$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.mft File: 7FY9v-LzmMjp-xn590IytrVKpuo.mft (raw, json) Hash identifier: +txuqr25qysnimhyCLWCrFVWaiptCI133w/UPQHvx+Y= Subject key identifier: DE:66:02:71:BA:6F:BA:A0:C1:5E:35:9F:5A:79:E6:56:C2:70:7C:4A Authority key identifier: EC:56:3D:BF:E2:F3:98:C8:E9:FB:19:F9:F7:42:32:B6:B5:4A:A6:EA Certificate issuer: /CN=A91E8632/serialNumber=EC563DBFE2F398C8E9FB19F9F74232B6B54AA6EA Certificate serial: 1AF3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FY9v-LzmMjp-xn590IytrVKpuo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.mft Manifest number: 1ACC Signing time: Tue 06 May 2025 16:22:18 +0000 Manifest this update: Tue 06 May 2025 16:22:18 +0000 Manifest next update: Tue 13 May 2025 16:22:18 +0000 Files and hashes: 1: 7FY9v-LzmMjp-xn590IytrVKpuo.crl (hash: wZbNNlJQ06vjZqr1A/I7Ee4JsloTrvnlN5U7EPxjMMk=) 2: DC3B90E4520011ECA6088714C4F9AE02.roa (hash: tVOP8LyZJ77JRBIkUucA79A27boRokWrzqFOTarPZXk=) 3: F8ED87B8FCE811EC9E4E3A4DC4F9AE02.roa (hash: HcXFJpDWZcmR/k4nnUkzVGlWv0kfSW5A6hP7Nj80qKs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.crl rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FY9v-LzmMjp-xn590IytrVKpuo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 16:22:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6899 (0x1af3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8632, serialNumber=EC563DBFE2F398C8E9FB19F9F74232B6B54AA6EA Validity Not Before: May 6 16:22:18 2025 GMT Not After : May 13 16:22:18 2025 GMT Subject: CN=681a373a-1851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:48:3b:bd:2e:32:95:48:e1:37:34:a0:62:e1: 89:87:85:a9:1c:e8:6d:01:16:d8:f6:e9:f2:ef:35: 6d:3d:0f:e7:56:be:43:9c:d6:4e:8c:a4:89:9d:ab: a3:f0:9b:cb:1f:0c:4d:e3:b9:76:a8:e9:02:d3:7a: 45:d1:69:4c:65:9d:e1:97:1a:d7:e7:82:4e:e1:f8: 6e:5f:68:c6:dc:02:61:cd:db:21:e6:ce:31:41:47: c7:10:e7:02:70:cc:65:84:0e:eb:a4:07:f9:34:94: 37:5e:39:a3:65:bc:43:45:5f:93:b2:00:0e:1f:82: 15:ac:86:09:4c:29:e3:66:5c:3d:3c:8b:49:a9:8a: 9b:c3:08:36:87:59:00:30:38:27:94:f2:c8:83:28: 13:ce:77:90:f9:0b:81:b7:f6:aa:c6:6a:48:0b:ee: be:92:22:82:b6:10:f6:1c:e2:c0:8d:b6:77:8f:dd: 7b:f1:97:75:98:08:29:3c:9a:b1:99:4a:94:90:93: c0:80:27:5a:87:d6:70:55:6e:8d:58:3d:5b:72:ef: 11:0c:c9:e5:aa:d6:a4:fc:6d:50:5e:10:89:bc:81: f0:85:87:cf:3f:eb:86:42:7b:97:3a:8c:15:c0:be: 34:90:bc:15:db:94:92:da:21:46:c0:d2:c4:fe:28: b4:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:66:02:71:BA:6F:BA:A0:C1:5E:35:9F:5A:79:E6:56:C2:70:7C:4A X509v3 Authority Key Identifier: keyid:EC:56:3D:BF:E2:F3:98:C8:E9:FB:19:F9:F7:42:32:B6:B5:4A:A6:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FY9v-LzmMjp-xn590IytrVKpuo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:bc:6a:06:e6:9f:2b:39:3e:07:a7:3e:4c:47:6a:53:45:7d: ec:dd:ef:c0:2a:cb:ae:70:88:a0:65:23:b7:30:5b:0f:f4:53: fc:44:d7:4f:72:dd:af:b5:af:f7:45:79:0d:03:2e:c5:4b:50: 0a:95:54:ce:bc:bd:59:99:fc:a0:90:b0:da:bd:39:60:42:1b: 90:42:c1:7a:6e:59:12:83:6b:81:83:e6:6b:2c:05:e8:19:92: a2:6c:cd:e2:71:55:fe:ec:14:d3:e3:10:b4:0e:63:13:a4:ef: 50:53:21:d4:a9:3c:1d:fb:c9:6d:f5:23:fc:23:70:02:48:27: 67:75:a8:53:a8:41:4e:52:ee:34:b2:a8:b5:2e:70:3b:d5:91: 92:ff:25:bb:4d:64:4f:af:b9:81:26:02:08:2e:5a:61:7f:b9: b3:f0:ff:34:4a:ec:6d:8b:50:d5:54:98:70:a9:ff:8c:f9:70: 8a:f3:6b:9c:01:aa:16:c0:e5:42:7b:9f:20:d0:3a:eb:25:67: 9d:70:77:fa:34:3a:21:2a:5a:07:12:68:c6:eb:9d:ed:60:f3: d6:77:7b:b8:c6:12:fb:0d:63:d6:e1:18:8d:9e:65:15:43:be: a1:cf:0d:df:67:92:4f:37:66:2c:fa:87:f2:23:9a:5c:d0:00: a3:24:2b:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGvMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg2MzIxMTAvBgNVBAUTKEVDNTYzREJGRTJGMzk4QzhFOUZCMTlGOUY3NDIzMkI2 QjU0QUE2RUEwHhcNMjUwNTA2MTYyMjE4WhcNMjUwNTEzMTYyMjE4WjAYMRYwFAYD VQQDEw02ODFhMzczYS0xODUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu0g7vS4ylUjhNzSgYuGJh4WpHOhtARbY9uny7zVtPQ/nVr5DnNZOjKSJnauj 8JvLHwxN47l2qOkC03pF0WlMZZ3hlxrX54JO4fhuX2jG3AJhzdsh5s4xQUfHEOcC cMxlhA7rpAf5NJQ3XjmjZbxDRV+TsgAOH4IVrIYJTCnjZlw9PItJqYqbwwg2h1kA MDgnlPLIgygTzneQ+QuBt/aqxmpIC+6+kiKCthD2HOLAjbZ3j9178Zd1mAgpPJqx mUqUkJPAgCdah9ZwVW6NWD1bcu8RDMnlqtak/G1QXhCJvIHwhYfPP+uGQnuXOowV wL40kLwV25SS2iFGwNLE/ii0EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN5mAnG6 b7qgwV41n1p55lbCcHxKMB8GA1UdIwQYMBaAFOxWPb/i85jI6fsZ+fdCMra1Sqbq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODYzMi8wNUNFNDRFQTJF NUUxMUU3QkFDODhCNjlDNEY5QUUwMi83Rlk5di1Mem1NanAteG41OTBJeXRyVktw dW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdGWTl2LUx6bU1qcC14bjU5MEl5dHJWS3B1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODYzMi8wNUNFNDRFQTJFNUUxMUU3QkFDODhCNjlDNEY5QUUwMi83Rlk5di1Mem1N anAteG41OTBJeXRyVktwdW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdvGoG5p8rOT4Hpz5MR2pTRX3s3e/AKsuucIigZSO3MFsP9FP8RNdP ct2vta/3RXkNAy7FS1AKlVTOvL1ZmfygkLDavTlgQhuQQsF6blkSg2uBg+ZrLAXo GZKibM3icVX+7BTT4xC0DmMTpO9QUyHUqTwd+8lt9SP8I3ACSCdndahTqEFOUu40 sqi1LnA71ZGS/yW7TWRPr7mBJgIILlphf7mz8P80Suxti1DVVJhwqf+M+XCK82uc AaoWwOVCe58g0DrrJWedcHf6NDohKloHEmjG653tYPPWd3u4xhL7DWPW4RiNnmUV Q76hzw3fZ5JPN2Ys+ofyI5pc0ACjJCvG -----END CERTIFICATE-----Generated at Tue May 6 20:07:50 2025 by rpki-client on console.sobornost.net