$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft File: M6AXSkpLAJwBFRWWkTbzAQidtbU.mft (raw, json) Hash identifier: EXgdkdfOILWi8QNwIXiQX1mVIt6dVeLUt20JF1yTD4A= Subject key identifier: 95:4B:1B:5D:79:B4:C6:0E:C1:90:03:B6:A1:E0:B2:1B:E2:A0:31:E1 Authority key identifier: 33:A0:17:4A:4A:4B:00:9C:01:15:15:96:91:36:F3:01:08:9D:B5:B5 Certificate issuer: /CN=A91FF1CC/serialNumber=33A0174A4A4B009C011515969136F301089DB5B5 Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6AXSkpLAJwBFRWWkTbzAQidtbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft Manifest number: 24 Signing time: Sun 27 Apr 2025 06:38:07 +0000 Manifest this update: Sun 27 Apr 2025 06:38:07 +0000 Manifest next update: Sun 04 May 2025 06:38:06 +0000 Files and hashes: 1: M6AXSkpLAJwBFRWWkTbzAQidtbU.crl (hash: ggJdFdMcOEP+oM6m1nCxCOOItBLzxIG3ZaQ6N9C0R8g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.crl rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6AXSkpLAJwBFRWWkTbzAQidtbU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF1CC, serialNumber=33A0174A4A4B009C011515969136F301089DB5B5 Validity Not Before: Apr 27 06:38:07 2025 GMT Not After : May 4 06:38:06 2025 GMT Subject: CN=680dd0cf-d5b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e3:dc:2f:9d:0e:45:8e:b8:e9:5b:12:66:f5: c2:45:68:9f:59:0a:7a:20:ae:7f:ac:42:a2:af:1e: 03:00:9b:b2:78:82:f8:8b:9d:bf:9b:13:a3:1c:a6: 6d:97:b3:3e:c0:5d:b8:c4:08:67:e2:19:c9:46:42: a3:d6:c6:44:de:db:ee:33:f9:9d:e7:e7:b4:f1:32: 1d:1f:db:0a:5a:ab:46:d2:0e:fe:31:d1:c6:bd:ef: 6f:ab:e8:f7:96:c9:67:1c:99:8c:3a:c3:ae:d3:84: ce:8a:b2:0c:c1:ce:85:34:9d:5f:d0:1d:b4:ae:93: 9d:32:e9:e0:7a:55:86:d8:86:0d:c4:6a:35:26:ed: a2:b2:07:98:66:34:17:f4:96:88:1b:ae:c3:78:b6: 06:0f:61:2f:fd:36:2b:a2:6a:46:02:d9:fa:b0:bc: 84:9c:8c:dc:0a:29:70:fa:be:14:70:92:cd:6a:70: 01:1b:71:9b:2c:84:bb:56:a1:39:70:0c:d8:c5:4b: 9b:f5:d4:e1:76:c7:80:d9:f6:bd:bd:9e:23:82:87: d5:f7:a6:14:88:3a:c1:67:50:d4:49:50:10:b0:c7: 93:1b:03:26:4d:f0:c9:1e:b8:93:ff:05:5d:68:a9: 4c:94:78:18:f9:73:a9:b0:74:41:e5:dc:89:5f:82: 97:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:4B:1B:5D:79:B4:C6:0E:C1:90:03:B6:A1:E0:B2:1B:E2:A0:31:E1 X509v3 Authority Key Identifier: keyid:33:A0:17:4A:4A:4B:00:9C:01:15:15:96:91:36:F3:01:08:9D:B5:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6AXSkpLAJwBFRWWkTbzAQidtbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:4d:6d:33:ed:e6:32:08:11:55:ee:af:5a:55:d4:18:8f:bc: 