$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft File: sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft (raw, json) Hash identifier: nVEFe3EGn9GtsHudWRB0OejoD+GdSrdzDPiLO1qpymY= Subject key identifier: 05:5D:F4:15:12:59:89:7A:66:14:96:A3:B8:9D:62:C5:DE:54:26:10 Authority key identifier: B2:3A:D5:83:63:2C:60:E0:67:F5:3D:66:A4:5E:95:0F:BB:07:77:C4 Certificate issuer: /CN=A91F0017/serialNumber=B23AD583632C60E067F53D66A45E950FBB0777C4 Certificate serial: 02A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft Manifest number: 029F Signing time: Sun 27 Apr 2025 01:08:43 +0000 Manifest this update: Sun 27 Apr 2025 01:08:43 +0000 Manifest next update: Sun 04 May 2025 01:08:43 +0000 Files and hashes: 1: sjrVg2MsYOBn9T1mpF6VD7sHd8Q.crl (hash: 2jGQM4oUsMM1L+cMHUE0SHV5k1HnWqzmFtK7lH/p20M=) 2: D3843904F79D11ECAFF03840C4F9AE02.roa (hash: OalalDzVyKhIKt/8JFaNCLlPQG9aL6loK7h8qfIQsmQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.crl rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 01:08:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 674 (0x2a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0017, serialNumber=B23AD583632C60E067F53D66A45E950FBB0777C4 Validity Not Before: Apr 27 01:08:43 2025 GMT Not After : May 4 01:08:43 2025 GMT Subject: CN=680d839b-d312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2d:a2:a3:29:ee:39:d0:75:c2:04:7a:83:39: 6e:dd:b9:fc:f2:f1:f7:23:c8:0e:0c:3a:b7:4e:ae: ac:fc:5e:26:76:51:b5:a7:76:fb:90:16:94:39:4e: 87:25:1c:41:75:c3:98:cf:48:43:e1:39:0e:73:74: 40:c9:7f:d6:5e:4b:e1:58:51:53:e5:19:93:84:18: fa:e4:4e:fb:78:2b:d8:87:f6:41:43:e8:41:78:09: 6a:a4:be:6b:78:60:4c:ce:bd:45:0d:e4:ed:c4:4d: b8:a3:14:a5:78:19:b8:a9:b2:5d:e0:90:39:5d:c1: 22:b5:1f:dc:eb:7c:15:ec:8a:d6:37:1b:d3:e8:73: cb:3a:8f:47:8c:55:62:aa:12:e9:e1:33:0a:57:a8: b9:2e:3e:e5:76:27:a0:a4:14:06:86:3b:bd:c4:aa: 32:a8:f9:8b:8a:96:7e:be:03:ff:f7:ac:33:82:be: 54:3e:14:31:86:4e:24:bf:a5:ef:7e:21:8d:1e:69: c4:a1:b1:67:0a:3b:b6:10:2b:77:67:bf:08:ed:33: 29:6d:33:e5:f7:1e:bf:90:56:2f:7c:28:4e:f1:ae: 1c:dd:13:4e:6d:77:08:65:e6:f6:9d:0d:20:05:c5: 2a:bb:a8:0e:7e:d8:4a:32:06:37:9b:5d:79:54:74: d9:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:5D:F4:15:12:59:89:7A:66:14:96:A3:B8:9D:62:C5:DE:54:26:10 X509v3 Authority Key Identifier: keyid:B2:3A:D5:83:63:2C:60:E0:67:F5:3D:66:A4:5E:95:0F:BB:07:77:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:d9:14:0e:f0:7f:fc:ed:a2:05:27:46:4b:88:c9:5a:24:4d: