$ rpki-client -vvf rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft File: xPY4wJ43IEbAHfRgTCgRZPasFiI.mft (raw, json) Hash identifier: FlREB/O8r3BTeY2OK4rdzR7hD6zL1D5cPEovGnGo5TU= Subject key identifier: E2:40:1C:44:B6:8B:DA:A6:0C:7A:61:F2:5C:CA:A2:59:7A:25:58:C3 Authority key identifier: C4:F6:38:C0:9E:37:20:46:C0:1D:F4:60:4C:28:11:64:F6:AC:16:22 Certificate issuer: /CN=A91F33A5/serialNumber=C4F638C09E372046C01DF4604C281164F6AC1622 Certificate serial: 0320 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft Manifest number: 030A Signing time: Sun 27 Apr 2025 00:55:05 +0000 Manifest this update: Sun 27 Apr 2025 00:55:05 +0000 Manifest next update: Sun 04 May 2025 00:55:05 +0000 Files and hashes: 1: xPY4wJ43IEbAHfRgTCgRZPasFiI.crl (hash: G1HfMWjuJWAUuHrmCjByzkfc9zcjq7NJW+cVBir87Ww=) 2: 5E967DEE1ED711EDBD936A15C4F9AE02.roa (hash: +2b/qGdWsAWR/BKJskTGfjOIk8WF3Jjfuxvh9LPPuaA=) 3: 40838EC01EDA11ED90A3A71FC4F9AE02.roa (hash: QkUOxUdOqeDJq40oU7W9ZvA1XabLukGzl2cHkw2yMIw=) 4: 236D4FF0FD9D11EC868CDF5DC4F9AE02.roa (hash: 6J35YVUmzZ1s4Ice2keaYAnPdVe/zMmpQD23cIxvFqc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.crl rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 00:55:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 800 (0x320) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F33A5, serialNumber=C4F638C09E372046C01DF4604C281164F6AC1622 Validity Not Before: Apr 27 00:55:05 2025 GMT Not After : May 4 00:55:05 2025 GMT Subject: CN=680d8069-85c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:cb:27:65:3b:ad:33:1e:e7:65:bf:34:55:ed: 1b:70:6e:07:24:b4:9a:84:23:3d:2c:87:90:89:b6: e8:33:1d:f0:e9:d9:3d:ef:eb:55:0e:3f:8c:a4:88: 3e:4e:b7:d2:d4:81:ae:d2:c4:c7:b7:70:a7:fc:f3: 05:62:61:08:77:b6:63:9f:63:9e:52:c0:b4:e5:42: 75:c8:c8:a0:bd:a8:8a:9a:fd:f5:9c:bd:62:b7:52: ca:44:16:e1:77:8f:72:a0:f8:ed:30:57:67:27:52: 9f:c6:61:a5:b4:62:55:a4:f2:4b:4f:64:54:31:06: dc:51:1c:0a:f0:9d:27:a7:26:57:84:f3:2b:92:fe: f3:5f:73:09:aa:c5:97:f1:92:fc:1c:bf:7d:5a:f8: f0:c1:e8:f8:5e:c3:ca:7a:28:35:fa:4b:1a:9d:8e: d1:8c:0d:46:56:9f:24:bb:41:4e:a1:b5:9a:17:28: 34:99:9c:eb:e9:cd:2a:a7:05:0a:ee:20:84:b8:7e: 55:c8:74:c1:81:6f:f9:04:d6:af:27:52:f5:98:13: d4:15:64:aa:bf:1b:d2:7c:ba:ef:bc:80:85:d7:93: 0f:3c:01:1a:41:4a:4a:02:57:c2:7e:3d:cb:48:21: 9a:bc:9b:d7:a3:e3:ac:e3:02:c1:50:f9:43:4e:e9: a9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:40:1C:44:B6:8B:DA:A6:0C:7A:61:F2:5C:CA:A2:59:7A:25:58:C3 X509v3 Authority Key Identifier: