$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft File: 9JfRcWknbUPFhSFcGYMxwzwiWnU.mft (raw, json) Hash identifier: +iHQf08uDIBkDpAFpDDuq2ZbV8fc8JcmRwMIIlSiKto= Subject key identifier: ED:DD:8B:A4:BA:52:19:11:D9:65:92:40:CE:34:02:83:2D:D7:64:EB Authority key identifier: F4:97:D1:71:69:27:6D:43:C5:85:21:5C:19:83:31:C3:3C:22:5A:75 Certificate issuer: /CN=A91ECC24/serialNumber=F497D17169276D43C585215C198331C33C225A75 Certificate serial: 01E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft Manifest number: 01D6 Signing time: Sun 27 Apr 2025 01:57:53 +0000 Manifest this update: Sun 27 Apr 2025 01:57:53 +0000 Manifest next update: Sun 04 May 2025 01:57:53 +0000 Files and hashes: 1: 9JfRcWknbUPFhSFcGYMxwzwiWnU.crl (hash: 7/7OP+1vV9RDU3cOpFE2VGADl5dB6KiOeOnBsEO3kB8=) 2: AC8A59D689D311EE81F03018C4F9AE02.roa (hash: CgMPU2zKmFQv28rwsx7lyUdY/WjeUcfrzEMiRjZzUr8=) 3: B9D8F9CE89D011EEB603FF75C4F9AE02.roa (hash: l/45mJzVlvrXkvMnYsTOqET7KEWpbH/MA+sFMBUmJ+A=) 4: C82A0778680811EE88B5527CC4F9AE02.roa (hash: FMfFksLuvdDh719tgVb78yQXrHhuawjPdGhDWuzq2VE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.crl rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 01:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 482 (0x1e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECC24, serialNumber=F497D17169276D43C585215C198331C33C225A75 Validity Not Before: Apr 27 01:57:53 2025 GMT Not After : May 4 01:57:53 2025 GMT Subject: CN=680d8f21-1ae8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:57:25:b6:d3:1f:a4:06:6e:b4:b2:37:f2:b8: 13:c4:46:d0:5e:ad:49:38:b6:ae:e6:a7:8a:77:39: 23:ac:ce:30:21:1a:1c:7e:df:1b:1a:a8:4b:d3:dc: 51:21:59:27:a6:8e:0e:ce:12:7c:34:d5:1e:36:8e: f2:6f:2d:59:08:30:e6:66:57:6e:d6:92:2f:64:a0: 2a:03:22:1e:da:21:4d:8a:63:00:27:eb:49:b3:19: 67:42:6e:f5:3c:c9:0a:36:41:cb:8a:00:d3:be:e0: d6:99:42:fa:5d:23:41:4c:26:3f:50:e7:61:b9:b0: f1:4c:9a:99:83:0d:7f:f6:d2:38:dc:ea:bf:68:ee: 86:cb:8a:9a:be:56:31:95:30:28:35:ba:28:f3:51: 40:fd:53:b4:63:a9:be:bd:95:aa:91:64:07:f3:20: a4:e2:07:2c:d5:3e:14:10:67:09:68:9b:9b:0f:70: 10:89:0d:64:22:49:81:db:39:32:e6:08:7c:cb:11: 6a:37:e7:69:16:1e:fb:da:a2:67:9a:1f:7f:cb:d0: 41:fe:ab:4b:07:76:ad:70:7c:82:9f:3f:61:1c:bc: 3c:18:1b:68:bc:d6:26:e6:a7:5d:c0:fb:3f:7c:ff: 15:02:ac:d9:7b:33:f1:e8:e0:f7:a8:23:5a:da:1c: 88:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:DD:8B:A4:BA:52:19:11:D9:65:92:40:CE:34:02:83:2D:D7:64:EB X509v3 Authority Key Identifier: