$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft File: F9X-Mj6_2ajTROd7c3majnViQ1I.mft (raw, json) Hash identifier: 3pNuoMC8d0pmYA7Q8tyD+bR9vJYybjpFfSm/+SmXZFY= Subject key identifier: 5B:D7:A4:BC:D5:7A:F3:5C:88:8D:DA:BD:80:E9:4F:D5:E6:51:59:C8 Authority key identifier: 17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52 Certificate issuer: /CN=A91F2B47/serialNumber=17D5FE323EBFD9A8D344E77B73799A8E75624352 Certificate serial: 0241 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft Manifest number: 0225 Signing time: Sun 27 Apr 2025 01:38:35 +0000 Manifest this update: Sun 27 Apr 2025 01:38:34 +0000 Manifest next update: Sun 04 May 2025 01:38:34 +0000 Files and hashes: 1: F9X-Mj6_2ajTROd7c3majnViQ1I.crl (hash: RF5Zy0Ju+7oeORXBcek4hSOq9AwZW6CNAExnmfcL+64=) 2: 014DA14E596F11ED9DE99A66C4F9AE02.roa (hash: EbZ289YqTjjHul9Gc5OsYaqkiIBsHmwVJ9L1aCN8g68=) 3: 4BBA96965CD511EE9A078180C4F9AE02.roa (hash: s8gyc+lMEl4nS7dY6mvX8/vnSbnC7+O4jW7tyoFs1/s=) 4: 61CC010AE4BA11EE8037FD6DC4F9AE02.roa (hash: lFYxSl2pOGkakLM+J9NHER06FELZm5NAXjqBVUZYCW4=) 5: 66E8964AE4B911EE8EC7426CC4F9AE02.roa (hash: 09gHaKHodm8DnpQuTY9BuW6MFW3h5Zayu3XFpgrbJoc=) 6: 50AF1E205CD411EEBADBCF7DC4F9AE02.roa (hash: Jo5fPiYa65aMAoum6b7Ul8L0BSiMHOWrhdixO3zUwaU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.crl rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 01:38:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 577 (0x241) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2B47, serialNumber=17D5FE323EBFD9A8D344E77B73799A8E75624352 Validity Not Before: Apr 27 01:38:34 2025 GMT Not After : May 4 01:38:34 2025 GMT Subject: CN=680d8a9b-c090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:50:49:06:70:0d:64:c1:a2:e6:f3:0a:ea:97: 82:0f:8a:b6:9f:ad:2f:df:ca:c2:2f:4c:00:a9:a4: 29:68:e4:f5:88:4a:26:fb:d8:01:6e:9e:7a:67:8e: 2f:ae:51:ab:37:d0:dc:06:36:72:2e:b3:32:c4:1d: be:c4:c9:7e:b7:70:76:dd:de:18:9a:38:58:b2:94: 11:41:6e:41:03:54:c6:37:e6:37:85:48:a8:c6:7a: 43:7f:a9:a3:5a:38:f9:b2:04:23:c9:22:78:e7:ac: 12:8b:4f:fe:ba:8c:a6:34:37:81:53:fc:9a:e5:e6: 2b:6a:c1:4d:a9:68:84:01:73:74:42:bd:0c:1d:61: 2e:0e:a7:a6:8b:ed:cf:85:4a:08:df:b4:c8:99:d3: bc:1a:49:bf:37:2f:4d:14:1d:10:b4:92:54:3b:f7: e8:78:df:25:7e:39:83:d9:8f:90:b5:0f:75:32:5d: 93:57:72:26:b0:5a:40:2b:c6:2e:d2:3f:7d:50:d5: b5:ab:66:33:c8:cb:15:43:58:23:df:9a:64:ef:66: 97:d5:a7:8f:d7:90:7e:35:30:ed:49:f2:72:38:f3: 96:ce:5f:99:2d:d5:6b:fb:91:64:e3:0d:70:56:68: 31:65:0f:75:47:dc:af:77:23:e9:37:dc:8c:88:bf: