$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft File: mke_QL1Ih-IkFTMnnn8dfypfb7s.mft (raw, json) Hash identifier: bcmfd9HNLhUh3HvjOPmELGb1gbMbOYsJnosXEXxp3uM= Subject key identifier: CA:D3:26:78:13:7C:D2:E2:19:3E:12:B0:95:1D:DE:DA:0D:88:7A:AA Authority key identifier: 9A:47:BF:40:BD:48:87:E2:24:15:33:27:9E:7F:1D:7F:2A:5F:6F:BB Certificate issuer: /CN=A91F3989/serialNumber=9A47BF40BD4887E2241533279E7F1D7F2A5F6FBB Certificate serial: CD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mke_QL1Ih-IkFTMnnn8dfypfb7s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft Manifest number: CB Signing time: Sun 27 Apr 2025 04:36:52 +0000 Manifest this update: Sun 27 Apr 2025 04:36:52 +0000 Manifest next update: Sun 04 May 2025 04:36:52 +0000 Files and hashes: 1: mke_QL1Ih-IkFTMnnn8dfypfb7s.crl (hash: NJu+hgWdXctUvqIXtYGCRmUV1bJvP6tSGAFZ7znTvwc=) 2: A146F2C2ECD011EE8891034AC4F9AE02.roa (hash: 39u+3z7NTrOVqsJcMoLGpjbEQiERAqJS+HnJZxNpbpg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.crl rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mke_QL1Ih-IkFTMnnn8dfypfb7s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 205 (0xcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3989, serialNumber=9A47BF40BD4887E2241533279E7F1D7F2A5F6FBB Validity Not Before: Apr 27 04:36:52 2025 GMT Not After : May 4 04:36:52 2025 GMT Subject: CN=680db464-f34c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:54:a7:04:34:d0:62:af:3f:f8:84:ff:2f:38: 61:56:b8:0f:7f:5d:37:f4:d5:49:23:10:24:8c:db: f8:39:a6:86:23:37:62:3c:97:ae:f9:96:b8:43:54: 22:d9:d3:05:26:26:04:f7:c4:28:ba:df:7f:05:5d: 80:ab:4f:1b:f0:f9:1a:0a:ff:33:a6:29:b0:2f:ed: 5f:7e:34:ea:2a:7f:91:46:bb:4b:39:3d:9c:36:37: c2:02:be:df:b1:10:40:d0:66:ef:b0:50:45:b8:6e: d6:32:a0:9b:72:f2:e6:6f:53:1c:c5:6c:71:83:ca: 8a:c0:4c:f5:5f:90:d8:f9:0b:f6:42:5d:3e:e0:da: d6:48:1f:84:11:a0:a4:3e:72:fc:d0:2c:44:5c:f5: eb:a5:c4:c8:8c:32:85:db:5d:69:af:68:a8:f8:bf: 5d:bd:9f:1c:c3:0e:af:20:e5:bc:61:f9:62:c0:25: 74:0d:54:99:ba:49:8d:19:c4:01:4b:d2:99:26:39: f1:e8:e1:14:eb:4c:db:81:7c:60:e0:ef:19:0d:53: 4f:90:5c:99:33:9b:aa:0c:6a:09:72:06:d3:65:d7: 30:fd:f3:7d:7e:b8:3a:e6:51:b5:a1:73:ca:2b:a5: 8e:81:54:b7:09:7c:75:ba:76:44:cb:0a:fd:01:49: e2:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:D3:26:78:13:7C:D2:E2:19:3E:12:B0:95:1D:DE:DA:0D:88:7A:AA X509v3 Authority Key Identifier: keyid:9A:47:BF:40:BD:48:87:E2:24:15:33:27:9E:7F:1D:7F:2A:5F:6F:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mke_QL1Ih-IkFTMnnn8dfypfb7s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:48:bc:0d:07:f1:8d:00:ad:25:63:76:52:9b:24:f2:1f:4d: 51:55:ac:23:3e:d3:b3:ae:ea:aa:fd:b3:7e:f4:c2:4b:2b:67: 9d:7a:28:10:43:b7:f9:c3:64:9c:c4:a5:fd:93:b1:5d:e7:ff: ac:90:16:19:8c:f7:0d:f1:82:32:33:68:86:93:88:9c:c6:06: 4a:04:d2:b5:38:dd:d3:fe:b9:53:77:d8:48:a9:c2:6a:18:39: be:48:5d:ff:89:e1:95:bb:36:80:42:1c:f8:60:52:7e:a2:64: 82:38:64:ce:84:23:85:29:02:2d:f4:4a:db:46:31:ee:b5:d1: d0:5f:a0:7d:fd:eb:ea:f5:72:34:3f:b7:8d:07:ee:1e:fc:18: 41:58:5f:52:14:30:4b:ed:c3:32:b1:f0:3f:33:e5:ff:59:e7: 58:75:11:20:d8:6f:fb:f0:e4:5f:c7:56:e8:2d:8b:93:e5:7f: 84:ae:ae:ca:f1:95:09:d9:ef:12:d4:16:13:5d:c9:ec:34:d7: bc:3c:a7:22:5d:05:22:e8:75:4e:f0:de:21:f4:7f:55:93:fc: 31:f4:8e:fa:79:dc:45:26:5c:16:7e:dc:ec:60:c7:7c:75:26: 60:78:f7:b7:a7:95:5f:36:e0:e1:54:2b:8b:e7:cb:dd:43:96: ca:cc:63:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM5ODkxMTAvBgNVBAUTKDlBNDdCRjQwQkQ0ODg3RTIyNDE1MzMyNzlFN0YxRDdG MkE1RjZGQkIwHhcNMjUwNDI3MDQzNjUyWhcNMjUwNTA0MDQzNjUyWjAYMRYwFAYD VQQDEw02ODBkYjQ2NC1mMzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAolSnBDTQYq8/+IT/LzhhVrgPf1039NVJIxAkjNv4OaaGIzdiPJeu+Za4Q1Qi 2dMFJiYE98Qout9/BV2Aq08b8PkaCv8zpimwL+1ffjTqKn+RRrtLOT2cNjfCAr7f sRBA0GbvsFBFuG7WMqCbcvLmb1McxWxxg8qKwEz1X5DY+Qv2Ql0+4NrWSB+EEaCk PnL80CxEXPXrpcTIjDKF211pr2io+L9dvZ8cww6vIOW8YfliwCV0DVSZukmNGcQB S9KZJjnx6OEU60zbgXxg4O8ZDVNPkFyZM5uqDGoJcgbTZdcw/fN9frg65lG1oXPK K6WOgVS3CXx1unZEywr9AUniiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMrTJngT fNLiGT4SsJUd3toNiHqqMB8GA1UdIwQYMBaAFJpHv0C9SIfiJBUzJ55/HX8qX2+7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzk4OS8zMTYxQzM3RUVD RDAxMUVFOEEyMjRENDlDNEY5QUUwMi9ta2VfUUwxSWgtSWtGVE1ubm44ZGZ5cGZi N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21rZV9RTDFJaC1Ja0ZUTW5ubjhkZnlwZmI3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Mzk4OS8zMTYxQzM3RUVDRDAxMUVFOEEyMjRENDlDNEY5QUUwMi9ta2VfUUwxSWgt SWtGVE1ubm44ZGZ5cGZiN3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJSLwNB/GNAK0lY3ZSmyTyH01RVawjPtOzruqq/bN+9MJLK2edeigQ Q7f5w2ScxKX9k7Fd5/+skBYZjPcN8YIyM2iGk4icxgZKBNK1ON3T/rlTd9hIqcJq GDm+SF3/ieGVuzaAQhz4YFJ+omSCOGTOhCOFKQIt9ErbRjHutdHQX6B9/evq9XI0 P7eNB+4e/BhBWF9SFDBL7cMysfA/M+X/WedYdREg2G/78ORfx1boLYuT5X+Erq7K 8ZUJ2e8S1BYTXcnsNNe8PKciXQUi6HVO8N4h9H9Vk/wx9I76edxFJlwWftzsYMd8 dSZgePe3p5VfNuDhVCuL58vdQ5bKzGO6 -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:58 2025 by rpki-client on console.sobornost.net