$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft File: rXHewTibFKASABB2mR9Zq-LKseY.mft (raw, json) Hash identifier: A6zOlMs0VojitbrC+5bwAMgPKLWCgJTL4q/Eu07/xI0= Subject key identifier: 75:B0:85:72:AB:F8:A7:17:72:88:8A:EB:5B:6F:C8:DA:FE:53:2B:4F Authority key identifier: AD:71:DE:C1:38:9B:14:A0:12:00:10:76:99:1F:59:AB:E2:CA:B1:E6 Certificate issuer: /CN=A91EAF4B/serialNumber=AD71DEC1389B14A012001076991F59ABE2CAB1E6 Certificate serial: 0107 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft Manifest number: 0BC9 Signing time: Mon 28 Apr 2025 19:46:56 +0000 Manifest this update: Mon 28 Apr 2025 19:46:55 +0000 Manifest next update: Mon 05 May 2025 19:46:55 +0000 Files and hashes: 1: rXHewTibFKASABB2mR9Zq-LKseY.crl (hash: VHIDR8CjhwHLCL7TAYzMA2Iwim0dCLzL4VwhEfciVUQ=) 2: 6360524E03D311F0A6C64177C4F9AE02.roa (hash: aDdJ1zHHJM2Pp/llY4+TjUByw8VD+3beZi6B31AyTJ8=) 3: 58EC5A1A8F3E11EF9B5DE37CC4F9AE02.roa (hash: fNb48r4M+gfLXajaKFGp8VWXxugH32v0si+d8iboCho=) 4: FF5213E8A81D11EFA74FFD31C4F9AE02.roa (hash: EO+r4YCRXrWQGjZoJ/CD1KsxdVzlBHVNlbdYh39PLSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.crl rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 19:46:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 263 (0x107) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAF4B, serialNumber=AD71DEC1389B14A012001076991F59ABE2CAB1E6 Validity Not Before: Apr 28 19:46:55 2025 GMT Not After : May 5 19:46:55 2025 GMT Subject: CN=680fdb30-5923 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:25:42:76:91:92:bd:76:55:1f:03:b9:81:e6: f2:f6:40:21:fa:af:70:65:1c:63:eb:b8:7d:60:8c: 60:80:2a:c7:88:01:73:74:d9:38:81:ac:ee:87:c6: df:fd:b7:94:55:0e:68:19:8e:88:f6:16:4d:1f:4c: a2:7a:c4:9e:ea:c2:65:22:99:08:17:07:72:9b:e8: 6a:8b:03:7f:e6:40:0a:e3:19:bd:b1:74:b0:a8:6e: ea:ac:5e:04:80:50:59:c0:8d:9d:fc:18:91:4a:bd: b7:02:5a:d8:01:bd:7c:9e:c9:37:c4:97:61:28:61: ba:93:59:7d:bb:69:4b:c3:26:d9:8a:42:f5:93:a8: fe:33:b6:3d:93:c3:60:57:80:fe:c7:ee:2e:92:3f: 69:5c:3b:f3:45:22:87:55:c2:1d:e8:bf:44:d0:90: c5:f0:fa:89:aa:31:af:31:bc:2c:b8:f2:3a:cc:1f: 06:7e:37:f1:f6:13:1f:c3:15:48:73:49:0e:b4:47: 28:d1:93:9e:5c:da:c8:97:90:cd:29:6e:76:78:00: e6:77:cd:10:49:29:d4:1f:80:5e:ab:33:cf:37:00: 09:00:dd:aa:1f:40:b3:4d:55:d9:85:a2:50:8b:ff: bc:58:fd:57:34:b9:37:5f:ae:95:b7:18:7e:a8:23: 50:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:B0:85:72:AB:F8:A7:17:72:88:8A:EB:5B:6F:C8:DA:FE:53:2B:4F X509v3 Authority Key Identifier: