$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft File: tdM6ejKlCC0za2sFt5ZfMHRwonY.mft (raw, json) Hash identifier: OrUVVaO1JKCv4FHGYktEUIbvmlcib+iDr+PXICdqypw= Subject key identifier: 00:F9:99:90:D8:1D:AF:10:43:01:1D:B1:3C:F0:E7:76:47:97:D4:EC Authority key identifier: B5:D3:3A:7A:32:A5:08:2D:33:6B:6B:05:B7:96:5F:30:74:70:A2:76 Certificate issuer: /CN=A91F1446/serialNumber=B5D33A7A32A5082D336B6B05B7965F307470A276 Certificate serial: 0336 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft Manifest number: 0326 Signing time: Sun 27 Apr 2025 00:46:37 +0000 Manifest this update: Sun 27 Apr 2025 00:46:37 +0000 Manifest next update: Sun 04 May 2025 00:46:37 +0000 Files and hashes: 1: tdM6ejKlCC0za2sFt5ZfMHRwonY.crl (hash: iqv4YkI9rfZULjTFw7VDH7dvR3+RNatfGLHe6hGpFUw=) 2: 31521640C6CB11ECB185E43EC4F9AE02.roa (hash: DOUqu1Qj+MU4+uk8We4DlL9rOQ0u7xDb2aWTGQZFr1c=) 3: D56B4ABED54E11EFAD8C4E52C4F9AE02.roa (hash: GjwPBXkxZ4qE4L8GvWJPamMwvGLPmxgtpWoHImjgHS0=) 4: 69B0C410EC2411EFBE58C381C4F9AE02.roa (hash: 9wsSWlTIkEvdY3EgDoQza7/AJrOesuO9qQzI1IZGf8w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.crl rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 00:46:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 822 (0x336) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1446, serialNumber=B5D33A7A32A5082D336B6B05B7965F307470A276 Validity Not Before: Apr 27 00:46:37 2025 GMT Not After : May 4 00:46:37 2025 GMT Subject: CN=680d7e6d-da6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ba:63:c4:9d:bb:06:49:be:1c:da:ce:62:a5: 1b:08:1e:32:8e:04:41:76:3c:dd:55:51:94:e7:26: d0:da:ab:11:16:1d:67:3a:c4:a3:73:1e:16:b8:da: ed:e3:6b:9b:ef:e8:5b:8a:c4:2f:ca:4a:f2:19:23: 03:8f:ca:f7:59:ea:a3:06:42:fc:d7:e1:8d:34:12: b0:d2:63:9e:b1:28:79:8c:42:2b:2c:f2:2f:df:f6: ef:9a:3a:7b:1b:51:3c:1b:0f:35:a0:9c:97:2f:b2: 35:9e:3d:7b:77:87:bf:0c:b2:bb:0d:9a:3b:fa:81: 1e:d5:ae:73:eb:9f:72:08:9a:55:c4:82:65:f5:56: 88:ba:5b:00:e1:f1:d0:8b:0c:93:7b:1c:0e:45:bf: 34:03:33:db:38:78:68:c2:87:49:c4:7a:62:40:3c: 31:d1:72:ae:5f:2e:ec:90:92:5b:81:b6:80:fd:67: a4:ca:69:4e:73:16:7f:29:11:f3:c5:e0:12:4b:65: 91:e2:e1:1b:27:e6:fb:5b:53:73:90:5a:51:4a:bb: 12:0f:1a:70:26:3b:ac:e8:12:74:7a:57:5e:52:be: 41:e9:aa:13:5b:8a:da:53:f3:21:e1:71:64:cf:70: 08:4d:6d:cc:9f:aa:09:2c:69:28:ef:c6:0b:35:67: f6:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:F9:99:90:D8:1D:AF:10:43:01:1D:B1:3C:F0:E7:76:47:97:D4:EC X509v3 Authority Key Identifier: keyid:B5:D3:3A:7A:32:A5:08:2D:33:6B:6B:05:B7:96:5F:30:74:70:A2:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:d1:26:1b:4e:f3:4f:b8:1d:cb:9d:e4:3b:9c:59:2d:cb:46: 46:76:36:57:ff:75:6c:0f:e6:2e:5f:b9:3a:d6:b5:8e:dd:12: c5:43:e4:9e:54:0c:31:9b:7f:d5:e6:76:07:1f:78:8a:f5:df: ee:ca:e1:0c:93:65:96:3e:39:e6:80:6d:da:32:80:a3:f4:44: 79:56:c5:17:88:13:6c:a9:ea:38:16:86:4e:7b:11:d7:68:77: 70:e4:1a:2a:5a:be:3d:1c:c5:a8:2b:84:97:ef:08:46:4d:b2: 4b:a8:a6:17:38:6e:66:12:52:c7:2d:b6:f5:b0:5e:1f:2b:4a: 07:fd:48:53:78:fc:18:c0:f7:39:64:17:e8:f4:c5:49:ed:64: f1:e4:b0:dc:b6:ba:83:6b:0c:44:c0:da:fe:79:82:07:e9:69: 7e:1d:0e:f2:4b:86:14:46:69:2d:f3:68:ba:4b:11:53:30:df: 7f:fb:74:97:29:23:2e:2b:0c:24:23:66:6e:f3:c5:9b:b9:da: ee:ef:4d:5c:c9:ec:40:f8:70:0e:99:2d:30:d5:69:b1:07:20: 3c:58:61:d3:34:0d:88:db:6b:d2:b1:1b:c2:2a:d1:87:a3:68: b0:6b:03:05:a7:3f:a9:7d:f4:92:f3:f5:60:eb:5a:32:53:f7: d3:5a:fd:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE0NDYxMTAvBgNVBAUTKEI1RDMzQTdBMzJBNTA4MkQzMzZCNkIwNUI3OTY1RjMw NzQ3MEEyNzYwHhcNMjUwNDI3MDA0NjM3WhcNMjUwNTA0MDA0NjM3WjAYMRYwFAYD VQQDEw02ODBkN2U2ZC1kYTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnrpjxJ27Bkm+HNrOYqUbCB4yjgRBdjzdVVGU5ybQ2qsRFh1nOsSjcx4WuNrt 42ub7+hbisQvykryGSMDj8r3WeqjBkL81+GNNBKw0mOesSh5jEIrLPIv3/bvmjp7 G1E8Gw81oJyXL7I1nj17d4e/DLK7DZo7+oEe1a5z659yCJpVxIJl9VaIulsA4fHQ iwyTexwORb80AzPbOHhowodJxHpiQDwx0XKuXy7skJJbgbaA/WekymlOcxZ/KRHz xeASS2WR4uEbJ+b7W1NzkFpRSrsSDxpwJjus6BJ0eldeUr5B6aoTW4raU/Mh4XFk z3AITW3Mn6oJLGko78YLNWf2LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAD5mZDY Ha8QQwEdsTzw53ZHl9TsMB8GA1UdIwQYMBaAFLXTOnoypQgtM2trBbeWXzB0cKJ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTQ0Ni8yQTFGRjU2RUM1 MzUxMUVDOEU1QTAzMTNDNEY5QUUwMi90ZE02ZWpLbENDMHphMnNGdDVaZk1IUndv blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RkTTZlaktsQ0MwemEyc0Z0NVpmTUhSd29uWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTQ0Ni8yQTFGRjU2RUM1MzUxMUVDOEU1QTAzMTNDNEY5QUUwMi90ZE02ZWpLbEND MHphMnNGdDVaZk1IUndvblkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAs0SYbTvNPuB3LneQ7nFkty0ZGdjZX/3VsD+YuX7k61rWO3RLFQ+Se VAwxm3/V5nYHH3iK9d/uyuEMk2WWPjnmgG3aMoCj9ER5VsUXiBNsqeo4FoZOexHX aHdw5BoqWr49HMWoK4SX7whGTbJLqKYXOG5mElLHLbb1sF4fK0oH/UhTePwYwPc5 ZBfo9MVJ7WTx5LDctrqDawxEwNr+eYIH6Wl+HQ7yS4YURmkt82i6SxFTMN9/+3SX KSMuKwwkI2Zu88Wbudru701cyexA+HAOmS0w1WmxByA8WGHTNA2I22vSsRvCKtGH o2iwawMFpz+pffSS8/Vg61oyU/fTWv3s -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:17 2025 by rpki-client on console.sobornost.net