$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.mft File: b2WgySJgsa2iMYeym6w76trAVmE.mft (raw, json) Hash identifier: 8alcbOzi8wSeRv6LtYB3Y68CZWFF1ec9RFbhJXOABQQ= Subject key identifier: 93:45:7E:60:11:B2:39:CC:69:0C:ED:67:4D:6A:38:A0:D0:E1:56:43 Authority key identifier: 6F:65:A0:C9:22:60:B1:AD:A2:31:87:B2:9B:AC:3B:EA:DA:C0:56:61 Certificate issuer: /CN=A91EA449/serialNumber=6F65A0C92260B1ADA23187B29BAC3BEADAC05661 Certificate serial: C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2WgySJgsa2iMYeym6w76trAVmE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.mft Manifest number: C0 Signing time: Sun 27 Apr 2025 04:47:33 +0000 Manifest this update: Sun 27 Apr 2025 04:47:32 +0000 Manifest next update: Sun 04 May 2025 04:47:32 +0000 Files and hashes: 1: b2WgySJgsa2iMYeym6w76trAVmE.crl (hash: 6Tar3s3INpBgzyVZlivadWfwBjRLB0sniMBdDIuYUcU=) 2: D755AA2EE9F611EFB59A884DC4F9AE02.roa (hash: lV5qM/X+FyRsvo6SuP6eEbXrIIjZgYN4sZJgxKBnADs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.crl rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2WgySJgsa2iMYeym6w76trAVmE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 196 (0xc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA449, serialNumber=6F65A0C92260B1ADA23187B29BAC3BEADAC05661 Validity Not Before: Apr 27 04:47:32 2025 GMT Not After : May 4 04:47:32 2025 GMT Subject: CN=680db6e4-7956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fa:fa:b6:c3:f7:f9:9e:27:3c:d4:63:5b:de: 68:9c:21:67:28:4b:c7:7c:a7:f5:ad:26:d7:5a:1f: 8d:f5:a5:60:c7:c2:05:73:e2:66:03:af:d2:50:c0: 8d:fb:b4:ef:5c:e0:7c:c2:40:19:b1:14:3c:69:22: c5:93:25:20:fd:0e:dc:3f:c1:08:cf:bd:76:17:cd: c2:c3:a7:79:b5:38:d9:c0:a8:6f:5c:d8:4e:81:4a: 40:33:c6:c5:cd:54:8b:53:a1:f8:15:1e:e0:01:e6: 50:de:21:09:63:55:65:5f:df:9e:f5:a0:d8:2d:3d: c7:58:67:83:22:81:bb:bd:8e:74:57:e7:31:49:42: c7:06:58:a1:48:32:23:b4:51:4a:56:8d:2c:9b:a4: 78:77:62:77:39:40:0e:50:b3:b2:63:3f:f3:bb:0a: f5:a7:88:eb:5e:56:d9:7d:5f:9d:1f:24:b9:5c:19: 36:f5:35:d8:51:c6:26:83:68:98:4c:1e:fb:7d:6e: 7b:f7:d3:20:ab:66:11:d6:ba:4b:d1:6e:2d:b4:e8: 1c:ea:f1:cd:c3:7e:ca:c0:d9:6e:ba:37:34:04:e6: 7a:f2:5c:8f:1c:c6:f0:47:da:7e:ff:15:9e:49:2b: 92:76:e2:7f:8f:c6:05:f8:2a:f0:66:51:2d:e4:5f: 11:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:45:7E:60:11:B2:39:CC:69:0C:ED:67:4D:6A:38:A0:D0:E1:56:43 X509v3 Authority Key Identifier: keyid:6F:65:A0:C9:22:60:B1:AD:A2:31:87:B2:9B:AC:3B:EA:DA:C0:56:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2WgySJgsa2iMYeym6w76trAVmE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:a6:0e:9e:df:7b:bb:1a:23:e2:2d:a1:37:10:08:75:60:ca: dc:56:fb:0a:f8:0a:03:c9:69:4d:c5:93:58:bb:94:6d:6e:c4: 4d:c1:8e:df:7c:7e:11:40:f3:20:a2:89:f0:f3:e0:10:1a:a0: 5e:11:09:1e:a2:2b:5e:e0:23:e9:7d:e9:76:0f:f7:8c:85:27: fc:9f:66:fe:ae:79:39:ba:b8:43:d2:cc:4e:21:fa:79:ec:66: 59:31:06:6f:c3:b0:84:68:d5:68:72:0b:77:79:fe:62:66:b6: 90:bb:26:42:44:1e:d9:70:18:9d:0d:52:f1:62:f8:29:65:1f: 82:4e:a5:6a:a7:50:86:cf:c7:48:66:fa:77:a0:f3:9d:cf:dd: eb:f0:96:fe:57:e2:b0:ef:b1:28:bf:21:34:63:b8:05:28:b9: 93:b1:15:f8:6e:a7:d0:98:b0:cd:90:b1:73:9f:6e:7c:53:97: 97:1a:ab:7d:0d:40:21:7e:8e:50:2f:64:08:26:c3:3a:e9:21: 56:4e:09:ef:88:c2:4b:13:da:8b:6b:14:7e:05:9c:ad:e4:05: 80:87:26:a7:3a:97:5c:07:d8:58:9b:79:fc:81:60:c3:65:54: ce:f1:19:77:c2:2c:ce:17:51:d4:4b:68:39:d5:17:a8:80:bf: f0:5f:97:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE0NDkxMTAvBgNVBAUTKDZGNjVBMEM5MjI2MEIxQURBMjMxODdCMjlCQUMzQkVB REFDMDU2NjEwHhcNMjUwNDI3MDQ0NzMyWhcNMjUwNTA0MDQ0NzMyWjAYMRYwFAYD VQQDEw02ODBkYjZlNC03OTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvfr6tsP3+Z4nPNRjW95onCFnKEvHfKf1rSbXWh+N9aVgx8IFc+JmA6/SUMCN +7TvXOB8wkAZsRQ8aSLFkyUg/Q7cP8EIz712F83Cw6d5tTjZwKhvXNhOgUpAM8bF zVSLU6H4FR7gAeZQ3iEJY1VlX9+e9aDYLT3HWGeDIoG7vY50V+cxSULHBlihSDIj tFFKVo0sm6R4d2J3OUAOULOyYz/zuwr1p4jrXlbZfV+dHyS5XBk29TXYUcYmg2iY TB77fW5799Mgq2YR1rpL0W4ttOgc6vHNw37KwNluujc0BOZ68lyPHMbwR9p+/xWe SSuSduJ/j8YF+CrwZlEt5F8ROQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJNFfmAR sjnMaQztZ01qOKDQ4VZDMB8GA1UdIwQYMBaAFG9loMkiYLGtojGHspusO+rawFZh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTQ0OS80MDE3OTBGQzA3 M0MxMUVGOEQxREIwNTZDNEY5QUUwMi9iMldneVNKZ3NhMmlNWWV5bTZ3NzZ0ckFW bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2IyV2d5U0pnc2EyaU1ZZXltNnc3NnRyQVZtRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTQ0OS80MDE3OTBGQzA3M0MxMUVGOEQxREIwNTZDNEY5QUUwMi9iMldneVNKZ3Nh MmlNWWV5bTZ3NzZ0ckFWbUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfpg6e33u7GiPiLaE3EAh1YMrcVvsK+AoDyWlNxZNYu5RtbsRNwY7f fH4RQPMgoonw8+AQGqBeEQkeoite4CPpfel2D/eMhSf8n2b+rnk5urhD0sxOIfp5 7GZZMQZvw7CEaNVocgt3ef5iZraQuyZCRB7ZcBidDVLxYvgpZR+CTqVqp1CGz8dI Zvp3oPOdz93r8Jb+V+Kw77EovyE0Y7gFKLmTsRX4bqfQmLDNkLFzn258U5eXGqt9 DUAhfo5QL2QIJsM66SFWTgnviMJLE9qLaxR+BZyt5AWAhyanOpdcB9hYm3n8gWDD ZVTO8Rl3wizOF1HUS2g51ReogL/wX5ew -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:58 2025 by rpki-client on console.sobornost.net