$ rpki-client -vvf rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft File: PurfFFrim0gkCj-6OvvZSajxU10.mft (raw, json) Hash identifier: wEOjWF/tBKHRzlOK6GPUkPP2x1rOBsObWaE6I2apYak= Subject key identifier: EE:4D:93:1C:B5:E8:7D:D2:A1:A4:D5:1F:A9:73:C8:12:EF:A7:AA:2C Authority key identifier: 3E:EA:DF:14:5A:E2:9B:48:24:0A:3F:BA:3A:FB:D9:49:A8:F1:53:5D Certificate issuer: /CN=A91F823E/serialNumber=3EEADF145AE29B48240A3FBA3AFBD949A8F1535D Certificate serial: 02F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PurfFFrim0gkCj-6OvvZSajxU10.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft Manifest number: 02F5 Signing time: Sun 27 Apr 2025 00:55:43 +0000 Manifest this update: Sun 27 Apr 2025 00:55:42 +0000 Manifest next update: Sun 04 May 2025 00:55:42 +0000 Files and hashes: 1: PurfFFrim0gkCj-6OvvZSajxU10.crl (hash: OKPplgKuLLO5AYKtRbV61dKkqcxmNMeParMS85tZoB4=) 2: B3481ED4D5B611ECA61EEC28C4F9AE02.roa (hash: 7bYPkVMZrrnunuEV97KsBcLOn5jOLNiIR6VQXBJQwkA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.crl rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PurfFFrim0gkCj-6OvvZSajxU10.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 00:55:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 761 (0x2f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F823E, serialNumber=3EEADF145AE29B48240A3FBA3AFBD949A8F1535D Validity Not Before: Apr 27 00:55:42 2025 GMT Not After : May 4 00:55:42 2025 GMT Subject: CN=680d808f-71dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e7:83:89:26:f3:6c:1e:bc:b6:65:d3:4c:51: a5:ad:11:84:8d:3c:1b:ce:02:b4:95:93:b9:93:d2: 33:80:b3:29:fe:a9:dc:bc:06:a0:6b:c9:ce:14:b7: 5c:f7:84:7a:12:2a:2d:eb:fd:09:53:d3:0f:41:58: 91:da:66:c2:44:46:5b:34:cf:c7:fc:e5:84:2a:cf: aa:f9:3b:15:34:86:f6:44:ad:0e:4c:bb:a2:b6:e9: f0:43:f5:a3:02:bd:7c:9c:20:8b:c9:5b:b4:ea:7a: 9c:2c:0a:e4:8c:ff:1e:5d:0c:8b:bb:3a:7d:a6:8a: eb:ea:0f:c2:c7:b1:3e:0e:a1:5b:df:00:99:c8:40: cf:79:b9:de:40:af:67:a4:66:d9:e9:87:3c:0a:6c: 42:ca:ab:3a:27:1f:ce:87:cc:e1:da:16:f4:40:bc: 13:ca:03:7a:f8:77:e8:38:9c:d6:0c:f3:28:1f:5c: b1:ed:23:f0:5b:2b:5e:ca:74:ae:63:37:61:97:09: 7c:c3:b9:21:81:38:49:47:3f:b6:3a:72:5f:8a:e1: 75:5d:d2:3e:a6:ba:f3:01:b5:77:a1:77:26:db:1d: af:9d:f0:17:8a:fa:8a:fd:5f:5a:b3:93:69:30:bd: fb:7c:2d:7f:7f:2a:d6:d1:2d:c6:20:71:48:63:8c: 74:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:4D:93:1C:B5:E8:7D:D2:A1:A4:D5:1F:A9:73:C8:12:EF:A7:AA:2C X509v3 Authority Key Identifier: keyid:3E:EA:DF:14:5A:E2:9B:48:24:0A:3F:BA:3A:FB:D9:49:A8:F1:53:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PurfFFrim0gkCj-6OvvZSajxU10.