$ rpki-client -vvf rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.mft File: TGLx4QuIP11XhNY1dA_SMDTOv-I.mft (raw, json) Hash identifier: Zycafk5AqwxurUfwub0O2maJW9QkWuR5/sOf9GtdGcc= Subject key identifier: 3C:11:4E:7E:8D:CF:55:C1:58:DA:5C:5D:F0:20:30:F6:DF:1E:89:43 Authority key identifier: 4C:62:F1:E1:0B:88:3F:5D:57:84:D6:35:74:0F:D2:30:34:CE:BF:E2 Certificate issuer: /CN=A91F372C/serialNumber=4C62F1E10B883F5D5784D635740FD23034CEBFE2 Certificate serial: 93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TGLx4QuIP11XhNY1dA_SMDTOv-I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.mft Manifest number: 8B Signing time: Sun 27 Apr 2025 05:27:29 +0000 Manifest this update: Sun 27 Apr 2025 05:27:29 +0000 Manifest next update: Sun 04 May 2025 05:27:29 +0000 Files and hashes: 1: TGLx4QuIP11XhNY1dA_SMDTOv-I.crl (hash: DM+fjbN0gwBJiJlmcw/K7hfBDa21uLajbe6uzTh9XRo=) 2: A98932365ED311EF9DE3E178C4F9AE02.roa (hash: yKRhd9URAtdD8ZNuj/dQF3lpNBMNfFXTujt18TvU+XY=) 3: DD015FDE639D11EFB9BDBE62C4F9AE02.roa (hash: SDxl8l5CQA8d0jF8r7Sa6q9ALS3hHi/3Jt4li1lWZ7Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.crl rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TGLx4QuIP11XhNY1dA_SMDTOv-I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 147 (0x93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F372C, serialNumber=4C62F1E10B883F5D5784D635740FD23034CEBFE2 Validity Not Before: Apr 27 05:27:29 2025 GMT Not After : May 4 05:27:29 2025 GMT Subject: CN=680dc041-4f97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:73:f8:80:94:10:07:03:2d:43:31:64:ce:50: 83:1f:72:e2:72:d1:56:69:49:93:d3:97:81:cb:9c: 9d:79:a9:6f:b5:7d:7f:dd:f0:f9:f7:35:e9:55:54: f6:7a:c0:50:e3:79:c1:41:13:af:e9:d0:03:63:c6: 25:0e:d8:43:6a:8d:ad:fb:e4:c6:65:8b:5c:da:12: 16:fa:aa:00:85:d6:f5:c9:23:67:42:8f:ea:29:b5: 55:26:0f:09:b0:02:4b:da:c3:d1:2f:4b:b5:8d:17: 8f:ad:df:1b:60:4e:c1:28:1c:ef:31:60:ce:00:64: 71:28:33:71:d9:28:93:ca:be:34:68:51:ed:9c:72: a9:40:54:1c:e8:8d:87:32:90:29:05:57:a2:08:1c: a1:d5:0a:b7:58:5f:39:5d:bb:5e:56:89:25:0f:3e: 18:8a:70:7f:47:41:58:58:18:15:d2:c0:ee:f3:76: b0:9b:be:ed:22:7d:40:46:f2:1e:6a:f3:18:dc:20: d0:01:16:58:3e:08:c1:e9:ab:d7:80:73:01:2a:f6: f6:77:3d:5b:1c:f9:cb:83:5c:5d:e3:2d:72:e4:02: 76:3f:29:e0:4f:de:ac:f5:fe:4d:c6:9a:1d:24:ff: 68:79:a1:18:40:3f:3d:d0:26:b5:31:91:c4:4d:8b: 31:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:11:4E:7E:8D:CF:55:C1:58:DA:5C:5D:F0:20:30:F6:DF:1E:89:43 X509v3 Authority Key Identifier: keyid:4C:62:F1:E1:0B:88:3F:5D:57:84:D6:35:74:0F:D2:30:34:CE:BF:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TGLx4QuIP11XhNY1dA_SMDTOv-I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:44:f0:c6:27:de:84:86:f1:28:68:99:b7:1d:3f:ea:fb:6b: a3:65:61:ff:9a:9b:a5:a7:f5:ed:07:9c:ea:bb:32:51:7f:15: f3:f6:58:16:8b:d4:64:f3:36:43:1b:15:ce:47:52:1a:8a:9c: db:ba:df:01:c4:a3:39:1f:e2:13:59:c9:d1:b3:51:6a:cd:5e: 21:ff:ba:c6:7a:1d:13:f0:56:2a:ca:03:93:16:12:84:0a:5d: 59:96:aa:ab:a8:01:d5:6d:6a:07:3c:78:06:ac:5e:56:f1:a4: 35:66:62:60:a9:52:5e:83:c7:9f:43:a2:92:6a:89:bb:87:90: 7d:26:95:35:cd:7a:96:8f:88:af:72:b4:a8:2e:90:6c:05:1f: c5:32:b1:03:af:72:d5:c6:bb:c2:51:ce:a5:d0:dd:fe:2d:86: 1b:61:13:c0:7c:d1:5f:3f:10:79:58:bb:e5:d1:19:d7:e3:e0: ee:89:a0:40:db:fe:44:63:db:26:28:21:04:6d:b2:d7:9a:3b: fa:cb:1e:14:52:d2:b8:c0:08:19:0c:f7:54:74:35:6c:20:fb: ea:1a:98:d2:8d:4b:15:54:32:fb:63:6b:82:32:d9:ec:26:d8: 88:d1:40:9c:a1:2f:45:67:15:3a:60:43:78:b3:13:60:ad:cb: 8b:4d:c4:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM3MkMxMTAvBgNVBAUTKDRDNjJGMUUxMEI4ODNGNUQ1Nzg0RDYzNTc0MEZEMjMw MzRDRUJGRTIwHhcNMjUwNDI3MDUyNzI5WhcNMjUwNTA0MDUyNzI5WjAYMRYwFAYD VQQDEw02ODBkYzA0MS00Zjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw3P4gJQQBwMtQzFkzlCDH3LictFWaUmT05eBy5ydealvtX1/3fD59zXpVVT2 esBQ43nBQROv6dADY8YlDthDao2t++TGZYtc2hIW+qoAhdb1ySNnQo/qKbVVJg8J sAJL2sPRL0u1jRePrd8bYE7BKBzvMWDOAGRxKDNx2SiTyr40aFHtnHKpQFQc6I2H MpApBVeiCByh1Qq3WF85XbteVoklDz4YinB/R0FYWBgV0sDu83awm77tIn1ARvIe avMY3CDQARZYPgjB6avXgHMBKvb2dz1bHPnLg1xd4y1y5AJ2PyngT96s9f5Nxpod JP9oeaEYQD890Ca1MZHETYsxkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDwRTn6N z1XBWNpcXfAgMPbfHolDMB8GA1UdIwQYMBaAFExi8eELiD9dV4TWNXQP0jA0zr/i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzcyQy82Nzk2RDhFMjVF Q0UxMUVGQTlBOEIwM0VDNEY5QUUwMi9UR0x4NFF1SVAxMVhoTlkxZEFfU01EVE92 LUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RHTHg0UXVJUDExWGhOWTFkQV9TTURUT3YtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzcyQy82Nzk2RDhFMjVFQ0UxMUVGQTlBOEIwM0VDNEY5QUUwMi9UR0x4NFF1SVAx MVhoTlkxZEFfU01EVE92LUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnRPDGJ96EhvEoaJm3HT/q+2ujZWH/mpulp/XtB5zquzJRfxXz9lgW i9Rk8zZDGxXOR1Iaipzbut8BxKM5H+ITWcnRs1FqzV4h/7rGeh0T8FYqygOTFhKE Cl1ZlqqrqAHVbWoHPHgGrF5W8aQ1ZmJgqVJeg8efQ6KSaom7h5B9JpU1zXqWj4iv crSoLpBsBR/FMrEDr3LVxrvCUc6l0N3+LYYbYRPAfNFfPxB5WLvl0RnX4+DuiaBA 2/5EY9smKCEEbbLXmjv6yx4UUtK4wAgZDPdUdDVsIPvqGpjSjUsVVDL7Y2uCMtns JtiI0UCcoS9FZxU6YEN4sxNgrcuLTcS8 -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:58 2025 by rpki-client on console.sobornost.net