$ rpki-client -vvf rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft File: IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft (raw, json) Hash identifier: 4Xxo5NvxwgvY/7hrq9NxxFn9jVoBBj4lSsTdY0b+nFw= Subject key identifier: 2C:82:84:7C:B6:5B:B8:83:69:57:9D:11:6A:AC:C5:EC:F2:81:20:6D Authority key identifier: 21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B Certificate issuer: /CN=A91E96D9/serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B Certificate serial: 0845 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft Manifest number: 0810 Signing time: Sat 26 Apr 2025 20:42:42 +0000 Manifest this update: Sat 26 Apr 2025 20:42:41 +0000 Manifest next update: Sat 03 May 2025 20:42:41 +0000 Files and hashes: 1: IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl (hash: iyQl1cJvBiflAtx4FP/dYZOQm96Ti9zZc6u0muf4xak=) 2: EF40C4AC404611EFA2014651C4F9AE02.roa (hash: czaYuAZrmltxjeFq6mD06OZKMChDyKz2TsFDBFMIxYw=) 3: 4A06FF10FF2711EAB7D5F235C4F9AE02.roa (hash: IR0gL9HuGQPasCSDeDXOONGQSnX5FqddD0h9jerJFTk=) 4: C8C64A4AED4D11EA895BC037C4F9AE02.roa (hash: RgPF5melWGZf5AFZ9hv+NJPKC/EOsjcNRxGMLnUAhvk=) 5: 35D16082404911EFBC4C610EC4F9AE02.roa (hash: CZyYnpg8fZRv7/01XkAyfUiNYVCaEIGt11t+Ww7CLyk=) 6: BAEB4B28FBDF11EA8B73595BC4F9AE02.roa (hash: 5tsj3TAsFxb8qTqVXGn9He+Eq077vpR4YIaSiSHaTqQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2117 (0x845) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E96D9, serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B Validity Not Before: Apr 26 20:42:41 2025 GMT Not After : May 3 20:42:41 2025 GMT Subject: CN=680d4542-a6fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a9:0d:cc:87:c8:3f:e8:11:98:22:98:8a:92: 1a:6e:3e:30:3f:2f:d1:a5:2d:ef:cd:5f:72:34:36: 02:f1:d2:2e:2d:e7:03:b9:bb:30:2e:9a:a0:4f:eb: c7:60:53:f4:32:dd:a7:0e:9b:06:e6:85:f2:b0:15: d5:f9:4a:51:81:f9:ec:c4:7f:8b:72:10:5e:11:e8: ec:ac:d3:2b:e0:8d:03:7e:2a:ca:d7:10:01:76:dc: 75:8c:bb:30:6a:5a:53:ab:9e:56:2b:fa:64:39:0a: 11:33:b9:d5:88:07:5b:0e:1c:fc:51:12:cb:ac:af: 14:55:c7:21:f1:95:3c:6e:a3:8f:0d:64:92:b2:0e: 55:05:79:7e:8f:8e:b1:a6:ff:64:20:40:d8:f7:65: c4:b3:71:2c:97:f1:46:a4:8f:ea:e1:8f:ac:2d:d7: 0d:ef:bb:34:3b:92:6f:e7:9f:43:00:77:35:be:a1: 37:29:4d:f8:29:6b:33:2d:50:2b:5a:cc:62:2f:73: fe:3d:1f:d3:16:dd:be:6b:25:72:19:d5:d0:d3:e7: 97:86:d2:2d:95:98:1f:a5:76:8c:93:91:a9:6b:73: 41:2f:38:4e:8d:df:df:c0:8f:ee:95:2f:99:de:d9: 0f:ed:0c:48:8b:be:11:44:5b:20:1c:4b:ee:9d:ed: ca:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:82:84:7C:B6:5B:B8:83:69:57:9D:11:6A:AC:C5:EC:F2:81:20:6D