$ rpki-client -vvf rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.mft File: kGA-NU21aLPKQpAOcDAR55ZiiS4.mft (raw, json) Hash identifier: y/U/idGy0yD0Y71C8LhujjPqmgMQfToV1cmlg9/bhC4= Subject key identifier: 06:13:73:99:6C:DB:A2:16:7B:86:04:E6:D2:C3:4A:BB:AB:D6:0C:20 Authority key identifier: 90:60:3E:35:4D:B5:68:B3:CA:42:90:0E:70:30:11:E7:96:62:89:2E Certificate issuer: /CN=A91F731E/serialNumber=90603E354DB568B3CA42900E703011E79662892E Certificate serial: 05EC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kGA-NU21aLPKQpAOcDAR55ZiiS4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.mft Manifest number: 05E2 Signing time: Thu 24 Apr 2025 16:03:35 +0000 Manifest this update: Thu 24 Apr 2025 16:03:34 +0000 Manifest next update: Thu 01 May 2025 16:03:34 +0000 Files and hashes: 1: kGA-NU21aLPKQpAOcDAR55ZiiS4.crl (hash: 4ulxibT9Xxshufx2g7J+l/LiLxQJbcxyRBz13jZns2c=) 2: 8CD64094BDFE11EBBBB16A42C4F9AE02.roa (hash: EST3lTlCsBscnNbAgJCoSC2X1l7CJ5xbYo0Sib0cuM0=) 3: 30857DB6CBA211ECAE233133C4F9AE02.roa (hash: pliS+rwU3LbaprEyjV5mUgwfJirBs3RzVR6whO1ItwI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.crl rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kGA-NU21aLPKQpAOcDAR55ZiiS4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:03:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1516 (0x5ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F731E, serialNumber=90603E354DB568B3CA42900E703011E79662892E Validity Not Before: Apr 24 16:03:34 2025 GMT Not After : May 1 16:03:34 2025 GMT Subject: CN=680a60d7-4d74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:49:cb:a9:26:56:f3:fe:e2:30:00:8c:69:a7: 34:34:3a:34:89:9b:54:12:c3:99:08:88:8c:7b:1a: 6c:18:c0:f6:b0:d2:e4:2d:38:41:dc:e0:fa:6e:c3: 78:3d:51:8f:d5:94:69:e3:1f:e7:fb:90:71:df:ab: 60:0e:34:71:63:38:09:e7:18:dd:24:83:d6:bd:04: 05:88:9a:9c:d7:13:46:ab:e0:f6:46:77:cf:ff:8e: 7d:95:46:58:2f:03:c1:08:2c:49:ba:06:6d:3e:ac: 88:61:fc:f0:15:c1:03:6d:e3:9a:52:39:3e:a9:11: 62:45:56:6e:d3:70:42:47:9c:e5:b9:29:c5:7f:8c: ab:f0:2a:fa:b0:1b:e1:f0:74:d5:e3:1a:f8:da:f5: d3:5c:13:c4:a2:c1:42:2d:46:34:47:f5:9b:47:ff: a6:6f:2d:d1:ad:ff:11:9b:45:ba:b4:2e:6e:4d:2a: 21:24:1d:3c:d3:d5:ee:49:d8:35:e7:ed:c4:af:99: 23:77:36:44:9a:54:09:4d:3c:5a:c8:f5:0f:ad:95: ec:75:4c:58:fa:06:94:e7:91:72:6d:2b:40:d0:c5: 3a:bb:02:de:85:6b:fe:b0:a5:e1:dc:b7:25:ce:67: 37:47:e9:2d:78:11:ac:95:12:e0:27:1f:aa:80:61: 38:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:13:73:99:6C:DB:A2:16:7B:86:04:E6:D2:C3:4A:BB:AB:D6:0C:20 X509v3 Authority Key Identifier: