$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft File: qmLHn-GEOUEsWwLPS-tUqy674Yg.mft (raw, json) Hash identifier: Wxp9i3hnVAbUgtgN0V38y7012vIK+G18omQI/IrIodo= Subject key identifier: 31:04:5E:9E:27:9D:AE:3F:25:7B:16:DC:DC:B0:42:BE:34:15:84:94 Authority key identifier: AA:62:C7:9F:E1:84:39:41:2C:5B:02:CF:4B:EB:54:AB:2E:BB:E1:88 Certificate issuer: /CN=A91F6BFA/serialNumber=AA62C79FE18439412C5B02CF4BEB54AB2EBBE188 Certificate serial: 0A6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmLHn-GEOUEsWwLPS-tUqy674Yg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft Manifest number: 0A56 Signing time: Mon 28 Apr 2025 20:05:58 +0000 Manifest this update: Mon 28 Apr 2025 20:05:58 +0000 Manifest next update: Mon 05 May 2025 20:05:58 +0000 Files and hashes: 1: qmLHn-GEOUEsWwLPS-tUqy674Yg.crl (hash: 9YP3JLSOgDTAxOxeMH6lZ5y/UzQxcUxsikxryPUY7HY=) 2: 128651089A4C11EEBA49A012C4F9AE02.roa (hash: 7eyQ3NplMfQ7NeH3lqRBvpOppo5UvSFwpAIlHW8sg/M=) 3: 3AFE6DA8F72911EDB956BA86C4F9AE02.roa (hash: FyzTLc6q4QxjkF8ADy/p1n3nRtCccHutyKoH8IBWzj8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.crl rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmLHn-GEOUEsWwLPS-tUqy674Yg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:05:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2671 (0xa6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6BFA, serialNumber=AA62C79FE18439412C5B02CF4BEB54AB2EBBE188 Validity Not Before: Apr 28 20:05:58 2025 GMT Not After : May 5 20:05:58 2025 GMT Subject: CN=680fdfa6-cbcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e2:27:93:d4:51:51:ac:39:9e:1b:5a:31:9f: 49:9a:c8:64:58:95:eb:45:0c:a7:1f:28:10:da:3b: de:b0:71:e8:90:25:7d:6f:86:c9:1b:ba:a5:9a:7a: 2e:20:d9:be:3a:90:9f:db:49:e8:26:be:b5:fc:44: 4d:ea:af:a8:17:7f:64:16:d7:26:52:0e:a7:64:cc: 48:a5:e9:db:42:8d:e9:f5:62:03:90:c0:4e:55:ff: 9d:d6:bf:43:c7:76:50:8b:3b:cf:ad:29:63:9f:7e: 98:f5:92:9e:bc:ea:af:f3:30:eb:0a:56:72:57:e5: 21:d4:33:7b:b6:1b:ca:a3:37:35:09:b0:c2:51:f2: cf:73:4e:e4:45:69:94:6e:d5:a3:4a:38:ee:de:51: cc:df:50:f0:98:81:ba:a5:6a:57:ba:7e:9b:a9:02: c7:77:0d:8d:1c:8b:bc:78:c1:76:e6:0e:c1:62:f6: 7f:05:0a:75:73:cf:2f:7b:c4:e8:bd:76:d2:62:8d: 31:f3:19:f8:87:45:0f:69:a6:a8:bb:86:2a:13:f7: cd:99:5b:a8:85:de:3e:23:4a:1d:37:92:92:86:78: fe:ad:f9:71:e8:97:a5:3f:57:1d:78:1f:ec:65:27: 11:13:81:27:17:a4:8a:ff:d7:fb:5b:38:85:3d:09: b6:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:04:5E:9E:27:9D:AE:3F:25:7B:16:DC:DC:B0:42:BE:34:15:84:94 X509v3 Authority Key Identifier: keyid:AA:62:C7:9F:E1:84:39:41:2C:5B:02:CF:4B:EB:54:AB:2E:BB:E1:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmLHn-GEOUEsWwLPS-tUqy674Yg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:c6:86:22:21:1e:46:fb:bb:95:cb:64:7d:b2:9e:af:a9:0e: 13:ca:34:b6:13:64:12:5e:ba:b1:39:7c:de:bb:d5:7a:d5:57: f8:e5:fc:d1:87:ec:77:09:79:ae:1b:fb:db:9e:4f:3c:53:8d: e1:09:e1:85:77:3e:fe:b8:b0:7e:bd:9a:43:0c:8b:df:37:41: c3:78:40:8c:46:de:bd:c4:7d:4b:01:e6:ea:ee:ba:5a:d6:9b: c9:ad:f9:17:66:4c:9a:ff:a1:94:5e:fb:7c:d8:7c:58:94:91: 40:ae:35:07:39:1e:57:ff:e3:62:cb:fe:d7:f5:c7:f0:93:50: c4:f1:fd:6c:9a:b2:ad:34:06:3e:31:87:b9:c6:eb:42:29:55: 6d:fa:4b:22:87:2e:9a:97:5e:0f:0f:90:e9:7c:de:de:d6:ce: 61:59:5c:cd:38:f9:d1:2f:dd:53:0b:e7:f4:25:da:42:bb:87: f2:80:00:09:7c:26:34:5e:fa:bd:6f:8a:28:98:a5:02:f4:8e: 85:3f:bc:f8:cb:8c:b0:ea:08:9c:89:8e:cf:e7:49:d1:44:59: 46:bf:53:af:7b:7b:51:55:0a:3e:04:d5:3b:0d:8d:cf:f2:65: d0:b0:fa:35:24:4b:2d:b8:b4:2f:00:16:93:90:40:c6:65:5c: ac:b7:3d:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZCRkExMTAvBgNVBAUTKEFBNjJDNzlGRTE4NDM5NDEyQzVCMDJDRjRCRUI1NEFC MkVCQkUxODgwHhcNMjUwNDI4MjAwNTU4WhcNMjUwNTA1MjAwNTU4WjAYMRYwFAYD VQQDEw02ODBmZGZhNi1jYmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0OInk9RRUaw5nhtaMZ9JmshkWJXrRQynHygQ2jvesHHokCV9b4bJG7qlmnou INm+OpCf20noJr61/ERN6q+oF39kFtcmUg6nZMxIpenbQo3p9WIDkMBOVf+d1r9D x3ZQizvPrSljn36Y9ZKevOqv8zDrClZyV+Uh1DN7thvKozc1CbDCUfLPc07kRWmU btWjSjju3lHM31DwmIG6pWpXun6bqQLHdw2NHIu8eMF25g7BYvZ/BQp1c88ve8To vXbSYo0x8xn4h0UPaaaou4YqE/fNmVuohd4+I0odN5KShnj+rflx6JelP1cdeB/s ZScRE4EnF6SK/9f7WziFPQm24QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDEEXp4n na4/JXsW3NywQr40FYSUMB8GA1UdIwQYMBaAFKpix5/hhDlBLFsCz0vrVKsuu+GI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkJGQS80MEQ0QjdFQzY2 MDMxMUVBOTlBRDRGNDZDNEY5QUUwMi9xbUxIbi1HRU9VRXNXd0xQUy10VXF5Njc0 WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FtTEhuLUdFT1VFc1d3TFBTLXRVcXk2NzRZZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkJGQS80MEQ0QjdFQzY2MDMxMUVBOTlBRDRGNDZDNEY5QUUwMi9xbUxIbi1HRU9V RXNXd0xQUy10VXF5Njc0WWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVxoYiIR5G+7uVy2R9sp6vqQ4TyjS2E2QSXrqxOXzeu9V61Vf45fzR h+x3CXmuG/vbnk88U43hCeGFdz7+uLB+vZpDDIvfN0HDeECMRt69xH1LAebq7rpa 1pvJrfkXZkya/6GUXvt82HxYlJFArjUHOR5X/+Niy/7X9cfwk1DE8f1smrKtNAY+ MYe5xutCKVVt+ksihy6al14PD5DpfN7e1s5hWVzNOPnRL91TC+f0JdpCu4fygAAJ fCY0Xvq9b4oomKUC9I6FP7z4y4yw6giciY7P50nRRFlGv1Ove3tRVQo+BNU7DY3P 8mXQsPo1JEstuLQvABaTkEDGZVystz0j -----END CERTIFICATE-----Generated at Mon Apr 28 23:05:59 2025 by rpki-client on console.sobornost.net