$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.mft File: qCkvYgTIIT15H6bMqvV4UZTvgaA.mft (raw, json) Hash identifier: JTWRRVJiiOMYN4XRsjkvtb9StDpLt5vukwTYonjh/0I= Subject key identifier: F3:8A:65:A0:D1:42:67:50:E5:0F:21:79:EC:D4:B3:07:15:6A:4D:BA Authority key identifier: A8:29:2F:62:04:C8:21:3D:79:1F:A6:CC:AA:F5:78:51:94:EF:81:A0 Certificate issuer: /CN=A91FDEFE/serialNumber=A8292F6204C8213D791FA6CCAAF5785194EF81A0 Certificate serial: 56 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qCkvYgTIIT15H6bMqvV4UZTvgaA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.mft Manifest number: 55 Signing time: Sun 27 Apr 2025 06:02:54 +0000 Manifest this update: Sun 27 Apr 2025 06:02:54 +0000 Manifest next update: Sun 04 May 2025 06:02:54 +0000 Files and hashes: 1: qCkvYgTIIT15H6bMqvV4UZTvgaA.crl (hash: krYZP5JFCsNsciI2DW2rV8fIrkF/bVzTxUrWGEbV8WQ=) 2: E7695EC6A53411EFB98AFE51C4F9AE02.roa (hash: Lu7YmWMIdl1OwrJtUhBGFe6+OAHwy7pjCKEXO1Xq/dY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.crl rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qCkvYgTIIT15H6bMqvV4UZTvgaA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86 (0x56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDEFE, serialNumber=A8292F6204C8213D791FA6CCAAF5785194EF81A0 Validity Not Before: Apr 27 06:02:54 2025 GMT Not After : May 4 06:02:54 2025 GMT Subject: CN=680dc88e-307f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ca:60:1f:ac:86:7f:c4:c1:59:e1:96:94:f5: 0d:77:ab:47:f1:0c:f5:fa:9d:6e:2d:b1:89:b6:e4: 38:84:2e:cf:ee:4d:6a:43:8e:3f:a0:ac:13:83:8d: c4:27:b0:79:57:2d:a2:83:d0:a6:8e:9e:c1:c0:8c: c8:a8:ec:46:2c:57:c1:36:cc:36:ec:29:5c:2c:68: 6b:dd:0b:68:d7:54:68:5a:bc:0f:01:a0:99:f3:30: 7d:a4:30:00:0e:aa:ef:40:8a:36:71:f6:a9:c9:fc: a7:33:69:6d:2b:88:8d:bc:e7:b4:12:63:55:d8:67: 64:23:ce:ac:fb:60:a9:92:ac:ef:67:0d:42:f8:57: e2:96:e6:35:04:42:53:fa:f7:c8:bd:a6:43:6c:26: 71:f5:2c:fe:9b:4b:8d:b0:ec:03:c7:f9:0d:49:48: 08:fd:32:26:d7:e3:49:4a:1e:a2:55:1f:2c:87:8e: a1:d4:e1:be:90:2b:00:31:cc:d9:dd:18:c4:5c:04: 3f:83:7c:c3:1b:45:0c:93:97:d7:bb:89:29:ae:d1: 04:8a:52:f3:bc:58:a7:e6:ec:50:9d:3c:b6:65:54: 37:d1:95:4f:eb:f1:63:d2:e9:3e:86:d3:15:c5:37: 66:3a:89:78:63:02:fc:70:4f:6d:fa:54:a6:5d:80: a2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:8A:65:A0:D1:42:67:50:E5:0F:21:79:EC:D4:B3:07:15:6A:4D:BA X509v3 Authority Key Identifier: