$ rpki-client -vvf rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.mft File: iNHJlOgQj8ClM99LuOLOjRxLnxc.mft (raw, json) Hash identifier: DQAJErm61JtbzlSf1TwR0SolderK/p+keIAu7vFekuk= Subject key identifier: DB:BF:C6:5C:CE:01:D8:89:52:12:CF:E3:BA:F6:C6:F3:1E:33:E3:7E Authority key identifier: 88:D1:C9:94:E8:10:8F:C0:A5:33:DF:4B:B8:E2:CE:8D:1C:4B:9F:17 Certificate issuer: /CN=A911A702/serialNumber=88D1C994E8108FC0A533DF4BB8E2CE8D1C4B9F17 Certificate serial: 0644 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNHJlOgQj8ClM99LuOLOjRxLnxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.mft Manifest number: 063B Signing time: Sat 26 Apr 2025 22:18:49 +0000 Manifest this update: Sat 26 Apr 2025 22:18:48 +0000 Manifest next update: Sat 03 May 2025 22:18:48 +0000 Files and hashes: 1: iNHJlOgQj8ClM99LuOLOjRxLnxc.crl (hash: 0U+dLeLnVMetzWEscMrhLyMRmLUbhtyuUe0tAmgygIc=) 2: 6339493A516311ED90F04711C4F9AE02.roa (hash: UZVHz0fvOssKPNLwiZ35IeL2xHQA6a7FTosxanmpoZw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.crl rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNHJlOgQj8ClM99LuOLOjRxLnxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 22:18:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1604 (0x644) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A702, serialNumber=88D1C994E8108FC0A533DF4BB8E2CE8D1C4B9F17 Validity Not Before: Apr 26 22:18:48 2025 GMT Not After : May 3 22:18:48 2025 GMT Subject: CN=680d5bc8-7494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:33:d4:ef:fd:9a:b4:7e:56:dc:d1:25:db:2f: 1c:62:a4:14:fd:d4:6a:03:56:c4:5b:83:91:9c:10: 31:5e:e1:cb:11:c5:cd:88:44:01:2d:4f:79:77:a3: 49:9e:f0:fc:38:ce:c0:f6:99:76:e6:29:35:e9:a3: 51:72:90:84:43:04:48:c9:8a:33:d9:dc:2f:b0:99: 3b:ab:69:79:be:30:56:b2:b7:41:df:2d:4f:5c:62: f0:d9:3b:ac:f0:b9:77:0a:4b:7b:27:25:8a:8c:9a: 22:70:32:c5:8d:19:83:ce:c5:4f:07:7e:97:46:7f: a6:5d:0d:d4:9d:7f:26:17:a5:cb:8c:04:c8:37:26: 1a:39:fb:a2:fb:05:cc:56:4d:3c:65:69:4d:63:cf: 51:8d:07:f7:1f:93:fe:21:2c:fa:49:dc:0b:d8:30: 03:a7:02:1d:c3:73:3a:c5:21:46:02:44:2b:5f:dd: 97:ca:b8:20:bd:7b:c0:f4:60:fe:f3:9a:28:b7:6a: 84:30:fb:8b:f6:87:db:e8:92:2f:a5:52:dd:80:c0: 87:76:b0:87:7f:07:64:f3:98:ce:58:b0:18:c7:74: 57:5a:a0:8d:37:ad:4e:03:b3:8f:73:02:64:50:f1: cf:cf:df:7d:7f:17:a5:cf:62:77:9c:c3:fb:71:26: 06:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:BF:C6:5C:CE:01:D8:89:52:12:CF:E3:BA:F6:C6:F3:1E:33:E3:7E X509v3 Authority Key Identifier: