$ rpki-client -vvf rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft File: KxUe1JZstlaQzZqoJiuKau0G5EM.mft (raw, json) Hash identifier: W7ddEhxmCQOENVRG4rHsw0UOQKw9PJx+T+YaLGLtus4= Subject key identifier: 4A:9E:6B:1F:B8:99:5F:D5:BC:92:66:47:9A:19:8A:59:8A:BA:82:CB Authority key identifier: 2B:15:1E:D4:96:6C:B6:56:90:CD:9A:A8:26:2B:8A:6A:ED:06:E4:43 Certificate issuer: /CN=A911B871/serialNumber=2B151ED4966CB65690CD9AA8262B8A6AED06E443 Certificate serial: 0764 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft Manifest number: 0754 Signing time: Sat 26 Apr 2025 21:19:57 +0000 Manifest this update: Sat 26 Apr 2025 21:19:56 +0000 Manifest next update: Sat 03 May 2025 21:19:56 +0000 Files and hashes: 1: KxUe1JZstlaQzZqoJiuKau0G5EM.crl (hash: Wxv+h90lvs8ivfC86POJl+Vx1inbdYChw3tjGf1x/gM=) 2: 440FC47687C211EEA6A0667BC4F9AE02.roa (hash: bPVen4Q79bQMysYZB+1SSkGirdnYsj/wax4oaPllL9M=) 3: C4EEE8EE24E011EBA4C87F7DC4F9AE02.roa (hash: U4O6uXSOF+3gB8WDqXNclHvwBePMcUEtPgGRnogD3Pk=) 4: 8A01BCDC1DA811EBAFA5B44FC4F9AE02.roa (hash: EPNFm1X8MnpnhMfq1ASr/F02aUDuHCY7XYN9aoUZxhY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.crl rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1892 (0x764) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B871, serialNumber=2B151ED4966CB65690CD9AA8262B8A6AED06E443 Validity Not Before: Apr 26 21:19:56 2025 GMT Not After : May 3 21:19:56 2025 GMT Subject: CN=680d4dfc-6702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:fc:0b:13:42:f7:3c:a4:c2:31:70:e0:1a:02: 1a:40:3f:cd:66:b2:09:23:9d:57:4f:5d:c5:8b:6b: 3d:d7:5a:73:7a:c5:0b:b6:50:10:7a:44:c8:5b:9b: 42:4b:29:b3:3e:70:12:18:94:0b:b4:46:82:35:47: 08:36:12:48:04:02:e0:9c:83:d1:c9:2a:cc:8a:39: 6f:3f:45:39:53:87:67:b2:1a:4f:8d:a5:5a:ec:d3: 72:1d:97:12:18:68:59:9c:29:78:22:bd:f0:02:08: dc:3a:10:4a:da:48:32:80:ae:9b:a5:49:05:ee:1a: 13:22:da:f9:93:0a:a8:35:d6:fb:29:b1:6c:8d:e9: 4d:9f:4b:d5:5c:46:d4:a0:4f:d1:36:a8:6c:ea:69: b2:3f:f6:33:72:dd:55:92:9b:5e:ef:27:a9:29:db: 02:6f:83:be:af:66:02:a6:4d:b5:22:28:cc:26:bd: 56:ba:9b:89:42:af:7d:82:bb:b3:09:e2:47:98:3f: 0c:71:64:58:96:de:94:35:f3:24:01:9a:cb:f9:04: 28:24:f7:f3:70:eb:89:bd:50:b4:12:f9:c9:53:da: 5c:fe:99:0f:af:f7:d7:e4:1e:f8:ec:f7:05:e3:b8: 62:0a:2b:db:9f:58:e0:bf:8c:3e:f1:64:46:27:9b: 39:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:9E:6B:1F:B8:99:5F:D5:BC:92:66:47:9A:19:8A:59:8A:BA:82:CB X509v3 Authority Key Identifier: keyid:2B:15:1E:D4:96:6C:B6:56:90:CD:9A:A8:26:2B:8A:6A:ED:06:E4:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:48:ce:10:aa:de:02:07:fb:bc:d6:e5:57:41:2c:9e:f9:88: 35:d7:9a:fe:71:9b:e7:4a:bc:d2:62:58:f4:f9:68:b5:38:7d: 1c:b3:f5:ee:d6:8d:b1:a8:4f:59:8e:e5:b3:d9:7d:7e:f1:4f: f1:d2:c2:a7:1a:81:39:ed:3b:c3:d2:50:b3:41:40:dd:17:bc: fc:15:c3:8b:0d:0c:33:2e:f7:32:30:50:a1:e0:f1:a5:cf:c1: fa:d3:fc:05:88:93:6d:5c:07:b1:4b:83:44:00:a1:e8:17:be: 1a:ab:87:81:8c:67:71:f3:9a:1e:49:7e:04:04:db:60:05:4a: 2a:a5:51:20:20:64:ea:2d:24:bb:5a:11:28:6e:77:7c:14:34: 0b:19:10:a6:2c:63:0d:aa:2e:fb:d7:c3:aa:59:8d:c9:cf:84: 2b:84:af:3a:ae:88:28:c2:02:76:6c:4f:e5:77:37:30:7e:09: c3:87:5c:8d:aa:d8:61:f1:3a:8f:28:d9:d8:f5:26:a8:90:83: b7:99:1d:49:73:1b:f1:22:fd:25:52:8d:c4:c6:81:4b:7b:21: cb:56:ad:d9:dc:c3:34:60:88:0f:99:77:f5:28:a6:7b:92:6b: b2:26:64:b0:e8:d1:4d:38:60:97:f8:34:8c:b1:ff:06:7a:d6: 69:c0:1a:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI4NzExMTAvBgNVBAUTKDJCMTUxRUQ0OTY2Q0I2NTY5MENEOUFBODI2MkI4QTZB RUQwNkU0NDMwHhcNMjUwNDI2MjExOTU2WhcNMjUwNTAzMjExOTU2WjAYMRYwFAYD VQQDEw02ODBkNGRmYy02NzAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAovwLE0L3PKTCMXDgGgIaQD/NZrIJI51XT13Fi2s911pzesULtlAQekTIW5tC SymzPnASGJQLtEaCNUcINhJIBALgnIPRySrMijlvP0U5U4dnshpPjaVa7NNyHZcS GGhZnCl4Ir3wAgjcOhBK2kgygK6bpUkF7hoTItr5kwqoNdb7KbFsjelNn0vVXEbU oE/RNqhs6mmyP/Yzct1Vkpte7yepKdsCb4O+r2YCpk21IijMJr1WupuJQq99gruz CeJHmD8McWRYlt6UNfMkAZrL+QQoJPfzcOuJvVC0EvnJU9pc/pkPr/fX5B747PcF 47hiCivbn1jgv4w+8WRGJ5s5ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEqeax+4 mV/VvJJmR5oZilmKuoLLMB8GA1UdIwQYMBaAFCsVHtSWbLZWkM2aqCYrimrtBuRD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjg3MS84QTJEQUJFMDFE QTcxMUVCODA3MTJBNEZDNEY5QUUwMi9LeFVlMUpac3RsYVF6WnFvSml1S2F1MEc1 RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t4VWUxSlpzdGxhUXpacW9KaXVLYXUwRzVFTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Qjg3MS84QTJEQUJFMDFEQTcxMUVCODA3MTJBNEZDNEY5QUUwMi9LeFVlMUpac3Rs YVF6WnFvSml1S2F1MEc1RU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANSM4Qqt4CB/u81uVXQSye+Yg115r+cZvnSrzSYlj0+Wi1OH0cs/Xu 1o2xqE9ZjuWz2X1+8U/x0sKnGoE57TvD0lCzQUDdF7z8FcOLDQwzLvcyMFCh4PGl z8H60/wFiJNtXAexS4NEAKHoF74aq4eBjGdx85oeSX4EBNtgBUoqpVEgIGTqLSS7 WhEobnd8FDQLGRCmLGMNqi7718OqWY3Jz4QrhK86rogowgJ2bE/ldzcwfgnDh1yN qthh8TqPKNnY9SaokIO3mR1JcxvxIv0lUo3ExoFLeyHLVq3Z3MM0YIgPmXf1KKZ7 kmuyJmSw6NFNOGCX+DSMsf8GetZpwBqT -----END CERTIFICATE-----Generated at Sun Apr 27 00:13:54 2025 by rpki-client on console.sobornost.net