keyid:A8:29:2F:62:04:C8:21:3D:79:1F:A6:CC:AA:F5:78:51:94:EF:81:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qCkvYgTIIT15H6bMqvV4UZTvgaA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:7a:fa:bb:45:45:3d:5f:93:46:03:c4:58:8c:46:8c:5c:48: 0d:cd:fe:4c:45:19:ea:bb:4e:50:00:21:1a:d8:7a:4c:80:78: 83:aa:1e:6f:27:59:88:6b:b6:89:2f:f8:aa:a7:f8:b5:a3:53: c5:99:a4:27:c7:82:80:64:6f:d4:d4:29:16:c5:e3:58:e1:36: 4c:8a:d1:fe:b6:73:32:73:a6:e0:c8:18:e8:2b:74:76:d7:9f: 7f:4b:f4:0c:21:d5:da:93:03:70:d1:33:b4:8f:48:6c:22:d9: 62:b4:13:44:00:5c:de:28:c5:56:11:c8:a5:66:93:2c:aa:f2: 99:57:bf:14:6a:3b:22:6c:fa:5e:55:16:fe:22:d0:4b:6c:b4: 13:b8:0f:d2:ac:88:f4:7e:38:a5:ee:21:df:94:08:38:f5:3c: 22:e5:79:78:59:b9:72:85:0d:91:b7:0a:d6:88:0e:9b:fb:5d: 54:34:b5:31:68:ab:2e:57:33:b6:2c:a2:29:6a:d7:53:79:5e: 29:4a:19:58:44:11:92:c1:32:08:75:85:58:17:3c:cc:96:a6: 34:3a:dd:e1:fe:8f:8a:e4:87:17:bf:eb:85:0a:04:d7:04:83: 41:17:b7:5f:82:4c:fc:01:a6:f7:60:0c:fd:90:35:f3:b5:de: cb:5b:02:13 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG REVGRTExMC8GA1UEBRMoQTgyOTJGNjIwNEM4MjEzRDc5MUZBNkNDQUFGNTc4NTE5 NEVGODFBMDAeFw0yNTA0MjcwNjAyNTRaFw0yNTA1MDQwNjAyNTRaMBgxFjAUBgNV BAMTDTY4MGRjODhlLTMwN2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDeymAfrIZ/xMFZ4ZaU9Q13q0fxDPX6nW4tsYm25DiELs/uTWpDjj+grBODjcQn sHlXLaKD0KaOnsHAjMio7EYsV8E2zDbsKVwsaGvdC2jXVGhavA8BoJnzMH2kMAAO qu9AijZx9qnJ/KczaW0riI2857QSY1XYZ2Qjzqz7YKmSrO9nDUL4V+KW5jUEQlP6 98i9pkNsJnH1LP6bS42w7APH+Q1JSAj9MibX40lKHqJVHyyHjqHU4b6QKwAxzNnd GMRcBD+DfMMbRQyTl9e7iSmu0QSKUvO8WKfm7FCdPLZlVDfRlU/r8WPS6T6G0xXF N2Y6iXhjAvxwT236VKZdgKJLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU84ploNFC Z1DlDyF57NSzBxVqTbowHwYDVR0jBBgwFoAUqCkvYgTIIT15H6bMqvV4UZTvgaAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZERUZFLzExNjRDQUUwQTUx NjExRUY4OTBFQ0QzRUM0RjlBRTAyL3FDa3ZZZ1RJSVQxNUg2Yk1xdlY0VVpUdmdh QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcUNrdllnVElJVDE1SDZiTXF2VjRVWlR2Z2FBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZE RUZFLzExNjRDQUUwQTUxNjExRUY4OTBFQ0QzRUM0RjlBRTAyL3FDa3ZZZ1RJSVQx NUg2Yk1xdlY0VVpUdmdhQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAp6+rtFRT1fk0YDxFiMRoxcSA3N/kxFGeq7TlAAIRrYekyAeIOqHm8n WYhrtokv+Kqn+LWjU8WZpCfHgoBkb9TUKRbF41jhNkyK0f62czJzpuDIGOgrdHbX n39L9Awh1dqTA3DRM7SPSGwi2WK0E0QAXN4oxVYRyKVmkyyq8plXvxRqOyJs+l5V Fv4i0EtstBO4D9KsiPR+OKXuId+UCDj1PCLleXhZuXKFDZG3CtaIDpv7XVQ0tTFo qy5XM7Ysoilq11N5XilKGVhEEZLBMgh1hVgXPMyWpjQ63eH+j4rkhxe/64UKBNcE g0EXt1+CTPwBpvdgDP2QNfO13stbAhM= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:59 2025 by rpki-client on console.sobornost.net