$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft File: IQlGzanedd75YJiV-_Ie2Exy9Oc.mft (raw, json) Hash identifier: LBe0Ze7qGZwSb2QdjNMq7+BRdpVteHkrIsvQ/X60Y7A= Subject key identifier: 14:0B:80:59:C7:EE:ED:8D:E7:96:D1:51:4C:87:BE:9B:C3:4A:1B:0D Authority key identifier: 21:09:46:CD:A9:DE:75:DE:F9:60:98:95:FB:F2:1E:D8:4C:72:F4:E7 Certificate issuer: /CN=A91F7537/serialNumber=210946CDA9DE75DEF9609895FBF21ED84C72F4E7 Certificate serial: 57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQlGzanedd75YJiV-_Ie2Exy9Oc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft Manifest number: 56 Signing time: Sun 27 Apr 2025 06:01:56 +0000 Manifest this update: Sun 27 Apr 2025 06:01:56 +0000 Manifest next update: Sun 04 May 2025 06:01:56 +0000 Files and hashes: 1: IQlGzanedd75YJiV-_Ie2Exy9Oc.crl (hash: PXyilPi8+4MB6tNfGCmCDstWcI7EAGBIfI/aPqKwiMY=) 2: 6156C7F6A27311EFBF7D5E22C4F9AE02.roa (hash: S974N0P9f8Bg6Jc7BIscRXeUqpVDlIBE/NP1Bo0j0PA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.crl rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQlGzanedd75YJiV-_Ie2Exy9Oc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 87 (0x57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7537, serialNumber=210946CDA9DE75DEF9609895FBF21ED84C72F4E7 Validity Not Before: Apr 27 06:01:56 2025 GMT Not After : May 4 06:01:56 2025 GMT Subject: CN=680dc854-9a1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7a:4c:ef:93:bc:7e:3e:c8:06:31:eb:dc:47: c5:dd:84:9f:1a:38:3b:a4:4f:3c:f2:3e:3d:0a:3a: 28:91:a0:0e:0a:fe:54:77:f2:f2:4e:1e:fd:1e:07: 9e:b2:a0:14:de:fe:de:e6:2c:cf:72:8d:9e:3e:90: 9f:e8:8e:70:4f:21:6e:b2:2b:7b:70:33:cc:d5:83: be:53:5d:ed:6d:56:31:a2:ba:4f:dd:ce:4f:d5:3c: 5e:68:38:f4:39:05:95:3e:05:95:11:53:f2:34:bc: 21:66:09:f6:7d:3b:a7:48:ff:03:ff:77:31:41:25: e8:06:74:b0:f3:15:64:04:02:15:34:ac:d2:18:f9: 93:e7:df:69:84:73:42:f7:9a:0d:d6:74:e5:53:10: 26:64:7d:45:a6:6e:34:4c:1b:68:27:71:23:1d:b3: 71:35:39:a1:e8:29:4b:e4:ec:6a:04:12:0b:23:3d: 44:ac:f7:aa:16:d7:15:b4:89:6f:29:ca:88:7c:72: 5e:5f:3f:8e:56:50:55:58:93:4f:82:34:1a:54:31: 8b:d9:99:06:bd:4f:fb:59:eb:35:2f:c5:9e:f5:e8: 59:d6:c3:9c:2e:94:a9:f8:9e:7d:e3:02:5c:cb:28: 5f:77:dc:5c:9b:c7:2b:8a:e7:bf:65:77:d5:34:2a: db:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:0B:80:59:C7:EE:ED:8D:E7:96:D1:51:4C:87:BE:9B:C3:4A:1B:0D X509v3 Authority Key Identifier: keyid:21:09:46:CD:A9:DE:75:DE:F9:60:98:95:FB:F2:1E:D8:4C:72:F4:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQlGzanedd75YJiV-_Ie2Exy9Oc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:74:16:b5:73:a7:70:00:6b:4d:6f:84:04:77:80:d1:91:44: e4:85:32:d1:b4:c2:4b:2a:c7:f5:ce:64:79:7e:dd:49:1f:4a: eb:a5:bb:8b:64:6b:63:8b:80:21:17:7c:31:ab:35:08:69:61: f3:89:7a:ec:ce:b9:0f:b9:d3:ed:4c:24:78:e4:36:6c:8d:16: b5:03:19:23:ab:a5:94:44:f7:bd:35:e4:74:9f:d2:52:69:f2: 3a:c6:c6:5b:14:36:87:65:c2:00:57:af:d3:98:ef:b6:f6:d3: e1:88:0f:6c:7a:20:f9:12:0e:7c:c0:a2:38:d6:35:db:fd:6a: 8a:e6:3f:bb:b4:8b:a0:59:b3:c7:25:b6:b8:4c:4d:0a:5a:27: 96:39:b5:6a:53:b1:fc:be:87:d1:69:f0:9a:df:6d:58:58:8d: ed:1d:c4:82:8f:e1:65:00:df:bb:b0:cf:b2:f8:32:f2:da:10: d5:1f:9c:5a:37:34:6c:8a:42:8e:04:05:62:60:bc:d6:92:93: 50:5d:76:99:45:d1:eb:93:95:c8:5c:65:c7:21:98:17:6f:ec: 8d:10:4c:1e:ba:0d:a2:77:5e:4c:2a:9b:d5:e1:95:14:88:7f: 36:2d:77:d3:82:d6:32:61:ce:60:0d:c2:25:93:f2:a1:e8:22: ea:0e:53:f6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NzUzNzExMC8GA1UEBRMoMjEwOTQ2Q0RBOURFNzVERUY5NjA5ODk1RkJGMjFFRDg0 QzcyRjRFNzAeFw0yNTA0MjcwNjAxNTZaFw0yNTA1MDQwNjAxNTZaMBgxFjAUBgNV BAMTDTY4MGRjODU0LTlhMWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLekzvk7x+PsgGMevcR8XdhJ8aODukTzzyPj0KOiiRoA4K/lR38vJOHv0eB56y oBTe/t7mLM9yjZ4+kJ/ojnBPIW6yK3twM8zVg75TXe1tVjGiuk/dzk/VPF5oOPQ5 BZU+BZURU/I0vCFmCfZ9O6dI/wP/dzFBJegGdLDzFWQEAhU0rNIY+ZPn32mEc0L3 mg3WdOVTECZkfUWmbjRMG2gncSMds3E1OaHoKUvk7GoEEgsjPUSs96oW1xW0iW8p yoh8cl5fP45WUFVYk0+CNBpUMYvZmQa9T/tZ6zUvxZ716FnWw5wulKn4nn3jAlzL KF933FybxyuK579ld9U0KtsNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFAuAWcfu 7Y3nltFRTIe+m8NKGw0wHwYDVR0jBBgwFoAUIQlGzanedd75YJiV+/Ie2Exy9Ocw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3NTM3Lzg3REQ1NDhDQTI3 MTExRUZBMzkyRjA3OUM0RjlBRTAyL0lRbEd6YW5lZGQ3NVlKaVYtX0llMkV4eTlP Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSVFsR3phbmVkZDc1WUppVi1fSWUyRXh5OU9jLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3 NTM3Lzg3REQ1NDhDQTI3MTExRUZBMzkyRjA3OUM0RjlBRTAyL0lRbEd6YW5lZGQ3 NVlKaVYtX0llMkV4eTlPYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH90FrVzp3AAa01vhAR3gNGRROSFMtG0wksqx/XOZHl+3UkfSuulu4tk a2OLgCEXfDGrNQhpYfOJeuzOuQ+50+1MJHjkNmyNFrUDGSOrpZRE97015HSf0lJp 8jrGxlsUNodlwgBXr9OY77b20+GID2x6IPkSDnzAojjWNdv9aormP7u0i6BZs8cl trhMTQpaJ5Y5tWpTsfy+h9Fp8JrfbVhYje0dxIKP4WUA37uwz7L4MvLaENUfnFo3 NGyKQo4EBWJgvNaSk1BddplF0euTlchcZcchmBdv7I0QTB66DaJ3Xkwqm9XhlRSI fzYtd9OC1jJhzmANwiWT8qHoIuoOU/Y= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:59 2025 by rpki-client on console.sobornost.net