keyid:F4:97:D1:71:69:27:6D:43:C5:85:21:5C:19:83:31:C3:3C:22:5A:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:9e:d0:59:ff:8d:5e:60:69:93:57:f6:12:fd:11:5d:e4:57: 0d:1a:c0:a1:4c:c0:e8:2f:c3:f6:c5:6c:b1:bc:af:b7:bb:88: 64:25:35:24:bb:a8:de:2b:08:18:19:c9:ed:f8:69:bd:70:45: b7:28:a5:43:55:4b:d0:f9:51:8d:c5:aa:e4:b4:3e:e4:7f:62: 7c:85:db:aa:34:d8:f6:06:5c:94:e0:62:89:fa:80:28:9c:39: 4e:db:e8:e6:c3:7b:f3:b4:e0:c9:91:6b:c2:7f:16:f2:99:9f: f3:0f:26:3d:18:7f:1e:37:03:f2:8c:79:70:af:ce:e4:ae:72: 45:4d:e9:ac:b8:18:cd:b1:75:b4:cf:13:da:fe:2e:dd:94:b2: 40:6f:12:71:e1:5e:0c:cd:7a:07:60:e2:cd:2d:73:26:ab:d6: d5:10:62:e0:69:3b:49:28:75:e7:e4:72:fb:6d:84:f4:e0:87: 1f:01:9b:ae:a1:2c:68:90:03:81:cd:25:f3:ef:0e:a7:cd:d4: da:fc:29:25:0c:eb:ad:2f:8c:12:09:b2:2b:36:c2:8a:44:dc: 44:44:0b:33:61:c6:42:3a:cf:fc:b4:b7:62:2c:53:d5:74:cc: f2:7b:c1:d0:87:b4:7f:a9:20:10:66:64:4b:dd:38:b6:af:10: 3c:f8:64:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUNDMjQxMTAvBgNVBAUTKEY0OTdEMTcxNjkyNzZENDNDNTg1MjE1QzE5ODMzMUMz M0MyMjVBNzUwHhcNMjUwNDI3MDE1NzUzWhcNMjUwNTA0MDE1NzUzWjAYMRYwFAYD VQQDEw02ODBkOGYyMS0xYWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwlclttMfpAZutLI38rgTxEbQXq1JOLau5qeKdzkjrM4wIRocft8bGqhL09xR IVknpo4OzhJ8NNUeNo7yby1ZCDDmZldu1pIvZKAqAyIe2iFNimMAJ+tJsxlnQm71 PMkKNkHLigDTvuDWmUL6XSNBTCY/UOdhubDxTJqZgw1/9tI43Oq/aO6Gy4qavlYx lTAoNboo81FA/VO0Y6m+vZWqkWQH8yCk4gcs1T4UEGcJaJubD3AQiQ1kIkmB2zky 5gh8yxFqN+dpFh772qJnmh9/y9BB/qtLB3atcHyCnz9hHLw8GBtovNYm5qddwPs/ fP8VAqzZezPx6OD3qCNa2hyI3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO3di6S6 UhkR2WWSQM40AoMt12TrMB8GA1UdIwQYMBaAFPSX0XFpJ21DxYUhXBmDMcM8Ilp1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQ0MyNC8xNkM2MTMxNjZB RkExMUVEQjcwNkZGM0NDNEY5QUUwMi85SmZSY1drbmJVUEZoU0ZjR1lNeHd6d2lX blUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlKZlJjV2tuYlVQRmhTRmNHWU14d3p3aVduVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Q0MyNC8xNkM2MTMxNjZBRkExMUVEQjcwNkZGM0NDNEY5QUUwMi85SmZSY1drbmJV UEZoU0ZjR1lNeHd6d2lXblUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNntBZ/41eYGmTV/YS/RFd5FcNGsChTMDoL8P2xWyxvK+3u4hkJTUk u6jeKwgYGcnt+Gm9cEW3KKVDVUvQ+VGNxarktD7kf2J8hduqNNj2BlyU4GKJ+oAo nDlO2+jmw3vztODJkWvCfxbymZ/zDyY9GH8eNwPyjHlwr87krnJFTemsuBjNsXW0 zxPa/i7dlLJAbxJx4V4MzXoHYOLNLXMmq9bVEGLgaTtJKHXn5HL7bYT04IcfAZuu oSxokAOBzSXz7w6nzdTa/CklDOutL4wSCbIrNsKKRNxERAszYcZCOs/8tLdiLFPV dMzye8HQh7R/qSAQZmRL3Ti2rxA8+GS+ -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:16 2025 by rpki-client on console.sobornost.net