keyid:90:60:3E:35:4D:B5:68:B3:CA:42:90:0E:70:30:11:E7:96:62:89:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kGA-NU21aLPKQpAOcDAR55ZiiS4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:11:e1:ee:c4:bb:08:59:6e:d7:b4:d9:fc:42:95:88:70:bc: e4:64:9a:25:62:9c:79:a7:c5:36:6e:ca:44:ce:80:52:f3:6f: 8c:62:20:90:9c:78:b7:31:67:5a:b9:9e:1c:44:d6:48:9b:8d: a4:ac:e9:65:18:02:da:fb:42:4a:52:5d:a8:6e:c7:35:d8:b9: ea:ad:18:6e:a2:3b:9c:dc:29:97:33:30:43:96:12:e8:a7:1f: 3b:72:16:7b:d8:c2:ce:ed:24:c4:1b:0c:db:81:57:9c:c0:ca: 61:0e:ee:ec:9d:71:20:a9:8f:66:02:06:dd:9b:c7:af:eb:86: 52:f9:bf:40:07:f8:1c:b7:c1:1b:eb:36:eb:16:a5:eb:e4:49: 7e:b0:f6:e8:b1:cd:ea:93:24:6c:2b:66:ea:a4:3d:b5:fa:c5: 92:19:99:0f:46:93:81:cd:f5:03:76:17:0e:19:ae:2b:24:b6: d7:a9:87:85:87:95:60:aa:57:c7:45:e2:98:cd:2d:da:c2:27: eb:75:ff:62:7e:87:b9:86:f0:93:99:c8:2b:cc:b0:54:41:8b: c3:93:10:a7:fa:2c:ac:0e:48:6d:98:55:d3:c5:f5:82:b8:6e: 1b:46:98:33:47:6c:17:47:49:a2:ca:46:25:af:0e:0f:c0:0f: a3:c0:59:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjczMUUxMTAvBgNVBAUTKDkwNjAzRTM1NERCNTY4QjNDQTQyOTAwRTcwMzAxMUU3 OTY2Mjg5MkUwHhcNMjUwNDI0MTYwMzM0WhcNMjUwNTAxMTYwMzM0WjAYMRYwFAYD VQQDEw02ODBhNjBkNy00ZDc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArknLqSZW8/7iMACMaac0NDo0iZtUEsOZCIiMexpsGMD2sNLkLThB3OD6bsN4 PVGP1ZRp4x/n+5Bx36tgDjRxYzgJ5xjdJIPWvQQFiJqc1xNGq+D2RnfP/459lUZY LwPBCCxJugZtPqyIYfzwFcEDbeOaUjk+qRFiRVZu03BCR5zluSnFf4yr8Cr6sBvh 8HTV4xr42vXTXBPEosFCLUY0R/WbR/+mby3Rrf8Rm0W6tC5uTSohJB0809XuSdg1 5+3Er5kjdzZEmlQJTTxayPUPrZXsdUxY+gaU55FybStA0MU6uwLehWv+sKXh3Lcl zmc3R+kteBGslRLgJx+qgGE4iwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAYTc5ls 26IWe4YE5tLDSrur1gwgMB8GA1UdIwQYMBaAFJBgPjVNtWizykKQDnAwEeeWYoku MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzMxRS9FQUExOUNCNEIy REMxMUVCODYyMUNCNTZDNEY5QUUwMi9rR0EtTlUyMWFMUEtRcEFPY0RBUjU1Wmlp UzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tHQS1OVTIxYUxQS1FwQU9jREFSNTVaaWlTNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzMxRS9FQUExOUNCNEIyREMxMUVCODYyMUNCNTZDNEY5QUUwMi9rR0EtTlUyMWFM UEtRcEFPY0RBUjU1WmlpUzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEEeHuxLsIWW7XtNn8QpWIcLzkZJolYpx5p8U2bspEzoBS82+MYiCQ nHi3MWdauZ4cRNZIm42krOllGALa+0JKUl2obsc12LnqrRhuojuc3CmXMzBDlhLo px87chZ72MLO7STEGwzbgVecwMphDu7snXEgqY9mAgbdm8ev64ZS+b9AB/gct8Eb 6zbrFqXr5El+sPbosc3qkyRsK2bqpD21+sWSGZkPRpOBzfUDdhcOGa4rJLbXqYeF h5VgqlfHReKYzS3awifrdf9ifoe5hvCTmcgrzLBUQYvDkxCn+iysDkhtmFXTxfWC uG4bRpgzR2wXR0miykYlrw4PwA+jwFkW -----END CERTIFICATE-----Generated at Thu Apr 24 18:09:24 2025 by rpki-client on console.sobornost.net