$ rpki-client -vvf rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft File: FrmIQthhrv6AMEAgDJqqiVYPK8o.mft (raw, json) Hash identifier: ZxIxk/X/78GlRdtYYX8G8mrB0SEN4D2XOptOfXaP1jE= Subject key identifier: 21:FF:F5:51:16:40:53:7A:31:AD:4F:52:2C:C8:23:38:40:E4:8A:EA Authority key identifier: 16:B9:88:42:D8:61:AE:FE:80:30:40:20:0C:9A:AA:89:56:0F:2B:CA Certificate issuer: /CN=A91EABCB/serialNumber=16B98842D861AEFE803040200C9AAA89560F2BCA Certificate serial: 0677 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrmIQthhrv6AMEAgDJqqiVYPK8o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft Manifest number: 0669 Signing time: Sat 26 Apr 2025 22:01:52 +0000 Manifest this update: Sat 26 Apr 2025 22:01:51 +0000 Manifest next update: Sat 03 May 2025 22:01:51 +0000 Files and hashes: 1: FrmIQthhrv6AMEAgDJqqiVYPK8o.crl (hash: Pt1+IoZId4eZABIlic/8mMcGaMNnBKXzvC+Thr8knNI=) 2: 0F0EC4A67A8811EB95169F62C4F9AE02.roa (hash: cbGv9Az0WV6nTGgrUjq6cjPrkcXLiewtavxh7ffNibo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.crl rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrmIQthhrv6AMEAgDJqqiVYPK8o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 22:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1655 (0x677) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EABCB, serialNumber=16B98842D861AEFE803040200C9AAA89560F2BCA Validity Not Before: Apr 26 22:01:51 2025 GMT Not After : May 3 22:01:51 2025 GMT Subject: CN=680d57d0-755b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c6:b0:34:fa:dc:f2:e3:40:27:93:8e:7a:3e: e8:b0:e3:b3:85:c6:ad:4b:4b:55:2b:1f:93:b4:3b: 2e:2b:eb:64:c9:87:28:7a:72:86:00:d3:e0:7e:fc: 36:21:1c:98:c0:87:e3:e4:5e:d4:8a:bf:91:c8:39: ea:b6:bf:b4:bc:02:85:2e:dc:30:52:4a:ca:8f:7b: 02:0d:01:94:6e:1b:33:d6:02:11:5a:cc:94:4a:81: c2:a8:10:5b:a8:20:f4:88:a2:bf:95:ef:38:f1:80: b8:4e:7a:8c:82:45:81:f7:39:79:47:53:80:3c:c8: 7c:2b:1a:f7:2b:4d:e1:e1:37:f5:75:90:47:74:a2: a1:21:d1:0f:7f:c7:a2:35:5f:2a:9a:db:d1:cb:4d: 5c:12:15:f4:a3:33:61:71:5a:fa:7d:df:e1:fb:13: a8:82:c2:2c:1e:c4:7d:0e:69:ac:a0:59:a4:ad:b6: 93:fe:51:e8:4c:c1:16:62:85:5d:b0:a0:24:ed:43: 88:44:b4:14:f1:d5:8e:c0:19:c3:49:d9:a7:3a:81: ad:94:4d:e5:00:01:0c:60:22:ee:a8:a7:62:84:6d: 72:6a:5d:8c:6d:64:f2:d4:8e:7a:c0:7d:94:a6:f1: 23:71:83:ea:4b:40:2f:e6:24:66:53:28:fa:32:ab: b2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:FF:F5:51:16:40:53:7A:31:AD:4F:52:2C:C8:23:38:40:E4:8A:EA X509v3 Authority Key Identifier: