$ rpki-client -vvf rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft File: sxnfFFXYouFJjNxdSRVpgxxa_aE.mft (raw, json) Hash identifier: RbQQDbFyFP/bOSysotW1B5XMXx07qvJljLZYWOErU/Y= Subject key identifier: 8D:F2:34:96:67:39:1A:3B:96:D4:78:FD:A3:E5:50:57:F9:32:33:3A Authority key identifier: B3:19:DF:14:55:D8:A2:E1:49:8C:DC:5D:49:15:69:83:1C:5A:FD:A1 Certificate issuer: /CN=A91F87BB/serialNumber=B319DF1455D8A2E1498CDC5D491569831C5AFDA1 Certificate serial: 03EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft Manifest number: 03DE Signing time: Sun 27 Apr 2025 00:13:09 +0000 Manifest this update: Sun 27 Apr 2025 00:13:08 +0000 Manifest next update: Sun 04 May 2025 00:13:08 +0000 Files and hashes: 1: sxnfFFXYouFJjNxdSRVpgxxa_aE.crl (hash: 3BiqAydPmyGj0t4+b6pbm7MerkF7pe+EJyi57smhWY0=) 2: 88B3F0026E9F11EEB03D9582C4F9AE02.roa (hash: OnZeTeaYB5z7AJuz8oi6jGvWEckKykDi+qBUmv+U0QM=) 3: DDCB6B02D9D311EEBB3BDF10C4F9AE02.roa (hash: NYRjezFURAIZr5dfzYcgObUcS0k2GZmBPMzd9N07gUQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.crl rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 00:13:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1003 (0x3eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F87BB, serialNumber=B319DF1455D8A2E1498CDC5D491569831C5AFDA1 Validity Not Before: Apr 27 00:13:08 2025 GMT Not After : May 4 00:13:08 2025 GMT Subject: CN=680d7695-f3e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:55:9a:a8:3c:97:6b:2d:c1:6c:9a:73:73:a5: d4:f6:00:29:6e:20:d3:ed:82:13:ea:22:ab:6c:63: b0:55:7e:d5:62:bd:87:77:b8:02:e9:e1:7d:91:07: b0:81:88:57:98:c7:31:77:cb:b2:fe:b7:19:f5:a2: de:e1:24:f6:3a:83:62:c7:72:36:e4:f4:72:4b:0c: 6e:93:78:df:9a:0b:d0:ae:a4:20:bf:86:40:7d:4f: a0:0b:f4:e9:32:ad:80:7b:6e:9a:c3:9a:67:71:d3: 8c:d8:21:fb:ab:28:c2:1e:45:fb:6c:1a:14:00:14: a6:e4:1d:56:2d:f0:74:64:93:99:2f:fc:b9:07:bc: 76:c7:da:c1:48:4f:2c:f9:f5:c1:7f:c2:1b:ab:ee: b9:b5:74:8a:2e:c3:be:d5:16:32:56:cd:a5:71:2d: 7a:5a:ff:f7:d2:fa:47:70:64:ed:11:3b:ef:d6:27: 54:20:ce:49:78:f5:e9:50:fc:4f:45:0e:c1:03:52: 76:80:da:80:51:72:a6:59:07:70:7f:af:c5:ae:e5: 22:4a:7e:9d:76:b4:dc:71:87:ae:d0:29:f2:9c:21: 80:44:f7:95:53:f4:86:83:b1:42:1f:cd:c8:84:cb: 45:50:fb:0a:c0:ba:38:d6:e3:6b:a1:1b:7a:34:60: 0c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:F2:34:96:67:39:1A:3B:96:D4:78:FD:A3:E5:50:57:F9:32:33:3A X509v3 Authority Key Identifier: keyid:B3:19:DF:14:55:D8:A2:E1:49:8C:DC:5D:49:15:69:83:1C:5A:FD:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:58:c6:02:15:3e:9b:eb:77:8b:63:b5:42:3e:db:71:9f:19: 2f:dc:26:c9:c3:e8:22:bc:ae:95:a9:cb:f3:be:55:e4:1e:50: e8:c9:53:b1:13:5a:08:a2:ab:30:c6:df:09:18:7d:7f:71:ac: 6b:8b:0e:9b:05:8e:65:22:52:7a:f1:5b:02:e5:0a:dd:63:ac: 77:a2:bb:60:9b:da:be:d6:e4:a3:10:cd:3b:b7:a9:a8:f7:1a: 58:c8:01:a8:ad:32:9b:5c:33:ec:3d:f7:8b:4a:96:c0:d4:44: 39:73:5e:4b:b6:79:88:04:57:9a:18:b4:de:b6:0f:35:54:14: ae:b7:68:62:5b:5e:2d:fa:86:49:2b:e8:66:0b:bd:6a:8b:a4: 9d:f1:20:c4:d1:fc:8c:ef:ca:a2:21:46:dd:cb:09:29:af:87: be:65:d8:34:49:f0:2a:36:1d:72:24:ae:cc:46:f0:14:35:48: bb:9c:10:a1:ab:05:1d:30:f6:32:c6:17:5a:99:cd:f6:df:ef: 0f:01:c9:f8:3b:6f:60:06:5f:a0:1a:2e:ba:a4:3e:ee:7e:ef: df:49:9a:50:26:a1:89:7d:61:e1:d9:8e:db:51:d0:c8:31:1e: f8:55:03:f2:f0:11:c2:4b:97:fb:e2:c2:fb:83:60:9b:88:ca: 0e:f6:52:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg3QkIxMTAvBgNVBAUTKEIzMTlERjE0NTVEOEEyRTE0OThDREM1RDQ5MTU2OTgz MUM1QUZEQTEwHhcNMjUwNDI3MDAxMzA4WhcNMjUwNTA0MDAxMzA4WjAYMRYwFAYD VQQDEw02ODBkNzY5NS1mM2UzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyVWaqDyXay3BbJpzc6XU9gApbiDT7YIT6iKrbGOwVX7VYr2Hd7gC6eF9kQew gYhXmMcxd8uy/rcZ9aLe4ST2OoNix3I25PRySwxuk3jfmgvQrqQgv4ZAfU+gC/Tp Mq2Ae26aw5pncdOM2CH7qyjCHkX7bBoUABSm5B1WLfB0ZJOZL/y5B7x2x9rBSE8s +fXBf8Ibq+65tXSKLsO+1RYyVs2lcS16Wv/30vpHcGTtETvv1idUIM5JePXpUPxP RQ7BA1J2gNqAUXKmWQdwf6/FruUiSn6ddrTccYeu0CnynCGARPeVU/SGg7FCH83I hMtFUPsKwLo41uNroRt6NGAMowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI3yNJZn ORo7ltR4/aPlUFf5MjM6MB8GA1UdIwQYMBaAFLMZ3xRV2KLhSYzcXUkVaYMcWv2h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODdCQi85REYwREZCRTdE RTkxMUVDQkVBMDhFMEZDNEY5QUUwMi9zeG5mRkZYWW91RkpqTnhkU1JWcGd4eGFf YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N4bmZGRlhZb3VGSmpOeGRTUlZwZ3h4YV9hRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODdCQi85REYwREZCRTdERTkxMUVDQkVBMDhFMEZDNEY5QUUwMi9zeG5mRkZYWW91 RkpqTnhkU1JWcGd4eGFfYUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABWMYCFT6b63eLY7VCPttxnxkv3CbJw+givK6VqcvzvlXkHlDoyVOx E1oIoqswxt8JGH1/caxriw6bBY5lIlJ68VsC5QrdY6x3ortgm9q+1uSjEM07t6mo 9xpYyAGorTKbXDPsPfeLSpbA1EQ5c15LtnmIBFeaGLTetg81VBSut2hiW14t+oZJ K+hmC71qi6Sd8SDE0fyM78qiIUbdywkpr4e+Zdg0SfAqNh1yJK7MRvAUNUi7nBCh qwUdMPYyxhdamc323+8PAcn4O29gBl+gGi66pD7ufu/fSZpQJqGJfWHh2Y7bUdDI MR74VQPy8BHCS5f74sL7g2CbiMoO9lL+ -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:18 2025 by rpki-client on console.sobornost.net