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:58:6a:5e:fd:54:3d:14:e1:c0:50:aa:a7:8a:ce:fe:fd:cb: 92:ad:6b:94:73:3d:ed:68:37:f2:82:87:31:e1:d1:bf:44:fd: fb:5c:6d:9a:1a:1e:5b:c7:9a:24:c2:dc:f6:f3:29:ff:04:ed: f4:60:cb:59:2e:08:ae:49:e6:15:bf:9b:a2:50:d8:34:16:1f: a9:a3:5f:30:1d:8a:b2:53:09:4e:32:09:a9:8d:a6:8d:cf:90: fa:0f:ec:4b:99:81:b7:10:98:29:96:15:dd:46:39:fa:a9:c8: 68:3f:ba:a0:5d:e1:10:96:b1:cc:e5:d9:5d:09:fa:8a:99:d5: c4:81:68:7e:c5:fd:36:9c:c9:2f:67:0c:29:dc:f8:5c:88:d9: 8f:86:1c:9f:6c:40:55:c6:73:b8:48:16:92:13:ed:0a:8a:29: 2a:01:73:d1:d0:2d:3c:b2:43:be:1e:17:c6:e6:91:0c:a6:e4: 21:16:42:ed:ab:6b:a3:40:34:72:7f:05:5c:fe:96:0c:07:e1: 95:33:af:35:a4:04:b9:c4:80:23:0d:2f:18:51:0e:c1:f6:5a: da:8f:30:20:f8:d9:de:8c:4f:26:88:a2:1f:74:24:23:ba:fb: 50:e6:0b:7f:a7:46:d7:5e:2f:1b:ff:1d:7e:fa:4c:71:3f:9e: 6f:ef:f0:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgyM0UxMTAvBgNVBAUTKDNFRUFERjE0NUFFMjlCNDgyNDBBM0ZCQTNBRkJEOTQ5 QThGMTUzNUQwHhcNMjUwNDI3MDA1NTQyWhcNMjUwNTA0MDA1NTQyWjAYMRYwFAYD VQQDEw02ODBkODA4Zi03MWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvueDiSbzbB68tmXTTFGlrRGEjTwbzgK0lZO5k9IzgLMp/qncvAaga8nOFLdc 94R6Eiot6/0JU9MPQViR2mbCREZbNM/H/OWEKs+q+TsVNIb2RK0OTLuitunwQ/Wj Ar18nCCLyVu06nqcLArkjP8eXQyLuzp9porr6g/Cx7E+DqFb3wCZyEDPebneQK9n pGbZ6Yc8CmxCyqs6Jx/Oh8zh2hb0QLwTygN6+HfoOJzWDPMoH1yx7SPwWyteynSu Yzdhlwl8w7khgThJRz+2OnJfiuF1XdI+prrzAbV3oXcm2x2vnfAXivqK/V9as5Np ML37fC1/fyrW0S3GIHFIY4x0KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO5Nkxy1 6H3SoaTVH6lzyBLvp6osMB8GA1UdIwQYMBaAFD7q3xRa4ptIJAo/ujr72Umo8VNd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODIzRS83RDY5QTgzQ0Q1 QjExMUVDOTM1MUU2MjBDNEY5QUUwMi9QdXJmRkZyaW0wZ2tDai02T3Z2WlNhanhV MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B1cmZGRnJpbTBna0NqLTZPdnZaU2FqeFUxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODIzRS83RDY5QTgzQ0Q1QjExMUVDOTM1MUU2MjBDNEY5QUUwMi9QdXJmRkZyaW0w Z2tDai02T3Z2WlNhanhVMTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1WGpe/VQ9FOHAUKqnis7+/cuSrWuUcz3taDfygocx4dG/RP37XG2a Gh5bx5okwtz28yn/BO30YMtZLgiuSeYVv5uiUNg0Fh+po18wHYqyUwlOMgmpjaaN z5D6D+xLmYG3EJgplhXdRjn6qchoP7qgXeEQlrHM5dldCfqKmdXEgWh+xf02nMkv Zwwp3PhciNmPhhyfbEBVxnO4SBaSE+0KiikqAXPR0C08skO+HhfG5pEMpuQhFkLt q2ujQDRyfwVc/pYMB+GVM681pAS5xIAjDS8YUQ7B9lrajzAg+NnejE8miKIfdCQj uvtQ5gt/p0bXXi8b/x1++kxxP55v7/Bf -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:18 2025 by rpki-client on console.sobornost.net