keyid:C4:F6:38:C0:9E:37:20:46:C0:1D:F4:60:4C:28:11:64:F6:AC:16:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:35:43:76:17:81:60:22:83:be:5e:44:fc:c6:6c:dd:a8:cb: d7:78:03:9b:53:1a:78:c1:e4:40:84:64:97:9c:55:13:a9:62: b6:10:42:ed:cf:a1:75:75:c8:8a:63:17:e0:ae:71:c8:6b:8f: 6f:12:bf:8d:03:b7:38:84:57:ce:ac:fb:98:24:e6:1b:f0:18: 3b:0d:6e:81:80:d8:35:33:9f:c7:fc:41:e8:52:f8:f6:d6:df: 6d:6e:14:8c:8a:11:60:8d:d2:0e:6d:77:d8:f3:5f:af:a0:c4: e2:4c:e4:3b:87:3a:07:04:43:5f:43:63:58:70:64:71:6d:d7: 78:89:17:bb:e1:65:d4:9d:2c:16:bc:a7:bd:52:0e:ec:a6:c7: b4:84:03:41:98:64:fc:5c:7a:91:49:de:d2:fb:08:1d:02:3d: 59:e1:7a:51:3c:5b:ad:d4:e0:d6:5d:41:56:9b:a6:43:8e:e9: 23:97:32:5c:89:4e:dc:7a:b4:7f:c5:c8:a2:5f:3a:2e:bc:e6: 7a:3a:75:73:b7:e7:93:10:0c:f3:d3:ac:b2:a0:8f:c2:b6:e4: c1:93:cb:1f:b6:07:f1:8e:36:67:e2:54:c1:32:f0:3b:35:7e: e8:86:25:1c:2a:ef:90:d5:4a:f6:5b:bf:a8:93:f0:16:21:6d: 68:15:54:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMzQTUxMTAvBgNVBAUTKEM0RjYzOEMwOUUzNzIwNDZDMDFERjQ2MDRDMjgxMTY0 RjZBQzE2MjIwHhcNMjUwNDI3MDA1NTA1WhcNMjUwNTA0MDA1NTA1WjAYMRYwFAYD VQQDEw02ODBkODA2OS04NWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArMsnZTutMx7nZb80Ve0bcG4HJLSahCM9LIeQibboMx3w6dk97+tVDj+MpIg+ TrfS1IGu0sTHt3Cn/PMFYmEId7Zjn2OeUsC05UJ1yMigvaiKmv31nL1it1LKRBbh d49yoPjtMFdnJ1KfxmGltGJVpPJLT2RUMQbcURwK8J0npyZXhPMrkv7zX3MJqsWX 8ZL8HL99Wvjwwej4XsPKeig1+ksanY7RjA1GVp8ku0FOobWaFyg0mZzr6c0qpwUK 7iCEuH5VyHTBgW/5BNavJ1L1mBPUFWSqvxvSfLrvvICF15MPPAEaQUpKAlfCfj3L SCGavJvXo+Os4wLBUPlDTumpnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOJAHES2 i9qmDHph8lzKoll6JVjDMB8GA1UdIwQYMBaAFMT2OMCeNyBGwB30YEwoEWT2rBYi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzNBNS8xQzBFNzA2QUQ0 RDgxMUVDQTQyNDVGMTBDNEY5QUUwMi94UFk0d0o0M0lFYkFIZlJnVENnUlpQYXNG aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQWTR3SjQzSUViQUhmUmdUQ2dSWlBhc0ZpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzNBNS8xQzBFNzA2QUQ0RDgxMUVDQTQyNDVGMTBDNEY5QUUwMi94UFk0d0o0M0lF YkFIZlJnVENnUlpQYXNGaUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDONUN2F4FgIoO+XkT8xmzdqMvXeAObUxp4weRAhGSXnFUTqWK2EELt z6F1dciKYxfgrnHIa49vEr+NA7c4hFfOrPuYJOYb8Bg7DW6BgNg1M5/H/EHoUvj2 1t9tbhSMihFgjdIObXfY81+voMTiTOQ7hzoHBENfQ2NYcGRxbdd4iRe74WXUnSwW vKe9Ug7spse0hANBmGT8XHqRSd7S+wgdAj1Z4XpRPFut1ODWXUFWm6ZDjukjlzJc iU7cerR/xciiXzouvOZ6OnVzt+eTEAzz06yyoI/CtuTBk8sftgfxjjZn4lTBMvA7 NX7ohiUcKu+Q1Ur2W7+ok/AWIW1oFVT7 -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:17 2025 by rpki-client on console.sobornost.net