$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.mft File: 75_jgdo9Qut8Tg0EnMrnIo4o-0s.mft (raw, json) Hash identifier: 1CPD9LTthdm+VqWrlMQOFOPSQ0s44E4GPxLYkDq0ypM= Subject key identifier: 70:D1:D8:39:CA:07:3C:DB:C5:49:5D:13:E3:7A:B3:E0:14:50:94:21 Authority key identifier: EF:9F:E3:81:DA:3D:42:EB:7C:4E:0D:04:9C:CA:E7:22:8E:28:FB:4B Certificate issuer: /CN=A91F3C87/serialNumber=EF9FE381DA3D42EB7C4E0D049CCAE7228E28FB4B Certificate serial: 01C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.mft Manifest number: 019B Signing time: Wed 23 Apr 2025 03:00:57 +0000 Manifest this update: Wed 23 Apr 2025 03:00:57 +0000 Manifest next update: Wed 30 Apr 2025 03:00:57 +0000 Files and hashes: 1: 75_jgdo9Qut8Tg0EnMrnIo4o-0s.crl (hash: zgnkzsXF4y1HToldU5Y9WGdmGMkCsZjpGqszHldDAig=) 2: 267FE3681C4B11F082276911C4F9AE02.roa (hash: IwAZrjoyGmsUGmE4JOsWaeHq5fs6QvEAYA+JnsGMyLo=) 3: F0405FAA173E11F0886E164DC4F9AE02.roa (hash: zzTZ2v/QQIL7TDyv16awWZb2KAHKEWBvbuP604gn8Co=) 4: E0A8B344173E11F093E0F04CC4F9AE02.roa (hash: baZGvTyIaF8PILI14dVTbXunLuwY6sMo3vWHfxxLvRw=) 5: B8CCCFC8FE4711EF9822D46AC4F9AE02.roa (hash: OMFUXP/cctAoz4Xum6QNfmkgufq2udvA4e2an/c9gCg=) 6: 1A6C2ADE173F11F08E4D594DC4F9AE02.roa (hash: lfkr3wnF/gd810FZkIOk1rPPX3nFh2BPUr1atDdR1QQ=) 7: 6B2903E61C4B11F09DCEDB11C4F9AE02.roa (hash: /jkIGuU72p12nz6+bmqYXQjGUP7RRNXyE9lz7PQstzA=) 8: 19CBA44C173F11F08E4D594DC4F9AE02.roa (hash: fGTHrD4EoaVLUBeDI8+wRQTcKC/emxbBQTiRlGHrOYk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.crl rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 03:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 452 (0x1c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3C87, serialNumber=EF9FE381DA3D42EB7C4E0D049CCAE7228E28FB4B Validity Not Before: Apr 23 03:00:57 2025 GMT Not After : Apr 30 03:00:57 2025 GMT Subject: CN=680857e9-ecd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3a:d9:32:fd:7c:7e:e6:f6:30:21:c0:4c:af: 10:c1:32:c2:ee:2c:fa:4d:91:4e:01:2f:5b:d3:ad: 2a:13:b6:f6:e0:1a:5f:37:37:66:10:62:e8:aa:e8: 52:c8:28:8c:2f:ea:17:8e:54:87:32:c0:56:6e:fe: e0:a9:bc:be:d4:6c:aa:21:f2:61:09:95:43:39:da: 3e:94:e0:63:1c:4c:db:a9:79:74:ad:82:b9:f5:14: 73:90:16:e7:1f:0d:12:22:6d:6f:ef:ce:df:1a:56: 29:c7:70:06:a2:06:ef:21:0c:ca:20:ea:5f:e6:ee: bb:03:c4:01:7d:3a:5c:24:61:c2:8c:2a:25:46:fc: 6d:8e:a1:a4:55:48:55:39:d4:62:2e:71:9e:55:7b: 89:30:29:cf:0a:8b:45:df:46:d0:a4:5b:9b:d5:da: 96:88:05:a4:9f:12:8f:2a:6b:0e:3e:f6:f1:fa:73: 29:05:c0:e5:90:f0:8e:23:a5:fe:89:f8:d7:57:b6: 5e:4f:de:a8:a0:ea:77:89:bc:9a:de:e8:90:5d:c6: ff:52:c7:32:c0:77:41:ec:c9:d2:3a:2c:70:be:92: c9:70:fc:4e:2d:bf:b0:13:6a:4e:97:85:33:c0:c2: 8e:d0:c6:2b:50:16:e9:51:8d:f3:ff:55:bd:fe:28: a6:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:D1:D8:39:CA:07:3C:DB:C5:49:5D:13:E3:7A:B3:E0:14:50:94:21 X509v3 Authority Key Identifier: keyid:EF:9F:E3:81:DA:3D:42:EB:7C:4E:0D:04:9C:CA:E7:22:8E:28:FB:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:cc:f0:83:41:2e:70:38:bc:2f:4b:34:3f:bf:e5:11:e8:4b: e6:e4:0c:0b:f3:8c:9b:3a:e1:67:a0:05:e5:b1:31:bb:c1:fc: 5c:06:43:2a:1f:40:5a:37:5c:6a:26:12:e2:9a:98:ed:70:8f: ac:5d:6b:40:45:2e:9a:e9:e8:ed:a3:7c:7d:e0:94:ec:d9:a4: 61:e4:7d:c2:e1:d7:c3:e9:78:51:30:1e:2d:b4:0c:2c:01:ea: bc:25:95:f7:94:d8:36:00:0a:5a:bd:a2:b4:1f:e9:e6:c5:0c: 72:bc:20:7d:7b:de:7b:c4:52:24:7c:06:a0:43:23:67:e7:cb: bd:fb:c5:91:ed:7b:19:8b:1e:f8:66:24:c0:43:20:c2:c5:c8: c9:61:17:7d:26:88:6a:fa:84:d4:79:1f:6b:0a:ac:85:d9:d1: 83:b1:c3:98:85:0c:1a:bb:e6:cf:14:ce:99:35:b7:e6:dd:28: a7:ee:a7:00:e1:36:38:89:79:b0:e3:c5:f6:3d:61:12:10:d2: d0:4d:23:04:fc:4c:05:a5:f3:94:56:5d:2e:bf:f1:d9:da:47: 2e:8d:d8:80:7f:da:3d:f8:30:71:a9:7d:af:3c:e3:4e:83:79: f3:ba:34:f3:f8:bd:60:bb:bb:75:c0:79:14:06:99:d8:34:90: 0c:55:b7:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNDODcxMTAvBgNVBAUTKEVGOUZFMzgxREEzRDQyRUI3QzRFMEQwNDlDQ0FFNzIy OEUyOEZCNEIwHhcNMjUwNDIzMDMwMDU3WhcNMjUwNDMwMDMwMDU3WjAYMRYwFAYD VQQDEw02ODA4NTdlOS1lY2QzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwzrZMv18fub2MCHATK8QwTLC7iz6TZFOAS9b060qE7b24BpfNzdmEGLoquhS yCiML+oXjlSHMsBWbv7gqby+1GyqIfJhCZVDOdo+lOBjHEzbqXl0rYK59RRzkBbn Hw0SIm1v787fGlYpx3AGogbvIQzKIOpf5u67A8QBfTpcJGHCjColRvxtjqGkVUhV OdRiLnGeVXuJMCnPCotF30bQpFub1dqWiAWknxKPKmsOPvbx+nMpBcDlkPCOI6X+ ifjXV7ZeT96ooOp3ibya3uiQXcb/UscywHdB7MnSOixwvpLJcPxOLb+wE2pOl4Uz wMKO0MYrUBbpUY3z/1W9/iimywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHDR2DnK BzzbxUldE+N6s+AUUJQhMB8GA1UdIwQYMBaAFO+f44HaPULrfE4NBJzK5yKOKPtL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0M4Ny9FNzgyODU0RUVG MEIxMUVEODFERDJENzJDNEY5QUUwMi83NV9qZ2RvOVF1dDhUZzBFbk1ybklvNG8t MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc1X2pnZG85UXV0OFRnMEVuTXJuSW80by0wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0M4Ny9FNzgyODU0RUVGMEIxMUVEODFERDJENzJDNEY5QUUwMi83NV9qZ2RvOVF1 dDhUZzBFbk1ybklvNG8tMHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWzPCDQS5wOLwvSzQ/v+UR6Evm5AwL84ybOuFnoAXlsTG7wfxcBkMq H0BaN1xqJhLimpjtcI+sXWtARS6a6ejto3x94JTs2aRh5H3C4dfD6XhRMB4ttAws Aeq8JZX3lNg2AApavaK0H+nmxQxyvCB9e957xFIkfAagQyNn58u9+8WR7XsZix74 ZiTAQyDCxcjJYRd9Johq+oTUeR9rCqyF2dGDscOYhQwau+bPFM6ZNbfm3Sin7qcA 4TY4iXmw48X2PWESENLQTSME/EwFpfOUVl0uv/HZ2kcujdiAf9o9+DBxqX2vPONO g3nzujTz+L1gu7t1wHkUBpnYNJAMVbfk -----END CERTIFICATE-----Generated at Wed Apr 23 06:36:04 2025 by rpki-client on console.sobornost.net