$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft File: n4mmBPRc629oBPtTTq3CQWa9Dyk.mft (raw, json) Hash identifier: 4yG8uzHv9m110swUZc0b0QBtX+Fwkfi0yO8gFQ6Sqsg= Subject key identifier: 02:3B:B5:0A:4B:4F:A4:F6:7E:CA:7B:A3:7F:84:35:C4:5D:48:1A:03 Authority key identifier: 9F:89:A6:04:F4:5C:EB:6F:68:04:FB:53:4E:AD:C2:41:66:BD:0F:29 Certificate issuer: /CN=A91FD3F6/serialNumber=9F89A604F45CEB6F6804FB534EADC24166BD0F29 Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft Manifest number: 20 Signing time: Sun 27 Apr 2025 06:41:38 +0000 Manifest this update: Sun 27 Apr 2025 06:41:38 +0000 Manifest next update: Sun 04 May 2025 06:41:38 +0000 Files and hashes: 1: n4mmBPRc629oBPtTTq3CQWa9Dyk.crl (hash: e1VsPl4Tr4yIVBW+R3HpedOe+x8UeQV6sMVNKH3NlNM=) 2: 27B19A58F99911EFB6B7F427C4F9AE02.roa (hash: BUhldgfxait6fPn7ddMr7oElIYN1G4FTjWGIi47OvkE=) 3: 88E11172F99A11EFA825D961C4F9AE02.roa (hash: AXOaVoqZ86dlROkyEdtuYYcAQanKRipkDbyi/sYqa94=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.crl rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD3F6, serialNumber=9F89A604F45CEB6F6804FB534EADC24166BD0F29 Validity Not Before: Apr 27 06:41:38 2025 GMT Not After : May 4 06:41:38 2025 GMT Subject: CN=680dd1a2-afa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:69:73:67:66:4b:f4:38:f0:ed:bd:f0:c5:fd: d4:3a:58:2d:d9:90:02:5d:b4:0c:1e:a3:aa:12:90: 60:58:ac:18:bf:d6:6a:92:0d:7a:19:c2:bb:2a:13: 8b:dc:0a:ca:33:ee:04:b6:96:f1:4e:9e:0c:79:4c: 83:aa:75:d9:20:48:d1:e9:30:62:27:25:c5:aa:5f: fc:66:16:a2:f7:a6:fe:30:a6:85:60:8b:99:94:eb: d0:83:40:4d:f0:b6:3a:62:2b:09:d1:f0:47:81:d3: d8:56:64:22:04:80:0b:f3:a4:4f:d3:25:5d:12:65: f6:ad:f3:ac:87:b7:d8:86:9d:d0:ed:45:88:c7:d7: 15:f3:5c:fa:e1:bc:77:8c:b4:0e:2b:00:92:fe:ef: c5:99:44:f3:89:2b:70:09:bc:de:c6:6d:63:ab:98: e1:78:19:e5:ab:87:99:0a:f8:e2:22:14:58:e6:79: fe:51:a5:d6:1a:d1:99:41:e8:84:e3:51:5e:1e:71: 7f:9b:ba:48:80:56:f7:6d:1e:f7:01:9e:d3:d7:e1: 49:e4:51:9d:4a:87:14:1a:a6:5c:3f:9b:21:ed:97: 72:74:3a:a1:58:19:25:76:a2:98:96:81:dc:1a:2c: ef:67:71:92:61:56:f8:fc:74:a1:9d:2a:b9:d0:f1: e6:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:3B:B5:0A:4B:4F:A4:F6:7E:CA:7B:A3:7F:84:35:C4:5D:48:1A:03 X509v3 Authority Key Identifier: keyid:9F:89:A6:04:F4:5C:EB:6F:68:04:FB:53:4E:AD:C2:41:66:BD:0F:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:ff:36:96:09:1d:4e:d9:f8:be:77:42:15:6c:50:77:bb:e4: 