$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft File: r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft (raw, json) Hash identifier: 5dbAxmvvbGB3qOFE/I7HNrMljSM1O34Cc7KXea7i1Yc= Subject key identifier: F2:FF:73:CE:4F:F0:90:25:84:E0:8E:21:43:E3:1A:BF:22:8E:35:F7 Authority key identifier: AF:44:78:08:13:BB:6C:05:E9:97:54:5B:08:D3:79:36:FF:AC:46:61 Certificate issuer: /CN=A91F3F02/serialNumber=AF44780813BB6C05E997545B08D37936FFAC4661 Certificate serial: 0F9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft Manifest number: 0F6E Signing time: Sat 26 Apr 2025 17:28:22 +0000 Manifest this update: Sat 26 Apr 2025 17:28:21 +0000 Manifest next update: Sat 03 May 2025 17:28:21 +0000 Files and hashes: 1: r0R4CBO7bAXpl1RbCNN5Nv-sRmE.crl (hash: cO5toXjBOwcsNumWVJtcNMNcMswAU8pViYBISuH5IWQ=) 2: 4BF23558026D11EBB136622CC4F9AE02.roa (hash: dSSI9SuJi0kxWDguXGuvNHYcVsK2PtNwvDQAV3GyLYI=) 3: B3876B1821C911EB991D562EC4F9AE02.roa (hash: uBn0Hxz91FaVyD43QnMkuJqRyt7MMlvjQXxOWdloNks=) 4: B2B2930C21C911EB991D562EC4F9AE02.roa (hash: Qy0DDR285MRVUCU2wSq2l1CDAExHpBwuWLjgKYsgDgk=) 5: 8663E8B6658A11E9930DC678C4F9AE02.roa (hash: nnsGbqSAK23dzd+NhzAKnl4RNtdUbFKnIUPab2S+fr0=) 6: F98DEF9A231F11EB99F53580C4F9AE02.roa (hash: 5v8ULnLB7hAe2Fg8TDMfEBDhvjvsx+AYmHjpRnzhKsw=) 7: E049FDF87A4511EBBB2D0A52C4F9AE02.roa (hash: 01USCsNqqndn4P4yTkoqoN05MdA4R11oCs3iWFycohA=) 8: B490CD0621C911EB991D562EC4F9AE02.roa (hash: Juh4AVBFoxym4U719T7P+CRblg1s/scR/hB7gB0qaXY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.crl rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 17:28:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3997 (0xf9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3F02, serialNumber=AF44780813BB6C05E997545B08D37936FFAC4661 Validity Not Before: Apr 26 17:28:21 2025 GMT Not After : May 3 17:28:21 2025 GMT Subject: CN=680d17b5-b251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:58:ce:63:57:27:85:64:ae:b8:d0:6b:ed:43: ce:92:f7:88:0b:63:b4:b2:ed:95:f1:f5:37:b3:8a: 0d:33:1c:b9:42:34:d8:b2:58:d8:d4:83:7b:47:f8: f3:e8:6f:93:b2:15:e8:af:da:2c:f9:8d:6b:ee:30: 7d:c6:c1:c5:4b:dc:5b:92:e7:b0:e9:1b:b9:64:33: 50:70:72:c6:b9:f9:81:8b:d0:bf:ad:e9:3e:77:de: 1c:24:7b:ae:8e:f3:76:27:c2:b2:ed:6d:81:b1:b9: 72:1c:83:93:d3:e9:6b:aa:d4:40:8f:7f:25:d9:0a: a7:08:1f:41:09:4a:70:8c:09:63:4d:f6:f1:45:d6: 24:3a:a5:eb:50:de:f3:b7:b7:4f:27:32:be:cb:27: 14:ec:09:84:6b:93:66:e5:28:b8:c0:19:42:96:b9: f2:bc:90:b7:f3:8f:44:cf:45:09:a5:87:2e:87:6d: 34:e6:91:b3:b5:fa:5b:53:c0:fd:f6:a0:5d:01:d8: 8e:b5:04:84:c5:7c:fe:80:d0:5d:1b:56:bd:de:08: 81:74:98:55:69:45:60:74:5b:51:d3:76:7d:69:3f: 70:6e:bb:37:a6:92:30:01:f1:95:4e:fb:cb:34:99: 76:ac:19:1e:f7:fd:17:a5:aa:be:16:32:16:94:b2: ec:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:FF:73:CE:4F:F0:90:25:84:E0:8E:21:43:E3:1A:BF:22:8E:35:F7 X509v3 Authority Key Identifier: keyid:AF:44:78:08:13:BB:6C:05:E9:97:54:5B:08:D3:79:36:FF:AC:46:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:a9:1f:3e:d8:94:1f:a6:3d:07:97:2d:15:c3:07:66:6d:d3: 17:6b:74:37:13:0b:cc:87:03:f4:c1:e7:e4:fc:52:7a:20:5a: d0:06:c1:93:d5:91:3d:9b:37:9b:d8:d9:86:8c:9d:a8:ca:2f: de:db:7f:e4:fb:0f:8e:65:8f:d8:23:1b:21:b5:11:53:0d:a7: 2d:b7:d6:34:eb:87:16:cd:34:51:31:97:95:55:8c:3e:fc:3b: c9:bd:ea:8e:ba:e7:bc:71:bf:fb:19:31:ad:17:bb:79:b6:e5: f9:68:69:07:4c:5c:e8:32:d5:82:ee:19:b5:e8:9a:b4:d8:cd: 15:c7:48:cb:e8:90:8e:55:34:69:2c:2e:eb:1f:b6:b8:0c:6b: f8:b2:b7:a2:1e:d8:72:89:59:cd:39:af:60:5f:c7:b2:e4:a2: 02:1a:fb:c5:46:44:e0:bb:94:49:91:30:87:4d:8e:87:07:36: 32:1f:13:88:a3:39:ab:16:4a:50:00:2c:88:63:83:f9:e7:a8: fb:4a:bd:91:e0:82:04:c0:07:8a:79:4d:a8:a4:12:6f:ba:e8: 9b:25:85:40:eb:c5:40:65:51:e5:a9:15:68:df:6d:19:ff:ba: a6:03:37:f9:55:e5:5a:ec:3a:6d:54:ad:83:f8:08:dd:40:1b: 7f:d5:10:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD50wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNGMDIxMTAvBgNVBAUTKEFGNDQ3ODA4MTNCQjZDMDVFOTk3NTQ1QjA4RDM3OTM2 RkZBQzQ2NjEwHhcNMjUwNDI2MTcyODIxWhcNMjUwNTAzMTcyODIxWjAYMRYwFAYD VQQDEw02ODBkMTdiNS1iMjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA31jOY1cnhWSuuNBr7UPOkveIC2O0su2V8fU3s4oNMxy5QjTYsljY1IN7R/jz 6G+TshXor9os+Y1r7jB9xsHFS9xbkuew6Ru5ZDNQcHLGufmBi9C/rek+d94cJHuu jvN2J8Ky7W2BsblyHIOT0+lrqtRAj38l2QqnCB9BCUpwjAljTfbxRdYkOqXrUN7z t7dPJzK+yycU7AmEa5Nm5Si4wBlClrnyvJC3849Ez0UJpYcuh2005pGztfpbU8D9 9qBdAdiOtQSExXz+gNBdG1a93giBdJhVaUVgdFtR03Z9aT9wbrs3ppIwAfGVTvvL NJl2rBke9/0Xpaq+FjIWlLLs+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPL/c85P 8JAlhOCOIUPjGr8ijjX3MB8GA1UdIwQYMBaAFK9EeAgTu2wF6ZdUWwjTeTb/rEZh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0YwMi9DQ0FCNTc1MDYz RjAxMUU5QTlCQ0ExNDFDNEY5QUUwMi9yMFI0Q0JPN2JBWHBsMVJiQ05ONU52LXNS bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IwUjRDQk83YkFYcGwxUmJDTk41TnYtc1JtRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0YwMi9DQ0FCNTc1MDYzRjAxMUU5QTlCQ0ExNDFDNEY5QUUwMi9yMFI0Q0JPN2JB WHBsMVJiQ05ONU52LXNSbUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFqR8+2JQfpj0Hly0VwwdmbdMXa3Q3EwvMhwP0wefk/FJ6IFrQBsGT 1ZE9mzeb2NmGjJ2oyi/e23/k+w+OZY/YIxshtRFTDactt9Y064cWzTRRMZeVVYw+ /DvJveqOuue8cb/7GTGtF7t5tuX5aGkHTFzoMtWC7hm16Jq02M0Vx0jL6JCOVTRp LC7rH7a4DGv4sreiHthyiVnNOa9gX8ey5KICGvvFRkTgu5RJkTCHTY6HBzYyHxOI ozmrFkpQACyIY4P556j7Sr2R4IIEwAeKeU2opBJvuuibJYVA68VAZVHlqRVo320Z /7qmAzf5VeVa7DptVK2D+AjdQBt/1RBf -----END CERTIFICATE-----Generated at Sat Apr 26 21:02:04 2025 by rpki-client on console.sobornost.net