keyid:88:D1:C9:94:E8:10:8F:C0:A5:33:DF:4B:B8:E2:CE:8D:1C:4B:9F:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNHJlOgQj8ClM99LuOLOjRxLnxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:9c:d7:7e:e2:0d:e8:da:1b:8e:0a:7d:1c:4f:f5:34:17:84: 0b:bc:19:bf:f4:74:fb:94:9d:a7:7f:42:01:4c:12:6a:10:ae: 89:04:9e:ec:c0:1f:89:48:a5:93:6d:7a:f2:7c:76:be:fc:51: 60:25:96:41:c8:26:2d:73:94:09:7f:01:de:75:9d:7c:df:b1: 88:0b:4a:1f:a4:f7:9d:b3:42:fd:57:bc:05:75:e9:d3:1b:2b: c7:68:13:96:cd:01:bc:1f:1f:8a:cc:9c:3f:8b:f3:6f:bc:b2: 75:5f:b7:98:f4:45:8d:1d:2e:b0:36:51:01:2e:52:32:3a:16: 38:f5:97:95:38:71:36:e1:5d:9d:40:3e:c0:3e:3a:ab:45:94: b0:1a:d8:2d:e0:19:65:8d:8b:25:a3:93:27:0b:75:06:ad:28: ac:95:35:8c:3b:a6:48:07:dd:39:a5:83:90:5b:18:b7:b7:4b: 3b:3b:80:e6:bb:4a:a6:eb:bd:3e:8d:c5:29:98:03:32:66:cc: 02:9f:69:5f:32:ec:8d:f2:fd:01:64:ce:25:c3:f2:ff:9b:ce: e6:44:07:80:a8:ba:d3:a3:de:05:ba:f5:74:1e:f3:d0:91:83: 25:51:00:d9:2c:4f:ef:8d:c3:81:b3:48:65:f2:83:0c:55:39: 17:1b:a2:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUE3MDIxMTAvBgNVBAUTKDg4RDFDOTk0RTgxMDhGQzBBNTMzREY0QkI4RTJDRThE MUM0QjlGMTcwHhcNMjUwNDI2MjIxODQ4WhcNMjUwNTAzMjIxODQ4WjAYMRYwFAYD VQQDEw02ODBkNWJjOC03NDk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqTPU7/2atH5W3NEl2y8cYqQU/dRqA1bEW4ORnBAxXuHLEcXNiEQBLU95d6NJ nvD8OM7A9pl25ik16aNRcpCEQwRIyYoz2dwvsJk7q2l5vjBWsrdB3y1PXGLw2Tus 8Ll3Ckt7JyWKjJoicDLFjRmDzsVPB36XRn+mXQ3UnX8mF6XLjATINyYaOfui+wXM Vk08ZWlNY89RjQf3H5P+ISz6SdwL2DADpwIdw3M6xSFGAkQrX92XyrggvXvA9GD+ 85oot2qEMPuL9ofb6JIvpVLdgMCHdrCHfwdk85jOWLAYx3RXWqCNN61OA7OPcwJk UPHPz999fxelz2J3nMP7cSYGFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNu/xlzO AdiJUhLP47r2xvMeM+N+MB8GA1UdIwQYMBaAFIjRyZToEI/ApTPfS7jizo0cS58X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTcwMi85MzlDQUUyQzhE RDkxMUVCOEVGQjQxNThDNEY5QUUwMi9pTkhKbE9nUWo4Q2xNOTlMdU9MT2pSeExu eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lOSEpsT2dRajhDbE05OUx1T0xPalJ4TG54Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTcwMi85MzlDQUUyQzhERDkxMUVCOEVGQjQxNThDNEY5QUUwMi9pTkhKbE9nUWo4 Q2xNOTlMdU9MT2pSeExueGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHnNd+4g3o2huOCn0cT/U0F4QLvBm/9HT7lJ2nf0IBTBJqEK6JBJ7s wB+JSKWTbXryfHa+/FFgJZZByCYtc5QJfwHedZ1837GIC0ofpPeds0L9V7wFdenT GyvHaBOWzQG8Hx+KzJw/i/NvvLJ1X7eY9EWNHS6wNlEBLlIyOhY49ZeVOHE24V2d QD7APjqrRZSwGtgt4BlljYslo5MnC3UGrSislTWMO6ZIB905pYOQWxi3t0s7O4Dm u0qm670+jcUpmAMyZswCn2lfMuyN8v0BZM4lw/L/m87mRAeAqLrTo94FuvV0HvPQ kYMlUQDZLE/vjcOBs0hl8oMMVTkXG6Kd -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:16 2025 by rpki-client on console.sobornost.net