$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft File: MU9VrlJExM2xD3hN_xXQItOJaEg.mft (raw, json) Hash identifier: I8/zR1Qe3ZghVkIpi7bUB7R+zGZp0qIlnuzFI0OT7jQ= Subject key identifier: 04:85:4C:F5:6C:A7:F9:61:9F:8C:18:CA:B2:BB:A0:4F:32:1F:7C:A1 Authority key identifier: 31:4F:55:AE:52:44:C4:CD:B1:0F:78:4D:FF:15:D0:22:D3:89:68:48 Certificate issuer: /CN=A91F4288/serialNumber=314F55AE5244C4CDB10F784DFF15D022D3896848 Certificate serial: 1DA9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft Manifest number: 1D86 Signing time: Sat 26 Apr 2025 16:06:27 +0000 Manifest this update: Sat 26 Apr 2025 16:06:27 +0000 Manifest next update: Sat 03 May 2025 16:06:27 +0000 Files and hashes: 1: MU9VrlJExM2xD3hN_xXQItOJaEg.crl (hash: RHfvubfVNJ+eaWGVQjPBLw/j21qNmv+14gmLzCbTORQ=) 2: 30C10672A27411E68C8EC670C4F9AE02.roa (hash: akkWYjfaWEhqYJZrRKjxCpGXnYxAkiIziyHvD0Tsd7w=) 3: 2445BC6A6FCE11E9AA5D2439C4F9AE02.roa (hash: 7TEbSw3PqWXAumkD/6WCBubmNiQ54mZObTiNmT20Qfk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.crl rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 15:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7593 (0x1da9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4288, serialNumber=314F55AE5244C4CDB10F784DFF15D022D3896848 Validity Not Before: Apr 26 16:06:27 2025 GMT Not After : May 3 16:06:27 2025 GMT Subject: CN=680d0483-b204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:06:d2:c9:6b:7d:54:02:2f:ef:c4:5a:87:92: 87:8d:72:1c:46:e1:2f:27:3a:a2:4d:4a:25:00:87: 67:9d:5f:1c:88:eb:65:53:13:09:06:fb:ca:04:19: 49:38:fa:d0:e3:3b:44:9f:70:30:52:32:ce:21:a5: 05:3e:2e:a8:8e:61:20:f7:e0:6c:10:b4:da:a1:5a: 26:76:b2:29:e8:7d:d0:86:f6:f3:5e:4e:a3:a5:27: 76:3e:52:b0:d5:e6:4b:1d:cd:0b:c9:c1:29:ea:d2: 2a:a9:23:35:19:79:b8:73:7d:b0:7d:1e:f6:ea:c3: 8c:0a:4a:8a:ec:87:80:0d:15:03:e7:ad:ad:b6:6c: 2f:f0:d9:72:cc:5c:d6:da:de:fa:4a:5e:09:88:4a: 94:f1:80:b0:b3:1c:f9:ee:9e:71:2d:33:36:0f:4b: ad:85:87:67:f8:43:5a:3b:ab:e1:88:80:ab:ed:2d: ed:56:cd:c2:12:ad:e0:4a:3c:58:6f:1f:29:ee:25: ac:9a:5f:e5:01:bf:93:90:2b:c2:ab:e5:2b:64:7f: f7:6c:72:3e:16:17:e5:2a:bd:92:81:08:df:58:a3: 92:90:00:1a:b6:b2:7b:d2:49:f8:ca:d6:39:b6:94: 8e:dd:60:51:72:55:5c:8a:5a:3f:90:2f:c0:d6:e8: 58:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:85:4C:F5:6C:A7:F9:61:9F:8C:18:CA:B2:BB:A0:4F:32:1F:7C:A1 X509v3 Authority Key Identifier: