:12:d2:f6:40:64:4f:ae:c1:fa:c1:7c: d5:e1:f9:33:ab:61:d2:8c:68:fe:8b:2b:12:ff:6f:33:06:9d: c8:de:bf:72:56:6d:15:59:4e:47:93:91:f2:30:cf:fc:25:82: ce:b8:c9:c5:2e:dd:a8:49:33:c8:04:be:02:0b:91:70:df:e6: 70:06:ea:e2:74:b7:41:e7:02:cf:e4:f6:c3:f1:dd:fa:42:11: 8c:5c:32:d8:11:31:27:1e:f9:9f:2b:c1:45:5b:04:78:a1:c9: 0d:54:61:65:54:a7:2f:b8:61:a1:ff:3a:fe:ab:bb:71:27:e9: 21:bf:70:12:fe:79:35:c4:06:6d:9f:fa:d2:f7:c7:8e:0a:e4: 6b:39:2f:be:ae:16:6b:bf:91:b5:03:f9:c6:59:71:40:7a:d8: 48:6e:72:08:c7:c5:97:d0:03:d6:f4:92:5f:8e:77:40:e5:b0: a2:15:06:f3:c6:ed:2b:4b:22:99:c7:4c:39:e6:44:1f:dc:06: ad:57:29:4f:50:95:54:7c:51:d9:97:47:83:ad:d6:17:4f:2d: e4:1f:dd:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJBRTUxMTAvBgNVBAUTKDdDNjNCMjgzRDlCOEEwNkVFQUQwNjIxQjgyM0VEMEY0 RTY5OURERjQwHhcNMjUwNDI4MTUzODExWhcNMjUwNTA1MTUzODExWjAYMRYwFAYD VQQDEw02ODBmYTBlMy0wN2YwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAun6sxxVec+KuYzIwh8V8Wdt77Fp1nXr2rEB6/vWD5SmFmBeCx+E/S2do4Ikl 6E0s+Q5jMwjssyVlDBwv24uKWo2JB6qfIfDPiXM7kbU1RfwwoCFHkMVfhokzIq4w jDivcIU4GfyRnyWdpQ3UdxYlrpEkdYLJpph32IGEHV18D9DJrz2+CUw/oktBxh5U 9hge2iX+LYQza/oVURsfLM6n5NcXYMSCe1DRAv4T8HtphiVE56P2flKWMIEWy0uY IAdjVQBHAomxHe1uZ/wfriE7vlNUaUaixZX98VtiC6SQNVfz9JPk8eiC8RcuFdY+ XaHueXx2uX1AQZs0YxtP9P4B1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFRTGqmm acoPdDBpY9CBhRPfERaOMB8GA1UdIwQYMBaAFHxjsoPZuKBu6tBiG4I+0PTmmd30 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkFFNS85RDcyNzZCNjVD QTkxMUU4QUE0MkEzNDZDNEY5QUUwMi9mR095ZzltNG9HN3EwR0liZ2o3UTlPYVoz ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ZHT3lnOW00b0c3cTBHSWJnajdROU9hWjNmUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkFFNS85RDcyNzZCNjVDQTkxMUU4QUE0MkEzNDZDNEY5QUUwMi9mR095ZzltNG9H N3EwR0liZ2o3UTlPYVozZlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOpEHkaM7nQlhhlXA/1PV/rxvPobw/ibJDWbUK1kGSE7VMTz+KB/le 0oS6EtL2QGRPrsH6wXzV4fkzq2HSjGj+iysS/28zBp3I3r9yVm0VWU5Hk5HyMM/8 JYLOuMnFLt2oSTPIBL4CC5Fw3+ZwBuridLdB5wLP5PbD8d36QhGMXDLYETEnHvmf K8FFWwR4ockNVGFlVKcvuGGh/zr+q7txJ+khv3AS/nk1xAZtn/rS98eOCuRrOS++ rhZrv5G1A/nGWXFAethIbnIIx8WX0APW9JJfjndA5bCiFQbzxu0rSyKZx0w55kQf 3AatVylPUJVUfFHZl0eDrdYXTy3kH93S -----END CERTIFICATE-----Generated at Mon Apr 28 17:46:03 2025 by rpki-client on console.sobornost.net