$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.mft File: aGoAVxZNFDjsWVhtqLqlRl_YKcc.mft (raw, json) Hash identifier: FqyBiT/whi0OuWNzgHAkKolwM8QxKygzG+hFFXWNa0k= Subject key identifier: 47:F6:A9:87:C6:66:75:79:47:B4:AA:33:27:0A:BE:AE:77:E7:2E:97 Authority key identifier: 68:6A:00:57:16:4D:14:38:EC:59:58:6D:A8:BA:A5:46:5F:D8:29:C7 Certificate issuer: /CN=A91EA9BD/serialNumber=686A0057164D1438EC59586DA8BAA5465FD829C7 Certificate serial: 30A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aGoAVxZNFDjsWVhtqLqlRl_YKcc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.mft Manifest number: 309D Signing time: Mon 28 Apr 2025 15:31:43 +0000 Manifest this update: Mon 28 Apr 2025 15:31:43 +0000 Manifest next update: Mon 05 May 2025 15:31:43 +0000 Files and hashes: 1: aGoAVxZNFDjsWVhtqLqlRl_YKcc.crl (hash: D9wd+rv6xbpyalNN08EKV/XsIOb4eyMYCe9MFcWU0ak=) 2: 93C0837AA52911EC9D2DAE83C4F9AE02.roa (hash: QijzfOAskdpqspHv2hl6DWJmVGpVIoUXprNfU2Pxi8k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.crl rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aGoAVxZNFDjsWVhtqLqlRl_YKcc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 15:31:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12449 (0x30a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA9BD, serialNumber=686A0057164D1438EC59586DA8BAA5465FD829C7 Validity Not Before: Apr 28 15:31:43 2025 GMT Not After : May 5 15:31:43 2025 GMT Subject: CN=680f9f5f-30b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0b:63:0d:1e:32:f5:13:7d:41:6d:54:d1:81: 0a:6b:63:97:c7:a0:7d:54:53:9e:fa:c3:75:e4:a7: 81:a8:5b:e3:99:f6:07:f4:6d:b5:e1:33:05:1d:f1: cf:4e:ff:6b:22:76:8b:8d:11:62:99:af:20:87:60: 95:ab:e5:50:c3:0d:b8:09:47:fe:90:1d:88:f9:32: d0:40:c4:25:27:05:00:94:d0:57:87:c7:76:86:5b: 41:b2:0b:55:1f:0f:08:58:7f:40:41:14:bf:61:80: 83:08:c7:30:5a:38:a6:90:45:e2:79:bd:77:8b:8b: d3:6f:18:0b:a0:93:a7:c4:d4:cd:46:40:54:21:97: 2b:f4:de:c8:b7:c3:33:22:8e:a6:c9:36:d9:63:e1: c5:b3:dd:de:f6:b2:9b:da:e8:7b:85:5a:a4:8f:68: 66:85:39:f4:16:7c:bc:ec:27:f8:5d:42:1a:0c:54: 05:96:14:48:58:a9:bc:fa:f5:6e:00:8e:b1:f3:d6: 34:27:e5:32:73:94:0f:7d:93:84:08:db:23:e7:3f: e8:24:d1:83:73:56:90:12:ac:1e:b2:a8:da:8a:50: e6:49:21:03:33:1d:30:e2:bc:db:28:df:5a:c2:a5: cf:d3:4a:5b:02:a7:7d:48:88:ee:4b:28:ff:8b:a3: c3:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:F6:A9:87:C6:66:75:79:47:B4:AA:33:27:0A:BE:AE:77:E7:2E:97 X509v3 Authority Key Identifier: keyid:68:6A:00:57:16:4D:14:38:EC:59:58:6D:A8:BA:A5:46:5F:D8:29:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aGoAVxZNFDjsWVhtqLqlRl_YKcc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:29:ed:0f:90:07:1b:bd:5a:fb:ba:4d:47:04:e0:58:0a:6f: 33:b3:65:ec:b4:81:18:b3:ee:3b:77:d8:1d:ea:7a:e6:24:9c: 0a:e6:44:6f:00:75:16:a5:f7:84:95:86:35:b2:0a:1d:1f:54: c5:99:2f:b2:b4:57:55:17:bf:ad:22:cd:42:62:1f:2c:2f:94: a8:e3:ab:55:ae:4e:f0:33:ab:8e:53:bd:ed:5f:2f:8b:aa:fa: aa:a9:37:db:ba:47:68:bf:c1:b0:ea:d8:82:69:6f:83:3c:35: b6:99:cf:3c:42:df:80:44:ac:dc:41:f1:51:31:54:23:ae:c4: 3c:0f:7f:f7:a8:5b:8b:5d:b9:da:87:56:48:1d:d7:c2:c3:4d: d6:f5:bf:1a:7a:43:e3:82:4c:ea:d0:72:10:c8:6b:c0:a3:1f: 23:19:74:b5:78:39:ba:93:ad:6b:e2:15:25:23:25:2a:cf:02: b6:e7:c6:8d:bd:17:d9:b9:6b:f8:0b:bd:e6:8b:52:dd:1c:7e: a3:03:4c:c3:e3:23:88:b0:ef:20:76:c9:17:ca:27:08:69:28: bb:a6:a8:68:5d:b4:a6:9e:d3:fe:2a:42:8d:31:8e:9c:8d:d0: 61:ff:c6:bf:36:20:a6:a7:c0:ec:35:e9:ea:35:e1:ce:c3:0c: 87:f8:20:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE5QkQxMTAvBgNVBAUTKDY4NkEwMDU3MTY0RDE0MzhFQzU5NTg2REE4QkFBNTQ2 NUZEODI5QzcwHhcNMjUwNDI4MTUzMTQzWhcNMjUwNTA1MTUzMTQzWjAYMRYwFAYD VQQDEw02ODBmOWY1Zi0zMGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwAtjDR4y9RN9QW1U0YEKa2OXx6B9VFOe+sN15KeBqFvjmfYH9G214TMFHfHP Tv9rInaLjRFima8gh2CVq+VQww24CUf+kB2I+TLQQMQlJwUAlNBXh8d2hltBsgtV Hw8IWH9AQRS/YYCDCMcwWjimkEXieb13i4vTbxgLoJOnxNTNRkBUIZcr9N7It8Mz Io6myTbZY+HFs93e9rKb2uh7hVqkj2hmhTn0Fny87Cf4XUIaDFQFlhRIWKm8+vVu AI6x89Y0J+Uyc5QPfZOECNsj5z/oJNGDc1aQEqwesqjailDmSSEDMx0w4rzbKN9a wqXP00pbAqd9SIjuSyj/i6PDSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEf2qYfG ZnV5R7SqMycKvq535y6XMB8GA1UdIwQYMBaAFGhqAFcWTRQ47FlYbai6pUZf2CnH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTlCRC8wM0I4MEYzOERG NUMxMUUyOTcyQTk0Mjc1OTExRUEzMi9hR29BVnhaTkZEanNXVmh0cUxxbFJsX1lL Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FHb0FWeFpORkRqc1dWaHRxTHFsUmxfWUtjYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTlCRC8wM0I4MEYzOERGNUMxMUUyOTcyQTk0Mjc1OTExRUEzMi9hR29BVnhaTkZE anNXVmh0cUxxbFJsX1lLY2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOKe0PkAcbvVr7uk1HBOBYCm8zs2XstIEYs+47d9gd6nrmJJwK5kRv AHUWpfeElYY1sgodH1TFmS+ytFdVF7+tIs1CYh8sL5So46tVrk7wM6uOU73tXy+L qvqqqTfbukdov8Gw6tiCaW+DPDW2mc88Qt+ARKzcQfFRMVQjrsQ8D3/3qFuLXbna h1ZIHdfCw03W9b8aekPjgkzq0HIQyGvAox8jGXS1eDm6k61r4hUlIyUqzwK258aN vRfZuWv4C73mi1LdHH6jA0zD4yOIsO8gdskXyicIaSi7pqhoXbSmntP+KkKNMY6c jdBh/8a/NiCmp8DsNenqNeHOwwyH+CDz -----END CERTIFICATE-----Generated at Mon Apr 28 17:46:06 2025 by rpki-client on console.sobornost.net