$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.mft File: v49Do1Dk9qJgvwPtS9_BqB2itaE.mft (raw, json) Hash identifier: +NfvYNOJSdV89H96+0ltM9wMwSMu0x0lk4jcBux61/o= Subject key identifier: 83:53:D3:B6:2A:92:0B:CC:CE:64:15:B8:3D:58:B4:59:E7:B2:E0:8B Authority key identifier: BF:8F:43:A3:50:E4:F6:A2:60:BF:03:ED:4B:DF:C1:A8:1D:A2:B5:A1 Certificate issuer: /CN=A91FAB62/serialNumber=BF8F43A350E4F6A260BF03ED4BDFC1A81DA2B5A1 Certificate serial: 0665 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v49Do1Dk9qJgvwPtS9_BqB2itaE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.mft Manifest number: 0646 Signing time: Sat 26 Apr 2025 22:26:58 +0000 Manifest this update: Sat 26 Apr 2025 22:26:57 +0000 Manifest next update: Sat 03 May 2025 22:26:57 +0000 Files and hashes: 1: v49Do1Dk9qJgvwPtS9_BqB2itaE.crl (hash: U8h+/RCJuHlajwkvSzCe7cP/rVeIBwRzoxD4HtkZv9s=) 2: 606DB4B298D111EB84F5A23CC4F9AE02.roa (hash: d5GPHUQ6PbzbALE1pusneP0He2eAPmJTteAnoAOf/Gs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.crl rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v49Do1Dk9qJgvwPtS9_BqB2itaE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 22:26:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1637 (0x665) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAB62, serialNumber=BF8F43A350E4F6A260BF03ED4BDFC1A81DA2B5A1 Validity Not Before: Apr 26 22:26:57 2025 GMT Not After : May 3 22:26:57 2025 GMT Subject: CN=680d5db2-bb65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:08:67:8c:51:42:30:94:e1:48:41:b5:75:bb: 15:e7:d2:55:53:41:9d:70:46:1f:8a:08:a4:8c:97: 87:e9:01:8a:3a:a3:72:aa:8b:e4:98:3b:8b:9f:73: 71:d5:a1:af:68:29:e3:86:2a:ac:9e:2e:36:61:91: b9:2a:46:ad:bf:3f:54:da:e2:a2:75:65:fb:3a:2b: ea:20:07:89:11:61:ab:4d:be:ce:ad:37:8e:53:90: 4e:3f:9f:c6:5f:ae:cf:b2:42:a3:96:01:4d:16:7e: cc:61:75:ed:93:e1:a4:4e:c9:f4:54:bc:7c:dd:c5: 54:c9:a0:5c:43:2d:a9:cf:09:d0:12:4b:2e:12:ef: 2a:e8:85:34:4e:b0:95:59:cf:b9:12:41:0f:05:d7: 71:01:48:8e:a1:e7:8e:8c:93:ed:ea:24:ac:1d:1c: a1:7e:c8:29:93:37:8b:11:bd:96:9d:a9:79:aa:6f: f5:56:7a:26:d9:b9:a8:9d:10:81:9d:a1:d0:d2:b3: 79:e1:17:89:45:76:5f:64:9c:ef:db:84:1b:ed:49: 93:ad:53:6e:d8:a8:d4:bb:06:0c:ac:c5:40:9b:d6: 2e:bb:d6:ad:96:cc:80:0c:d4:80:3f:07:4e:3d:54: c8:a7:7e:db:4d:ef:bc:0f:87:73:e0:52:93:16:a4: df:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:53:D3:B6:2A:92:0B:CC:CE:64:15:B8:3D:58:B4:59:E7:B2:E0:8B X509v3 Authority Key Identifier: