$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft File: 4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft (raw, json) Hash identifier: Yf+vdqCWT3xUs5p4qeX1VEkeL5cuDpqmHendUABTJfI= Subject key identifier: BD:07:F6:8A:C6:16:97:C4:69:3F:95:F2:44:B8:15:C2:A4:35:87:02 Authority key identifier: E3:F1:8D:41:20:26:F3:1B:A4:43:EA:33:F5:67:06:FF:B2:F0:F1:62 Certificate issuer: /CN=A91FD8BE/serialNumber=E3F18D412026F31BA443EA33F56706FFB2F0F162 Certificate serial: E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft Manifest number: D8 Signing time: Sun 27 Apr 2025 04:32:53 +0000 Manifest this update: Sun 27 Apr 2025 04:32:52 +0000 Manifest next update: Sun 04 May 2025 04:32:52 +0000 Files and hashes: 1: 4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl (hash: t16igrfmya6bVuFpkmzhgH0Xdiya/T/rSQtDVMWRzdk=) 2: DAEB24B0176111EFAB2AD122C4F9AE02.roa (hash: Sbd7uixAB+aEWkmSGOrUVMGizlHems1ClmWbyRlTiKs=) 3: A475B3E000B511EF96C1B911C4F9AE02.roa (hash: dfJCTgGMLuVcX+tEuN4HdomKZZyzPfpEj+AQkrGQApI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 225 (0xe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD8BE, serialNumber=E3F18D412026F31BA443EA33F56706FFB2F0F162 Validity Not Before: Apr 27 04:32:52 2025 GMT Not After : May 4 04:32:52 2025 GMT Subject: CN=680db374-6c16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:32:a4:67:ac:e2:ad:d0:4f:d8:e7:3b:0f:0c: 42:49:f2:49:70:15:9c:12:3c:a6:8c:88:86:d1:e6: b4:74:58:31:7b:63:0e:77:31:ec:3a:49:17:d7:e1: 77:6d:32:f0:20:62:26:fd:fc:a0:9f:7d:c8:47:b4: 08:d6:b4:2c:1a:f7:ec:8d:b0:a6:b4:c7:82:49:3d: 06:86:04:34:10:57:0a:50:38:d3:b7:2a:62:5b:f7: b8:55:c6:30:f0:2c:1b:61:cf:6a:a9:85:4f:b6:12: 9d:33:40:5a:af:28:ad:82:99:2b:24:ac:cc:dc:fc: d0:e8:ef:6d:bd:1c:b5:77:38:b3:68:9e:e9:06:56: c8:bd:57:08:a5:6b:41:c4:04:a3:40:17:4a:8d:02: 5f:c1:8a:7d:bd:7e:1c:d3:db:36:24:be:ed:ed:16: 48:60:a6:3d:0c:e1:5c:ad:e7:14:fb:07:f7:c6:55: 31:3f:76:5e:05:6a:11:24:bf:bc:02:2a:3c:64:b9: d7:6c:3f:59:cf:1c:3b:1b:53:c1:84:6f:2a:f0:80: 24:12:7b:f4:d2:a4:ea:84:80:dd:86:2a:87:4a:d7: 4d:27:63:45:fb:4f:19:dd:0b:4d:f4:a6:e9:8e:d4: ae:2a:d3:e4:71:a3:73:39:00:d1:63:9d:ff:a6:fb: 6f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:07:F6:8A:C6:16:97:C4:69:3F:95:F2:44:B8:15:C2:A4:35:87:02 X509v3 Authority Key Identifier: keyid:E3:F1:8D:41:20:26:F3:1B:A4:43:EA:33:F5:67:06:FF:B2:F0:F1:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:cf:dc:a6:26:de:0c:1b:9e:d1:e9:a3:5a:80:13:2b:f1:9b: 