$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.mft File: 7vvGU2P1cW1yTBF81UIh5BLZI8w.mft (raw, json) Hash identifier: NG8Brzvb1mpjo1cxaIOVN6H0zCzkOZO+60VkZCRKU1U= Subject key identifier: E5:96:7F:9C:02:EA:A6:23:32:08:95:4D:8B:25:BD:20:1E:BA:02:0E Authority key identifier: EE:FB:C6:53:63:F5:71:6D:72:4C:11:7C:D5:42:21:E4:12:D9:23:CC Certificate issuer: /CN=A91F2A41/serialNumber=EEFBC65363F5716D724C117CD54221E412D923CC Certificate serial: 02CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7vvGU2P1cW1yTBF81UIh5BLZI8w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.mft Manifest number: 02C3 Signing time: Sun 27 Apr 2025 01:02:34 +0000 Manifest this update: Sun 27 Apr 2025 01:02:33 +0000 Manifest next update: Sun 04 May 2025 01:02:33 +0000 Files and hashes: 1: 7vvGU2P1cW1yTBF81UIh5BLZI8w.crl (hash: w2g3JWlE0cf8Ffarf5YU1BqNEHgjofi1wdS9lu5kzFs=) 2: ABF61020E93C11ECA5406975C4F9AE02.roa (hash: pDFhcqRhca1GNa0ZmLkQpgslerwa9C5G+2JfTrt137w=) 3: ADBF1F6EE93C11ECA5406975C4F9AE02.roa (hash: qb7qUtAkoHjPv30O4ulR321GUnOwL4yDIMYd10CmtCA=) 4: 01C04C52FB8D11ECABCA1D0AC4F9AE02.roa (hash: IdffaUaBoSta1anksGvusIKN2vlycl68X+OeRcTSpcY=) 5: AD08F946E93C11ECA5406975C4F9AE02.roa (hash: 8j2o1z/nwnh5lm7+ZdnqPMHGr9wIM/IlvKvCsESoCt8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.crl rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7vvGU2P1cW1yTBF81UIh5BLZI8w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 01:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 719 (0x2cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2A41, serialNumber=EEFBC65363F5716D724C117CD54221E412D923CC Validity Not Before: Apr 27 01:02:33 2025 GMT Not After : May 4 01:02:33 2025 GMT Subject: CN=680d822a-b8f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e5:7a:34:eb:e0:95:1c:cd:47:98:1a:4d:0f: 8e:63:cd:53:cc:28:50:06:a4:14:c7:1d:1b:ce:2a: a3:b0:8e:c2:c3:1e:c2:63:c9:82:28:71:be:65:e8: 25:37:9d:4f:27:b0:02:e0:cc:04:b9:c0:58:2e:96: f5:56:28:44:e3:76:96:b0:b9:30:3d:0f:f4:6a:e8: 87:56:1a:26:20:4e:16:55:5a:95:c8:b1:bc:7f:f4: c9:5c:77:ec:8f:8e:0e:68:11:1b:14:a8:b0:51:ac: 02:c1:41:5b:a9:00:dd:53:d9:1a:35:0d:83:0a:5c: df:71:dc:2b:5e:ab:81:2f:f4:04:05:e0:90:49:fd: d7:80:f8:63:91:a8:af:9c:3f:52:c8:b3:4f:df:6e: ce:cc:37:2d:c1:3d:27:27:63:e5:88:dc:29:d1:40: a8:b9:f6:5f:79:51:96:e1:a6:fa:01:65:07:91:cf: 6e:eb:50:43:9d:27:50:1e:c3:c8:af:d8:9f:5e:25: 48:51:55:d6:05:70:f5:66:d4:b7:3a:82:df:ca:de: de:7c:a1:23:e5:ed:5c:dc:a7:e5:90:b1:73:72:4d: 93:ee:00:35:a8:61:00:e6:86:f0:bf:26:c1:42:d7: ca:60:cd:58:60:24:9f:64:55:97:53:4c:7e:4e:f1: 82:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:96:7F:9C:02:EA:A6:23:32:08:95:4D:8B:25:BD:20:1E:BA:02:0E