$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft File: kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft (raw, json) Hash identifier: Y5IfRTS37jGvfxEUgVRLvgmzUjMeKQyLazfWO3OIgc0= Subject key identifier: 82:47:DF:96:BF:42:37:DA:19:B4:92:27:5D:40:73:99:AE:DA:0F:6A Authority key identifier: 90:C3:D8:35:17:26:A8:B9:1D:E2:6D:46:81:12:83:43:5C:C5:26:23 Certificate issuer: /CN=A91EC4DD/serialNumber=90C3D8351726A8B91DE26D46811283435CC52623 Certificate serial: 06C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft Manifest number: 06C3 Signing time: Sat 26 Apr 2025 21:46:28 +0000 Manifest this update: Sat 26 Apr 2025 21:46:28 +0000 Manifest next update: Sat 03 May 2025 21:46:28 +0000 Files and hashes: 1: kMPYNRcmqLkd4m1GgRKDQ1zFJiM.crl (hash: 42kdW8gUf8bS1Qmqe8171/e+hirGKHCXZ03Tlj/iRNg=) 2: AFCD8352557E11EBACB5CE3BC4F9AE02.roa (hash: yon8zk/9fCZ3WyFBjyvszv/gLcYp08xtnvCiEsyDKSw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.crl rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 21:46:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1737 (0x6c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC4DD, serialNumber=90C3D8351726A8B91DE26D46811283435CC52623 Validity Not Before: Apr 26 21:46:28 2025 GMT Not After : May 3 21:46:28 2025 GMT Subject: CN=680d5434-7f23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:67:ff:56:b9:23:b0:42:c6:98:06:43:21:55: 54:bf:9b:05:37:d3:ee:80:28:64:a5:f6:fd:bb:9b: 58:eb:93:50:81:48:04:4d:67:65:35:ba:8c:05:cc: 6c:63:15:f6:f0:d1:c1:f6:93:aa:46:9b:0e:ad:72: 05:66:e0:c3:31:df:d6:1a:3d:6c:98:a4:06:db:6e: d4:80:32:da:3a:a2:01:1c:9f:ef:e9:08:25:6d:e6: 0c:46:12:fc:9d:ce:6f:a7:92:e4:e7:6f:38:79:10: 0d:fe:4b:a2:03:43:42:8a:30:32:07:6c:46:70:1d: ec:10:db:46:8f:83:bc:a9:05:9d:ec:55:4b:8e:0b: ee:58:50:7d:06:e7:2e:b2:38:b8:55:b7:0f:65:3d: 60:79:81:25:55:d3:a7:fd:37:62:79:c5:2a:5f:4b: a3:40:35:d3:de:17:a4:b1:d3:18:36:08:25:9e:82: 4d:e7:08:0f:9b:93:1a:54:35:b2:4c:ab:fa:59:50: 34:4c:14:0d:84:20:9f:18:6e:1c:fe:f1:6e:a9:12: 2a:c4:ae:a4:33:7a:ae:d8:b2:1a:54:cb:a6:8d:28: 40:dd:09:c7:22:2f:7c:55:2b:bf:5b:77:f6:d5:6d: 87:73:7d:72:2e:35:1a:b0:d3:eb:dc:6b:48:4f:a2: d1:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:47:DF:96:BF:42:37:DA:19:B4:92:27:5D:40:73:99:AE:DA:0F:6A X509v3 Authority Key Identifier: keyid:90:C3:D8:35:17:26:A8:B9:1D:E2:6D:46:81:12:83:43:5C:C5:26:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:f0:fb:15:42:b1:a4:32:d3:f6:85:39:9d:5f:b5:4a:8c:a3: ea:06:e7:7f:2b:ca:f5:8e:e4:1f:35:99:4c:16:7e:c7:1a:1f: 2c:de:ea:9a:8c:95:21:19:b7:08:7f:97:28:90:66:92:d0:7b: 56:1e:a6:8a:4a:37:00:a5:f5:c7:41:8d:25:15:b9:f5:3a:18: bd:6c:a4:d9:d0:93:7c:8e:f4:46:97:3d:9d:62:70:81:a8:82: ea:14:00:25:43:be:15:86:88:f0:fa:05:df:12:8f:83:66:a5: 27:f1:92:2f:b4:09:94:4e:6b:46:10:55:e9:6e:21:9b:0b:71: 5a:0a:24:13:29:14:69:26:79:ec:80:59:2c:a8:57:c3:dc:b4: 4b:de:95:4e:67:2f:cd:de:56:ca:65:04:4a:3d:5d:a8:81:c9: d0:9a:cc:e6:76:d9:27:c6:1b:65:d8:bb:59:78:72:78:28:6c: 77:7f:68:f9:2f:ef:14:9d:34:d2:21:03:95:a1:d8:68:9d:99: 6b:3f:76:2d:f6:0d:e4:fc:aa:05:7b:95:3b:90:4f:d7:66:09: db:79:fc:db:b4:b8:2f:d4:31:c6:4d:0e:73:26:f8:5e:22:45: c8:0a:2c:cd:55:67:84:a9:03:1c:59:39:48:88:34:d7:84:c0: a8:5f:20:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBskwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM0REQxMTAvBgNVBAUTKDkwQzNEODM1MTcyNkE4QjkxREUyNkQ0NjgxMTI4MzQz NUNDNTI2MjMwHhcNMjUwNDI2MjE0NjI4WhcNMjUwNTAzMjE0NjI4WjAYMRYwFAYD VQQDEw02ODBkNTQzNC03ZjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw2f/VrkjsELGmAZDIVVUv5sFN9PugChkpfb9u5tY65NQgUgETWdlNbqMBcxs YxX28NHB9pOqRpsOrXIFZuDDMd/WGj1smKQG227UgDLaOqIBHJ/v6QglbeYMRhL8 nc5vp5Lk5284eRAN/kuiA0NCijAyB2xGcB3sENtGj4O8qQWd7FVLjgvuWFB9Bucu sji4VbcPZT1geYElVdOn/TdiecUqX0ujQDXT3heksdMYNgglnoJN5wgPm5MaVDWy TKv6WVA0TBQNhCCfGG4c/vFuqRIqxK6kM3qu2LIaVMumjShA3QnHIi98VSu/W3f2 1W2Hc31yLjUasNPr3GtIT6LRfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIJH35a/ QjfaGbSSJ11Ac5mu2g9qMB8GA1UdIwQYMBaAFJDD2DUXJqi5HeJtRoESg0NcxSYj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzRERC9CODhDMjI0QzU1 N0QxMUVCQjQ5MEI1M0JDNEY5QUUwMi9rTVBZTlJjbXFMa2Q0bTFHZ1JLRFExekZK aU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tNUFlOUmNtcUxrZDRtMUdnUktEUTF6RkppTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzRERC9CODhDMjI0QzU1N0QxMUVCQjQ5MEI1M0JDNEY5QUUwMi9rTVBZTlJjbXFM a2Q0bTFHZ1JLRFExekZKaU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBh8PsVQrGkMtP2hTmdX7VKjKPqBud/K8r1juQfNZlMFn7HGh8s3uqa jJUhGbcIf5cokGaS0HtWHqaKSjcApfXHQY0lFbn1Ohi9bKTZ0JN8jvRGlz2dYnCB qILqFAAlQ74Vhojw+gXfEo+DZqUn8ZIvtAmUTmtGEFXpbiGbC3FaCiQTKRRpJnns gFksqFfD3LRL3pVOZy/N3lbKZQRKPV2ogcnQmszmdtknxhtl2LtZeHJ4KGx3f2j5 L+8UnTTSIQOVodhonZlrP3Yt9g3k/KoFe5U7kE/XZgnbefzbtLgv1DHGTQ5zJvhe IkXICizNVWeEqQMcWTlIiDTXhMCoXyD5 -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:16 2025 by rpki-client on console.sobornost.net