12:8c:a8:4f:c8:5e:50:c1:d1:ee:b2:32:f0:5b:dd:b0:78:c0: 0e:ce:e9:92:4f:66:9f:98:75:75:b8:de:10:e7:b6:34:ad:90: fb:8c:56:b1:25:bd:da:66:ad:0d:61:a8:a9:6b:78:c7:a2:f5: 9e:42:fd:cb:78:27:fc:e5:78:c3:de:94:a3:2f:b7:e8:08:b1: a6:50:9b:46:d3:1c:0d:2f:04:11:f3:f3:7e:82:ed:14:80:8b: 18:b6:3f:1f:19:72:2e:e7:83:fc:31:6f:ee:b7:83:15:5c:1c: 3b:95:19:ac:77:54:0c:c3:1e:fa:c9:50:bb:f3:d3:9d:94:ed: 29:d4:6b:c6:f7:70:d6:ac:ec:fe:82:71:6d:89:f7:a3:f8:5c: c8:33:5f:39:ab:c2:b3:7a:2a:b3:b2:d9:a3:41:ea:a5:f2:4b: 12:b8:e3:1f:bf:c0:fd:76:ec:d8:c5:86:d0:81:28:ab:8f:1b: 77:6a:43:9d:68:1c:31:09:7a:36:84:e8:97:7e:c2:71:24:82: c9:04:4b:a8:4a:21:e3:cf:d0:6b:5c:c3:17:f2:0a:8f:80:9d: b1:83:d2:05:4f:89:82:86:bb:c4:b6:5d:0f:1a:23:0b:a0:74: cf:bf:0a:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ4QkUxMTAvBgNVBAUTKEUzRjE4RDQxMjAyNkYzMUJBNDQzRUEzM0Y1NjcwNkZG QjJGMEYxNjIwHhcNMjUwNDI3MDQzMjUyWhcNMjUwNTA0MDQzMjUyWjAYMRYwFAYD VQQDEw02ODBkYjM3NC02YzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnjKkZ6zirdBP2Oc7DwxCSfJJcBWcEjymjIiG0ea0dFgxe2MOdzHsOkkX1+F3 bTLwIGIm/fygn33IR7QI1rQsGvfsjbCmtMeCST0GhgQ0EFcKUDjTtypiW/e4VcYw 8CwbYc9qqYVPthKdM0BaryitgpkrJKzM3PzQ6O9tvRy1dzizaJ7pBlbIvVcIpWtB xASjQBdKjQJfwYp9vX4c09s2JL7t7RZIYKY9DOFcrecU+wf3xlUxP3ZeBWoRJL+8 Aio8ZLnXbD9Zzxw7G1PBhG8q8IAkEnv00qTqhIDdhiqHStdNJ2NF+08Z3QtN9Kbp jtSuKtPkcaNzOQDRY53/pvtvhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL0H9orG FpfEaT+V8kS4FcKkNYcCMB8GA1UdIwQYMBaAFOPxjUEgJvMbpEPqM/VnBv+y8PFi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDhCRS9DNjhFRkY5RUU1 RDYxMUVFOEIzNTY3MzlDNEY5QUUwMi80X0dOUVNBbTh4dWtRLW96OVdjR183THc4 V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRfR05RU0FtOHh1a1Etb3o5V2NHXzdMdzhXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDhCRS9DNjhFRkY5RUU1RDYxMUVFOEIzNTY3MzlDNEY5QUUwMi80X0dOUVNBbTh4 dWtRLW96OVdjR183THc4V0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0z9ymJt4MG57R6aNagBMr8ZsSjKhPyF5QwdHusjLwW92weMAOzumS T2afmHV1uN4Q57Y0rZD7jFaxJb3aZq0NYaipa3jHovWeQv3LeCf85XjD3pSjL7fo CLGmUJtG0xwNLwQR8/N+gu0UgIsYtj8fGXIu54P8MW/ut4MVXBw7lRmsd1QMwx76 yVC789OdlO0p1GvG93DWrOz+gnFtifej+FzIM185q8KzeiqzstmjQeql8ksSuOMf v8D9duzYxYbQgSirjxt3akOdaBwxCXo2hOiXfsJxJILJBEuoSiHjz9BrXMMX8gqP gJ2xg9IFT4mChrvEtl0PGiMLoHTPvwp/ -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:59 2025 by rpki-client on console.sobornost.net