$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.mft File: gR3hHn7cHBB2BVnus5v9Ztaa6kY.mft (raw, json) Hash identifier: l6M2Q60apFe++q9Ca2yYK0beyt2NgZ60I5fGJw/ZBPk= Subject key identifier: A8:D3:6B:64:30:5A:4F:9F:58:62:49:B4:98:49:F4:55:10:63:52:BE Authority key identifier: 81:1D:E1:1E:7E:DC:1C:10:76:05:59:EE:B3:9B:FD:66:D6:9A:EA:46 Certificate issuer: /CN=A91E6BEF/serialNumber=811DE11E7EDC1C10760559EEB39BFD66D69AEA46 Certificate serial: 0D87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gR3hHn7cHBB2BVnus5v9Ztaa6kY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.mft Manifest number: 0D7E Signing time: Mon 28 Apr 2025 18:10:16 +0000 Manifest this update: Mon 28 Apr 2025 18:10:16 +0000 Manifest next update: Mon 05 May 2025 18:10:16 +0000 Files and hashes: 1: gR3hHn7cHBB2BVnus5v9Ztaa6kY.crl (hash: lpzfopQZXNyWMaNZGGSMzutbWSd1EgI59nzCHO3n1cI=) 2: FEBD6C62C4B511E9B7D53A7FC4F9AE02.roa (hash: UdehkLAzVXoFe5wUis48zru/UMqEMsZcDt54OS7NI9c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.crl rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gR3hHn7cHBB2BVnus5v9Ztaa6kY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 18:10:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3463 (0xd87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6BEF, serialNumber=811DE11E7EDC1C10760559EEB39BFD66D69AEA46 Validity Not Before: Apr 28 18:10:16 2025 GMT Not After : May 5 18:10:16 2025 GMT Subject: CN=680fc488-128f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f5:4c:af:f1:84:ec:01:8f:c0:5b:f8:d9:ae: 19:43:f0:93:be:fe:e8:cb:05:72:20:b6:01:3c:1a: ba:b5:b8:a5:fa:c0:7d:5f:db:6d:2c:2e:3c:bc:a8: a9:03:7f:2c:58:cd:2a:4c:07:92:40:82:bb:a8:fb: 15:c3:ab:7b:f3:97:3e:71:c1:6d:08:95:df:a0:7f: 31:07:d7:2b:51:5d:e5:5e:fe:5c:bd:c6:e4:8a:61: 13:91:7f:c7:0a:b1:c8:56:a1:f3:4c:db:33:51:81: 0b:ce:2a:4d:2d:d0:8d:03:f7:0d:0d:88:59:c0:20: ed:39:ed:df:c0:90:fc:95:2e:7d:b3:aa:5e:76:d0: f6:fd:9e:46:0c:d4:f4:97:03:9b:23:59:3b:d7:d5: 1b:df:00:d3:45:6c:1d:6c:b8:89:27:4d:2a:9e:7d: 65:e2:54:43:4c:4a:01:01:a4:fd:b2:1a:83:98:1d: ec:79:c2:8b:72:87:ce:7a:1c:e2:54:da:58:a4:18: 1a:7c:c2:3e:ed:3b:17:b0:e6:51:7b:3f:bb:4e:97: 34:cd:f6:bd:cc:0a:de:6f:c4:f3:98:0f:fc:39:e9: 41:0c:6e:09:86:c5:38:0a:fb:50:59:dd:5a:7d:b1: 59:0e:e2:52:42:ed:c8:90:d2:11:41:32:b9:f1:9a: 8c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:D3:6B:64:30:5A:4F:9F:58:62:49:B4:98:49:F4:55:10:63:52:BE X509v3 Authority Key Identifier: keyid:81:1D:E1:1E:7E:DC:1C:10:76:05:59:EE:B3:9B:FD:66:D6:9A:EA:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gR3hHn7cHBB2BVnus5v9Ztaa6kY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:25:44:a1:f4:16:ab:8e:1f:6c:81:f8:c4:21:99:6b:3c:7e: af:7a:91:69:6b:5d:85:de:97:dd:e7:91:65:51:a9:66:11:7e: f2:b4:41:17:67:6b:c8:2a:41:26:a1:c2:90:8c:1e:08:51:8d: 73:63:ff:69:13:a4:80:d4:20:80:03:07:d0:60:fe:7d:0b:4d: f6:e5:24:6b:97:f2:5e:28:84:88:39:94:7b:32:aa:ac:35:b5: 1b:42:26:00:b7:50:77:cd:49:2e:a1:83:19:08:0c:8e:19:38: 29:1f:62:0f:7a:be:45:55:d2:6c:9c:d6:a0:6c:f4:01:56:3f: af:7a:c0:b9:11:be:f2:c1:64:81:b4:58:71:f5:75:6c:ab:4b: e2:fe:c3:d9:c9:c0:95:d7:33:76:05:e4:e1:05:12:4a:bc:8c: ef:14:4f:cf:75:71:7c:2e:a7:13:45:a9:02:b1:fd:13:ed:34: 18:c5:44:3a:f0:1b:b4:30:d1:e2:b8:8c:a2:1d:35:7a:db:fe: 1b:b4:f3:ea:19:e1:34:d0:d3:a8:e8:e2:47:2c:ea:15:c7:97: 7d:73:91:0c:a5:36:ac:ca:9d:37:9f:70:e5:0e:a3:a3:0e:a8: 0c:00:8c:54:20:0b:fc:0f:a6:c4:8f:34:26:48:9a:cf:8a:cb: c6:44:f2:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZCRUYxMTAvBgNVBAUTKDgxMURFMTFFN0VEQzFDMTA3NjA1NTlFRUIzOUJGRDY2 RDY5QUVBNDYwHhcNMjUwNDI4MTgxMDE2WhcNMjUwNTA1MTgxMDE2WjAYMRYwFAYD VQQDEw02ODBmYzQ4OC0xMjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtPVMr/GE7AGPwFv42a4ZQ/CTvv7oywVyILYBPBq6tbil+sB9X9ttLC48vKip A38sWM0qTAeSQIK7qPsVw6t785c+ccFtCJXfoH8xB9crUV3lXv5cvcbkimETkX/H CrHIVqHzTNszUYELzipNLdCNA/cNDYhZwCDtOe3fwJD8lS59s6pedtD2/Z5GDNT0 lwObI1k719Ub3wDTRWwdbLiJJ00qnn1l4lRDTEoBAaT9shqDmB3secKLcofOehzi VNpYpBgafMI+7TsXsOZRez+7Tpc0zfa9zAreb8TzmA/8OelBDG4JhsU4CvtQWd1a fbFZDuJSQu3IkNIRQTK58ZqMBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKjTa2Qw Wk+fWGJJtJhJ9FUQY1K+MB8GA1UdIwQYMBaAFIEd4R5+3BwQdgVZ7rOb/WbWmupG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkJFRi80RUE4NjZDNEM0 NDIxMUU5OTQ3N0UyMUZDNEY5QUUwMi9nUjNoSG43Y0hCQjJCVm51czV2OVp0YWE2 a1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dSM2hIbjdjSEJCMkJWbnVzNXY5WnRhYTZrWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkJFRi80RUE4NjZDNEM0NDIxMUU5OTQ3N0UyMUZDNEY5QUUwMi9nUjNoSG43Y0hC QjJCVm51czV2OVp0YWE2a1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvJUSh9Barjh9sgfjEIZlrPH6vepFpa12F3pfd55FlUalmEX7ytEEX Z2vIKkEmocKQjB4IUY1zY/9pE6SA1CCAAwfQYP59C0325SRrl/JeKISIOZR7Mqqs NbUbQiYAt1B3zUkuoYMZCAyOGTgpH2IPer5FVdJsnNagbPQBVj+vesC5Eb7ywWSB tFhx9XVsq0vi/sPZycCV1zN2BeThBRJKvIzvFE/PdXF8LqcTRakCsf0T7TQYxUQ6 8Bu0MNHiuIyiHTV62/4btPPqGeE00NOo6OJHLOoVx5d9c5EMpTasyp03n3DlDqOj DqgMAIxUIAv8D6bEjzQmSJrPisvGRPJD -----END CERTIFICATE-----Generated at Mon Apr 28 20:11:13 2025 by rpki-client on console.sobornost.net