e7:67:88:fa:3a:15:ab:69:af:fa:7f:df:f7:ae:78:7d:d9:a2: da:8b:9e:12:15:6b:f0:66:08:ec:2a:f1:1f:ec:2c:ee:d3:aa: 64:8d:ae:c1:2d:26:a0:19:00:96:55:01:95:99:89:39:84:76: 5a:30:84:f4:5e:f9:91:6b:8d:03:d1:ae:0b:51:43:68:08:32: 91:d8:d3:0c:d1:e6:f2:61:99:ff:9f:3f:f3:14:0e:3f:4b:c5: 3e:3e:1e:db:35:62:28:c3:b8:09:2a:7a:c0:93:cd:8a:73:11: 70:4b:a1:f9:00:0e:6a:b6:60:11:0a:95:5c:74:74:36:7c:3d: 91:9f:eb:1e:c4:2d:cf:88:e1:f7:bb:cf:30:a5:37:8e:36:39: 85:47:26:2f:76:bd:46:65:d0:2d:b9:99:28:09:c9:12:d7:1a: 59:66:8e:0a:53:8a:29:a6:b3:98:95:ed:41:26:0c:7f:f9:e3: d4:67:3e:ad:c4:0a:26:d8:64:0b:35:8c:fa:08:c2:54:f0:09: ba:83:f1:da:e1:ae:42:8a:c6:f9:59:d0:2b:43:98:17:9f:5b: 68:ad:fc:26:f3:e0:ed:23:6b:07:7d:56:7c:50:7c:97:a4:bb: c5:0f:64:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjAwMTcxMTAvBgNVBAUTKEIyM0FENTgzNjMyQzYwRTA2N0Y1M0Q2NkE0NUU5NTBG QkIwNzc3QzQwHhcNMjUwNDI3MDEwODQzWhcNMjUwNTA0MDEwODQzWjAYMRYwFAYD VQQDEw02ODBkODM5Yi1kMzEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyS2ioynuOdB1wgR6gzlu3bn88vH3I8gODDq3Tq6s/F4mdlG1p3b7kBaUOU6H JRxBdcOYz0hD4TkOc3RAyX/WXkvhWFFT5RmThBj65E77eCvYh/ZBQ+hBeAlqpL5r eGBMzr1FDeTtxE24oxSleBm4qbJd4JA5XcEitR/c63wV7IrWNxvT6HPLOo9HjFVi qhLp4TMKV6i5Lj7ldiegpBQGhju9xKoyqPmLipZ+vgP/96wzgr5UPhQxhk4kv6Xv fiGNHmnEobFnCju2ECt3Z78I7TMpbTPl9x6/kFYvfChO8a4c3RNObXcIZeb2nQ0g BcUqu6gOfthKMgY3m115VHTZYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAVd9BUS WYl6ZhSWo7idYsXeVCYQMB8GA1UdIwQYMBaAFLI61YNjLGDgZ/U9ZqRelQ+7B3fE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDAxNy83NjE3MUU1NEY3 OTcxMUVDQjRDNjY4MzVDNEY5QUUwMi9zanJWZzJNc1lPQm45VDFtcEY2VkQ3c0hk OFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NqclZnMk1zWU9CbjlUMW1wRjZWRDdzSGQ4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDAxNy83NjE3MUU1NEY3OTcxMUVDQjRDNjY4MzVDNEY5QUUwMi9zanJWZzJNc1lP Qm45VDFtcEY2VkQ3c0hkOFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDN2RQO8H/87aIFJ0ZLiMlaJE3nZ4j6OhWraa/6f9/3rnh92aLai54S FWvwZgjsKvEf7Czu06pkja7BLSagGQCWVQGVmYk5hHZaMIT0XvmRa40D0a4LUUNo CDKR2NMM0ebyYZn/nz/zFA4/S8U+Ph7bNWIow7gJKnrAk82KcxFwS6H5AA5qtmAR CpVcdHQ2fD2Rn+sexC3PiOH3u88wpTeONjmFRyYvdr1GZdAtuZkoCckS1xpZZo4K U4opprOYle1BJgx/+ePUZz6txAom2GQLNYz6CMJU8Am6g/Ha4a5Cisb5WdArQ5gX n1torfwm8+DtI2sHfVZ8UHyXpLvFD2SJ -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:17 2025 by rpki-client on console.sobornost.net