$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft File: N3hUTiRpVIvwm1Td2APX19kPfmI.mft (raw, json) Hash identifier: p2W2FKRcC8Mo0xuDrTZOR4o0f5B+WOsfvY1zszLc3HE= Subject key identifier: 1F:BF:11:B4:AB:51:B9:F8:4F:99:FC:E3:6F:FF:CD:35:5F:7F:65:C5 Authority key identifier: 37:78:54:4E:24:69:54:8B:F0:9B:54:DD:D8:03:D7:D7:D9:0F:7E:62 Certificate issuer: /CN=A91F8CAA/serialNumber=3778544E2469548BF09B54DDD803D7D7D90F7E62 Certificate serial: D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft Manifest number: D1 Signing time: Sun 27 Apr 2025 04:31:10 +0000 Manifest this update: Sun 27 Apr 2025 04:31:10 +0000 Manifest next update: Sun 04 May 2025 04:31:10 +0000 Files and hashes: 1: N3hUTiRpVIvwm1Td2APX19kPfmI.crl (hash: Je16OQ1n37a5WsJnbn2vc74NSHYMef+SDXrZlfueVk8=) 2: 1EC90968E1F211EEA360BE22C4F9AE02.roa (hash: XRFVx29hjFc5pKNr7AkvLob3HQjLTaD9Ns3C1RRvN4w=) 3: 1E4548E4E1F211EEA360BE22C4F9AE02.roa (hash: elMINW9VmQY5nycCbQ/QKtRjE+I0nxMVlzRRTvQng4k=) 4: 1DDBD99AE1F211EEA360BE22C4F9AE02.roa (hash: E3gtntzxmL6luEWEYnHzIxmyJjY7WSBf3VBE5/D496g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.crl rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 217 (0xd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8CAA, serialNumber=3778544E2469548BF09B54DDD803D7D7D90F7E62 Validity Not Before: Apr 27 04:31:10 2025 GMT Not After : May 4 04:31:10 2025 GMT Subject: CN=680db30e-678e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:46:d5:c3:dc:52:cd:27:a5:eb:3c:34:78:dd: e3:7c:ba:21:9a:7f:77:98:0a:4c:f1:0f:9e:5c:a1: b3:07:03:bc:95:21:77:3f:dc:1d:ed:9e:23:fa:6c: 13:bf:79:e7:2a:3f:2f:64:f6:15:1e:5d:f4:88:5a: 5b:43:a0:ee:12:fd:25:a4:b3:1a:07:0b:e0:5f:8c: 74:77:27:72:a3:4f:47:98:33:ca:1b:c0:90:fa:01: f5:04:b3:3a:69:99:cc:56:d1:f9:93:78:77:9d:ec: 05:01:9f:f5:ce:00:18:e6:4c:2b:59:87:1c:ef:f4: 1a:83:91:46:dc:3d:e5:37:8d:6d:3d:78:5d:c3:5f: f8:30:a8:a2:11:44:1a:12:b8:ea:ca:a2:6d:09:5b: a2:7c:ca:3e:62:20:10:9b:03:40:75:e2:19:dd:9b: 20:cd:c9:5c:89:ab:93:f0:48:f9:62:1f:82:6c:05: 3a:87:9d:4f:7b:f3:a2:dd:01:92:23:3f:50:fd:4c: bf:17:8f:ec:a9:ea:83:b1:88:10:5d:7e:36:e0:f1: 88:84:c8:66:52:2a:b1:1a:f5:95:b9:53:a8:a3:a5: 45:b7:c9:e4:9e:08:fa:b1:0d:ed:ea:8a:08:f6:03: e7:3d:9b:b7:47:53:47:0a:d8:6e:0e:a7:d0:0a:e1: bf:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:BF:11:B4:AB:51:B9:F8:4F:99:FC:E3:6F:FF:CD:35:5F:7F:65:C5 X509v3 Authority Key Identifier: keyid:37:78:54:4E:24:69:54:8B:F0:9B:54:DD:D8:03:D7:D7:D9:0F:7E:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:e2:9e:fa:c3:d8:b4:d3:27:68:2f:f7:fa:00:bf:45:68:97: 94:dd:9d:a1:57:30:e3:ba:84:01:db:63:ad:6b:6c:31:c8:29: c1:6f:d4:16:b9:96:b6:7f:98:09:c6:30:e1:59:fa:16:4e:0e: fc:8d:35:db:5e:5d:52:47:bd:2b:d2:ff:71:71:fa:18:d7:a9: 8b:f8:83:a2:d1:e2:b4:d9:51:9e:f3:34:c0:8c:ef:1e:56:fe: bc:27:1e:43:ec:02:18:1c:b1:be:d5:7a:82:0e:db:2d:bf:dc: 0f:a0:b1:a9:60:69:02:84:56:5e:51:09:72:cc:d5:d3:88:68: a4:40:56:19:7b:33:90:23:33:6d:10:91:b9:4a:67:0b:c9:b4: 9f:15:3f:26:7b:d8:49:28:98:81:81:b9:1f:50:a3:75:e9:ea: 88:ec:9a:ec:31:5a:14:df:18:32:63:82:cd:66:73:fd:19:9a: 2a:86:2d:4a:58:38:54:d4:c0:3e:be:17:a0:d6:2a:2b:12:50: ff:c1:bf:df:81:ac:73:2a:fb:25:66:f7:03:40:53:a2:ce:19: f6:3f:81:51:a9:a4:c6:a8:84:c3:83:a1:10:aa:19:08:b0:de: aa:79:34:91:80:4f:e7:ba:b7:3b:da:5c:ab:f0:9d:ae:1d:cc: 6b:bc:97:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhDQUExMTAvBgNVBAUTKDM3Nzg1NDRFMjQ2OTU0OEJGMDlCNTREREQ4MDNEN0Q3 RDkwRjdFNjIwHhcNMjUwNDI3MDQzMTEwWhcNMjUwNTA0MDQzMTEwWjAYMRYwFAYD VQQDEw02ODBkYjMwZS02NzhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn0bVw9xSzSel6zw0eN3jfLohmn93mApM8Q+eXKGzBwO8lSF3P9wd7Z4j+mwT v3nnKj8vZPYVHl30iFpbQ6DuEv0lpLMaBwvgX4x0dydyo09HmDPKG8CQ+gH1BLM6 aZnMVtH5k3h3newFAZ/1zgAY5kwrWYcc7/Qag5FG3D3lN41tPXhdw1/4MKiiEUQa ErjqyqJtCVuifMo+YiAQmwNAdeIZ3ZsgzclciauT8Ej5Yh+CbAU6h51Pe/Oi3QGS Iz9Q/Uy/F4/sqeqDsYgQXX424PGIhMhmUiqxGvWVuVOoo6VFt8nkngj6sQ3t6ooI 9gPnPZu3R1NHCthuDqfQCuG/0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB+/EbSr Ubn4T5n842//zTVff2XFMB8GA1UdIwQYMBaAFDd4VE4kaVSL8JtU3dgD19fZD35i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOENBQS9EQ0QwMkEyMEUx RUExMUVFOTk5QzcwMkFDNEY5QUUwMi9OM2hVVGlScFZJdndtMVRkMkFQWDE5a1Bm bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04zaFVUaVJwVkl2d20xVGQyQVBYMTlrUGZtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OENBQS9EQ0QwMkEyMEUxRUExMUVFOTk5QzcwMkFDNEY5QUUwMi9OM2hVVGlScFZJ dndtMVRkMkFQWDE5a1BmbUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZ4p76w9i00ydoL/f6AL9FaJeU3Z2hVzDjuoQB22Ota2wxyCnBb9QW uZa2f5gJxjDhWfoWTg78jTXbXl1SR70r0v9xcfoY16mL+IOi0eK02VGe8zTAjO8e Vv68Jx5D7AIYHLG+1XqCDtstv9wPoLGpYGkChFZeUQlyzNXTiGikQFYZezOQIzNt EJG5SmcLybSfFT8me9hJKJiBgbkfUKN16eqI7JrsMVoU3xgyY4LNZnP9GZoqhi1K WDhU1MA+vheg1iorElD/wb/fgaxzKvslZvcDQFOizhn2P4FRqaTGqITDg6EQqhkI sN6qeTSRgE/nurc72lyr8J2uHcxrvJdU -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:59 2025 by rpki-client on console.sobornost.net