$ rpki-client -vvf rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft File: 8MOq6RfojmgUGpayJuBGAJqBlIM.mft (raw, json) Hash identifier: XJ/ZkxIH7eDwPIqAeDlPFNeVD4aBkp50WZxpvR+LFKE= Subject key identifier: FD:0D:88:E0:3F:32:92:A2:C4:14:01:6C:0D:7B:B5:21:44:B5:16:AF Authority key identifier: F0:C3:AA:E9:17:E8:8E:68:14:1A:96:B2:26:E0:46:00:9A:81:94:83 Certificate issuer: /CN=A91F48F3/serialNumber=F0C3AAE917E88E68141A96B226E046009A819483 Certificate serial: 014F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8MOq6RfojmgUGpayJuBGAJqBlIM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft Manifest number: 014D Signing time: Sun 27 Apr 2025 03:07:45 +0000 Manifest this update: Sun 27 Apr 2025 03:07:44 +0000 Manifest next update: Sun 04 May 2025 03:07:44 +0000 Files and hashes: 1: 8MOq6RfojmgUGpayJuBGAJqBlIM.crl (hash: fALTbpOfY75a4yRREA5SX5Js0MaJIcu5J0rtKxU/jMA=) 2: 0366729A251511EEACA5881FC4F9AE02.roa (hash: 61dFCpFb3ek9f8W7MGjus+wVQMOYkxnO6WKnJYsH5TI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.crl rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8MOq6RfojmgUGpayJuBGAJqBlIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 335 (0x14f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F48F3, serialNumber=F0C3AAE917E88E68141A96B226E046009A819483 Validity Not Before: Apr 27 03:07:44 2025 GMT Not After : May 4 03:07:44 2025 GMT Subject: CN=680d9f81-1965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:91:ce:86:10:5e:0c:b3:c4:af:5c:d2:47:c2: 6e:14:09:e8:64:a0:12:21:a8:c9:5f:18:2f:47:54: 3c:3c:65:3f:4c:1e:a7:1d:e6:73:00:b1:d8:fa:64: cb:f5:32:97:33:48:10:c3:f0:64:95:ab:2d:ae:1b: d4:74:3e:1c:c5:58:f0:31:83:52:c0:2f:91:b1:1e: 72:ca:2e:21:91:a9:8f:b1:60:d5:5a:3d:b6:3a:c0: 12:35:76:ca:d5:fc:75:23:d9:0a:26:1b:01:91:9f: 66:a4:3a:b9:7c:0a:6c:3e:f5:24:49:87:7c:15:07: 3f:68:78:23:b3:f8:7e:a9:f4:a7:47:22:bc:99:d5: 6c:c2:ce:35:c4:4d:c6:8f:3b:2b:8a:f6:eb:00:ca: 6f:46:3b:92:28:7c:1f:38:d1:91:e6:6b:55:6e:35: 9d:02:96:5c:de:d7:2d:a1:4b:01:0a:58:3a:48:2b: 8e:dc:ef:5a:00:ac:81:6a:ea:cc:36:54:15:fb:bb: a8:8c:d7:00:30:05:90:11:41:71:e8:4e:65:4d:c3: f8:bf:45:f2:79:e3:66:4f:e6:9d:1a:68:e7:ac:b4: d4:36:79:2c:9e:3d:6b:94:bb:ce:d7:63:60:bd:b5: cc:12:e7:23:1e:ac:6f:45:bd:31:bf:da:51:08:e8: 71:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:0D:88:E0:3F:32:92:A2:C4:14:01:6C:0D:7B:B5:21:44:B5:16:AF X509v3 Authority Key Identifier: keyid:F0:C3:AA:E9:17:E8:8E:68:14:1A:96:B2:26:E0:46:00:9A:81:94:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8MOq6RfojmgUGpayJuBGAJqBlIM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:41:39:1c:5a:fe:21:8d:a1:c8:2f:9d:36:11:6d:fc:f8:37: bf:c9:4a:cc:23:5f:98:cc:83:69:1d:ca:4f:ea:90:bf:bb:9b: b3:b1:63:41:3b:9a:64:86:39:83:8d:8a:79:f4:24:b2:6d:ab: be:37:88:56:a2:d5:3a:5d:53:f5:8b:44:63:a1:dd:59:e4:a6: e3:ed:b7:18:b8:75:92:b5:8d:01:ad:79:1a:02:dd:a3:8c:f8: a3:3c:64:a2:fb:0d:d5:07:2f:4e:7f:cb:e9:4c:2b:79:fd:8b: c3:91:9a:80:77:7c:bf:16:8a:2d:97:d3:0a:b8:a9:93:2e:af: cd:3b:ca:af:b8:1e:f9:02:d4:a5:e3:f4:18:e3:ac:95:02:60: 83:18:cf:1b:8a:59:c3:11:5c:a8:36:c9:5d:8b:63:13:b2:ef: 46:e5:1e:95:2b:e7:03:b7:5d:2c:69:77:da:b4:d0:22:96:da: f7:a4:fa:63:34:98:a5:d2:62:66:84:62:32:9b:c8:52:45:5b: ff:2f:9c:f3:20:d0:ae:2f:84:f8:0f:14:cb:5d:9f:f7:27:a9: fe:3e:f4:b6:ab:b3:b0:c9:2b:a8:47:3b:01:42:43:e8:48:1a: b7:2d:29:f7:7a:cd:e9:0a:97:23:9c:6c:62:15:70:24:91:41: ff:71:63:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ4RjMxMTAvBgNVBAUTKEYwQzNBQUU5MTdFODhFNjgxNDFBOTZCMjI2RTA0NjAw OUE4MTk0ODMwHhcNMjUwNDI3MDMwNzQ0WhcNMjUwNTA0MDMwNzQ0WjAYMRYwFAYD VQQDEw02ODBkOWY4MS0xOTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz5HOhhBeDLPEr1zSR8JuFAnoZKASIajJXxgvR1Q8PGU/TB6nHeZzALHY+mTL 9TKXM0gQw/BklastrhvUdD4cxVjwMYNSwC+RsR5yyi4hkamPsWDVWj22OsASNXbK 1fx1I9kKJhsBkZ9mpDq5fApsPvUkSYd8FQc/aHgjs/h+qfSnRyK8mdVsws41xE3G jzsrivbrAMpvRjuSKHwfONGR5mtVbjWdApZc3tctoUsBClg6SCuO3O9aAKyBaurM NlQV+7uojNcAMAWQEUFx6E5lTcP4v0XyeeNmT+adGmjnrLTUNnksnj1rlLvO12Ng vbXMEucjHqxvRb0xv9pRCOhxBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP0NiOA/ MpKixBQBbA17tSFEtRavMB8GA1UdIwQYMBaAFPDDqukX6I5oFBqWsibgRgCagZSD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDhGMy9CNzIzNUUyQTI1 MTQxMUVFQThERUNDMUVDNEY5QUUwMi84TU9xNlJmb2ptZ1VHcGF5SnVCR0FKcUJs SU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhNT3E2UmZvam1nVUdwYXlKdUJHQUpxQmxJTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDhGMy9CNzIzNUUyQTI1MTQxMUVFQThERUNDMUVDNEY5QUUwMi84TU9xNlJmb2pt Z1VHcGF5SnVCR0FKcUJsSU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3QTkcWv4hjaHIL502EW38+De/yUrMI1+YzINpHcpP6pC/u5uzsWNB O5pkhjmDjYp59CSybau+N4hWotU6XVP1i0Rjod1Z5Kbj7bcYuHWStY0BrXkaAt2j jPijPGSi+w3VBy9Of8vpTCt5/YvDkZqAd3y/Footl9MKuKmTLq/NO8qvuB75AtSl 4/QY46yVAmCDGM8bilnDEVyoNsldi2MTsu9G5R6VK+cDt10saXfatNAiltr3pPpj NJil0mJmhGIym8hSRVv/L5zzINCuL4T4DxTLXZ/3J6n+PvS2q7OwySuoRzsBQkPo SBq3LSn3es3pCpcjnGxiFXAkkUH/cWOc -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:17 2025 by rpki-client on console.sobornost.net