$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.mft File: Iln4cJbkCts8hBgOKLVsPogi9lE.mft (raw, json) Hash identifier: kvb5B2YEf6VaQSkB8am1acWDYWf35XODntO1YJmN8X8= Subject key identifier: 03:88:F9:53:24:F6:E5:C2:CE:42:44:50:01:59:DB:0D:FF:B8:3C:CA Authority key identifier: 22:59:F8:70:96:E4:0A:DB:3C:84:18:0E:28:B5:6C:3E:88:22:F6:51 Certificate issuer: /CN=A91E9B89/serialNumber=2259F87096E40ADB3C84180E28B56C3E8822F651 Certificate serial: 7D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Iln4cJbkCts8hBgOKLVsPogi9lE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.mft Manifest number: 7B Signing time: Sun 27 Apr 2025 05:34:57 +0000 Manifest this update: Sun 27 Apr 2025 05:34:56 +0000 Manifest next update: Sun 04 May 2025 05:34:56 +0000 Files and hashes: 1: Iln4cJbkCts8hBgOKLVsPogi9lE.crl (hash: 3PrMFJdydAmS/z/tmhFBARCTHlM3Devc29UItMDbj0A=) 2: CCFF219C6C1811EFA5619D0FC4F9AE02.roa (hash: 3XxXrUl7XjjQy54chnpbCmHALQO6VY0UNh1QIEO4utw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.crl rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Iln4cJbkCts8hBgOKLVsPogi9lE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9B89, serialNumber=2259F87096E40ADB3C84180E28B56C3E8822F651 Validity Not Before: Apr 27 05:34:56 2025 GMT Not After : May 4 05:34:56 2025 GMT Subject: CN=680dc200-26e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:07:f3:6a:23:5b:84:36:d6:d7:1e:61:ba:10: 21:90:07:63:76:41:f0:ef:40:3c:98:50:f0:a4:e6: 0f:2a:53:0f:0b:d2:72:f4:b4:b0:89:71:ae:19:6e: dc:6e:e9:a9:47:66:25:93:6c:9a:ed:6e:a7:16:d6: 44:a8:55:29:37:ef:50:8d:07:89:70:47:dd:e8:86: aa:08:0f:95:82:31:30:66:c3:e0:1b:31:a4:60:d0: 4c:d7:57:f4:6c:88:a1:8f:7c:eb:ff:54:b8:d1:d8: 02:6f:cd:0a:c0:1e:d8:24:68:77:16:9d:61:f0:fa: bb:64:95:78:4e:2b:da:65:f4:c5:92:93:8b:1a:64: 37:04:ac:f2:f4:56:06:5a:e4:53:3d:5a:7f:a0:57: 89:15:57:65:5b:68:84:f7:c4:f2:d7:62:06:84:ce: 9e:fd:97:ca:85:1c:0e:10:9d:aa:27:ac:bd:af:4b: 37:55:a0:cd:3c:4f:b8:07:4d:82:22:3f:11:c9:6f: b7:72:16:a5:f3:34:8e:76:ea:2e:9b:78:43:23:ef: 80:21:85:1a:ea:6e:17:09:23:4e:b5:89:36:13:c4: 37:72:00:9e:b3:9f:50:89:a8:a5:60:69:4d:67:63: fe:32:10:79:26:86:09:82:67:46:ee:ff:c4:80:6a: 29:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:88:F9:53:24:F6:E5:C2:CE:42:44:50:01:59:DB:0D:FF:B8:3C:CA X509v3 Authority Key Identifier: keyid:22:59:F8:70:96:E4:0A:DB:3C:84:18:0E:28:B5:6C:3E:88:22:F6:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Iln4cJbkCts8hBgOKLVsPogi9lE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:2e:6c:2c:07:22:c4:9f:38:09:0f:d5:bd:c7:e7:09:f5:f4: 