$ rpki-client -vvf rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.mft File: tdlVl3raRoOsW1nCWBi0Q4HCT-Y.mft (raw, json) Hash identifier: Poe/b02WRVB2nLzsEdafmsz4ovblSXP55oRcKPo8t8A= Subject key identifier: 2D:39:8D:FB:F9:28:BF:50:F7:BD:B4:4B:EF:A0:48:F5:D2:76:ED:81 Authority key identifier: B5:D9:55:97:7A:DA:46:83:AC:5B:59:C2:58:18:B4:43:81:C2:4F:E6 Certificate issuer: /CN=A911A4F7/serialNumber=B5D955977ADA4683AC5B59C25818B44381C24FE6 Certificate serial: 69 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.mft Manifest number: 68 Signing time: Sun 27 Apr 2025 05:45:52 +0000 Manifest this update: Sun 27 Apr 2025 05:45:51 +0000 Manifest next update: Sun 04 May 2025 05:45:51 +0000 Files and hashes: 1: tdlVl3raRoOsW1nCWBi0Q4HCT-Y.crl (hash: MulqnBPufkb0BtHC2KP2EJCb7SW3WJXNjPktDuiyXPQ=) 2: F17DA0FE85FC11EFBD7A485FC4F9AE02.roa (hash: H6cM4D6HiFEzXOD3BJphw2tquQW1HD/n9sWWwx2nQbg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.crl rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 105 (0x69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A4F7, serialNumber=B5D955977ADA4683AC5B59C25818B44381C24FE6 Validity Not Before: Apr 27 05:45:51 2025 GMT Not After : May 4 05:45:51 2025 GMT Subject: CN=680dc490-fcae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:27:64:4b:4e:f8:4c:40:ae:21:17:36:27:aa: b6:81:4b:ba:67:fa:b5:70:33:1b:01:05:67:63:9a: 02:0e:82:91:4b:3b:1b:f0:a3:89:86:f8:30:a5:b4: 94:38:f3:b8:b5:8a:cb:98:75:97:53:34:41:97:78: 40:24:43:49:9b:1b:ca:74:de:3a:b7:d3:62:7f:4e: 39:b9:51:06:96:36:a0:b5:e8:ba:f6:3c:ce:ac:f9: 5b:22:d1:83:5b:a2:d0:c3:3d:0a:3c:ee:3b:b9:8d: 00:48:96:0e:e5:9b:52:15:f2:05:d3:5d:d4:a6:a6: 4f:0c:d6:a9:af:a9:0c:97:37:0c:82:f3:8b:5e:6d: fd:0e:3c:86:7c:8f:bf:9d:87:d6:36:a1:76:6a:81: f2:87:10:2a:30:31:b6:15:58:3b:2f:4f:fd:44:5a: 34:8e:b0:9a:84:f5:16:81:80:e8:07:91:62:07:25: a9:d6:27:6d:ee:7b:45:02:de:af:b1:07:a4:b0:c8: 3d:3e:82:86:97:7b:f9:e5:6e:29:e8:26:38:3d:c5: 67:d6:b0:69:d5:6b:95:f1:41:f5:4e:fa:84:c8:50: 60:54:18:a3:45:89:33:2f:0d:75:4c:54:7a:6e:b9: e4:16:c4:9d:88:49:43:7d:60:ae:fe:1c:67:d0:7f: c6:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:39:8D:FB:F9:28:BF:50:F7:BD:B4:4B:EF:A0:48:F5:D2:76:ED:81 X509v3 Authority Key Identifier: keyid:B5:D9:55:97:7A:DA:46:83:AC:5B:59:C2:58:18:B4:43:81:C2:4F:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:bf:ec:b5:c4:b3:10:dd:7c:7f:2c:92:91:24:9c:76:13:a8: e7:45:83:39:7a:b0:e2:07:7e:cf:e1:02:16:54:69:92:b0:09: 06:a7:0f:f8:b2:cf:a7:1c:66:01:8b:61:ea:00:55:c4:77:44: 4c:9c:4b:a8:96:e9:2a:01:c8:fd:51:f1:f9:62:35:cc:d1:ab: db:84:1c:3e:2e:12:c4:20:ae:17:a3:d8:0c:50:94:3b:22:7b: b7:ba:26:bf:04:3f:72:e2:9c:64:57:3d:98:d2:d7:3f:e5:2e: 92:4c:f9:8d:7e:5f:03:aa:1c:26:5d:38:06:ae:b0:bf:83:7a: 55:1e:8f:2e:41:79:41:64:d7:d0:3b:af:56:83:4e:b7:e2:4d: 58:00:40:ae:9d:32:9a:97:c1:9a:b4:50:9a:8d:d7:9b:42:f5: 10:04:04:f0:1d:f2:d9:16:3c:da:be:c7:89:66:97:fd:df:d7: d6:3f:6a:ad:c4:f0:43:3d:82:4e:5f:9f:1c:5a:7f:99:c7:88: f0:4e:5f:8d:e2:70:87:d8:d7:42:0a:3f:91:ab:0d:61:9f:63: 9e:56:ed:64:4a:cf:71:78:9e:60:4a:a4:4d:6d:e1:46:bc:7c: 26:33:fa:a8:6a:5c:f9:00:93:0f:9e:22:5f:61:7a:83:4a:41: fe:f4:61:53 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QTRGNzExMC8GA1UEBRMoQjVEOTU1OTc3QURBNDY4M0FDNUI1OUMyNTgxOEI0NDM4 MUMyNEZFNjAeFw0yNTA0MjcwNTQ1NTFaFw0yNTA1MDQwNTQ1NTFaMBgxFjAUBgNV BAMTDTY4MGRjNDkwLWZjYWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyJ2RLTvhMQK4hFzYnqraBS7pn+rVwMxsBBWdjmgIOgpFLOxvwo4mG+DCltJQ4 87i1isuYdZdTNEGXeEAkQ0mbG8p03jq302J/Tjm5UQaWNqC16Lr2PM6s+Vsi0YNb otDDPQo87ju5jQBIlg7lm1IV8gXTXdSmpk8M1qmvqQyXNwyC84tebf0OPIZ8j7+d h9Y2oXZqgfKHECowMbYVWDsvT/1EWjSOsJqE9RaBgOgHkWIHJanWJ23ue0UC3q+x B6SwyD0+goaXe/nlbinoJjg9xWfWsGnVa5XxQfVO+oTIUGBUGKNFiTMvDXVMVHpu ueQWxJ2ISUN9YK7+HGfQf8b5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULTmN+/ko v1D3vbRL76BI9dJ27YEwHwYDVR0jBBgwFoAUtdlVl3raRoOsW1nCWBi0Q4HCT+Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFBNEY3LzlBNThDMzhBODVG QzExRUZCQzIxMEY1RUM0RjlBRTAyL3RkbFZsM3JhUm9Pc1cxbkNXQmkwUTRIQ1Qt WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdGRsVmwzcmFSb09zVzFuQ1dCaTBRNEhDVC1ZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFB NEY3LzlBNThDMzhBODVGQzExRUZCQzIxMEY1RUM0RjlBRTAyL3RkbFZsM3JhUm9P c1cxbkNXQmkwUTRIQ1QtWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG6/7LXEsxDdfH8skpEknHYTqOdFgzl6sOIHfs/hAhZUaZKwCQanD/iy z6ccZgGLYeoAVcR3REycS6iW6SoByP1R8fliNczRq9uEHD4uEsQgrhej2AxQlDsi e7e6Jr8EP3LinGRXPZjS1z/lLpJM+Y1+XwOqHCZdOAausL+DelUejy5BeUFk19A7 r1aDTrfiTVgAQK6dMpqXwZq0UJqN15tC9RAEBPAd8tkWPNq+x4lml/3f19Y/aq3E 8EM9gk5fnxxaf5nHiPBOX43icIfY10IKP5GrDWGfY55W7WRKz3F4nmBKpE1t4Ua8 fCYz+qhqXPkAkw+eIl9heoNKQf70YVM= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:40 2025 by rpki-client on console.sobornost.net