$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.mft File: xvdY7N3EybD3LwZcNa1UaXQycRs.mft (raw, json) Hash identifier: QShS690B9295ozTLrI7C8pMvepfcmcmdHLchR0XBwYg= Subject key identifier: CC:EE:4F:E3:D5:D7:3C:AA:63:E5:D2:C0:04:53:C0:33:7E:C8:7E:7F Authority key identifier: C6:F7:58:EC:DD:C4:C9:B0:F7:2F:06:5C:35:AD:54:69:74:32:71:1B Certificate issuer: /CN=A91E8DF5/serialNumber=C6F758ECDDC4C9B0F72F065C35AD54697432711B Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvdY7N3EybD3LwZcNa1UaXQycRs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.mft Manifest number: 1D Signing time: Sun 27 Apr 2025 06:42:12 +0000 Manifest this update: Sun 27 Apr 2025 06:42:11 +0000 Manifest next update: Sun 04 May 2025 06:42:11 +0000 Files and hashes: 1: xvdY7N3EybD3LwZcNa1UaXQycRs.crl (hash: 0qeSJmkPSOsoXaxC4ZDaozY1xJViB/eaNv+Ta7OkZ3c=) 2: 8F9B067EF96011EF89D9E37DC4F9AE02.roa (hash: 4xicYTfIpBlcbT4bo30LC6Nm4HBJiuCMbWamLoO1Mxw=) 3: 8F350932F96011EF89D9E37DC4F9AE02.roa (hash: QrMwRSBguV4orNsh3cQZbQ07gQlvv90Dwbi2fjX1Q5w=) 4: 8EB1E9BCF96011EF89D9E37DC4F9AE02.roa (hash: uACmOb3DyJDXLeU+cbuId37JJps39u5/fEOUHNceFpo=) 5: 8E321A2AF96011EF89D9E37DC4F9AE02.roa (hash: c/khpR0D5Q+6xT3VzBLeSnoQ2dSS6+k6yToKP9EsAdg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.crl rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvdY7N3EybD3LwZcNa1UaXQycRs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8DF5, serialNumber=C6F758ECDDC4C9B0F72F065C35AD54697432711B Validity Not Before: Apr 27 06:42:11 2025 GMT Not After : May 4 06:42:11 2025 GMT Subject: CN=680dd1c3-71be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:75:f3:fa:74:91:d7:5c:cc:aa:3e:cc:d5:ce: 1e:f4:7b:4f:64:84:40:99:44:2c:5a:0b:46:9c:e6: e3:ad:ad:4c:38:4b:70:e7:37:90:1b:5d:ef:69:68: 1f:58:56:6f:4a:57:0b:7d:74:ff:13:27:e8:7b:ea: 68:34:4a:a5:96:7b:61:ed:c3:87:e0:54:b5:ee:f2: 28:ab:9c:ed:1d:a3:26:b9:02:a9:1b:10:e0:d1:65: 47:1a:23:fa:3d:99:36:eb:91:5f:46:46:97:05:f7: 20:4e:fc:92:8a:63:ef:2a:b7:a0:45:05:57:f7:20: 8c:25:4c:45:44:1f:6f:d1:21:ad:e7:9a:fc:76:48: 07:cc:f9:b3:39:04:39:66:b3:31:b5:6b:13:82:9c: 5a:e3:b8:b1:0c:25:18:f7:a7:d1:29:34:ec:64:7c: 6d:20:4a:83:1d:68:6d:01:c7:bb:1a:4a:9c:22:bc: 90:2c:03:f2:fc:26:d1:5b:59:ba:18:ef:fa:ce:bd: 28:f7:44:17:61:c3:b5:ba:b0:e3:fa:d7:28:9c:b3: b6:23:8d:3c:c1:88:0c:9d:92:83:7c:b2:c4:a9:59: df:db:99:95:c6:c6:66:f8:e4:e8:02:eb:4b:a4:f0: 0a:a1:b3:ea:ef:c7:db:d0:b3:ef:a0:72:6b:f4:11: 3f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:EE:4F:E3:D5:D7:3C:AA:63:E5:D2:C0:04:53:C0:33:7E:C8:7E:7F X509v3 Authority Key Identifier: keyid:C6:F7:58:EC:DD:C4:C9:B0:F7:2F:06:5C:35:AD:54:69:74:32:71:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvdY7N3EybD3LwZcNa1UaXQycRs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:33:ee:a0:25:db:4a:ba:67:b9:73:68:63:b7:b3:cd:21:7d: 2a:62:1f:c8:b7:26:62:e8:0c:04:0c:99:cf:47:bc:73:d1:70: da:30:20:56:ba:b5:ea:6b:46:e4:c5:90:6a:3c:b5:2c:33:84: 24:fe:eb:e0:53:6a:7c:3e:5f:28:59:96:a9:c6:b3:50:14:ce: be:8d:f2:2a:ec:27:fb:d9:30:14:d8:57:15:bc:e2:4e:be:87: 6f:43:ae:a9:65:f4:b2:48:4a:6c:9e:15:88:c6:ee:c3:5d:2b: 9a:3f:7e:28:30:0d:8c:ef:d0:bc:12:e9:a0:65:d9:2a:cd:a0: b7:62:c0:76:55:53:54:3c:61:12:6d:3c:bc:56:03:c8:cf:42: f2:73:38:0f:68:d2:b3:d1:75:61:00:72:87:b2:f1:34:31:db: fa:6c:79:ed:8d:20:5c:64:fd:32:f5:f0:af:be:4f:8c:5c:38: db:7c:fe:be:84:26:bb:25:07:ff:ca:ea:54:fb:8d:35:48:bc: 21:5f:1d:06:5e:d4:84:dd:bd:9e:c2:ac:e2:d4:6f:d7:f1:83: 0c:54:74:7a:f3:4f:91:b3:d5:55:31:3b:9a:75:81:98:71:d8: 57:24:05:9f:68:ef:10:dd:d0:67:9e:64:31:ee:5c:8f:b3:69: c9:78:ab:16 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF OERGNTExMC8GA1UEBRMoQzZGNzU4RUNEREM0QzlCMEY3MkYwNjVDMzVBRDU0Njk3 NDMyNzExQjAeFw0yNTA0MjcwNjQyMTFaFw0yNTA1MDQwNjQyMTFaMBgxFjAUBgNV BAMTDTY4MGRkMWMzLTcxYmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6dfP6dJHXXMyqPszVzh70e09khECZRCxaC0ac5uOtrUw4S3DnN5AbXe9paB9Y Vm9KVwt9dP8TJ+h76mg0SqWWe2Htw4fgVLXu8iirnO0doya5AqkbEODRZUcaI/o9 mTbrkV9GRpcF9yBO/JKKY+8qt6BFBVf3IIwlTEVEH2/RIa3nmvx2SAfM+bM5BDlm szG1axOCnFrjuLEMJRj3p9EpNOxkfG0gSoMdaG0Bx7saSpwivJAsA/L8JtFbWboY 7/rOvSj3RBdhw7W6sOP61yics7YjjTzBiAydkoN8ssSpWd/bmZXGxmb45OgC60uk 8Aqhs+rvx9vQs++gcmv0ET+tAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzO5P49XX PKpj5dLABFPAM37Ifn8wHwYDVR0jBBgwFoAUxvdY7N3EybD3LwZcNa1UaXQycRsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4REY1LzMxRTBGMTZBRjk2 MDExRUY5RDY3OUM3QUM0RjlBRTAyL3h2ZFk3TjNFeWJEM0x3WmNOYTFVYVhReWNS cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveHZkWTdOM0V5YkQzTHdaY05hMVVhWFF5Y1JzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4 REY1LzMxRTBGMTZBRjk2MDExRUY5RDY3OUM3QUM0RjlBRTAyL3h2ZFk3TjNFeWJE M0x3WmNOYTFVYVhReWNScy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANAz7qAl20q6Z7lzaGO3s80hfSpiH8i3JmLoDAQMmc9HvHPRcNowIFa6 teprRuTFkGo8tSwzhCT+6+BTanw+XyhZlqnGs1AUzr6N8irsJ/vZMBTYVxW84k6+ h29Drqll9LJISmyeFYjG7sNdK5o/figwDYzv0LwS6aBl2SrNoLdiwHZVU1Q8YRJt PLxWA8jPQvJzOA9o0rPRdWEAcoey8TQx2/psee2NIFxk/TL18K++T4xcONt8/r6E JrslB//K6lT7jTVIvCFfHQZe1ITdvZ7CrOLUb9fxgwxUdHrzT5Gz1VUxO5p1gZhx 2FckBZ9o7xDd0GeeZDHuXI+zacl4qxY= -----END CERTIFICATE-----Generated at Sun Apr 27 10:27:19 2025 by rpki-client on console.sobornost.net