6b:d1:4c:72:af:c9:b5:96:7c:79:95:e4:91:43:2e:7e:d1:87: f7:cd:89:e2:8f:67:75:09:2f:a2:6d:68:8d:d6:72:37:ba:93: 92:83:4e:ae:f9:f9:1a:f0:68:ac:83:40:b5:c4:7b:6e:c8:8d: a0:47:be:6b:68:58:80:7b:5d:96:3d:11:19:3e:c5:39:4c:6a: 16:93:b1:ce:7d:65:ae:6c:28:c8:0b:38:b3:55:3e:d2:ce:3d: 53:8a:20:0f:0d:22:6e:cf:6f:6b:cf:0a:f0:78:33:9e:7a:06: 58:c4:fd:a9:9f:47:96:d3:6c:62:78:1f:7d:db:ac:76:e8:4a: ed:33:6c:e4:4d:97:34:6a:93:f2:59:1a:f1:09:9f:ed:24:a4: 89:34:9e:f3:5c:ba:1d:8f:15:d3:1d:a1:c3:98:bc:4b:ec:35: 5e:93:3a:ad:aa:74:ae:08:3b:1c:a9:f7:89:a3:85:0e:30:5f: ee:c8:64:65:41:34:c3:4e:e8:c6:a2:7e:85:a2:db:ed:16:95: 0f:ee:3f:03:2c:d5:ca:ab:42:36:a8:a0:91:bf:2d:15:4d:df: 04:bb:42:3d:37:d0:36:14:25:7d:28:41:82:34:f7:5d:97:d2: 79:47:f9:60 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF OUI4OTExMC8GA1UEBRMoMjI1OUY4NzA5NkU0MEFEQjNDODQxODBFMjhCNTZDM0U4 ODIyRjY1MTAeFw0yNTA0MjcwNTM0NTZaFw0yNTA1MDQwNTM0NTZaMBgxFjAUBgNV BAMTDTY4MGRjMjAwLTI2ZTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbB/NqI1uENtbXHmG6ECGQB2N2QfDvQDyYUPCk5g8qUw8L0nL0tLCJca4Zbtxu 6alHZiWTbJrtbqcW1kSoVSk371CNB4lwR93ohqoID5WCMTBmw+AbMaRg0EzXV/Rs iKGPfOv/VLjR2AJvzQrAHtgkaHcWnWHw+rtklXhOK9pl9MWSk4saZDcErPL0VgZa 5FM9Wn+gV4kVV2VbaIT3xPLXYgaEzp79l8qFHA4QnaonrL2vSzdVoM08T7gHTYIi PxHJb7dyFqXzNI526i6beEMj74AhhRrqbhcJI061iTYTxDdyAJ6zn1CJqKVgaU1n Y/4yEHkmhgmCZ0bu/8SAaim1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUA4j5UyT2 5cLOQkRQAVnbDf+4PMowHwYDVR0jBBgwFoAUIln4cJbkCts8hBgOKLVsPogi9lEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5Qjg5LzNBOUM4QTU2NkMx ODExRUZBQjZCNjkwQ0M0RjlBRTAyL0lsbjRjSmJrQ3RzOGhCZ09LTFZzUG9naTls RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSWxuNGNKYmtDdHM4aEJnT0tMVnNQb2dpOWxFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5 Qjg5LzNBOUM4QTU2NkMxODExRUZBQjZCNjkwQ0M0RjlBRTAyL0lsbjRjSmJrQ3Rz OGhCZ09LTFZzUG9naTlsRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADsubCwHIsSfOAkP1b3H5wn19GvRTHKvybWWfHmV5JFDLn7Rh/fNieKP Z3UJL6JtaI3Wcje6k5KDTq75+RrwaKyDQLXEe27IjaBHvmtoWIB7XZY9ERk+xTlM ahaTsc59Za5sKMgLOLNVPtLOPVOKIA8NIm7Pb2vPCvB4M556BljE/amfR5bTbGJ4 H33brHboSu0zbORNlzRqk/JZGvEJn+0kpIk0nvNcuh2PFdMdocOYvEvsNV6TOq2q dK4IOxyp94mjhQ4wX+7IZGVBNMNO6MaifoWi2+0WlQ/uPwMs1cqrQjaooJG/LRVN 3wS7Qj030DYUJX0oQYI0912X0nlH+WA= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:58 2025 by rpki-client on console.sobornost.net