20:b1:f6:e8:59:34:e7:50:74:e5:db:b1:d6:cd:03:75:b4:a0: 2b:4f:e7:04:15:dd:12:9b:11:47:c7:bc:5a:3e:65:74:8f:c1: 68:44:38:b0:a6:7b:15:7b:2a:e4:88:bf:ba:1a:3f:0c:6b:41: cf:76:be:60:d2:24:4f:0e:2e:66:68:b0:ed:b8:6b:2a:e9:e8: 38:61:b3:19:d3:14:a6:0b:42:a1:69:41:80:6d:c1:bc:32:be: f1:90:4f:cb:9a:df:3f:b8:3b:14:39:4c:9e:61:6e:aa:80:fb: 54:61:e5:c9:63:e7:bb:37:29:f6:7e:83:90:e9:e7:84:91:00: f6:91:c6:56:86:2d:f1:30:1e:39:4e:68:c4:52:bc:73:19:bb: 7d:8c:77:85:e5:d1:74:87:59:32:8e:8b:a9:c4:cc:da:4a:72: 4a:95:c1:1d:5f:34:49:97:72:f3:da:ea:89:73:89:65:94:04: 53:a4:4c:b0:62:bb:f3:bb:97:3f:03:a4:94:44:43:a7:25:33: a2:b0:a3:d8:c5:e5:81:c1:3e:24:ab:c9:9e:57:53:68:c3:2e: 79:7b:09:87:18:4f:0b:2e:ee:c1:ed:7a:c1:af:89:e0:1a:e8: b3:99:46:5c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RjFDQzExMC8GA1UEBRMoMzNBMDE3NEE0QTRCMDA5QzAxMTUxNTk2OTEzNkYzMDEw ODlEQjVCNTAeFw0yNTA0MjcwNjM4MDdaFw0yNTA1MDQwNjM4MDZaMBgxFjAUBgNV BAMTDTY4MGRkMGNmLWQ1YjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDA49wvnQ5FjrjpWxJm9cJFaJ9ZCnogrn+sQqKvHgMAm7J4gviLnb+bE6Mcpm2X sz7AXbjECGfiGclGQqPWxkTe2+4z+Z3n57TxMh0f2wpaq0bSDv4x0ca972+r6PeW yWccmYw6w67ThM6KsgzBzoU0nV/QHbSuk50y6eB6VYbYhg3EajUm7aKyB5hmNBf0 logbrsN4tgYPYS/9NiuiakYC2fqwvIScjNwKKXD6vhRwks1qcAEbcZsshLtWoTlw DNjFS5v11OF2x4DZ9r29niOCh9X3phSIOsFnUNRJUBCwx5MbAyZN8MkeuJP/BV1o qUyUeBj5c6mwdEHl3IlfgpdzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlUsbXXm0 xg7BkAO2oeCyG+KgMeEwHwYDVR0jBBgwFoAUM6AXSkpLAJwBFRWWkTbzAQidtbUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZGMUNDLzQzRUE2QjE4RUY2 MzExRUZCRjY0QUI2QUM0RjlBRTAyL002QVhTa3BMQUp3QkZSV1drVGJ6QVFpZHRi VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTTZBWFNrcExBSndCRlJXV2tUYnpBUWlkdGJVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZG MUNDLzQzRUE2QjE4RUY2MzExRUZCRjY0QUI2QUM0RjlBRTAyL002QVhTa3BMQUp3 QkZSV1drVGJ6QVFpZHRiVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC1NbTPt5jIIEVXur1pV1BiPvCCx9uhZNOdQdOXbsdbNA3W0oCtP5wQV 3RKbEUfHvFo+ZXSPwWhEOLCmexV7KuSIv7oaPwxrQc92vmDSJE8OLmZosO24ayrp 6DhhsxnTFKYLQqFpQYBtwbwyvvGQT8ua3z+4OxQ5TJ5hbqqA+1Rh5clj57s3KfZ+ g5Dp54SRAPaRxlaGLfEwHjlOaMRSvHMZu32Md4Xl0XSHWTKOi6nEzNpKckqVwR1f NEmXcvPa6olziWWUBFOkTLBiu/O7lz8DpJREQ6clM6Kwo9jF5YHBPiSryZ5XU2jD Lnl7CYcYTwsu7sHtesGvieAa6LOZRlw= -----END CERTIFICATE-----Generated at Sun Apr 27 10:27:19 2025 by rpki-client on console.sobornost.net