$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft File: MMRROGeLe9mvTFyk6xpdPiBhxcE.mft (raw, json) Hash identifier: nxspFNx0Dg+5bT/5Jm7pfvne55eMFwvT570H8DfWQn4= Subject key identifier: E7:0C:83:DB:B8:3B:55:8F:4A:50:82:DE:9B:74:B2:88:3D:98:94:D7 Authority key identifier: 30:C4:51:38:67:8B:7B:D9:AF:4C:5C:A4:EB:1A:5D:3E:20:61:C5:C1 Certificate issuer: /CN=A91F59A6/serialNumber=30C45138678B7BD9AF4C5CA4EB1A5D3E2061C5C1 Certificate serial: 0D00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft Manifest number: 0CE3 Signing time: Mon 28 Apr 2025 18:20:12 +0000 Manifest this update: Mon 28 Apr 2025 18:20:11 +0000 Manifest next update: Mon 05 May 2025 18:20:11 +0000 Files and hashes: 1: MMRROGeLe9mvTFyk6xpdPiBhxcE.crl (hash: SQH0h/PR55y9vgyytHmhAyubWUJFsCQyMIPrbhTrm+M=) 2: 82A69048E5E611E9A31D0F15C4F9AE02.roa (hash: qEkECxoCgKBKTnw3bchzSUCu8r6TBFUP4UAPJP8qzMY=) 3: 813F208AE5E611E9A31D0F15C4F9AE02.roa (hash: +TPxOAHNAMtvnIcGRR6E+FNpj29vW6xe3VQISwdy/bw=) 4: 81D3C438E5E611E9A31D0F15C4F9AE02.roa (hash: 0SPtnF49m4JXYvDmELKfCYTUI/b5FZMwuniRPfNINfE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.crl rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 18:20:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3328 (0xd00) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F59A6, serialNumber=30C45138678B7BD9AF4C5CA4EB1A5D3E2061C5C1 Validity Not Before: Apr 28 18:20:11 2025 GMT Not After : May 5 18:20:11 2025 GMT Subject: CN=680fc6dc-8e00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a4:d5:fb:3e:df:a3:c9:96:71:e3:53:89:f0: e9:c4:b0:c5:69:95:d4:87:04:9b:c2:a8:c1:64:0f: ff:10:28:a5:bd:cb:8b:cb:b0:57:24:c0:65:a9:53: 65:13:4f:2a:f7:b9:3c:ed:fe:5a:76:1b:70:0c:3f: 55:d2:14:98:9f:3a:73:83:a7:7f:cd:a1:1d:bd:98: d1:66:9c:ec:c1:d9:ac:9a:c5:55:f9:c1:dc:1a:fa: 84:06:2b:d8:a8:4b:4f:98:16:8d:07:a6:29:22:fd: f8:5f:f6:45:8c:6b:f1:03:74:c5:db:88:2d:13:5c: be:02:64:b2:1f:b8:1e:43:36:c6:36:05:30:d1:8b: 75:e5:3c:8f:46:c8:91:4c:1e:22:a2:51:a8:ef:57: d0:e1:98:e8:5e:84:67:14:34:17:78:55:e2:10:2c: 56:53:9c:a1:06:df:86:b0:fa:56:80:9a:d3:b4:27: a3:1f:a5:f7:61:9e:a2:5b:9d:fb:08:5e:8e:f3:12: 67:1c:3a:a1:3a:ac:d1:e5:ab:72:c5:b0:9e:02:31: a1:3a:38:51:a5:60:81:1c:65:be:8a:ac:2d:07:0b: 0f:c0:36:60:bb:55:03:a7:9a:37:2e:4f:80:92:ca: bd:31:da:f9:45:65:d0:6b:04:57:59:db:1c:ae:7c: 7b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:0C:83:DB:B8:3B:55:8F:4A:50:82:DE:9B:74:B2:88:3D:98:94:D7 X509v3 Authority Key Identifier: keyid:30:C4:51:38:67:8B:7B:D9:AF:4C:5C:A4:EB:1A:5D:3E:20:61:C5:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:38:b3:ea:7c:51:68:58:e2:06:2f:c7:6d:96:44:bf:33:48: 95:a4:b6:42:10:ba:0f:9e:0b:47:50:ae:19:07:93:a0:e7:01: 8a:9c:d5:48:36:9d:0e:65:1b:55:d3:d0:ae:5b:22:ca:65:68: f4:1b:26:cb:0e:77:e4:75:d1:d3:7d:50:8d:5e:42:78:1b:c8: bb:96:58:a1:01:0a:52:22:c5:42:38:02:09:fb:2c:d1:67:18: d9:80:db:83:27:d7:e4:c2:fa:5c:b2:d2:20:7a:d1:47:38:f0: 30:86:3f:5a:4f:1f:35:a6:52:32:08:49:9f:ef:1e:33:0c:f3: 87:d1:8f:a5:3f:f5:db:96:0a:3c:42:94:88:66:ca:14:cf:c9: 8f:82:fc:44:fb:d7:4a:a1:db:22:6d:dc:ba:da:e0:4a:18:16: 03:36:21:4c:54:42:a2:f2:43:ac:b7:a0:cf:48:8f:94:38:cc: 45:d7:d0:cd:e9:4f:9c:cf:75:c8:05:03:9c:c7:88:e7:9d:bf: 48:ff:ab:82:3c:18:3c:21:5d:3e:a5:f3:41:5e:71:d9:8a:83: 01:a5:e6:69:46:60:2e:5a:47:14:c8:5e:91:08:03:e5:cb:15: d6:7e:7a:a6:71:cf:9d:d2:80:37:c6:e9:4c:b2:1d:d0:d4:33: a4:b7:0a:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU5QTYxMTAvBgNVBAUTKDMwQzQ1MTM4Njc4QjdCRDlBRjRDNUNBNEVCMUE1RDNF MjA2MUM1QzEwHhcNMjUwNDI4MTgyMDExWhcNMjUwNTA1MTgyMDExWjAYMRYwFAYD VQQDEw02ODBmYzZkYy04ZTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqKTV+z7fo8mWceNTifDpxLDFaZXUhwSbwqjBZA//ECilvcuLy7BXJMBlqVNl E08q97k87f5adhtwDD9V0hSYnzpzg6d/zaEdvZjRZpzswdmsmsVV+cHcGvqEBivY qEtPmBaNB6YpIv34X/ZFjGvxA3TF24gtE1y+AmSyH7geQzbGNgUw0Yt15TyPRsiR TB4iolGo71fQ4ZjoXoRnFDQXeFXiECxWU5yhBt+GsPpWgJrTtCejH6X3YZ6iW537 CF6O8xJnHDqhOqzR5atyxbCeAjGhOjhRpWCBHGW+iqwtBwsPwDZgu1UDp5o3Lk+A ksq9Mdr5RWXQawRXWdscrnx7ZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOcMg9u4 O1WPSlCC3pt0sog9mJTXMB8GA1UdIwQYMBaAFDDEUThni3vZr0xcpOsaXT4gYcXB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTlBNi80MDg0OEMzRUU1 RTUxMUU5OUYxRjdDMTNDNEY5QUUwMi9NTVJST0dlTGU5bXZURnlrNnhwZFBpQmh4 Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01NUlJPR2VMZTltdlRGeWs2eHBkUGlCaHhjRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTlBNi80MDg0OEMzRUU1RTUxMUU5OUYxRjdDMTNDNEY5QUUwMi9NTVJST0dlTGU5 bXZURnlrNnhwZFBpQmh4Y0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIOLPqfFFoWOIGL8dtlkS/M0iVpLZCELoPngtHUK4ZB5Og5wGKnNVI Np0OZRtV09CuWyLKZWj0GybLDnfkddHTfVCNXkJ4G8i7llihAQpSIsVCOAIJ+yzR ZxjZgNuDJ9fkwvpcstIgetFHOPAwhj9aTx81plIyCEmf7x4zDPOH0Y+lP/Xblgo8 QpSIZsoUz8mPgvxE+9dKodsibdy62uBKGBYDNiFMVEKi8kOst6DPSI+UOMxF19DN 6U+cz3XIBQOcx4jnnb9I/6uCPBg8IV0+pfNBXnHZioMBpeZpRmAuWkcUyF6RCAPl yxXWfnqmcc+d0oA3xulMsh3Q1DOktwos -----END CERTIFICATE-----Generated at Mon Apr 28 20:11:15 2025 by rpki-client on console.sobornost.net