$ rpki-client -vvf rpki.apnic.net/member_repository/A91E520F/41CCBC6EA81911EFB9BDED71C4F9AE02/sb1NsCH1THJj88NTX4g2hJui5g4.mft File: sb1NsCH1THJj88NTX4g2hJui5g4.mft (raw, json) Hash identifier: qBeHiO9DPl2qUgHUj40ca7DT80HE1w9dJ+OJEyT7iDU= Subject key identifier: 1C:B2:56:24:5A:A6:68:10:63:59:BF:C1:FF:A3:F8:90:EB:63:95:26 Authority key identifier: B1:BD:4D:B0:21:F5:4C:72:63:F3:C3:53:5F:88:36:84:9B:A2:E6:0E Certificate issuer: /CN=A91E520F/serialNumber=B1BD4DB021F54C7263F3C3535F8836849BA2E60E Certificate serial: 53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sb1NsCH1THJj88NTX4g2hJui5g4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E520F/41CCBC6EA81911EFB9BDED71C4F9AE02/sb1NsCH1THJj88NTX4g2hJui5g4.mft Manifest number: 52 Signing time: Sun 27 Apr 2025 06:04:32 +0000 Manifest this update: Sun 27 Apr 2025 06:04:31 +0000 Manifest next update: Sun 04 May 2025 06:04:31 +0000 Files and hashes: 1: sb1NsCH1THJj88NTX4g2hJui5g4.crl (hash: GXVlmUnPoty1LMTQ4bbjz/5S5l2bGifF3c28FzhyNlg=) 2: A30B17FAA81911EF862F3A56C4F9AE02.roa (hash: 5t/9vRDX7bOXj/AudhNlmGxZtmB+Rx0Lf8bwk6wLjkQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E520F/41CCBC6EA81911EFB9BDED71C4F9AE02/sb1NsCH1THJj88NTX4g2hJui5g4.crl rsync://rpki.apnic.net/member_repository/A91E520F/41CCBC6EA81911EFB9BDED71C4F9AE02/sb1NsCH1THJj88NTX4g2hJui5g4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sb1NsCH1THJj88NTX4g2hJui5g4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E520F, serialNumber=B1BD4DB021F54C7263F3C3535F8836849BA2E60E Validity Not Before: Apr 27 06:04:31 2025 GMT Not After : May 4 06:04:31 2025 GMT Subject: CN=680dc8ef-170b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3a:83:a8:09:ba:1e:63:ee:b6:38:e9:91:61: 0a:c5:77:a2:e9:f3:f4:18:40:44:c6:43:c2:61:38: f8:17:a8:33:a2:1d:af:66:fc:96:75:c6:8d:b2:c1: da:6a:30:4c:88:95:ba:1d:a6:81:60:a6:0a:f0:82: 7e:77:38:39:19:75:87:4c:67:76:e7:b3:a2:20:72: c9:e6:3e:b9:27:51:ba:7d:00:69:37:f9:7e:24:c6: 2c:16:fc:c2:b4:2a:a4:16:d6:00:19:09:44:18:22: 55:a3:8e:14:73:b1:36:0b:d8:46:6b:67:2d:33:0a: 36:98:6f:52:e8:87:ff:0d:5a:76:fd:65:24:6f:c1: 97:3f:1a:f9:ca:05:34:1f:29:ef:b7:d3:2d:d4:63: d5:59:a1:63:9f:4a:aa:9b:18:25:8b:df:0c:8c:19: 81:3d:b6:b5:10:12:2c:35:ea:2a:e5:d0:2f:41:59: 9c:3f:64:4f:3c:64:5b:58:99:34:12:eb:c1:90:33: dd:52:1b:49:ef:1a:59:30:c6:47:ed:03:76:5d:4b: 3d:3b:20:c2:5a:99:11:c5:66:d7:49:b1:81:73:71: 2b:88:a3:a8:16:b1:04:db:9e:40:db:e2:f0:88:ce: 0b:0a:00:bc:ed:0f:c9:32:71:4f:ce:06:64:45:9d: 9b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:B2:56:24:5A:A6:68:10:63:59:BF:C1:FF:A3:F8:90:EB:63:95:26 X509v3 Authority Key Identifier: keyid:B1:BD:4D:B0:21:F5:4C:72:63:F3:C3:53:5F:88:36:84:9B:A2:E6:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E520F/41CCBC6EA81911EFB9BDED71C4F9AE02/sb1NsCH1THJj88NTX4g2hJui5g4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sb1NsCH1THJj88NTX4g2hJui5g4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E520F/41CCBC6EA81911EFB9BDED71C4F9AE02/sb1NsCH1THJj88NTX4g2hJui5g4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:4a:49:6b:8c:44:b4:f5:d3:68:34:e8:06:1d:b4:25:ff:82: 4e:ad:90:d1:0f:d6:8f:98:8f:aa:de:64:e1:36:1e:f6:5c:0c: a2:67:e0:cc:a0:04:40:83:30:e2:3c:84:42:6c:3b:91:3b:ed: 23:47:7b:a0:68:28:50:0b:2d:3e:1d:aa:1e:b5:ae:d7:06:13: 00:f0:4f:58:5a:b0:d1:2a:dd:20:c5:45:98:bc:e4:8d:0f:21: 96:67:3f:34:2d:75:12:a0:9c:aa:cd:77:c7:0e:59:de:d5:6d: e9:76:c5:98:7b:cc:cd:2c:dd:01:1a:96:40:bc:d9:c4:54:8b: 8e:3e:ba:39:0a:ef:32:96:19:97:7d:3f:ef:a8:4d:6d:b3:00: 4d:f0:87:59:d8:07:5e:e1:b4:af:9c:f0:28:39:f1:c6:7d:49: a9:e0:2c:1e:52:58:8c:45:1f:72:5c:01:6a:45:c8:0b:11:7d: 5c:fb:66:f3:a8:a2:60:56:53:99:97:17:22:ec:1e:2e:7c:a3: 7f:1c:15:4f:b6:36:3f:78:ef:88:09:21:df:d8:96:81:9c:8a: 1f:79:6a:bb:a4:2c:69:e8:49:fb:7c:ea:bd:5f:29:af:67:98: ca:39:8e:39:54:12:d0:9d:ff:17:05:f0:70:a8:bf:9c:8a:1d: d9:ae:9d:d8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NTIwRjExMC8GA1UEBRMoQjFCRDREQjAyMUY1NEM3MjYzRjNDMzUzNUY4ODM2ODQ5 QkEyRTYwRTAeFw0yNTA0MjcwNjA0MzFaFw0yNTA1MDQwNjA0MzFaMBgxFjAUBgNV BAMTDTY4MGRjOGVmLTE3MGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7OoOoCboeY+62OOmRYQrFd6Lp8/QYQETGQ8JhOPgXqDOiHa9m/JZ1xo2ywdpq MEyIlbodpoFgpgrwgn53ODkZdYdMZ3bns6IgcsnmPrknUbp9AGk3+X4kxiwW/MK0 KqQW1gAZCUQYIlWjjhRzsTYL2EZrZy0zCjaYb1Loh/8NWnb9ZSRvwZc/GvnKBTQf Ke+30y3UY9VZoWOfSqqbGCWL3wyMGYE9trUQEiw16irl0C9BWZw/ZE88ZFtYmTQS 68GQM91SG0nvGlkwxkftA3ZdSz07IMJamRHFZtdJsYFzcSuIo6gWsQTbnkDb4vCI zgsKALztD8kycU/OBmRFnZtjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHLJWJFqm aBBjWb/B/6P4kOtjlSYwHwYDVR0jBBgwFoAUsb1NsCH1THJj88NTX4g2hJui5g4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1MjBGLzQxQ0NCQzZFQTgx OTExRUZCOUJERUQ3MUM0RjlBRTAyL3NiMU5zQ0gxVEhKajg4TlRYNGcyaEp1aTVn NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc2IxTnNDSDFUSEpqODhOVFg0ZzJoSnVpNWc0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1 MjBGLzQxQ0NCQzZFQTgxOTExRUZCOUJERUQ3MUM0RjlBRTAyL3NiMU5zQ0gxVEhK ajg4TlRYNGcyaEp1aTVnNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIZKSWuMRLT102g06AYdtCX/gk6tkNEP1o+Yj6reZOE2HvZcDKJn4Myg BECDMOI8hEJsO5E77SNHe6BoKFALLT4dqh61rtcGEwDwT1hasNEq3SDFRZi85I0P IZZnPzQtdRKgnKrNd8cOWd7Vbel2xZh7zM0s3QEalkC82cRUi44+ujkK7zKWGZd9 P++oTW2zAE3wh1nYB17htK+c8Cg58cZ9SangLB5SWIxFH3JcAWpFyAsRfVz7ZvOo omBWU5mXFyLsHi58o38cFU+2Nj9474gJId/YloGcih95arukLGnoSft86r1fKa9n mMo5jjlUEtCd/xcF8HCov5yKHdmundg= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:57 2025 by rpki-client on console.sobornost.net