$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.mft File: Hkjv5T5i7SBLp6aUOEy6ySRnlKc.mft (raw, json) Hash identifier: qKfxipzXqBRd/ZGLQrHqc5N4BSRWoAKgaG88/xJRRYc= Subject key identifier: B9:76:8C:59:41:9B:2A:45:99:9F:4E:03:37:67:3D:8D:8C:3D:34:B5 Authority key identifier: 1E:48:EF:E5:3E:62:ED:20:4B:A7:A6:94:38:4C:BA:C9:24:67:94:A7 Certificate issuer: /CN=A91F5BCC/serialNumber=1E48EFE53E62ED204BA7A694384CBAC9246794A7 Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.mft Manifest number: 3A Signing time: Sun 27 Apr 2025 06:21:29 +0000 Manifest this update: Sun 27 Apr 2025 06:21:29 +0000 Manifest next update: Sun 04 May 2025 06:21:29 +0000 Files and hashes: 1: Hkjv5T5i7SBLp6aUOEy6ySRnlKc.crl (hash: OsBbFzU5sbTvWLAooLDkum7AwumLEVQF3dUAvagUjqE=) 2: 7A092C88E9E211EFAD188675C4F9AE02.roa (hash: Ih+3aaDaOz/d8dCkRSwBGnuzOxqfvTbU/QJJ8s8nf54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.crl rsync://rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5BCC, serialNumber=1E48EFE53E62ED204BA7A694384CBAC9246794A7 Validity Not Before: Apr 27 06:21:29 2025 GMT Not After : May 4 06:21:29 2025 GMT Subject: CN=680dcce9-67e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ce:eb:68:fe:d9:8b:d9:1f:6b:98:94:2f:bf: f8:06:f8:98:4c:11:7f:c2:6d:72:d4:43:b6:93:21: a6:3e:47:62:ae:14:70:00:40:94:2c:35:93:07:a3: 3a:bf:01:27:bf:21:4f:f4:c7:93:36:8e:a2:e3:32: 1e:f4:39:be:81:66:0f:bc:a1:1f:ae:98:29:bd:b7: 0b:ad:9e:06:24:49:2b:28:0b:24:a3:3b:f8:eb:61: eb:46:9f:3f:55:69:db:5b:94:14:a2:85:2f:c2:10: db:ba:f9:9f:96:8b:85:d2:3b:a0:54:03:99:10:d9: b8:0e:7b:d0:73:aa:fc:23:f6:d4:bb:4e:dc:ce:37: 23:44:78:3b:04:3a:1e:5e:82:66:4f:f1:2b:0d:fe: bf:83:26:47:62:f8:79:2b:20:ba:dc:8c:37:71:f4: 94:cc:52:40:d6:b6:45:72:ca:a8:01:f7:9a:e3:49: 8b:fb:c1:c5:f7:10:20:8a:2f:1d:5c:7b:14:a5:71: 54:a1:2c:9a:20:87:b8:72:b5:18:36:fb:36:94:b0: 01:b1:81:72:11:96:14:1d:a7:36:77:cc:9b:89:df: cd:ed:73:97:74:58:99:44:f3:fb:fa:d3:39:cc:d1: 26:12:f5:4c:43:7c:60:18:bf:1f:6d:c3:5d:53:6e: 66:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:76:8C:59:41:9B:2A:45:99:9F:4E:03:37:67:3D:8D:8C:3D:34:B5 X509v3 Authority Key Identifier: keyid:1E:48:EF:E5:3E:62:ED:20:4B:A7:A6:94:38:4C:BA:C9:24:67:94:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:8b:8d:3a:72:8c:fd:c2:db:dd:03:b4:ad:3f:63:2f:06:b9: 