f4:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D7:A4:BC:D5:7A:F3:5C:88:8D:DA:BD:80:E9:4F:D5:E6:51:59:C8 X509v3 Authority Key Identifier: keyid:17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:d6:ab:8b:e9:fc:57:e6:60:4a:a9:45:57:14:f3:85:47:10: bf:cb:dd:6d:82:ac:ec:ff:2b:77:b0:ce:8d:6f:b3:4b:b2:b4: 51:49:f6:49:59:dd:51:5d:ed:81:db:15:6a:03:c9:9f:76:8c: 8a:27:21:1b:6e:5a:57:7e:f8:58:8a:74:9c:d6:d9:33:3c:b3: ab:1c:44:64:a6:8c:f1:21:df:0d:25:2d:d5:77:d2:a7:e7:2e: 55:7a:97:cb:a8:7b:fb:1b:d9:ee:b9:16:3c:78:88:13:e6:c3: e2:33:b0:7e:e8:fa:ed:fa:3a:2f:92:4e:c1:3f:5c:82:d4:ae: 87:7d:31:78:11:44:de:52:a0:47:86:a8:c5:59:57:e6:89:42: 70:5e:63:d8:30:9b:0b:39:b1:84:32:d3:9a:d0:80:29:56:c0: d0:e7:dd:ba:ee:34:ff:30:86:47:3c:39:ca:98:32:a8:8a:d2: 94:20:6d:af:40:e7:a7:16:4a:db:c1:18:32:b0:c3:cc:27:bc: 2c:60:e8:5f:aa:cb:83:0c:cc:e3:61:2d:76:54:06:03:2c:2d: e0:78:5d:4c:ef:b2:09:b0:41:26:3a:2a:b2:e5:43:c2:0a:80: 68:de:97:6f:bf:ef:cb:6c:8f:b9:ed:20:5e:d3:01:4f:2c:f6: 30:90:ad:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJCNDcxMTAvBgNVBAUTKDE3RDVGRTMyM0VCRkQ5QThEMzQ0RTc3QjczNzk5QThF NzU2MjQzNTIwHhcNMjUwNDI3MDEzODM0WhcNMjUwNTA0MDEzODM0WjAYMRYwFAYD VQQDEw02ODBkOGE5Yi1jMDkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3FBJBnANZMGi5vMK6peCD4q2n60v38rCL0wAqaQpaOT1iEom+9gBbp56Z44v rlGrN9DcBjZyLrMyxB2+xMl+t3B23d4YmjhYspQRQW5BA1TGN+Y3hUioxnpDf6mj Wjj5sgQjySJ456wSi0/+uoymNDeBU/ya5eYrasFNqWiEAXN0Qr0MHWEuDqemi+3P hUoI37TImdO8Gkm/Ny9NFB0QtJJUO/foeN8lfjmD2Y+QtQ91Ml2TV3ImsFpAK8Yu 0j99UNW1q2YzyMsVQ1gj35pk72aX1aeP15B+NTDtSfJyOPOWzl+ZLdVr+5Fk4w1w VmgxZQ91R9yvdyPpN9yMiL/0BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFvXpLzV evNciI3avYDpT9XmUVnIMB8GA1UdIwQYMBaAFBfV/jI+v9mo00Tne3N5mo51YkNS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkI0Ny9FODhFOUM3RTMz QUYxMUVEQjYxMDc0MzRDNEY5QUUwMi9GOVgtTWo2XzJhalRST2Q3YzNtYWpuVmlR MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0Y5WC1NajZfMmFqVFJPZDdjM21ham5WaVExSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkI0Ny9FODhFOUM3RTMzQUYxMUVEQjYxMDc0MzRDNEY5QUUwMi9GOVgtTWo2XzJh alRST2Q3YzNtYWpuVmlRMUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCG1quL6fxX5mBKqUVXFPOFRxC/y91tgqzs/yt3sM6Nb7NLsrRRSfZJ Wd1RXe2B2xVqA8mfdoyKJyEbblpXfvhYinSc1tkzPLOrHERkpozxId8NJS3Vd9Kn 5y5VepfLqHv7G9nuuRY8eIgT5sPiM7B+6Prt+jovkk7BP1yC1K6HfTF4EUTeUqBH hqjFWVfmiUJwXmPYMJsLObGEMtOa0IApVsDQ59267jT/MIZHPDnKmDKoitKUIG2v QOenFkrbwRgysMPMJ7wsYOhfqsuDDMzjYS12VAYDLC3geF1M77IJsEEmOiqy5UPC CoBo3pdvv+/LbI+57SBe0wFPLPYwkK16 -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:17 2025 by rpki-client on console.sobornost.net