X509v3 Authority Key Identifier: keyid:EE:FB:C6:53:63:F5:71:6D:72:4C:11:7C:D5:42:21:E4:12:D9:23:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7vvGU2P1cW1yTBF81UIh5BLZI8w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:73:3c:b8:30:02:d1:80:08:cf:48:82:e5:d5:82:3d:42:29: 8b:2a:de:e4:08:9f:f4:cb:8c:5d:20:42:fc:c9:b9:6a:6c:f3: b8:4a:e2:75:b9:4b:a3:d1:7f:51:44:03:83:fc:c2:44:7d:c3: 1b:eb:ec:3c:b4:6a:e0:35:e8:5a:ce:5a:f3:35:0d:e1:72:c3: 06:29:24:72:c8:41:4a:d2:db:de:c7:e7:a4:ea:1c:47:d3:9b: 8d:09:19:05:09:3f:29:2f:a6:ce:8b:87:00:c1:75:3e:a5:96: e8:51:93:31:f9:59:dd:88:57:a9:ed:4d:6e:59:7f:75:74:72: d8:b3:27:a8:96:18:f5:95:a6:24:99:59:ef:0c:70:4e:be:36: 7d:c3:f6:95:2f:bd:01:30:88:b6:66:d9:7b:0c:07:d3:64:31: 50:4f:a8:66:ea:b9:2b:10:20:7d:50:f0:2e:0f:50:95:43:42: 9b:56:76:db:d2:5c:7a:d3:1c:ae:7e:b3:f7:c2:25:81:10:d5: a8:56:50:a2:7c:5a:ca:da:06:a3:5e:2f:c8:15:e9:a3:8f:8f: d1:e4:19:62:07:3d:71:d7:24:fd:e6:4a:98:82:6b:d0:06:91: 89:b1:da:56:8b:e4:bc:35:80:da:63:5b:0d:25:f8:6e:b9:56: 9c:da:3c:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAs8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJBNDExMTAvBgNVBAUTKEVFRkJDNjUzNjNGNTcxNkQ3MjRDMTE3Q0Q1NDIyMUU0 MTJEOTIzQ0MwHhcNMjUwNDI3MDEwMjMzWhcNMjUwNTA0MDEwMjMzWjAYMRYwFAYD VQQDEw02ODBkODIyYS1iOGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2eV6NOvglRzNR5gaTQ+OY81TzChQBqQUxx0bziqjsI7Cwx7CY8mCKHG+Zegl N51PJ7AC4MwEucBYLpb1VihE43aWsLkwPQ/0auiHVhomIE4WVVqVyLG8f/TJXHfs j44OaBEbFKiwUawCwUFbqQDdU9kaNQ2DClzfcdwrXquBL/QEBeCQSf3XgPhjkaiv nD9SyLNP327OzDctwT0nJ2PliNwp0UCoufZfeVGW4ab6AWUHkc9u61BDnSdQHsPI r9ifXiVIUVXWBXD1ZtS3OoLfyt7efKEj5e1c3KflkLFzck2T7gA1qGEA5obwvybB QtfKYM1YYCSfZFWXU0x+TvGCSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOWWf5wC 6qYjMgiVTYslvSAeugIOMB8GA1UdIwQYMBaAFO77xlNj9XFtckwRfNVCIeQS2SPM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkE0MS9CRDQxNDZEQUU5 MzUxMUVDQUM2NjU0NTJDNEY5QUUwMi83dnZHVTJQMWNXMXlUQkY4MVVJaDVCTFpJ OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzd2dkdVMlAxY1cxeVRCRjgxVUloNUJMWkk4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkE0MS9CRDQxNDZEQUU5MzUxMUVDQUM2NjU0NTJDNEY5QUUwMi83dnZHVTJQMWNX MXlUQkY4MVVJaDVCTFpJOHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYczy4MALRgAjPSILl1YI9QimLKt7kCJ/0y4xdIEL8yblqbPO4SuJ1 uUuj0X9RRAOD/MJEfcMb6+w8tGrgNehazlrzNQ3hcsMGKSRyyEFK0tvex+ek6hxH 05uNCRkFCT8pL6bOi4cAwXU+pZboUZMx+VndiFep7U1uWX91dHLYsyeolhj1laYk mVnvDHBOvjZ9w/aVL70BMIi2Ztl7DAfTZDFQT6hm6rkrECB9UPAuD1CVQ0KbVnbb 0lx60xyufrP3wiWBENWoVlCifFrK2gajXi/IFemjj4/R5BliBz1x1yT95kqYgmvQ BpGJsdpWi+S8NYDaY1sNJfhuuVac2jwq -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:17 2025 by rpki-client on console.sobornost.net