X509v3 Authority Key Identifier: keyid:21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:eb:78:56:ac:94:f5:90:95:31:56:dd:2b:5b:d2:4b:76:a2: 42:fd:11:e6:cd:56:39:b3:1b:76:85:2c:96:ed:c6:3f:6d:ae: e9:18:9a:ea:49:44:c2:1a:ee:29:24:29:a8:13:9d:f0:17:9f: bb:01:d1:1b:b5:83:17:97:2d:98:23:2f:e2:42:b4:27:21:c7: 0d:46:12:79:e3:c4:18:3f:24:a2:c2:9e:43:44:c7:20:3d:a6: 73:50:dd:d1:01:89:99:67:cf:c8:69:df:d2:13:39:9b:95:c1: 7b:54:86:06:05:d2:5e:0d:04:1f:0f:5e:a3:56:db:8c:43:a6: d6:3c:89:6d:7a:f3:b6:81:f2:7e:8c:c7:4b:b3:95:8c:7b:87: f3:2a:80:c1:44:54:1f:73:8e:38:2f:16:37:d4:42:d1:bd:68: ce:22:12:1d:67:ef:28:6b:b1:e5:92:3f:6c:4b:80:af:e5:9a: 33:cc:af:08:bc:01:eb:cd:97:9f:a8:14:82:85:55:f8:ba:ae: 3b:76:8b:fe:31:0c:03:fd:53:91:32:cd:af:07:3b:59:67:c9: 33:e1:a5:db:4d:f5:af:b8:cd:b9:1d:fc:dc:8a:fc:ea:48:48: 17:8c:21:e2:33:f4:c3:0f:53:a3:98:50:8c:85:a4:f1:b1:50: 14:f2:c2:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk2RDkxMTAvBgNVBAUTKDIxOUVBNjNDNkFDOTY2RERCMjg1ODg2QkQ3MTFDNzhB MTRERjUxMkIwHhcNMjUwNDI2MjA0MjQxWhcNMjUwNTAzMjA0MjQxWjAYMRYwFAYD VQQDEw02ODBkNDU0Mi1hNmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0akNzIfIP+gRmCKYipIabj4wPy/RpS3vzV9yNDYC8dIuLecDubswLpqgT+vH YFP0Mt2nDpsG5oXysBXV+UpRgfnsxH+LchBeEejsrNMr4I0DfirK1xABdtx1jLsw alpTq55WK/pkOQoRM7nViAdbDhz8URLLrK8UVcch8ZU8bqOPDWSSsg5VBXl+j46x pv9kIEDY92XEs3Esl/FGpI/q4Y+sLdcN77s0O5Jv559DAHc1vqE3KU34KWszLVAr WsxiL3P+PR/TFt2+ayVyGdXQ0+eXhtItlZgfpXaMk5Gpa3NBLzhOjd/fwI/ulS+Z 3tkP7QxIi74RRFsgHEvune3KqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCyChHy2 W7iDaVedEWqsxezygSBtMB8GA1UdIwQYMBaAFCGepjxqyWbdsoWIa9cRx4oU31Er MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTZEOS84MERGREVDMEU1 REQxMUVBQjI0NjhENjVDNEY5QUUwMi9JWjZtUEdySlp0MnloWWhyMXhISGloVGZV U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0laNm1QR3JKWnQyeWhZaHIxeEhIaWhUZlVTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTZEOS84MERGREVDMEU1REQxMUVBQjI0NjhENjVDNEY5QUUwMi9JWjZtUEdySlp0 MnloWWhyMXhISGloVGZVU3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQ63hWrJT1kJUxVt0rW9JLdqJC/RHmzVY5sxt2hSyW7cY/ba7pGJrq SUTCGu4pJCmoE53wF5+7AdEbtYMXly2YIy/iQrQnIccNRhJ548QYPySiwp5DRMcg PaZzUN3RAYmZZ8/Iad/SEzmblcF7VIYGBdJeDQQfD16jVtuMQ6bWPIltevO2gfJ+ jMdLs5WMe4fzKoDBRFQfc444LxY31ELRvWjOIhIdZ+8oa7Hlkj9sS4Cv5ZozzK8I vAHrzZefqBSChVX4uq47dov+MQwD/VORMs2vBztZZ8kz4aXbTfWvuM25Hfzcivzq SEgXjCHiM/TDD1OjmFCMhaTxsVAU8sK3 -----END CERTIFICATE-----Generated at Sun Apr 27 00:14:13 2025 by rpki-client on console.sobornost.net