$ rpki-client -vvf rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft File: FDm85NeiKugDbOsu5uavGPIbtZM.mft (raw, json) Hash identifier: qhR9n0vove075VRHGJa3tQpXIEYDWvyBFUghz2QgLl8= Subject key identifier: 23:7D:46:E2:50:0E:F5:EA:F8:0D:30:70:DE:D6:2B:1B:49:73:2A:8C Authority key identifier: 14:39:BC:E4:D7:A2:2A:E8:03:6C:EB:2E:E6:E6:AF:18:F2:1B:B5:93 Certificate issuer: /CN=A91F57D9/serialNumber=1439BCE4D7A22AE8036CEB2EE6E6AF18F21BB593 Certificate serial: 038B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft Manifest number: 0380 Signing time: Sun 27 Apr 2025 00:31:32 +0000 Manifest this update: Sun 27 Apr 2025 00:31:32 +0000 Manifest next update: Sun 04 May 2025 00:31:32 +0000 Files and hashes: 1: FDm85NeiKugDbOsu5uavGPIbtZM.crl (hash: hJ62u69roPrF7nB38NfB7+OylUFt6BGpA2/7qwR6RvU=) 2: CD22C9C8DC0D11ECA064B94CC4F9AE02.roa (hash: h1qvpOWxudSOhwTtJ3Z+p/+X0JRO+haXbihi5IJyhXw=) 3: F8071E24DC1111EC80AE816DC4F9AE02.roa (hash: OCdNpCgeUfuyWeLKRdqmiCW32PlQusQy1i0JweMZuFo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.crl rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 00:31:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 907 (0x38b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F57D9, serialNumber=1439BCE4D7A22AE8036CEB2EE6E6AF18F21BB593 Validity Not Before: Apr 27 00:31:32 2025 GMT Not After : May 4 00:31:32 2025 GMT Subject: CN=680d7ae4-c7cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:81:67:2b:57:33:af:2f:c5:e0:93:17:86:13: 9d:7f:66:f8:51:d8:0d:ff:f5:2a:08:d3:51:ff:34: 84:ff:df:d3:7d:16:97:f1:85:2f:bd:85:eb:c1:3a: 56:33:ba:59:da:76:b7:d2:64:ca:4f:f9:74:fd:9c: 3b:cc:9a:58:8d:37:71:ae:3c:6a:85:8f:af:21:be: e7:a4:07:ec:27:8e:ed:d1:27:43:79:ba:b2:d6:c4: ba:53:9b:5b:f9:ee:86:38:b0:8c:95:9c:1f:a9:03: 9c:d0:31:43:19:17:53:30:38:ed:13:e5:76:6d:59: d8:3f:f8:b1:fe:49:52:11:cd:9a:c7:52:f4:74:a7: 00:26:3e:4c:1f:6a:94:ac:88:08:2c:39:dc:e6:08: c0:27:3e:29:f9:d7:b9:f5:18:6c:6f:1e:41:1a:04: aa:5d:e9:de:c5:f0:96:c2:71:e8:89:32:d2:82:b9: 5f:a5:43:23:cc:fe:5f:2b:bd:96:f2:92:e1:95:b5: 27:17:5d:e5:62:91:57:71:06:56:96:6d:df:6f:fd: d3:a3:59:7c:51:1f:49:41:f9:56:c3:e2:d1:7b:f5: e1:9f:fb:75:8e:49:bb:b4:76:8c:66:87:b5:f3:b1: 1c:ea:11:79:61:0d:88:d0:79:8a:3b:15:fa:71:4e: ff:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:7D:46:E2:50:0E:F5:EA:F8:0D:30:70:DE:D6:2B:1B:49:73:2A:8C X509v3 Authority Key Identifier: keyid:14:39:BC:E4:D7:A2:2A:E8:03:6C:EB:2E:E6:E6:AF:18:F2:1B:B5:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:72:e5:c4:00:e5:d3:8f:4a:64:31:f3:68:ce:b2:4a:04:5a: 6c:cf:89:5b:94:42:bc:2e:83:5f:b2:0e:7d:5b:cb:cf:a7:4f: 0a:dc:7f:95:32:ab:12:ad:ab:47:04:61:e4:35:35:54:1a:90: fc:ab:bb:68:72:fb:bd:86:c6:d1:77:5b:aa:e5:41:72:15:86: 8d:eb:6a:ee:29:59:d1:c2:28:5e:a3:cf:55:81:2d:a1:38:bc: 0a:9b:6c:22:49:73:35:f0:5b:b8:80:61:44:fc:6b:99:dd:a3: 82:2b:0e:9b:5b:38:c6:a7:83:fc:e9:e8:d7:18:7e:c7:56:fd: 49:25:af:1b:95:fb:64:76:99:c1:bd:d7:f0:ba:ac:fa:c6:ae: 45:ee:7e:a3:9e:71:4e:7c:af:b5:d5:40:bb:c6:1d:87:d2:89: 41:ed:82:7b:a2:a3:e1:fd:51:24:0d:7b:ef:5d:91:ac:52:3f: 21:2e:37:6e:0b:75:e4:94:14:51:8f:35:ce:88:8a:da:38:af: 44:fb:27:f7:98:e8:2e:6c:33:84:c3:e1:36:e7:6e:6e:79:46: 5c:fd:ce:4a:bc:32:68:4f:10:c5:7b:33:4c:30:91:d6:f4:75: e8:01:e0:13:fd:24:ed:51:ea:b6:5d:68:77:68:47:7f:a5:f8: fe:9c:21:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU3RDkxMTAvBgNVBAUTKDE0MzlCQ0U0RDdBMjJBRTgwMzZDRUIyRUU2RTZBRjE4 RjIxQkI1OTMwHhcNMjUwNDI3MDAzMTMyWhcNMjUwNTA0MDAzMTMyWjAYMRYwFAYD VQQDEw02ODBkN2FlNC1jN2NmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq4FnK1czry/F4JMXhhOdf2b4UdgN//UqCNNR/zSE/9/TfRaX8YUvvYXrwTpW M7pZ2na30mTKT/l0/Zw7zJpYjTdxrjxqhY+vIb7npAfsJ47t0SdDebqy1sS6U5tb +e6GOLCMlZwfqQOc0DFDGRdTMDjtE+V2bVnYP/ix/klSEc2ax1L0dKcAJj5MH2qU rIgILDnc5gjAJz4p+de59Rhsbx5BGgSqXenexfCWwnHoiTLSgrlfpUMjzP5fK72W 8pLhlbUnF13lYpFXcQZWlm3fb/3To1l8UR9JQflWw+LRe/Xhn/t1jkm7tHaMZoe1 87Ec6hF5YQ2I0HmKOxX6cU7/7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCN9RuJQ DvXq+A0wcN7WKxtJcyqMMB8GA1UdIwQYMBaAFBQ5vOTXoiroA2zrLubmrxjyG7WT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTdEOS8wNzE3RTlFRTlG NUQxMUVDQkJDQTk2MThDNEY5QUUwMi9GRG04NU5laUt1Z0RiT3N1NXVhdkdQSWJ0 Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZEbTg1TmVpS3VnRGJPc3U1dWF2R1BJYnRaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTdEOS8wNzE3RTlFRTlGNUQxMUVDQkJDQTk2MThDNEY5QUUwMi9GRG04NU5laUt1 Z0RiT3N1NXVhdkdQSWJ0Wk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXcuXEAOXTj0pkMfNozrJKBFpsz4lblEK8LoNfsg59W8vPp08K3H+V MqsSratHBGHkNTVUGpD8q7tocvu9hsbRd1uq5UFyFYaN62ruKVnRwiheo89VgS2h OLwKm2wiSXM18Fu4gGFE/GuZ3aOCKw6bWzjGp4P86ejXGH7HVv1JJa8blftkdpnB vdfwuqz6xq5F7n6jnnFOfK+11UC7xh2H0olB7YJ7oqPh/VEkDXvvXZGsUj8hLjdu C3XklBRRjzXOiIraOK9E+yf3mOgubDOEw+E2525ueUZc/c5KvDJoTxDFezNMMJHW 9HXoAeAT/STtUeq2XWh3aEd/pfj+nCEt -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:18 2025 by rpki-client on console.sobornost.net