$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C52/B46CD77E91B911EB9C5B4618C4F9AE02/iruZJsMSoUFJxSMLpV-oz1uJquE.mft File: iruZJsMSoUFJxSMLpV-oz1uJquE.mft (raw, json) Hash identifier: HGtzNaVF+nlXrGtCUyCrYUEFPLUKB4TdpP+YIb1hA/c= Subject key identifier: BC:84:6E:AE:F2:87:E2:8F:3B:ED:82:64:63:50:B5:B7:6F:01:23:56 Authority key identifier: 8A:BB:99:26:C3:12:A1:41:49:C5:23:0B:A5:5F:A8:CF:5B:89:AA:E1 Certificate issuer: /CN=A91E8C52/serialNumber=8ABB9926C312A14149C5230BA55FA8CF5B89AAE1 Certificate serial: 0633 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iruZJsMSoUFJxSMLpV-oz1uJquE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8C52/B46CD77E91B911EB9C5B4618C4F9AE02/iruZJsMSoUFJxSMLpV-oz1uJquE.mft Manifest number: 062D Signing time: Sat 26 Apr 2025 22:22:09 +0000 Manifest this update: Sat 26 Apr 2025 22:22:08 +0000 Manifest next update: Sat 03 May 2025 22:22:08 +0000 Files and hashes: 1: iruZJsMSoUFJxSMLpV-oz1uJquE.crl (hash: VXvgNFIlAh6qDTgnpgDyTnGFMiXTJfwcy5j7vI2xq/0=) 2: 09C9D20691BC11EB8C38801CC4F9AE02.roa (hash: WLK6J5FK1cyYi8od3TiV/xRyzkXSS7BDCS8cGAhSdLw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8C52/B46CD77E91B911EB9C5B4618C4F9AE02/iruZJsMSoUFJxSMLpV-oz1uJquE.crl rsync://rpki.apnic.net/member_repository/A91E8C52/B46CD77E91B911EB9C5B4618C4F9AE02/iruZJsMSoUFJxSMLpV-oz1uJquE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iruZJsMSoUFJxSMLpV-oz1uJquE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 22:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1587 (0x633) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8C52, serialNumber=8ABB9926C312A14149C5230BA55FA8CF5B89AAE1 Validity Not Before: Apr 26 22:22:08 2025 GMT Not After : May 3 22:22:08 2025 GMT Subject: CN=680d5c91-0c47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:72:d7:df:69:18:19:5f:5a:e7:5f:96:aa:bb: 31:e8:5e:fa:2c:9f:4a:d6:ea:c5:8c:18:42:0b:6a: ef:9f:3a:62:6c:6e:3d:d6:a6:fe:ec:91:a8:d7:96: ca:f8:a2:cf:5e:57:76:91:90:cc:da:59:f2:2d:e4: 92:59:d5:3e:46:d0:a2:f9:f0:ac:53:23:ec:91:64: ec:97:4e:79:44:75:7b:ae:11:39:09:aa:79:ad:d8: ba:f3:38:ca:cf:1e:e3:0a:35:4c:90:65:b1:21:a9: 0c:de:af:ba:6c:bf:f9:d8:19:95:38:8e:79:b8:44: ee:0e:94:18:99:25:7b:47:ad:c4:2e:c3:85:7a:1b: 64:eb:b7:ba:5c:38:87:f2:7c:c1:97:f9:58:31:3a: ba:e0:cb:fe:82:ef:5e:00:18:9c:8b:b3:9a:f1:16: e2:33:b1:18:bc:2b:d8:d2:2b:9e:aa:a4:0a:1a:70: 86:84:28:1e:fa:9f:5c:51:6b:e9:07:fe:1d:95:f5: af:bc:93:bd:e8:61:3e:04:fd:a1:d6:fd:f6:b2:15: 33:91:e4:81:9e:3b:5d:d8:9c:44:9b:9e:4c:95:0f: 4f:40:2c:29:e2:5e:32:9f:58:11:10:13:d7:19:6b: f4:27:56:67:c2:65:ff:cb:a6:1a:be:bf:3d:31:19: 67:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:84:6E:AE:F2:87:E2:8F:3B:ED:82:64:63:50:B5:B7:6F:01:23:56 X509v3 Authority Key Identifier: keyid:8A:BB:99:26:C3:12:A1:41:49:C5:23:0B:A5:5F:A8:CF:5B:89:AA:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8C52/B46CD77E91B911EB9C5B4618C4F9AE02/iruZJsMSoUFJxSMLpV-oz1uJquE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iruZJsMSoUFJxSMLpV-oz1uJquE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C52/B46CD77E91B911EB9C5B4618C4F9AE02/iruZJsMSoUFJxSMLpV-oz1uJquE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:08:9e:c0:a1:92:22:3f:71:5f:cc:9f:43:ff:a3:da:47:71: c9:a4:1e:b9:f7:d3:51:a0:54:bf:92:d6:94:9e:8b:56:f8:64: b8:9f:42:9a:8a:dd:1c:eb:67:4e:0c:63:28:7a:d8:d9:f9:82: 79:b1:42:a2:d5:5c:3b:f3:3c:0c:46:e6:95:3d:2e:cb:54:54: 51:16:6b:ad:18:cc:1b:38:84:32:5e:07:88:5f:be:75:57:df: db:90:21:7a:ef:c5:ce:b3:67:35:ac:d1:07:75:69:bb:ce:90: d1:20:4a:5a:e4:d5:8c:4d:ee:20:18:f8:01:10:f8:f0:2e:a7: 9d:7f:ac:75:e7:8e:c3:8e:40:75:08:db:b4:4a:7e:d1:89:a0: 43:f9:f0:af:ad:f3:b8:ae:82:74:b3:84:57:de:64:c5:b1:99: 8f:32:0b:f3:90:1b:31:dd:08:19:7d:cc:6b:3d:d8:d6:2a:42: 72:e0:c7:46:26:eb:12:ee:8e:ed:f7:ae:ec:11:52:33:e7:e1: a8:e1:18:e3:8f:e0:82:6c:7b:87:45:3c:50:28:64:48:75:90: da:b8:26:cf:8d:3f:0b:0a:17:84:84:64:45:42:80:69:a8:c8: 78:5b:be:26:35:b4:1d:6a:5b:b3:0d:8f:c8:51:a3:7d:02:e6: 1e:62:d0:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThDNTIxMTAvBgNVBAUTKDhBQkI5OTI2QzMxMkExNDE0OUM1MjMwQkE1NUZBOENG NUI4OUFBRTEwHhcNMjUwNDI2MjIyMjA4WhcNMjUwNTAzMjIyMjA4WjAYMRYwFAYD VQQDEw02ODBkNWM5MS0wYzQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs3LX32kYGV9a51+Wqrsx6F76LJ9K1urFjBhCC2rvnzpibG491qb+7JGo15bK +KLPXld2kZDM2lnyLeSSWdU+RtCi+fCsUyPskWTsl055RHV7rhE5Cap5rdi68zjK zx7jCjVMkGWxIakM3q+6bL/52BmVOI55uETuDpQYmSV7R63ELsOFehtk67e6XDiH 8nzBl/lYMTq64Mv+gu9eABici7Oa8RbiM7EYvCvY0iueqqQKGnCGhCge+p9cUWvp B/4dlfWvvJO96GE+BP2h1v32shUzkeSBnjtd2JxEm55MlQ9PQCwp4l4yn1gREBPX GWv0J1ZnwmX/y6Yavr89MRlnzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLyEbq7y h+KPO+2CZGNQtbdvASNWMB8GA1UdIwQYMBaAFIq7mSbDEqFBScUjC6VfqM9biarh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEM1Mi9CNDZDRDc3RTkx QjkxMUVCOUM1QjQ2MThDNEY5QUUwMi9pcnVaSnNNU29VRkp4U01McFYtb3oxdUpx dUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lydVpKc01Tb1VGSnhTTUxwVi1vejF1SnF1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEM1Mi9CNDZDRDc3RTkxQjkxMUVCOUM1QjQ2MThDNEY5QUUwMi9pcnVaSnNNU29V Rkp4U01McFYtb3oxdUpxdUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNCJ7AoZIiP3FfzJ9D/6PaR3HJpB6599NRoFS/ktaUnotW+GS4n0Ka it0c62dODGMoetjZ+YJ5sUKi1Vw78zwMRuaVPS7LVFRRFmutGMwbOIQyXgeIX751 V9/bkCF678XOs2c1rNEHdWm7zpDRIEpa5NWMTe4gGPgBEPjwLqedf6x1547DjkB1 CNu0Sn7RiaBD+fCvrfO4roJ0s4RX3mTFsZmPMgvzkBsx3QgZfcxrPdjWKkJy4MdG JusS7o7t967sEVIz5+Go4Rjjj+CCbHuHRTxQKGRIdZDauCbPjT8LCheEhGRFQoBp qMh4W74mNbQdaluzDY/IUaN9AuYeYtD/ -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:16 2025 by rpki-client on console.sobornost.net