$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.mft File: 1gwwsan1nJWa1JZ_L21XKst1KZw.mft (raw, json) Hash identifier: qhovmzmasGBabVOmg5CaRMM+qibuqFZ0BhZsUHuGUy4= Subject key identifier: 32:F7:3B:92:3C:A5:E2:DB:34:91:83:B7:4E:22:80:8A:87:C7:82:2B Authority key identifier: D6:0C:30:B1:A9:F5:9C:95:9A:D4:96:7F:2F:6D:57:2A:CB:75:29:9C Certificate issuer: /CN=A91E5EEA/serialNumber=D60C30B1A9F59C959AD4967F2F6D572ACB75299C Certificate serial: 3A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1gwwsan1nJWa1JZ_L21XKst1KZw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.mft Manifest number: 37 Signing time: Sun 27 Apr 2025 06:25:53 +0000 Manifest this update: Sun 27 Apr 2025 06:25:53 +0000 Manifest next update: Sun 04 May 2025 06:25:53 +0000 Files and hashes: 1: 1gwwsan1nJWa1JZ_L21XKst1KZw.crl (hash: Et11FHfoLSBXkX/dCyOpnms+4MhGacwzh8Dt1kVgiRM=) 2: 2B6A4C480CDC11F0BAA65183C4F9AE02.roa (hash: BqSp/Te9KMd8YfouUPeFKU/cx03YQIHgdt5+594sWOw=) 3: A8495504D4D011EFB6100F2DC4F9AE02.roa (hash: Md7FVpdf2MqwxZW9/DFpDf2r/UivUhUhenoGocEe9lg=) 4: A7C0D96E0CDD11F0A8463D28C4F9AE02.roa (hash: QHLRTEx6Qgh4+lTDIbuuL3PGb+4V0jC1oeBCPhaLkPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.crl rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1gwwsan1nJWa1JZ_L21XKst1KZw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5EEA, serialNumber=D60C30B1A9F59C959AD4967F2F6D572ACB75299C Validity Not Before: Apr 27 06:25:53 2025 GMT Not After : May 4 06:25:53 2025 GMT Subject: CN=680dcdf1-d20f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e7:d2:11:36:a5:63:65:61:1a:2e:12:d9:32: 5f:90:84:d2:03:72:f9:60:80:a3:65:df:e2:89:7a: 1a:a0:8a:1b:c6:ac:25:2f:2e:35:2d:01:20:91:74: 61:a1:65:1c:d7:2d:fb:ba:73:78:78:26:42:06:3b: 62:91:11:24:75:fd:b1:55:58:12:fd:17:4e:57:bf: 11:c3:93:92:12:1a:84:d0:1f:4c:82:ed:a2:a1:36: 31:e8:eb:99:3b:cd:5d:30:3b:37:2b:99:6e:ba:de: 14:65:b2:19:45:2d:3b:5f:23:00:e0:63:a3:a1:67: 5a:61:9d:39:fa:df:35:d1:37:22:05:d8:ef:d1:8d: 12:aa:44:66:3d:8e:e0:b0:8a:2a:61:36:6a:4c:4d: ed:8a:5f:72:9d:76:0a:38:0c:a6:69:15:91:26:4f: 20:53:ac:75:6a:5f:fe:c9:97:0c:64:bd:73:59:1f: fe:2c:f9:df:2c:15:6f:37:2a:01:46:56:4c:36:fb: 06:c0:80:53:e2:b9:07:39:3c:e4:e0:c4:66:d2:e2: 1a:87:32:83:9f:05:83:20:26:6d:f5:52:4e:04:49: 60:e0:9d:05:aa:38:85:3d:c1:b9:f1:4c:62:ca:0f: e9:22:e5:67:f9:62:52:a7:db:7a:94:5a:19:72:13: db:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:F7:3B:92:3C:A5:E2:DB:34:91:83:B7:4E:22:80:8A:87:C7:82:2B X509v3 Authority Key Identifier: keyid:D6:0C:30:B1:A9:F5:9C:95:9A:D4:96:7F:2F:6D:57:2A:CB:75:29:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1gwwsan1nJWa1JZ_L21XKst1KZw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:cf:aa:06:b2:02:f3:0b:64:8b:11:3a:de:34:1a:96:38:27: 76:42:bd:75:34:e4:b5:d8:65:b2:58:c9:96:15:c1:d4:a7:34: 00:53:c4:17:fa:33:e3:3a:b6:eb:85:ff:66:df:25:a5:44:28: a1:2c:85:e9:aa:6e:77:66:42:bc:42:db:e9:0a:83:24:ec:f9: b9:48:75:e1:f6:bc:f2:10:8e:94:e5:32:f7:e3:da:6d:1a:c3: 26:77:d7:00:85:ee:05:73:eb:69:b9:f1:40:58:e3:ed:7a:54: 69:36:17:fc:cb:49:ff:b5:d7:8a:8f:de:8d:3a:3a:9c:6f:23: 03:51:24:e8:f0:46:8d:cd:57:e6:bb:b3:5a:7b:6e:7d:5f:97: 73:c9:89:01:e2:1d:9b:ed:b3:df:84:b7:ac:16:8b:4b:bf:f7: 72:52:cf:5b:08:33:20:1c:b3:03:ec:16:0f:fc:84:48:4a:03: b3:7a:56:75:f9:fe:b3:8f:db:04:8e:5e:b0:f7:21:b1:c9:5e: 5f:82:24:f8:fa:8b:fa:90:2e:ac:12:7a:fb:0a:a1:14:e2:cc: ea:51:dc:e4:32:1d:9a:b7:a5:e8:d2:f7:1d:6b:62:96:1b:ef: 28:15:57:24:51:39:00:91:69:7f:04:f1:52:88:73:2f:dd:ab: d8:32:10:d3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NUVFQTExMC8GA1UEBRMoRDYwQzMwQjFBOUY1OUM5NTlBRDQ5NjdGMkY2RDU3MkFD Qjc1Mjk5QzAeFw0yNTA0MjcwNjI1NTNaFw0yNTA1MDQwNjI1NTNaMBgxFjAUBgNV BAMTDTY4MGRjZGYxLWQyMGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC059IRNqVjZWEaLhLZMl+QhNIDcvlggKNl3+KJehqgihvGrCUvLjUtASCRdGGh ZRzXLfu6c3h4JkIGO2KRESR1/bFVWBL9F05XvxHDk5ISGoTQH0yC7aKhNjHo65k7 zV0wOzcrmW663hRlshlFLTtfIwDgY6OhZ1phnTn63zXRNyIF2O/RjRKqRGY9juCw iiphNmpMTe2KX3Kddgo4DKZpFZEmTyBTrHVqX/7JlwxkvXNZH/4s+d8sFW83KgFG Vkw2+wbAgFPiuQc5POTgxGbS4hqHMoOfBYMgJm31Uk4ESWDgnQWqOIU9wbnxTGLK D+ki5Wf5YlKn23qUWhlyE9tvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMvc7kjyl 4ts0kYO3TiKAiofHgiswHwYDVR0jBBgwFoAU1gwwsan1nJWa1JZ/L21XKst1KZww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1RUVBL0UzRkNEMTQ0RDRD RjExRUY5OERGOTgyQkM0RjlBRTAyLzFnd3dzYW4xbkpXYTFKWl9MMjFYS3N0MUta dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMWd3d3NhbjFuSldhMUpaX0wyMVhLc3QxS1p3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1 RUVBL0UzRkNEMTQ0RDRDRjExRUY5OERGOTgyQkM0RjlBRTAyLzFnd3dzYW4xbkpX YTFKWl9MMjFYS3N0MUtady5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALDPqgayAvMLZIsROt40GpY4J3ZCvXU05LXYZbJYyZYVwdSnNABTxBf6 M+M6tuuF/2bfJaVEKKEshemqbndmQrxC2+kKgyTs+blIdeH2vPIQjpTlMvfj2m0a wyZ31wCF7gVz62m58UBY4+16VGk2F/zLSf+114qP3o06OpxvIwNRJOjwRo3NV+a7 s1p7bn1fl3PJiQHiHZvts9+Et6wWi0u/93JSz1sIMyAcswPsFg/8hEhKA7N6VnX5 /rOP2wSOXrD3IbHJXl+CJPj6i/qQLqwSevsKoRTizOpR3OQyHZq3pejS9x1rYpYb 7ygVVyRROQCRaX8E8VKIcy/dq9gyENM= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:58 2025 by rpki-client on console.sobornost.net