$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft File: SrvXMBz_f7SstqBKFPCjbM6FYRw.mft (raw, json) Hash identifier: NLhRuvguDlbPdho2fpUOAiz1N6qQSOxCghF6M+dYzLA= Subject key identifier: 85:3D:AC:7B:D4:35:99:97:37:FB:51:B8:B4:B3:F4:49:AD:73:4F:A6 Authority key identifier: 4A:BB:D7:30:1C:FF:7F:B4:AC:B6:A0:4A:14:F0:A3:6C:CE:85:61:1C Certificate issuer: /CN=A91FA9BC/serialNumber=4ABBD7301CFF7FB4ACB6A04A14F0A36CCE85611C Certificate serial: 01BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrvXMBz_f7SstqBKFPCjbM6FYRw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft Manifest number: 01AC Signing time: Sun 27 Apr 2025 02:25:09 +0000 Manifest this update: Sun 27 Apr 2025 02:25:09 +0000 Manifest next update: Sun 04 May 2025 02:25:09 +0000 Files and hashes: 1: SrvXMBz_f7SstqBKFPCjbM6FYRw.crl (hash: xi7ak5QgRDTBJJzkSavvNZfNkvLYVvKaOLr/ttAvEYs=) 2: 106F283CB74311EDB0C38030C4F9AE02.roa (hash: 2ess2+aqjcLPy2+BGdLHTuvI+dzY0+eD7HCX2k3smvc=) 3: 4014542AED7D11ED8302706AC4F9AE02.roa (hash: zD9nEEeJbLqL6PpRHEJS0ZOHFslLXEVcLH+yPO4OeY0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.crl rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrvXMBz_f7SstqBKFPCjbM6FYRw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:25:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 442 (0x1ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA9BC, serialNumber=4ABBD7301CFF7FB4ACB6A04A14F0A36CCE85611C Validity Not Before: Apr 27 02:25:09 2025 GMT Not After : May 4 02:25:09 2025 GMT Subject: CN=680d9585-99c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:11:e3:89:c2:a8:51:7b:24:3d:de:93:6d:ea: 01:32:69:1c:52:cd:a5:73:27:cb:6b:b0:c6:8b:84: d4:04:2b:a1:cb:16:e1:44:1e:e7:b1:39:67:1c:6d: 2c:11:c1:8c:4b:73:39:b1:26:97:68:fc:bf:47:8b: 8d:ee:b6:aa:30:7f:0b:65:c9:86:fe:e5:4c:28:a7: ea:57:1d:b5:a0:a1:c9:bc:39:78:ef:67:8d:4e:0f: c8:41:79:f3:25:4d:a0:7f:b3:c2:cd:18:c9:3e:c7: 3b:d0:aa:4a:0e:af:b9:d1:13:0c:50:cb:8f:40:47: bb:e3:35:03:4b:ee:ab:e5:4e:61:f1:92:2c:d1:ad: 4f:f6:31:71:f6:79:74:27:98:17:51:6f:8f:73:40: 75:a2:d9:be:53:7a:3e:1a:82:62:e5:ba:23:9a:32: 8f:b1:96:e7:62:18:58:e6:a9:50:51:18:bb:e6:9b: 1e:ba:83:0d:36:a8:51:b6:27:bb:e5:49:d1:5b:fe: 78:4d:15:69:24:9b:b2:cd:b2:1d:a9:79:ff:9b:fd: 41:8d:bb:2b:a1:84:e4:51:04:8f:44:4a:29:c6:3b: d7:dd:4c:5d:1e:9f:fb:73:75:ed:fc:df:7b:23:b9: 3d:6b:4e:03:91:65:af:a2:b6:14:84:f1:d3:e1:3a: 9b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:3D:AC:7B:D4:35:99:97:37:FB:51:B8:B4:B3:F4:49:AD:73:4F:A6 X509v3 Authority Key Identifier: keyid:4A:BB:D7:30:1C:FF:7F:B4:AC:B6:A0:4A:14:F0:A3:6C:CE:85:61:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrvXMBz_f7SstqBKFPCjbM6FYRw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:c2:dd:fa:cd:80:f0:15:8c:f4:dd:08:86:27:d0:82:cf:47: 4d:0d:0d:5b:03:34:1d:c5:d4:bf:3a:f7:3a:2d:2c:e1:75:62: 5d:d6:6b:37:8e:58:15:fa:e4:36:47:da:c9:b0:74:b2:d8:c6: 26:bd:8b:d2:e4:44:6e:c7:ce:b2:be:bd:ca:b5:a6:0f:b9:29: 6d:46:87:1e:b5:58:e7:e9:93:3d:d0:5d:d0:e1:53:c6:a9:8e: 70:2c:65:02:db:d6:2e:e4:23:00:f4:af:dc:4a:ec:46:84:e8: 3b:51:0c:83:5f:7b:49:a2:f0:c9:fe:50:5c:5c:c5:c2:15:e9: 0e:34:d9:da:ad:6d:e7:7f:c8:56:ee:04:f5:d6:af:78:40:d9: 77:4b:22:01:7c:1b:7a:e1:1f:75:5a:ee:e5:4e:ce:f4:df:9b: 1c:9d:13:d2:fd:2b:9e:7f:fb:1e:af:31:bc:9c:42:32:47:bd: ae:11:75:7e:ce:a1:91:f4:63:59:a9:3c:49:a2:c4:da:6e:b8: 0a:c0:26:ef:09:b1:cc:d7:b5:9a:3d:ab:56:4a:04:44:3f:66: fb:d4:ac:b8:c7:a2:b3:64:e8:29:bd:a7:b0:ae:33:bb:f0:94: 12:78:99:32:ba:5b:00:db:4a:52:17:f6:f4:98:9c:22:b1:2d: af:5c:c2:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE5QkMxMTAvBgNVBAUTKDRBQkJENzMwMUNGRjdGQjRBQ0I2QTA0QTE0RjBBMzZD Q0U4NTYxMUMwHhcNMjUwNDI3MDIyNTA5WhcNMjUwNTA0MDIyNTA5WjAYMRYwFAYD VQQDEw02ODBkOTU4NS05OWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArRHjicKoUXskPd6TbeoBMmkcUs2lcyfLa7DGi4TUBCuhyxbhRB7nsTlnHG0s EcGMS3M5sSaXaPy/R4uN7raqMH8LZcmG/uVMKKfqVx21oKHJvDl472eNTg/IQXnz JU2gf7PCzRjJPsc70KpKDq+50RMMUMuPQEe74zUDS+6r5U5h8ZIs0a1P9jFx9nl0 J5gXUW+Pc0B1otm+U3o+GoJi5bojmjKPsZbnYhhY5qlQURi75pseuoMNNqhRtie7 5UnRW/54TRVpJJuyzbIdqXn/m/1BjbsroYTkUQSPREopxjvX3UxdHp/7c3Xt/N97 I7k9a04DkWWvorYUhPHT4TqbIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIU9rHvU NZmXN/tRuLSz9Emtc0+mMB8GA1UdIwQYMBaAFEq71zAc/3+0rLagShTwo2zOhWEc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTlCQy9CRTJDRUZGMEIz QUExMUVEQUYzMTYyM0ZDNEY5QUUwMi9TcnZYTUJ6X2Y3U3N0cUJLRlBDamJNNkZZ UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NydlhNQnpfZjdTc3RxQktGUENqYk02RllSdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTlCQy9CRTJDRUZGMEIzQUExMUVEQUYzMTYyM0ZDNEY5QUUwMi9TcnZYTUJ6X2Y3 U3N0cUJLRlBDamJNNkZZUncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZwt36zYDwFYz03QiGJ9CCz0dNDQ1bAzQdxdS/Ovc6LSzhdWJd1ms3 jlgV+uQ2R9rJsHSy2MYmvYvS5ERux86yvr3KtaYPuSltRocetVjn6ZM90F3Q4VPG qY5wLGUC29Yu5CMA9K/cSuxGhOg7UQyDX3tJovDJ/lBcXMXCFekONNnarW3nf8hW 7gT11q94QNl3SyIBfBt64R91Wu7lTs7035scnRPS/Suef/serzG8nEIyR72uEXV+ zqGR9GNZqTxJosTabrgKwCbvCbHM17WaPatWSgREP2b71Ky4x6KzZOgpvaewrjO7 8JQSeJkyulsA20pSF/b0mJwisS2vXMLJ -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:18 2025 by rpki-client on console.sobornost.net