keyid:16:B9:88:42:D8:61:AE:FE:80:30:40:20:0C:9A:AA:89:56:0F:2B:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrmIQthhrv6AMEAgDJqqiVYPK8o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:59:6f:15:22:b1:4b:4a:45:80:ef:24:1c:7d:69:26:76:7a: 3e:8f:69:1e:6c:3d:c3:36:f3:df:45:6c:63:b0:35:48:71:03: 17:05:46:17:41:d3:76:19:ad:d6:f9:b6:46:9f:07:c7:8b:e2: 0c:6b:fc:8a:2b:1a:31:a6:dd:35:fb:4b:8b:a8:59:0d:b9:0a: f3:89:1d:d8:f1:91:26:62:66:fd:ab:92:5a:b9:86:20:e2:60: 9c:28:22:5c:a0:da:2a:26:80:78:dc:20:fd:b2:a7:54:6a:56: d7:ed:f9:8a:c9:dd:cb:d8:43:b4:5a:ab:3e:b8:2c:5d:74:d2: 25:49:e7:a6:56:25:00:35:10:38:24:6a:1e:1d:db:56:86:60: 28:82:2a:4b:55:e6:64:2a:9e:a6:83:f0:84:b2:86:a8:dc:76: 36:cd:37:0f:4b:05:60:66:dc:dc:db:24:86:b5:56:b7:7d:64: 26:87:65:98:0a:fe:a3:1e:f8:9b:fc:77:50:be:ff:27:8f:e6: b7:34:90:15:82:a3:63:c4:d6:50:db:cc:e4:73:ae:63:c8:51: 6e:eb:d6:6b:50:0d:c0:29:b3:81:3c:61:dc:2b:e8:6e:26:61: 5b:99:ed:c9:51:fd:45:a3:65:96:11:ce:73:29:59:20:7c:7c: c5:b9:a7:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBncwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFCQ0IxMTAvBgNVBAUTKDE2Qjk4ODQyRDg2MUFFRkU4MDMwNDAyMDBDOUFBQTg5 NTYwRjJCQ0EwHhcNMjUwNDI2MjIwMTUxWhcNMjUwNTAzMjIwMTUxWjAYMRYwFAYD VQQDEw02ODBkNTdkMC03NTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1sawNPrc8uNAJ5OOej7osOOzhcatS0tVKx+TtDsuK+tkyYcoenKGANPgfvw2 IRyYwIfj5F7Uir+RyDnqtr+0vAKFLtwwUkrKj3sCDQGUbhsz1gIRWsyUSoHCqBBb qCD0iKK/le848YC4TnqMgkWB9zl5R1OAPMh8Kxr3K03h4Tf1dZBHdKKhIdEPf8ei NV8qmtvRy01cEhX0ozNhcVr6fd/h+xOogsIsHsR9DmmsoFmkrbaT/lHoTMEWYoVd sKAk7UOIRLQU8dWOwBnDSdmnOoGtlE3lAAEMYCLuqKdihG1yal2MbWTy1I56wH2U pvEjcYPqS0Av5iRmUyj6MquySQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCH/9VEW QFN6Ma1PUizIIzhA5IrqMB8GA1UdIwQYMBaAFBa5iELYYa7+gDBAIAyaqolWDyvK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUJDQi8zNDJGRkYxODdB ODYxMUVCOTdBRTUxNjBDNEY5QUUwMi9Gcm1JUXRoaHJ2NkFNRUFnREpxcWlWWVBL OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZybUlRdGhocnY2QU1FQWdESnFxaVZZUEs4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUJDQi8zNDJGRkYxODdBODYxMUVCOTdBRTUxNjBDNEY5QUUwMi9Gcm1JUXRoaHJ2 NkFNRUFnREpxcWlWWVBLOG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTWW8VIrFLSkWA7yQcfWkmdno+j2kebD3DNvPfRWxjsDVIcQMXBUYX QdN2Ga3W+bZGnwfHi+IMa/yKKxoxpt01+0uLqFkNuQrziR3Y8ZEmYmb9q5JauYYg 4mCcKCJcoNoqJoB43CD9sqdUalbX7fmKyd3L2EO0Wqs+uCxddNIlSeemViUANRA4 JGoeHdtWhmAogipLVeZkKp6mg/CEsoao3HY2zTcPSwVgZtzc2ySGtVa3fWQmh2WY Cv6jHvib/HdQvv8nj+a3NJAVgqNjxNZQ28zkc65jyFFu69ZrUA3AKbOBPGHcK+hu JmFbme3JUf1Fo2WWEc5zKVkgfHzFuaey -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:16 2025 by rpki-client on console.sobornost.net