keyid:31:4F:55:AE:52:44:C4:CD:B1:0F:78:4D:FF:15:D0:22:D3:89:68:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:15:f5:e4:80:79:8e:2b:68:bf:08:57:a8:96:22:3f:aa:80: 6e:74:5e:4e:52:45:31:35:20:62:f3:7f:4c:fc:c7:60:8e:63: 72:1f:df:90:5a:1a:77:00:2e:79:8d:75:e9:88:00:42:a4:3d: 7a:b1:12:47:60:8f:4f:f4:5e:44:26:a3:57:ad:d2:c4:a3:40: f9:29:c2:d8:00:b1:c6:0f:7b:5b:81:2e:b9:0e:3a:25:bd:50: 50:b2:40:c1:84:d4:71:64:64:4d:31:c7:0e:80:28:eb:bf:00: df:0e:c6:b0:b2:7d:4a:71:22:ae:e1:df:72:57:f4:f4:86:9d: 31:3e:d9:e9:85:ed:dc:53:ca:99:15:02:26:68:ed:65:ac:de: 52:bf:eb:0b:30:45:f3:58:87:73:33:f7:a2:bf:46:3c:15:14: 3c:62:5c:f3:59:86:3c:7a:a0:fe:2a:d4:94:0a:a6:1d:ac:e6: fc:cb:39:76:8a:95:a8:ac:b3:cd:f6:36:fd:be:df:b1:c9:9a: 30:77:9e:90:cd:28:a6:e0:22:02:fa:ed:e2:4a:ae:a0:4f:36: 78:52:e9:ce:37:74:85:aa:c6:17:02:d1:cd:e0:32:07:5c:8a: ea:f9:61:b0:a3:dd:8b:bc:6c:d4:b3:a3:cc:7d:d8:26:8c:a5: df:52:81:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyODgxMTAvBgNVBAUTKDMxNEY1NUFFNTI0NEM0Q0RCMTBGNzg0REZGMTVEMDIy RDM4OTY4NDgwHhcNMjUwNDI2MTYwNjI3WhcNMjUwNTAzMTYwNjI3WjAYMRYwFAYD VQQDEw02ODBkMDQ4My1iMjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2wbSyWt9VAIv78Rah5KHjXIcRuEvJzqiTUolAIdnnV8ciOtlUxMJBvvKBBlJ OPrQ4ztEn3AwUjLOIaUFPi6ojmEg9+BsELTaoVomdrIp6H3QhvbzXk6jpSd2PlKw 1eZLHc0LycEp6tIqqSM1GXm4c32wfR726sOMCkqK7IeADRUD562ttmwv8NlyzFzW 2t76Sl4JiEqU8YCwsxz57p5xLTM2D0uthYdn+ENaO6vhiICr7S3tVs3CEq3gSjxY bx8p7iWsml/lAb+TkCvCq+UrZH/3bHI+FhflKr2SgQjfWKOSkAAatrJ70kn4ytY5 tpSO3WBRclVcilo/kC/A1uhYmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFASFTPVs p/lhn4wYyrK7oE8yH3yhMB8GA1UdIwQYMBaAFDFPVa5SRMTNsQ94Tf8V0CLTiWhI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI4OC9BOTNBQTg4MEEy NzIxMUU2QjhCQzk5NkFDNEY5QUUwMi9NVTlWcmxKRXhNMnhEM2hOX3hYUUl0T0ph RWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01VOVZybEpFeE0yeEQzaE5feFhRSXRPSmFFZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDI4OC9BOTNBQTg4MEEyNzIxMUU2QjhCQzk5NkFDNEY5QUUwMi9NVTlWcmxKRXhN MnhEM2hOX3hYUUl0T0phRWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANFfXkgHmOK2i/CFeoliI/qoBudF5OUkUxNSBi839M/MdgjmNyH9+Q Whp3AC55jXXpiABCpD16sRJHYI9P9F5EJqNXrdLEo0D5KcLYALHGD3tbgS65Djol vVBQskDBhNRxZGRNMccOgCjrvwDfDsawsn1KcSKu4d9yV/T0hp0xPtnphe3cU8qZ FQImaO1lrN5Sv+sLMEXzWIdzM/eiv0Y8FRQ8YlzzWYY8eqD+KtSUCqYdrOb8yzl2 ipWorLPN9jb9vt+xyZowd56QzSim4CIC+u3iSq6gTzZ4UunON3SFqsYXAtHN4DIH XIrq+WGwo92LvGzUs6PMfdgmjKXfUoE7 -----END CERTIFICATE-----Generated at Sat Apr 26 18:20:33 2025 by rpki-client on console.sobornost.net