$ rpki-client -vvf rpki.apnic.net/member_repository/A911B4ED/FA4B0AC40F3711EEAB9D9468C4F9AE02/kI54kDTxhBXYdZwmo0brgQ71pBU.mft File: kI54kDTxhBXYdZwmo0brgQ71pBU.mft (raw, json) Hash identifier: eWN934cin3/of6pLBeRQMIsx3l1iAXS5S3/0N7FDRu0= Subject key identifier: 80:51:39:24:4C:9A:36:25:A6:B0:A6:77:BB:0E:33:6B:08:68:3C:DD Authority key identifier: 90:8E:78:90:34:F1:84:15:D8:75:9C:26:A3:46:EB:81:0E:F5:A4:15 Certificate issuer: /CN=A911B4ED/serialNumber=908E789034F18415D8759C26A346EB810EF5A415 Certificate serial: 015C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kI54kDTxhBXYdZwmo0brgQ71pBU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B4ED/FA4B0AC40F3711EEAB9D9468C4F9AE02/kI54kDTxhBXYdZwmo0brgQ71pBU.mft Manifest number: 015A Signing time: Sun 27 Apr 2025 02:59:50 +0000 Manifest this update: Sun 27 Apr 2025 02:59:49 +0000 Manifest next update: Sun 04 May 2025 02:59:49 +0000 Files and hashes: 1: kI54kDTxhBXYdZwmo0brgQ71pBU.crl (hash: Gc1L+qfaGB0WjUMn4hTuSH5mkJx5OQL3S6tyJSuA6CU=) 2: 86A2CEB60F3E11EEA4C55465C4F9AE02.roa (hash: LEuGWO/AHJLUDwLeABLdjtuQr5+JNGq1678nn2RoAyI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B4ED/FA4B0AC40F3711EEAB9D9468C4F9AE02/kI54kDTxhBXYdZwmo0brgQ71pBU.crl rsync://rpki.apnic.net/member_repository/A911B4ED/FA4B0AC40F3711EEAB9D9468C4F9AE02/kI54kDTxhBXYdZwmo0brgQ71pBU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kI54kDTxhBXYdZwmo0brgQ71pBU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 348 (0x15c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B4ED, serialNumber=908E789034F18415D8759C26A346EB810EF5A415 Validity Not Before: Apr 27 02:59:49 2025 GMT Not After : May 4 02:59:49 2025 GMT Subject: CN=680d9da6-ab9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1c:dd:53:e0:3d:36:48:94:47:83:93:f2:47: b7:90:44:9c:54:e7:da:dd:bb:5c:df:46:69:cc:e3: 7f:29:c0:b2:5c:b5:65:26:f9:e2:33:5d:af:36:4f: 1f:c7:8e:f3:3c:26:04:25:fc:e7:99:d6:8c:27:47: f5:e9:27:0d:14:bd:13:04:a4:a0:c0:63:88:fb:b0: bc:03:e8:d9:f2:c0:25:4a:45:23:10:b8:4b:83:95: 86:00:80:0f:a4:48:9a:32:2f:7a:b3:8a:4a:3d:27: 6d:40:23:fd:d5:fb:b7:7b:e3:bf:8c:c9:5a:24:bb: a7:4f:ba:4e:db:5e:6a:c0:da:87:10:82:5d:34:c0: 69:d5:6e:ab:9c:67:7e:17:4c:2a:c3:ab:06:7e:7e: 6d:9b:33:7f:d6:21:13:33:ee:ee:c5:ab:82:71:3c: 53:bf:0c:7f:4c:63:c7:97:7b:5f:cc:47:b1:c3:ad: 37:a0:49:42:77:c4:59:bd:92:74:2d:9c:29:a0:53: cd:e4:76:99:a4:c2:c2:1c:17:33:69:fe:76:77:69: 0d:f5:1b:ef:3d:5f:bd:39:dc:a5:bd:72:cf:d1:7f: de:aa:3f:a8:f7:b7:45:0f:d7:8f:45:51:b6:6f:69: bb:0b:98:64:1f:05:97:71:5e:9a:56:99:c6:e2:9a: 0f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:51:39:24:4C:9A:36:25:A6:B0:A6:77:BB:0E:33:6B:08:68:3C:DD X509v3 Authority Key Identifier: keyid:90:8E:78:90:34:F1:84:15:D8:75:9C:26:A3:46:EB:81:0E:F5:A4:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B4ED/FA4B0AC40F3711EEAB9D9468C4F9AE02/kI54kDTxhBXYdZwmo0brgQ71pBU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kI54kDTxhBXYdZwmo0brgQ71pBU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B4ED/FA4B0AC40F3711EEAB9D9468C4F9AE02/kI54kDTxhBXYdZwmo0brgQ71pBU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:ba:97:b1:0c:a0:c0:5f:47:f7:6e:5c:c7:7d:ab:4d:a0:f6: 42:af:07:56:eb:17:d2:83:16:20:72:12:61:7b:b3:86:59:34: 2b:fb:a8:ff:26:76:cc:f2:a4:0e:ac:56:5b:76:f2:03:d7:10: e2:2c:9a:ae:5d:58:d3:fc:81:f7:b9:73:37:61:ed:9a:f9:b7: 54:e2:27:cb:0d:8c:88:f6:b7:53:68:77:86:72:f6:5c:d6:9c: bb:bf:a2:00:73:bd:39:a8:2a:49:e4:a7:8f:77:bc:ca:2f:4e: 8c:d4:74:60:d0:ef:83:55:58:0a:d4:97:ae:61:8d:7a:55:3d: e2:4c:fd:c1:6e:d6:9b:3c:85:72:7b:e7:bf:9f:c0:40:c6:d4: be:19:65:78:9d:c0:0a:f8:94:4d:d6:1d:bb:ef:bf:1a:76:34: bc:ca:ef:fa:81:5f:87:67:58:ce:1b:2c:b2:08:7f:04:61:b0: 5b:f9:5f:b5:0d:73:fb:9a:b8:17:1d:4b:23:5e:09:bc:c2:fb: 3c:bb:70:1f:8e:9c:52:9e:84:e3:40:6e:e0:ca:d4:b4:51:6c: ef:c9:10:68:ff:ce:78:3d:9b:70:6d:08:17:60:94:29:b9:ea: 73:b0:c3:3a:1b:13:55:49:ab:b0:97:67:e4:5d:04:4c:f4:0e: 5d:e6:f0:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI0RUQxMTAvBgNVBAUTKDkwOEU3ODkwMzRGMTg0MTVEODc1OUMyNkEzNDZFQjgx MEVGNUE0MTUwHhcNMjUwNDI3MDI1OTQ5WhcNMjUwNTA0MDI1OTQ5WjAYMRYwFAYD VQQDEw02ODBkOWRhNi1hYjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuxzdU+A9NkiUR4OT8ke3kEScVOfa3btc30ZpzON/KcCyXLVlJvniM12vNk8f x47zPCYEJfznmdaMJ0f16ScNFL0TBKSgwGOI+7C8A+jZ8sAlSkUjELhLg5WGAIAP pEiaMi96s4pKPSdtQCP91fu3e+O/jMlaJLunT7pO215qwNqHEIJdNMBp1W6rnGd+ F0wqw6sGfn5tmzN/1iETM+7uxauCcTxTvwx/TGPHl3tfzEexw603oElCd8RZvZJ0 LZwpoFPN5HaZpMLCHBczaf52d2kN9RvvPV+9OdylvXLP0X/eqj+o97dFD9ePRVG2 b2m7C5hkHwWXcV6aVpnG4poPLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIBROSRM mjYlprCmd7sOM2sIaDzdMB8GA1UdIwQYMBaAFJCOeJA08YQV2HWcJqNG64EO9aQV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjRFRC9GQTRCMEFDNDBG MzcxMUVFQUI5RDk0NjhDNEY5QUUwMi9rSTU0a0RUeGhCWFlkWndtbzBicmdRNzFw QlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tJNTRrRFR4aEJYWWRad21vMGJyZ1E3MXBCVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjRFRC9GQTRCMEFDNDBGMzcxMUVFQUI5RDk0NjhDNEY5QUUwMi9rSTU0a0RUeGhC WFlkWndtbzBicmdRNzFwQlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeupexDKDAX0f3blzHfatNoPZCrwdW6xfSgxYgchJhe7OGWTQr+6j/ JnbM8qQOrFZbdvID1xDiLJquXVjT/IH3uXM3Ye2a+bdU4ifLDYyI9rdTaHeGcvZc 1py7v6IAc705qCpJ5KePd7zKL06M1HRg0O+DVVgK1JeuYY16VT3iTP3BbtabPIVy e+e/n8BAxtS+GWV4ncAK+JRN1h27778adjS8yu/6gV+HZ1jOGyyyCH8EYbBb+V+1 DXP7mrgXHUsjXgm8wvs8u3AfjpxSnoTjQG7gytS0UWzvyRBo/854PZtwbQgXYJQp uepzsMM6GxNVSauwl2fkXQRM9A5d5vBt -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:16 2025 by rpki-client on console.sobornost.net