$ rpki-client -vvf rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.mft File: Grie9bKOyC1q4hD8Kb3opxdWsbA.mft (raw, json) Hash identifier: GuixhpeMvcssV7YnaCNV/3WoD40Ef1H4YhUXwA8hDU0= Subject key identifier: 80:0B:85:95:E5:D1:23:40:28:D7:40:EA:7A:DA:E4:16:E7:BD:50:2F Authority key identifier: 1A:B8:9E:F5:B2:8E:C8:2D:6A:E2:10:FC:29:BD:E8:A7:17:56:B1:B0 Certificate issuer: /CN=A91E90DD/serialNumber=1AB89EF5B28EC82D6AE210FC29BDE8A71756B1B0 Certificate serial: 0455 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Grie9bKOyC1q4hD8Kb3opxdWsbA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.mft Manifest number: 0451 Signing time: Sat 26 Apr 2025 23:50:57 +0000 Manifest this update: Sat 26 Apr 2025 23:50:57 +0000 Manifest next update: Sat 03 May 2025 23:50:57 +0000 Files and hashes: 1: Grie9bKOyC1q4hD8Kb3opxdWsbA.crl (hash: HaxSH6kQULqwAozFbdUpv6N6kvML3mY2532m3n9GeI0=) 2: 7112985C4DE711EC92010E61C4F9AE02.roa (hash: +fO5Boo5Ka6tNlBReSpJLtITheTtisuQT78+GLLRRv8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.crl rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Grie9bKOyC1q4hD8Kb3opxdWsbA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 23:50:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1109 (0x455) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E90DD, serialNumber=1AB89EF5B28EC82D6AE210FC29BDE8A71756B1B0 Validity Not Before: Apr 26 23:50:57 2025 GMT Not After : May 3 23:50:57 2025 GMT Subject: CN=680d7161-ce4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:77:04:25:d9:4b:45:85:67:d1:75:81:d8:fa: b6:9b:d8:b7:7d:25:70:7a:de:8e:d2:67:ee:8b:05: dd:27:08:41:32:6e:65:51:81:0a:a2:6b:17:27:d8: 61:1b:be:19:f0:91:64:46:ff:a9:84:81:dc:54:ff: 8d:0c:f1:40:1b:d4:72:4d:37:59:13:53:87:75:cc: 79:a4:da:b8:5c:bb:42:5b:ec:cc:bb:b7:3d:64:c0: 12:1b:63:1c:a8:df:c7:d4:a4:16:98:7e:d3:97:2f: 3d:6a:f0:5e:80:a6:d2:fc:bd:d3:51:9b:22:c7:1e: a6:51:a3:b0:36:c5:ca:9d:f7:73:92:ac:b7:be:10: c9:21:c2:f7:27:b2:23:4c:0a:e7:08:fe:70:7e:87: c1:91:b2:cc:f9:0e:64:53:59:5c:00:dd:de:40:0c: 56:ca:53:f9:66:03:4a:75:0b:e5:cc:19:b0:8b:31: 40:2d:fe:2e:04:a8:ad:df:22:45:c0:a9:05:ff:88: 15:c9:fb:75:4d:ac:8f:a4:d5:55:c5:e4:b7:a0:0f: 7f:e5:f0:ae:aa:0c:b6:bf:1f:59:3f:48:e3:a1:e9: c3:94:84:ff:de:60:a5:16:bd:2f:81:3c:cc:3d:06: bc:22:7f:42:57:2c:54:8f:59:8d:56:27:fd:38:a0: fd:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:0B:85:95:E5:D1:23:40:28:D7:40:EA:7A:DA:E4:16:E7:BD:50:2F X509v3 Authority Key Identifier: keyid:1A:B8:9E:F5:B2:8E:C8:2D:6A:E2:10:FC:29:BD:E8:A7:17:56:B1:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Grie9bKOyC1q4hD8Kb3opxdWsbA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:39:d6:4b:9d:9b:37:20:2e:e6:fe:fd:24:8c:45:47:fb:da: a5:1b:e5:af:d8:4f:89:ca:3e:c9:3d:8d:41:0b:56:4e:80:72: 97:01:a8:fb:c4:c6:b9:c6:b7:60:da:c4:c8:04:f3:87:fc:da: 8b:b8:9b:81:ef:aa:c6:34:5f:c2:88:15:1a:a3:30:44:71:e0: 90:79:f1:b0:45:6a:55:f3:5e:d2:7c:b3:c9:f9:29:12:4c:3f: 47:b8:14:e3:63:26:08:09:20:dd:71:fc:91:e8:dd:81:8e:35: b6:18:37:99:39:68:68:2c:d2:2a:d5:03:47:60:5c:bf:02:aa: e7:4e:fe:f4:68:7c:14:ab:5e:06:4a:f4:6d:f9:a7:d6:e9:7a: 97:3e:8d:5d:ca:41:52:03:49:67:3c:38:70:80:f6:1c:db:d1: 1a:a2:df:95:e9:0e:64:c2:5a:39:cf:4e:a0:89:15:d3:ec:a3: da:fd:ec:6c:b3:97:17:fd:09:20:2a:18:27:be:7f:26:73:30: 61:37:4d:af:d6:b6:5b:3e:d7:9b:a1:87:4d:af:43:59:bc:c8: d2:58:2a:59:eb:2c:51:ef:0f:c8:15:3c:24:e1:06:b8:9d:0e: b4:30:be:bf:12:83:d9:b6:32:90:e8:1a:ce:f8:79:e8:6a:b1: 31:89:d0:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkwREQxMTAvBgNVBAUTKDFBQjg5RUY1QjI4RUM4MkQ2QUUyMTBGQzI5QkRFOEE3 MTc1NkIxQjAwHhcNMjUwNDI2MjM1MDU3WhcNMjUwNTAzMjM1MDU3WjAYMRYwFAYD VQQDEw02ODBkNzE2MS1jZTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzXcEJdlLRYVn0XWB2Pq2m9i3fSVwet6O0mfuiwXdJwhBMm5lUYEKomsXJ9hh G74Z8JFkRv+phIHcVP+NDPFAG9RyTTdZE1OHdcx5pNq4XLtCW+zMu7c9ZMASG2Mc qN/H1KQWmH7Tly89avBegKbS/L3TUZsixx6mUaOwNsXKnfdzkqy3vhDJIcL3J7Ij TArnCP5wfofBkbLM+Q5kU1lcAN3eQAxWylP5ZgNKdQvlzBmwizFALf4uBKit3yJF wKkF/4gVyft1TayPpNVVxeS3oA9/5fCuqgy2vx9ZP0jjoenDlIT/3mClFr0vgTzM PQa8In9CVyxUj1mNVif9OKD93QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIALhZXl 0SNAKNdA6nra5BbnvVAvMB8GA1UdIwQYMBaAFBq4nvWyjsgtauIQ/Cm96KcXVrGw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTBERC82RDg3RUQwMjRE RTQxMUVDQTMxNzkxNURDNEY5QUUwMi9HcmllOWJLT3lDMXE0aEQ4S2Izb3B4ZFdz YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dyaWU5YktPeUMxcTRoRDhLYjNvcHhkV3NiQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTBERC82RDg3RUQwMjRERTQxMUVDQTMxNzkxNURDNEY5QUUwMi9HcmllOWJLT3lD MXE0aEQ4S2Izb3B4ZFdzYkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXOdZLnZs3IC7m/v0kjEVH+9qlG+Wv2E+Jyj7JPY1BC1ZOgHKXAaj7 xMa5xrdg2sTIBPOH/NqLuJuB76rGNF/CiBUaozBEceCQefGwRWpV817SfLPJ+SkS TD9HuBTjYyYICSDdcfyR6N2BjjW2GDeZOWhoLNIq1QNHYFy/AqrnTv70aHwUq14G SvRt+afW6XqXPo1dykFSA0lnPDhwgPYc29Eaot+V6Q5kwlo5z06giRXT7KPa/exs s5cX/QkgKhgnvn8mczBhN02v1rZbPteboYdNr0NZvMjSWCpZ6yxR7w/IFTwk4Qa4 nQ60ML6/EoPZtjKQ6BrO+HnoarExidAs -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:16 2025 by rpki-client on console.sobornost.net