keyid:AD:71:DE:C1:38:9B:14:A0:12:00:10:76:99:1F:59:AB:E2:CA:B1:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:df:53:ba:14:05:21:65:50:6a:c6:ee:d0:f9:90:da:70:1d: 37:99:2f:d4:c9:0a:29:1e:ec:84:96:c6:6e:1a:ce:1a:56:f4: 6f:b1:11:ef:9f:c9:9c:ba:cb:84:01:5a:c3:a3:74:9a:2a:c6: 19:52:64:57:4a:59:d7:a8:21:55:d5:91:c1:ed:56:a1:b5:af: b8:96:7a:ac:33:3e:dc:ab:4c:ca:f7:7c:bd:22:a8:9d:54:05: 04:7a:4b:15:1e:e5:b8:38:c8:bf:c6:e9:ca:a1:d9:74:f8:e7: d9:64:87:c5:80:01:4d:25:10:47:9e:f9:98:60:22:24:16:09: 4a:ae:8e:1a:b5:5f:db:32:9f:b4:9a:c3:5e:e7:c6:81:7b:1d: 7d:00:28:d2:18:09:a3:85:4b:1a:5d:3e:ca:0a:09:f6:ea:dc: 6f:74:6c:50:fe:a8:b1:00:cb:45:e1:70:7b:1a:77:76:08:79: 72:21:4b:be:58:97:cb:9c:c1:59:0d:7f:c7:d8:72:72:32:10: df:9e:64:18:67:47:f1:18:a7:b1:51:00:67:52:eb:d0:5d:08: 16:1d:c4:a4:5d:86:a3:82:3a:b7:ac:5a:10:b0:c7:b3:36:f7: 00:0d:99:85:dc:b2:51:13:90:dc:fc:c5:6c:d9:c9:2e:63:8b: b1:3c:88:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFGNEIxMTAvBgNVBAUTKEFENzFERUMxMzg5QjE0QTAxMjAwMTA3Njk5MUY1OUFC RTJDQUIxRTYwHhcNMjUwNDI4MTk0NjU1WhcNMjUwNTA1MTk0NjU1WjAYMRYwFAYD VQQDEw02ODBmZGIzMC01OTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArSVCdpGSvXZVHwO5geby9kAh+q9wZRxj67h9YIxggCrHiAFzdNk4gazuh8bf /beUVQ5oGY6I9hZNH0yiesSe6sJlIpkIFwdym+hqiwN/5kAK4xm9sXSwqG7qrF4E gFBZwI2d/BiRSr23AlrYAb18nsk3xJdhKGG6k1l9u2lLwybZikL1k6j+M7Y9k8Ng V4D+x+4ukj9pXDvzRSKHVcId6L9E0JDF8PqJqjGvMbwsuPI6zB8Gfjfx9hMfwxVI c0kOtEco0ZOeXNrIl5DNKW52eADmd80QSSnUH4BeqzPPNwAJAN2qH0CzTVXZhaJQ i/+8WP1XNLk3X66Vtxh+qCNQuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHWwhXKr +KcXcoiK61tvyNr+UytPMB8GA1UdIwQYMBaAFK1x3sE4mxSgEgAQdpkfWaviyrHm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUY0Qi84NDg1OEY2QTQ3 MTkxMUVBOTA4NjMwNzJDNEY5QUUwMi9yWEhld1RpYkZLQVNBQkIybVI5WnEtTEtz ZVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JYSGV3VGliRktBU0FCQjJtUjlacS1MS3NlWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUY0Qi84NDg1OEY2QTQ3MTkxMUVBOTA4NjMwNzJDNEY5QUUwMi9yWEhld1RpYkZL QVNBQkIybVI5WnEtTEtzZVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAw31O6FAUhZVBqxu7Q+ZDacB03mS/UyQopHuyElsZuGs4aVvRvsRHv n8mcusuEAVrDo3SaKsYZUmRXSlnXqCFV1ZHB7Vahta+4lnqsMz7cq0zK93y9Iqid VAUEeksVHuW4OMi/xunKodl0+OfZZIfFgAFNJRBHnvmYYCIkFglKro4atV/bMp+0 msNe58aBex19ACjSGAmjhUsaXT7KCgn26txvdGxQ/qixAMtF4XB7Gnd2CHlyIUu+ WJfLnMFZDX/H2HJyMhDfnmQYZ0fxGKexUQBnUuvQXQgWHcSkXYajgjq3rFoQsMez NvcADZmF3LJRE5Dc/MVs2ckuY4uxPIjn -----END CERTIFICATE-----Generated at Mon Apr 28 23:05:58 2025 by rpki-client on console.sobornost.net