$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/b9CIejkD49bhe7nP2O8mknC6ywc.mft File: b9CIejkD49bhe7nP2O8mknC6ywc.mft (raw, json) Hash identifier: CVEuitnXxZ7VLh+eZyJeuyBlnNILjC3pgHIdGi+jJ4w= Subject key identifier: 5F:A5:44:10:1E:57:1D:E1:D9:E6:16:6E:38:4C:C3:24:BE:8B:4C:30 Authority key identifier: 6F:D0:88:7A:39:03:E3:D6:E1:7B:B9:CF:D8:EF:26:92:70:BA:CB:07 Certificate issuer: /CN=A91E8BE3/serialNumber=6FD0887A3903E3D6E17BB9CFD8EF269270BACB07 Certificate serial: 4E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b9CIejkD49bhe7nP2O8mknC6ywc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/b9CIejkD49bhe7nP2O8mknC6ywc.mft Manifest number: 49 Signing time: Fri 25 Apr 2025 06:26:24 +0000 Manifest this update: Fri 25 Apr 2025 06:26:24 +0000 Manifest next update: Fri 02 May 2025 06:26:24 +0000 Files and hashes: 1: b9CIejkD49bhe7nP2O8mknC6ywc.crl (hash: co+pzZr4r4h7a0j8JtbY8UicjSK7N19icaneTnviffU=) 2: 3139D35EBFA811EFA9B7DC2AC4F9AE02.roa (hash: gL/pv5Q4H259tRW/M/fWgTAynaK4mXLMVK09D4O3Mmw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/b9CIejkD49bhe7nP2O8mknC6ywc.crl rsync://rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/b9CIejkD49bhe7nP2O8mknC6ywc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b9CIejkD49bhe7nP2O8mknC6ywc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8BE3, serialNumber=6FD0887A3903E3D6E17BB9CFD8EF269270BACB07 Validity Not Before: Apr 25 06:26:24 2025 GMT Not After : May 2 06:26:24 2025 GMT Subject: CN=680b2b10-4526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:57:02:2f:40:04:92:a5:34:8d:79:f5:d6:fe: 43:4d:7e:96:72:0f:8b:cb:72:9e:d9:e5:d5:8e:18: 64:b7:3b:9a:ca:bb:09:e0:d2:4d:fd:0b:c4:e0:65: af:24:d1:cb:24:01:f1:0c:de:fa:7d:f0:77:2d:9d: 2a:2c:f0:29:59:86:51:fd:9c:9a:fc:40:82:40:cb: 08:09:56:31:6b:d9:2a:55:bd:3f:9f:50:3e:cb:e3: 67:3c:15:48:30:92:64:54:d0:ac:9a:4f:44:36:f3: 43:e2:cc:98:06:48:22:53:c1:ba:25:81:52:d4:ca: 05:53:d4:05:54:2e:26:93:68:67:bd:19:18:82:ae: 15:a9:8d:95:70:ee:a4:33:41:d0:7d:48:69:33:ff: 5a:38:74:3a:5b:68:f2:4a:d4:82:b7:1c:bc:90:f3: 42:8b:e7:82:c4:59:cc:4e:b6:a8:9c:24:72:82:26: 68:1b:91:61:a8:cb:eb:85:eb:4e:f2:a4:d5:13:9c: 17:33:a1:25:e5:f9:f5:04:08:0d:48:37:25:d6:cb: 1c:17:e2:01:11:e2:25:28:2e:ab:5c:e7:86:be:3b: 72:67:7b:20:06:8a:43:55:ab:21:e7:d2:40:bd:7c: f7:d7:a6:e0:ad:a5:24:f5:23:a3:b0:8e:3b:ff:fb: e1:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:A5:44:10:1E:57:1D:E1:D9:E6:16:6E:38:4C:C3:24:BE:8B:4C:30 X509v3 Authority Key Identifier: keyid:6F:D0:88:7A:39:03:E3:D6:E1:7B:B9:CF:D8:EF:26:92:70:BA:CB:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/b9CIejkD49bhe7nP2O8mknC6ywc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b9CIejkD49bhe7nP2O8mknC6ywc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/b9CIejkD49bhe7nP2O8mknC6ywc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:8a:6f:93:9a:ea:41:d6:5e:bf:45:62:c1:2e:dc:7d:94:cd: f7:8d:50:f5:92:da:80:0a:14:28:97:51:0e:5f:08:0e:a4:51: eb:59:44:9f:af:13:70:dd:3d:59:ed:52:b2:0d:69:99:2e:8e: aa:ff:15:e9:90:be:c9:86:07:cf:25:20:70:fb:d3:c6:d6:29: 81:f3:d0:0f:7f:53:9f:b5:a6:2b:c3:b6:ae:20:e3:a6:c5:b5: bf:67:42:77:a7:56:37:2d:f7:47:39:fd:ae:70:6f:c2:55:c8: ef:4f:d9:8c:79:82:c9:54:a1:ac:65:65:ce:6b:65:c8:b7:7f: 9f:59:b0:fd:d5:88:28:ca:4d:70:07:c5:db:3c:16:c8:2d:c5: 73:57:bb:d9:90:f8:2f:78:bb:20:ae:22:6c:d2:5e:8a:28:68: 47:f0:6e:fa:e3:ec:bb:cd:0d:ab:17:a3:be:4a:a6:f6:49:4f: b1:cf:50:d6:32:f7:2a:89:f0:a8:99:ab:90:bb:91:ab:41:de: b4:73:7a:4d:b1:c4:0c:a2:a4:92:87:2e:f1:f2:ac:89:5e:05: b3:d0:e4:5a:0c:cb:29:b2:5c:af:6d:29:c3:70:8c:90:15:ca: 5d:9f:b7:35:52:3e:1d:a2:fe:20:a7:b3:c1:f3:3b:e0:f2:ec: 1a:e3:dd:ba -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF OEJFMzExMC8GA1UEBRMoNkZEMDg4N0EzOTAzRTNENkUxN0JCOUNGRDhFRjI2OTI3 MEJBQ0IwNzAeFw0yNTA0MjUwNjI2MjRaFw0yNTA1MDIwNjI2MjRaMBgxFjAUBgNV BAMTDTY4MGIyYjEwLTQ1MjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQVwIvQASSpTSNefXW/kNNfpZyD4vLcp7Z5dWOGGS3O5rKuwng0k39C8TgZa8k 0cskAfEM3vp98HctnSos8ClZhlH9nJr8QIJAywgJVjFr2SpVvT+fUD7L42c8FUgw kmRU0KyaT0Q280PizJgGSCJTwbolgVLUygVT1AVULiaTaGe9GRiCrhWpjZVw7qQz QdB9SGkz/1o4dDpbaPJK1IK3HLyQ80KL54LEWcxOtqicJHKCJmgbkWGoy+uF607y pNUTnBczoSXl+fUECA1INyXWyxwX4gER4iUoLqtc54a+O3JneyAGikNVqyHn0kC9 fPfXpuCtpST1I6Owjjv/++GbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUX6VEEB5X HeHZ5hZuOEzDJL6LTDAwHwYDVR0jBBgwFoAUb9CIejkD49bhe7nP2O8mknC6ywcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4QkUzL0U2RTZCRTQ0QkY5 QzExRUY5REE4ODI4MkM0RjlBRTAyL2I5Q0llamtENDliaGU3blAyTzhta25DNnl3 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYjlDSWVqa0Q0OWJoZTduUDJPOG1rbkM2eXdjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4 QkUzL0U2RTZCRTQ0QkY5QzExRUY5REE4ODI4MkM0RjlBRTAyL2I5Q0llamtENDli aGU3blAyTzhta25DNnl3Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHeKb5Oa6kHWXr9FYsEu3H2UzfeNUPWS2oAKFCiXUQ5fCA6kUetZRJ+v E3DdPVntUrINaZkujqr/FemQvsmGB88lIHD708bWKYHz0A9/U5+1pivDtq4g46bF tb9nQnenVjct90c5/a5wb8JVyO9P2Yx5gslUoaxlZc5rZci3f59ZsP3ViCjKTXAH xds8FsgtxXNXu9mQ+C94uyCuImzSXoooaEfwbvrj7LvNDasXo75KpvZJT7HPUNYy 9yqJ8KiZq5C7katB3rRzek2xxAyipJKHLvHyrIleBbPQ5FoMyymyXK9tKcNwjJAV yl2ftzVSPh2i/iCns8HzO+Dy7Brj3bo= -----END CERTIFICATE-----Generated at Fri Apr 25 08:25:18 2025 by rpki-client on console.sobornost.net