$ rpki-client -vvf rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft File: x8kdlvp-jS2SIZUipkBEI3UR4FE.mft (raw, json) Hash identifier: h24QkpVlKl+7LXbnHPV3sfw8iDkmIuYY86lTNZIVLGw= Subject key identifier: 0E:C4:1C:90:79:48:04:75:A6:24:39:91:54:F0:2E:66:0B:5C:EC:08 Authority key identifier: C7:C9:1D:96:FA:7E:8D:2D:92:21:95:22:A6:40:44:23:75:11:E0:51 Certificate issuer: /CN=A91F52E8/serialNumber=C7C91D96FA7E8D2D92219522A64044237511E051 Certificate serial: 0368 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft Manifest number: 035F Signing time: Sun 27 Apr 2025 00:37:36 +0000 Manifest this update: Sun 27 Apr 2025 00:37:35 +0000 Manifest next update: Sun 04 May 2025 00:37:35 +0000 Files and hashes: 1: x8kdlvp-jS2SIZUipkBEI3UR4FE.crl (hash: VMO+SK3GbqDOqofXktF23mwCD2ujmRrCiuAU90sw5Nw=) 2: 89F6EEC4C82711EEBCC49737C4F9AE02.roa (hash: VO877qnYV5ysyh8xNP6j/NDwnBYHL9P7OWuoQhCU32U=) 3: C0BBFCC003A911EF9DE2F919C4F9AE02.roa (hash: Q0wzmAGM0ykkEHN1MJvFlbZ7walQQuiBKFZtznnJWt8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.crl rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 00:37:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 872 (0x368) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F52E8, serialNumber=C7C91D96FA7E8D2D92219522A64044237511E051 Validity Not Before: Apr 27 00:37:35 2025 GMT Not After : May 4 00:37:35 2025 GMT Subject: CN=680d7c50-8c28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:19:4e:ae:b9:0e:4b:d3:d6:ec:b2:19:c7:b9: bd:3f:39:fa:da:c4:75:4d:20:1b:db:af:f2:f5:5e: 12:86:d8:f7:e1:9c:6d:83:aa:47:85:ce:c2:c2:2b: 38:26:92:06:fe:c2:cd:09:45:c5:75:2f:89:1e:29: 56:d7:80:0e:83:12:63:ce:67:9f:00:ec:39:b1:96: 82:5c:77:50:5f:a0:b9:50:d3:05:86:42:d2:28:93: cc:01:91:63:ed:cb:d5:c6:31:3c:a6:85:6e:7d:8b: 29:c5:ed:3b:3c:49:cf:4f:64:3a:0a:5d:cf:ce:b7: af:9c:f4:f3:fa:d5:dd:ab:f8:c6:a5:bb:c9:11:20: e7:48:20:30:e5:d3:10:d7:09:c0:62:ff:bb:b5:78: 9e:05:b9:90:66:d6:0e:f3:ad:82:5b:77:f8:d1:87: 8f:fd:aa:76:03:48:bd:22:ec:cd:5d:91:92:12:b4: 80:74:4c:f5:df:5b:64:46:52:9a:a8:6f:cb:73:46: 53:a7:24:86:de:19:f6:ad:f0:38:00:4d:af:80:2c: 13:2c:21:be:64:9a:55:6d:ff:e3:8c:2a:17:e2:36: b3:59:e3:57:10:d9:03:cf:dc:f9:ff:8a:1b:0a:13: 2c:03:68:86:98:11:11:41:cd:3c:87:9c:9d:96:f5: b3:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:C4:1C:90:79:48:04:75:A6:24:39:91:54:F0:2E:66:0B:5C:EC:08 X509v3 Authority Key Identifier: keyid:C7:C9:1D:96:FA:7E:8D:2D:92:21:95:22:A6:40:44:23:75:11:E0:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:04:79:57:20:3b:67:9c:47:6a:04:be:c3:bb:67:d1:81:2e: d3:77:e5:9a:4a:b7:54:6a:33:3a:23:82:06:86:21:a5:0c:10: 3c:8f:b7:cc:a6:c7:e3:8f:89:8a:c8:11:e8:78:2a:53:80:3f: e7:f2:fb:8a:16:de:94:fd:72:55:86:9b:6d:46:41:3f:40:bb: 09:7a:27:da:09:23:38:c1:72:c2:c8:03:ed:8a:bc:ed:7b:f7: 17:e9:8a:9f:49:1b:37:0b:f2:98:2a:84:3e:f8:61:54:eb:a7: 56:79:73:41:df:48:bb:51:52:a9:60:7f:f6:93:82:75:a2:75: 39:c5:e5:88:04:b6:d0:ae:dd:f6:58:d6:47:2f:a5:e3:27:32: 96:c4:3c:c0:07:c0:a0:c6:c4:5f:3a:c6:17:99:e4:21:90:c2: 60:b8:e4:81:b8:c8:b9:33:24:c8:36:d9:8c:2a:82:8a:14:28: b6:24:82:be:fa:2b:4c:da:9a:40:dd:41:68:e6:5f:ab:8e:ca: 45:26:46:f3:9d:36:44:b1:a3:61:78:10:42:02:ff:97:4c:8e: 68:7d:86:51:b0:be:47:2a:1d:50:c4:13:57:24:28:a9:57:ec: c4:b1:14:25:3e:5e:f2:6e:73:84:cb:8b:4f:60:a5:06:ad:f5: 51:2b:38:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUyRTgxMTAvBgNVBAUTKEM3QzkxRDk2RkE3RThEMkQ5MjIxOTUyMkE2NDA0NDIz NzUxMUUwNTEwHhcNMjUwNDI3MDAzNzM1WhcNMjUwNTA0MDAzNzM1WjAYMRYwFAYD VQQDEw02ODBkN2M1MC04YzI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2RlOrrkOS9PW7LIZx7m9Pzn62sR1TSAb26/y9V4Shtj34Zxtg6pHhc7Cwis4 JpIG/sLNCUXFdS+JHilW14AOgxJjzmefAOw5sZaCXHdQX6C5UNMFhkLSKJPMAZFj 7cvVxjE8poVufYspxe07PEnPT2Q6Cl3PzrevnPTz+tXdq/jGpbvJESDnSCAw5dMQ 1wnAYv+7tXieBbmQZtYO862CW3f40YeP/ap2A0i9IuzNXZGSErSAdEz131tkRlKa qG/Lc0ZTpySG3hn2rfA4AE2vgCwTLCG+ZJpVbf/jjCoX4jazWeNXENkDz9z5/4ob ChMsA2iGmBERQc08h5ydlvWz2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA7EHJB5 SAR1piQ5kVTwLmYLXOwIMB8GA1UdIwQYMBaAFMfJHZb6fo0tkiGVIqZARCN1EeBR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTJFOC8xMTI3Q0QzRUFF NjUxMUVDQkNGOEM2NENDNEY5QUUwMi94OGtkbHZwLWpTMlNJWlVpcGtCRUkzVVI0 RkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g4a2RsdnAtalMyU0laVWlwa0JFSTNVUjRGRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTJFOC8xMTI3Q0QzRUFFNjUxMUVDQkNGOEM2NENDNEY5QUUwMi94OGtkbHZwLWpT MlNJWlVpcGtCRUkzVVI0RkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+BHlXIDtnnEdqBL7Du2fRgS7Td+WaSrdUajM6I4IGhiGlDBA8j7fM psfjj4mKyBHoeCpTgD/n8vuKFt6U/XJVhpttRkE/QLsJeifaCSM4wXLCyAPtirzt e/cX6YqfSRs3C/KYKoQ++GFU66dWeXNB30i7UVKpYH/2k4J1onU5xeWIBLbQrt32 WNZHL6XjJzKWxDzAB8CgxsRfOsYXmeQhkMJguOSBuMi5MyTINtmMKoKKFCi2JIK+ +itM2ppA3UFo5l+rjspFJkbznTZEsaNheBBCAv+XTI5ofYZRsL5HKh1QxBNXJCip V+zEsRQlPl7ybnOEy4tPYKUGrfVRKzir -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:18 2025 by rpki-client on console.sobornost.net