$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft File: N2A9suBywKj9cROOJUCZ9MrYwW8.mft (raw, json) Hash identifier: x0X0rO9YttseaWbDMzLmZXM1nstlnxCqc2BCi+rK7Uk= Subject key identifier: B8:3B:91:67:CA:43:66:5A:3E:C8:06:94:3B:2F:4F:FC:15:ED:B4:13 Authority key identifier: 37:60:3D:B2:E0:72:C0:A8:FD:71:13:8E:25:40:99:F4:CA:D8:C1:6F Certificate issuer: /CN=A91FD47F/serialNumber=37603DB2E072C0A8FD71138E254099F4CAD8C16F Certificate serial: 0226 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft Manifest number: 0213 Signing time: Sun 27 Apr 2025 01:39:14 +0000 Manifest this update: Sun 27 Apr 2025 01:39:14 +0000 Manifest next update: Sun 04 May 2025 01:39:14 +0000 Files and hashes: 1: N2A9suBywKj9cROOJUCZ9MrYwW8.crl (hash: pW+idYSGxtpyf0lCXjRRwsHlOQFc5iGMe3Ey3fmbeNM=) 2: AB68CE76346511EDAC41E081C4F9AE02.roa (hash: me5m52MXo4l0JWieAZh5/5JLHzGNaxm9iecnfymMcU4=) 3: 14B312EC3AE711EDBF700472C4F9AE02.roa (hash: jkOQ3dPuDLNPKoML9QUoAglZcGE8mWGDMaT0FDV/Rrk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.crl rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 01:39:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 550 (0x226) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD47F, serialNumber=37603DB2E072C0A8FD71138E254099F4CAD8C16F Validity Not Before: Apr 27 01:39:14 2025 GMT Not After : May 4 01:39:14 2025 GMT Subject: CN=680d8ac2-1ac0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:a7:4e:b9:0d:aa:39:6e:e8:22:50:5f:e4:59: 47:bd:45:25:07:6a:44:e4:f5:9f:7f:89:7b:ec:73: 7e:9b:51:b3:ab:e2:b5:a6:07:11:72:81:84:b0:5f: f7:a6:de:1e:ef:51:0f:52:c3:ec:88:ab:4e:7d:e6: 3d:b1:cc:42:a0:f4:fb:f5:56:2d:c8:b5:ee:6f:26: db:f0:90:bc:06:d3:71:c4:ba:f8:18:41:f8:4d:56: f7:d0:df:e4:93:41:2b:f8:ae:5b:7f:99:cc:7d:fd: 26:62:a8:88:fd:20:ab:db:6a:70:69:3c:c3:c2:01: 47:1c:ba:31:49:8f:ee:38:13:da:42:cd:1f:a0:ab: a5:0c:8f:93:4c:52:35:2a:dc:4f:f9:78:b9:59:0a: 5c:d5:98:90:fc:41:93:b9:2b:8a:8c:00:3a:52:10: f7:2d:cb:76:7b:37:bd:82:f5:25:90:bc:c1:a1:72: 34:d2:cf:06:0e:7f:7c:07:0e:0d:04:2f:c1:b5:f3: 4f:e2:f7:5f:3f:d8:10:30:bd:b5:a4:d5:77:73:1b: 3f:06:01:ff:af:1d:67:99:ee:d1:df:33:ad:80:2d: 20:43:f6:e6:78:0a:65:16:14:9e:a9:8a:66:62:5a: 79:d2:4f:08:2a:a9:7b:5c:e7:f7:13:1c:d5:08:a8: 69:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:3B:91:67:CA:43:66:5A:3E:C8:06:94:3B:2F:4F:FC:15:ED:B4:13 X509v3 Authority Key Identifier: keyid:37:60:3D:B2:E0:72:C0:A8:FD:71:13:8E:25:40:99:F4:CA:D8:C1:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d5:e1:13:55:c0:00:26:82:6e:eb:e7:ae:16:d9:67:1e:e6:23: 0f:44:46:db:ab:f9:57:c1:4d:24:19:71:14:c2:fc:00:24:17: f4:a3:30:f6:da:e2:9c:2c:7e:a9:77:60:1f:d2:9e:da:67:05: 01:4f:52:63:a9:8d:25:bf:24:de:b5:fc:46:11:9b:f9:20:aa: 3a:73:d0:12:55:05:91:73:8e:d6:8d:19:6f:0c:a4:f8:1b:89: 85:ab:5e:4e:7e:d3:ed:b7:c1:de:c4:9f:dd:ea:88:9c:39:4a: 3e:5a:bc:7c:35:64:e0:55:12:23:d0:12:c2:88:3f:31:c5:82: 56:4c:75:4f:b4:b5:91:49:98:fa:40:ee:72:8e:74:b3:e2:da: ba:5e:5b:1c:31:ce:be:a8:ce:00:e8:91:0e:bd:ea:d5:d4:6c: 10:26:1a:a2:11:38:49:f0:af:6a:fc:88:b5:b4:70:58:6c:e6: 8a:0e:9d:ea:7f:fa:a1:c2:79:cd:93:df:17:c1:65:54:a1:af: 75:6e:8a:dc:b0:4c:ee:2f:40:e1:94:84:a1:41:dc:83:a7:47: 48:47:2c:6c:39:c8:b8:10:f1:d4:a4:c2:6a:2d:d4:8f:74:d8: c6:68:5a:b2:7d:00:c1:62:b5:bf:52:5c:a2:43:5d:6c:56:e0: 77:01:35:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ0N0YxMTAvBgNVBAUTKDM3NjAzREIyRTA3MkMwQThGRDcxMTM4RTI1NDA5OUY0 Q0FEOEMxNkYwHhcNMjUwNDI3MDEzOTE0WhcNMjUwNTA0MDEzOTE0WjAYMRYwFAYD VQQDEw02ODBkOGFjMi0xYWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7KdOuQ2qOW7oIlBf5FlHvUUlB2pE5PWff4l77HN+m1Gzq+K1pgcRcoGEsF/3 pt4e71EPUsPsiKtOfeY9scxCoPT79VYtyLXubybb8JC8BtNxxLr4GEH4TVb30N/k k0Er+K5bf5nMff0mYqiI/SCr22pwaTzDwgFHHLoxSY/uOBPaQs0foKulDI+TTFI1 KtxP+Xi5WQpc1ZiQ/EGTuSuKjAA6UhD3Lct2eze9gvUlkLzBoXI00s8GDn98Bw4N BC/BtfNP4vdfP9gQML21pNV3cxs/BgH/rx1nme7R3zOtgC0gQ/bmeAplFhSeqYpm Ylp50k8IKql7XOf3ExzVCKhpCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLg7kWfK Q2ZaPsgGlDsvT/wV7bQTMB8GA1UdIwQYMBaAFDdgPbLgcsCo/XETjiVAmfTK2MFv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDQ3Ri9ENUNFNjI2QTM0 NjExMUVEOURFRThFN0FDNEY5QUUwMi9OMkE5c3VCeXdLajljUk9PSlVDWjlNcll3 VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04yQTlzdUJ5d0tqOWNST09KVUNaOU1yWXdXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDQ3Ri9ENUNFNjI2QTM0NjExMUVEOURFRThFN0FDNEY5QUUwMi9OMkE5c3VCeXdL ajljUk9PSlVDWjlNcll3VzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDV4RNVwAAmgm7r564W2Wce5iMPREbbq/lXwU0kGXEUwvwAJBf0ozD2 2uKcLH6pd2Af0p7aZwUBT1JjqY0lvyTetfxGEZv5IKo6c9ASVQWRc47WjRlvDKT4 G4mFq15OftPtt8HexJ/d6oicOUo+Wrx8NWTgVRIj0BLCiD8xxYJWTHVPtLWRSZj6 QO5yjnSz4tq6XlscMc6+qM4A6JEOverV1GwQJhqiEThJ8K9q/Ii1tHBYbOaKDp3q f/qhwnnNk98XwWVUoa91borcsEzuL0DhlIShQdyDp0dIRyxsOci4EPHUpMJqLdSP dNjGaFqyfQDBYrW/UlyiQ11sVuB3ATUY -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:19 2025 by rpki-client on console.sobornost.net