20:5c:c6:ba:cc:13:c6:3d:57:38:26:56:58:db:e8:15:85:ac: 35:39:56:3d:9b:b3:ec:e4:b4:63:b5:c0:20:39:df:89:73:83: fe:e6:be:45:c0:dd:9c:89:d0:46:67:20:3c:c9:99:b5:12:de: 92:48:37:3b:cf:d2:aa:d3:74:46:c9:93:fb:e7:11:4a:90:80: c8:95:56:24:d4:83:03:2c:81:c8:cb:0f:44:85:3a:99:7a:1d: a9:b2:c8:da:22:d0:7b:ce:bf:fe:0d:1f:3c:41:c0:5a:41:68: a5:11:f3:c1:aa:45:85:79:74:e9:15:9f:29:c7:91:da:21:96: 40:6e:2d:42:88:78:de:e8:a4:58:c9:3b:52:cf:f9:cd:81:59: f6:d3:97:d4:9f:cc:1f:85:d0:9a:d0:70:bb:5c:a2:59:3e:13: e6:32:82:8e:4b:7d:5a:56:b4:59:42:49:b8:da:8f:fe:18:3b: fa:12:6b:40:5d:92:37:6a:46:6d:95:fb:e9:ec:6d:d7:dc:75: 09:dd:4a:57:04:54:6e:c7:60:08:20:6f:d8:0f:26:94:c2:fa: 16:e5:fb:bc:74:b6:24:63:1c:36:a6:60:4a:88:f2:68:78:e6: 92:4f:9c:6e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NUJDQzExMC8GA1UEBRMoMUU0OEVGRTUzRTYyRUQyMDRCQTdBNjk0Mzg0Q0JBQzky NDY3OTRBNzAeFw0yNTA0MjcwNjIxMjlaFw0yNTA1MDQwNjIxMjlaMBgxFjAUBgNV BAMTDTY4MGRjY2U5LTY3ZTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOzuto/tmL2R9rmJQvv/gG+JhMEX/CbXLUQ7aTIaY+R2KuFHAAQJQsNZMHozq/ ASe/IU/0x5M2jqLjMh70Ob6BZg+8oR+umCm9twutngYkSSsoCySjO/jrYetGnz9V adtblBSihS/CENu6+Z+Wi4XSO6BUA5kQ2bgOe9Bzqvwj9tS7TtzONyNEeDsEOh5e gmZP8SsN/r+DJkdi+HkrILrcjDdx9JTMUkDWtkVyyqgB95rjSYv7wcX3ECCKLx1c exSlcVShLJogh7hytRg2+zaUsAGxgXIRlhQdpzZ3zJuJ383tc5d0WJlE8/v60znM 0SYS9UxDfGAYvx9tw11TbmZ7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUuXaMWUGb KkWZn04DN2c9jYw9NLUwHwYDVR0jBBgwFoAUHkjv5T5i7SBLp6aUOEy6ySRnlKcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1QkNDL0I5NTg4QkFDQ0U3 ODExRUY4MEVGNEQ0NEM0RjlBRTAyL0hranY1VDVpN1NCTHA2YVVPRXk2eVNSbmxL Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSGtqdjVUNWk3U0JMcDZhVU9FeTZ5U1JubEtjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1 QkNDL0I5NTg4QkFDQ0U3ODExRUY4MEVGNEQ0NEM0RjlBRTAyL0hranY1VDVpN1NC THA2YVVPRXk2eVNSbmxLYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAACLjTpyjP3C290DtK0/Yy8GuSBcxrrME8Y9VzgmVljb6BWFrDU5Vj2b s+zktGO1wCA534lzg/7mvkXA3ZyJ0EZnIDzJmbUS3pJINzvP0qrTdEbJk/vnEUqQ gMiVViTUgwMsgcjLD0SFOpl6HamyyNoi0HvOv/4NHzxBwFpBaKUR88GqRYV5dOkV nynHkdohlkBuLUKIeN7opFjJO1LP+c2BWfbTl9SfzB+F0JrQcLtcolk+E+Yygo5L fVpWtFlCSbjaj/4YO/oSa0BdkjdqRm2V++nsbdfcdQndSlcEVG7HYAggb9gPJpTC +hbl+7x0tiRjHDamYEqI8mh45pJPnG4= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:59 2025 by rpki-client on console.sobornost.net