3c:e9:86:92:ee:52:13:12:2d:07:3a:17:9e:d2:bc:38:44:fc: 9e:38:fa:d8:4a:b2:85:b0:02:6e:bb:39:13:b6:e9:42:7d:00: ad:a5:7d:0f:a1:86:67:c1:b3:66:b4:17:bd:de:95:cb:26:a2: e9:04:c4:18:de:46:fc:30:ea:b3:e0:0a:f4:90:1d:ea:94:86: b3:54:ff:81:90:b1:18:92:1b:1d:17:c5:1f:42:c2:16:47:b4: b5:33:09:1f:6a:d6:51:22:8f:6d:39:fc:66:ac:51:ab:ad:cb: 6b:65:a3:27:9a:2e:dc:3e:87:af:37:48:e7:0a:04:f8:8d:b9: 24:6f:be:45:56:b4:42:4c:82:9d:0e:dc:f7:46:7f:05:8f:fa: 80:59:00:62:21:1d:11:db:22:81:2c:59:be:e3:6d:90:a0:62: 7d:e3:f7:e8:fb:31:2a:33:19:cc:38:4c:5a:f7:a9:9f:43:4f: 85:01:36:f0:ed:df:ef:6c:65:96:10:c4:35:61:93:76:f9:9f: 03:3e:76:a0:52:9d:e5:ce:5d:05:6a:0f:a7:a2:33:7a:07:ae: 95:32:1a:53:84:47:f8:cc:2e:87:d8:1f:96:5a:f2:dc:31:4b: 7e:a0:5b:43 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RDNGNjExMC8GA1UEBRMoOUY4OUE2MDRGNDVDRUI2RjY4MDRGQjUzNEVBREMyNDE2 NkJEMEYyOTAeFw0yNTA0MjcwNjQxMzhaFw0yNTA1MDQwNjQxMzhaMBgxFjAUBgNV BAMTDTY4MGRkMWEyLWFmYTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsaXNnZkv0OPDtvfDF/dQ6WC3ZkAJdtAweo6oSkGBYrBi/1mqSDXoZwrsqE4vc Csoz7gS2lvFOngx5TIOqddkgSNHpMGInJcWqX/xmFqL3pv4wpoVgi5mU69CDQE3w tjpiKwnR8EeB09hWZCIEgAvzpE/TJV0SZfat86yHt9iGndDtRYjH1xXzXPrhvHeM tA4rAJL+78WZRPOJK3AJvN7GbWOrmOF4GeWrh5kK+OIiFFjmef5RpdYa0ZlB6ITj UV4ecX+bukiAVvdtHvcBntPX4UnkUZ1KhxQaplw/myHtl3J0OqFYGSV2opiWgdwa LO9ncZJhVvj8dKGdKrnQ8ebDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUAju1CktP pPZ+ynujf4Q1xF1IGgMwHwYDVR0jBBgwFoAUn4mmBPRc629oBPtTTq3CQWa9Dykw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZEM0Y2LzM3MTY4MUZBRjhE MzExRUY5NzU4RkIwRkM0RjlBRTAyL240bW1CUFJjNjI5b0JQdFRUcTNDUVdhOUR5 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbjRtbUJQUmM2MjlvQlB0VFRxM0NRV2E5RHlrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZE M0Y2LzM3MTY4MUZBRjhEMzExRUY5NzU4RkIwRkM0RjlBRTAyL240bW1CUFJjNjI5 b0JQdFRUcTNDUVdhOUR5ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEb/NpYJHU7Z+L53QhVsUHe75DzphpLuUhMSLQc6F57SvDhE/J44+thK soWwAm67ORO26UJ9AK2lfQ+hhmfBs2a0F73elcsmoukExBjeRvww6rPgCvSQHeqU hrNU/4GQsRiSGx0XxR9CwhZHtLUzCR9q1lEij205/GasUauty2tloyeaLtw+h683 SOcKBPiNuSRvvkVWtEJMgp0O3PdGfwWP+oBZAGIhHRHbIoEsWb7jbZCgYn3j9+j7 MSozGcw4TFr3qZ9DT4UBNvDt3+9sZZYQxDVhk3b5nwM+dqBSneXOXQVqD6eiM3oH rpUyGlOER/jMLofYH5Za8twxS36gW0M= -----END CERTIFICATE-----Generated at Sun Apr 27 10:27:19 2025 by rpki-client on console.sobornost.net