$ rpki-client -vvf rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.mft File: o8s5jsc5UXR2LZMDPnBgnWD03bI.mft (raw, json) Hash identifier: 935s0xa5qNpbok+TbTN/nMX+bjj9E09ZR3Bxq2Iu+bs= Subject key identifier: 85:53:0E:1F:0B:BB:F8:B7:04:2A:B9:EB:74:6B:4F:C4:FC:6D:DC:76 Authority key identifier: A3:CB:39:8E:C7:39:51:74:76:2D:93:03:3E:70:60:9D:60:F4:DD:B2 Certificate issuer: /CN=A911606A/serialNumber=A3CB398EC7395174762D93033E70609D60F4DDB2 Certificate serial: F3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o8s5jsc5UXR2LZMDPnBgnWD03bI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.mft Manifest number: EF Signing time: Fri 25 Apr 2025 04:25:02 +0000 Manifest this update: Fri 25 Apr 2025 04:25:02 +0000 Manifest next update: Fri 02 May 2025 04:25:02 +0000 Files and hashes: 1: o8s5jsc5UXR2LZMDPnBgnWD03bI.crl (hash: AYKv9lAfJ5Hi8oZIOyvZH4dmPGQXjjZhPSIxdy9Gyzk=) 2: EEEC4B6ABD9D11EE9839661CC4F9AE02.roa (hash: MV1F0Q4UL7J+dtgMeHTJ35pvzsiuBXHWMmcfd9HjqkQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.crl rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o8s5jsc5UXR2LZMDPnBgnWD03bI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 243 (0xf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911606A, serialNumber=A3CB398EC7395174762D93033E70609D60F4DDB2 Validity Not Before: Apr 25 04:25:02 2025 GMT Not After : May 2 04:25:02 2025 GMT Subject: CN=680b0e9e-e58a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e3:0c:e2:61:35:03:ec:2d:a9:e9:52:39:50: fe:d5:c9:cf:50:33:4e:e9:b4:e8:92:56:2d:03:76: 8f:2f:69:7a:0c:c0:58:f4:7d:dd:b8:03:c9:9f:9f: 5d:5b:b4:f0:93:9d:d6:0b:78:29:27:b5:f1:50:a5: 8a:1e:c8:17:90:6a:25:74:5e:eb:28:7b:a4:59:7e: 09:11:49:6c:82:38:f3:da:68:fd:a2:b4:80:55:68: f4:29:af:6e:9c:f0:2f:e8:96:3e:6d:6b:9e:4b:69: 7f:93:f4:4e:56:e8:22:61:34:e8:7a:dc:63:3e:8f: 6e:1a:85:db:94:0b:dd:37:14:37:54:93:fa:44:7d: ab:c1:a7:ab:4e:53:33:ec:2b:3c:52:7d:dc:ce:cb: 06:1d:20:d1:a4:c6:92:03:37:12:be:46:6e:20:dd: c7:78:39:40:3f:a1:d8:8d:3f:52:58:06:4e:c7:7f: e9:13:4f:8f:e4:6b:a6:d9:00:a5:61:2b:51:75:ef: fa:07:ab:f8:1e:8d:6d:a3:72:c4:05:1b:53:5b:70: 16:8c:f2:1e:cc:20:58:72:9b:68:19:b9:45:7d:46: 17:a4:f2:a0:57:c2:f7:8d:42:e7:3d:34:9a:17:5d: ea:f1:a9:e7:cf:f1:8e:69:b3:e4:e1:65:00:fb:48: ab:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:53:0E:1F:0B:BB:F8:B7:04:2A:B9:EB:74:6B:4F:C4:FC:6D:DC:76 X509v3 Authority Key Identifier: keyid:A3:CB:39:8E:C7:39:51:74:76:2D:93:03:3E:70:60:9D:60:F4:DD:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o8s5jsc5UXR2LZMDPnBgnWD03bI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:f9:98:16:cc:ac:f5:aa:2e:c2:1d:7f:40:d2:2c:5e:cf:b1: 24:9a:7b:5f:c9:6f:04:cc:01:82:0d:3a:4a:62:04:d4:c5:6b: 05:97:8c:93:70:87:f5:59:f3:2e:d7:f8:61:6b:76:e4:73:2f: f3:74:ef:5b:14:5d:8c:0e:b9:e0:fb:3e:6e:67:4c:31:43:c9: 3a:a6:28:00:4e:9e:ea:29:4e:b8:30:1e:c5:f0:25:28:3e:6b: f7:2e:f9:3a:ed:bb:51:0d:27:2a:58:68:16:2c:5d:a8:81:5c: 0e:b8:65:af:f8:f8:ff:e7:1a:16:43:41:46:80:f5:c6:e8:b7: a2:06:87:f2:3d:35:67:61:d8:f4:e0:11:46:a2:ee:3f:97:7c: e3:05:83:91:8a:a1:b5:44:f9:1d:1d:c4:44:50:02:99:61:eb: 8a:c2:7d:34:85:0e:b1:99:ae:2d:d3:df:60:bc:18:ed:8b:11: 53:92:90:f7:f7:fa:e1:20:bf:74:6b:90:ae:e7:8f:0a:c8:02: 1e:62:a9:32:82:6f:79:14:50:eb:c7:0a:7f:65:bd:92:72:5f: b9:ad:d3:51:61:3f:5b:a4:8b:a1:21:2b:fa:bc:ef:88:fa:b4: 71:90:86:74:7f:8a:92:98:d3:54:be:6b:41:6c:8d:07:b0:59: 4c:e9:7b:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTYwNkExMTAvBgNVBAUTKEEzQ0IzOThFQzczOTUxNzQ3NjJEOTMwMzNFNzA2MDlE NjBGNEREQjIwHhcNMjUwNDI1MDQyNTAyWhcNMjUwNTAyMDQyNTAyWjAYMRYwFAYD VQQDEw02ODBiMGU5ZS1lNThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAreMM4mE1A+wtqelSOVD+1cnPUDNO6bToklYtA3aPL2l6DMBY9H3duAPJn59d W7Twk53WC3gpJ7XxUKWKHsgXkGoldF7rKHukWX4JEUlsgjjz2mj9orSAVWj0Ka9u nPAv6JY+bWueS2l/k/ROVugiYTToetxjPo9uGoXblAvdNxQ3VJP6RH2rwaerTlMz 7Cs8Un3czssGHSDRpMaSAzcSvkZuIN3HeDlAP6HYjT9SWAZOx3/pE0+P5Gum2QCl YStRde/6B6v4Ho1to3LEBRtTW3AWjPIezCBYcptoGblFfUYXpPKgV8L3jULnPTSa F13q8annz/GOabPk4WUA+0irvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIVTDh8L u/i3BCq563RrT8T8bdx2MB8GA1UdIwQYMBaAFKPLOY7HOVF0di2TAz5wYJ1g9N2y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjA2QS80RjI1ODhFNEJC NDUxMUVFODMwQzk4NURDNEY5QUUwMi9vOHM1anNjNVVYUjJMWk1EUG5CZ25XRDAz YkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL284czVqc2M1VVhSMkxaTURQbkJnbldEMDNiSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjA2QS80RjI1ODhFNEJCNDUxMUVFODMwQzk4NURDNEY5QUUwMi9vOHM1anNjNVVY UjJMWk1EUG5CZ25XRDAzYkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBh+ZgWzKz1qi7CHX9A0ixez7EkmntfyW8EzAGCDTpKYgTUxWsFl4yT cIf1WfMu1/hha3bkcy/zdO9bFF2MDrng+z5uZ0wxQ8k6pigATp7qKU64MB7F8CUo Pmv3Lvk67btRDScqWGgWLF2ogVwOuGWv+Pj/5xoWQ0FGgPXG6LeiBofyPTVnYdj0 4BFGou4/l3zjBYORiqG1RPkdHcREUAKZYeuKwn00hQ6xma4t099gvBjtixFTkpD3 9/rhIL90a5Cu548KyAIeYqkygm95FFDrxwp/Zb2Scl+5rdNRYT9bpIuhISv6vO+I +rRxkIZ0f4qSmNNUvmtBbI0HsFlM6Xtk -----END CERTIFICATE-----Generated at Fri Apr 25 08:23:33 2025 by rpki-client on console.sobornost.net