keyid:BF:8F:43:A3:50:E4:F6:A2:60:BF:03:ED:4B:DF:C1:A8:1D:A2:B5:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v49Do1Dk9qJgvwPtS9_BqB2itaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:93:a1:92:50:22:53:28:6b:42:b2:82:af:f7:2d:37:76:f9: 40:da:a4:9f:d7:ce:07:0d:6d:d2:f5:7a:3e:e7:1d:17:67:cc: e8:a1:17:63:34:9f:14:47:5d:3a:57:06:32:eb:1c:dd:ef:c2: f8:20:3c:61:4d:29:f3:6c:ce:e6:4b:61:1b:fd:17:1b:42:b1: af:b6:e4:64:61:f9:d4:1c:f2:c6:71:2a:0d:06:a4:40:a8:1c: 30:f1:08:a4:5c:71:c5:d7:dd:11:a5:cc:44:c5:52:56:1d:8e: ab:24:bf:92:d3:f1:86:5b:26:21:4d:c8:aa:b4:26:0e:14:1e: 33:15:ca:54:8d:4f:b6:8b:3c:16:37:1b:87:46:d5:1b:00:d0: 25:5a:0f:1a:93:84:18:09:74:61:10:95:2b:e3:26:26:3b:d2: c7:17:03:a3:cd:e9:56:56:ee:1f:98:a1:ae:f8:db:23:01:64: a1:89:cb:ab:36:a7:cc:5e:85:fd:69:55:ca:f9:e2:14:06:7f: 53:5f:96:ac:39:8d:20:f8:f0:3d:55:25:7b:5a:df:05:6c:e5: 7c:80:cb:d8:73:89:da:9e:46:e6:75:1f:6a:b6:a9:47:ad:1f: 9b:38:3a:ca:56:b9:68:98:3f:cc:b7:64:23:37:b8:f5:26:b0: 84:48:86:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFCNjIxMTAvBgNVBAUTKEJGOEY0M0EzNTBFNEY2QTI2MEJGMDNFRDRCREZDMUE4 MURBMkI1QTEwHhcNMjUwNDI2MjIyNjU3WhcNMjUwNTAzMjIyNjU3WjAYMRYwFAYD VQQDEw02ODBkNWRiMi1iYjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmghnjFFCMJThSEG1dbsV59JVU0GdcEYfigikjJeH6QGKOqNyqovkmDuLn3Nx 1aGvaCnjhiqsni42YZG5Kkatvz9U2uKidWX7OivqIAeJEWGrTb7OrTeOU5BOP5/G X67PskKjlgFNFn7MYXXtk+GkTsn0VLx83cVUyaBcQy2pzwnQEksuEu8q6IU0TrCV Wc+5EkEPBddxAUiOoeeOjJPt6iSsHRyhfsgpkzeLEb2Wnal5qm/1Vnom2bmonRCB naHQ0rN54ReJRXZfZJzv24Qb7UmTrVNu2KjUuwYMrMVAm9Yuu9atlsyADNSAPwdO PVTIp37bTe+8D4dz4FKTFqTfMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFINT07Yq kgvMzmQVuD1YtFnnsuCLMB8GA1UdIwQYMBaAFL+PQ6NQ5PaiYL8D7UvfwagdorWh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUI2Mi84MkU5M0YyQzk4 Q0YxMUVCQjc1NzJBM0FDNEY5QUUwMi92NDlEbzFEazlxSmd2d1B0UzlfQnFCMml0 YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Y0OURvMURrOXFKZ3Z3UHRTOV9CcUIyaXRhRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUI2Mi84MkU5M0YyQzk4Q0YxMUVCQjc1NzJBM0FDNEY5QUUwMi92NDlEbzFEazlx Smd2d1B0UzlfQnFCMml0YUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVk6GSUCJTKGtCsoKv9y03dvlA2qSf184HDW3S9Xo+5x0XZ8zooRdj NJ8UR106VwYy6xzd78L4IDxhTSnzbM7mS2Eb/RcbQrGvtuRkYfnUHPLGcSoNBqRA qBww8QikXHHF190RpcxExVJWHY6rJL+S0/GGWyYhTciqtCYOFB4zFcpUjU+2izwW NxuHRtUbANAlWg8ak4QYCXRhEJUr4yYmO9LHFwOjzelWVu4fmKGu+NsjAWShicur NqfMXoX9aVXK+eIUBn9TX5asOY0g+PA9VSV7Wt8FbOV8gMvYc4nankbmdR9qtqlH rR+bODrKVrlomD/Mt2QjN7j1JrCESIbH -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:18 2025 by rpki-client on console.sobornost.net