$ rpki-client -vvf rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.mft File: K08yPFindrTnU4be6Dci4EViMsY.mft (raw, json) Hash identifier: amYMj+vio8dGFqXuUwHbOyfQ6fXV7qdw41Idy3cjtzc= Subject key identifier: B7:AA:9D:9A:82:94:BE:2A:0E:CC:48:8A:21:E1:04:4C:43:CC:86:DD Authority key identifier: 2B:4F:32:3C:58:A7:76:B4:E7:53:86:DE:E8:37:22:E0:45:62:32:C6 Certificate issuer: /CN=A911BC62/serialNumber=2B4F323C58A776B4E75386DEE83722E0456232C6 Certificate serial: 0DD8 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/K08yPFindrTnU4be6Dci4EViMsY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.mft Manifest number: 0DCB Signing time: Mon 28 Apr 2025 15:43:57 +0000 Manifest this update: Mon 28 Apr 2025 15:43:56 +0000 Manifest next update: Mon 05 May 2025 15:43:56 +0000 Files and hashes: 1: K08yPFindrTnU4be6Dci4EViMsY.crl (hash: 43HBcs2O/SbArI7ujs/CBaXX4afmMh8evIFCXoJuTeM=) 2: EE1EA292EA6A11E98F16FE30C4F9AE02.roa (hash: QaiwA0ii3swzDmEn5ZYRLYQTMUg0WLwS1y2KJOPdMzg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.crl rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/K08yPFindrTnU4be6Dci4EViMsY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 14:50:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3544 (0xdd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BC62, serialNumber=2B4F323C58A776B4E75386DEE83722E0456232C6 Validity Not Before: Apr 28 15:43:56 2025 GMT Not After : May 5 15:43:56 2025 GMT Subject: CN=680fa23d-b87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ee:0d:d0:de:68:61:5e:36:8e:df:b1:a9:14: 08:aa:6a:f7:8d:db:53:c9:30:e5:9e:e3:74:02:5f: 36:e7:a5:9d:3e:b7:aa:d2:07:0c:1e:4d:91:c2:f6: 00:16:1a:1d:83:c6:47:92:f5:b5:34:51:f8:bd:c2: 7b:b1:8b:1a:7b:df:7b:21:7e:8b:50:36:fe:aa:d1: 3c:b6:a6:ca:b6:0c:e9:c6:b9:44:32:a9:a5:e7:15: b2:bd:4d:5f:b5:c2:75:50:8e:bd:46:2f:4b:1f:8a: b1:54:4f:42:80:26:46:58:63:58:25:12:c0:46:27: 87:bb:60:7f:63:2a:6f:74:64:ea:14:ac:4a:63:f8: 7d:3d:7c:19:9a:3f:b6:3f:cc:2e:0e:10:2b:a6:3d: 41:11:a3:25:e6:3c:33:d3:9a:82:ed:cd:c4:fc:0e: a0:1c:c7:26:31:c9:64:8b:05:86:6c:9a:5d:a5:0a: 4f:b0:a2:74:14:bf:01:ed:20:39:83:cf:78:06:30: 14:d7:a4:90:98:62:dc:a5:46:99:9c:c4:7b:e3:fa: 99:c5:c8:03:31:c8:18:74:ca:cc:f2:41:f6:d7:b7: 1a:9d:aa:f2:40:1b:f6:42:b0:f4:aa:39:be:a5:b5: 7e:90:b0:e4:f5:89:48:79:ed:41:25:0b:03:16:6d: 08:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:AA:9D:9A:82:94:BE:2A:0E:CC:48:8A:21:E1:04:4C:43:CC:86:DD X509v3 Authority Key Identifier: keyid:2B:4F:32:3C:58:A7:76:B4:E7:53:86:DE:E8:37:22:E0:45:62:32:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/K08yPFindrTnU4be6Dci4EViMsY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:c9:ea:08:b7:ea:cd:c0:d9:34:d9:cc:c0:c8:e5:69:a2:66: 2e:54:08:0e:ea:f3:68:cc:ca:8a:a7:c6:2e:a8:fb:09:b4:31: 45:fa:50:07:9b:9e:52:35:ab:2d:05:ad:92:64:20:20:62:37: d3:23:85:02:e3:4b:5c:48:e0:87:05:b3:9a:fc:70:0c:aa:5f: d9:31:a9:42:ce:cd:46:20:29:79:5f:6c:e9:2a:c3:17:bb:75: 37:8b:a1:6f:49:20:8a:56:40:60:66:a6:b1:d5:5f:24:98:c1: 5c:16:a8:6d:d7:35:b4:08:58:6f:31:04:33:4f:0c:76:3a:ec: a0:e3:84:b0:15:31:9c:e5:33:4a:8f:c1:2a:47:b6:8b:be:4c: 27:36:9d:8b:58:ec:2c:89:f2:f5:f6:36:ec:ec:d1:59:21:62: 52:28:dd:c4:f8:22:bd:c6:f5:33:3c:d1:31:98:d3:8e:a7:8e: 37:2e:a8:d5:9b:97:1e:f1:f6:19:48:26:6d:1b:e3:10:62:58: 29:eb:c0:fd:e4:cb:3f:94:2f:1f:f1:3c:44:85:27:89:42:27: 2c:d0:4a:1c:e4:1c:2b:2c:08:d5:74:03:39:3d:1a:86:c1:01: ab:70:46:7e:bc:26:ba:51:7b:3f:da:50:3c:9c:63:f5:67:66: 93:fb:59:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJDNjIxMTAvBgNVBAUTKDJCNEYzMjNDNThBNzc2QjRFNzUzODZERUU4MzcyMkUw NDU2MjMyQzYwHhcNMjUwNDI4MTU0MzU2WhcNMjUwNTA1MTU0MzU2WjAYMRYwFAYD VQQDEw02ODBmYTIzZC1iODdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAse4N0N5oYV42jt+xqRQIqmr3jdtTyTDlnuN0Al8256WdPreq0gcMHk2RwvYA Fhodg8ZHkvW1NFH4vcJ7sYsae997IX6LUDb+qtE8tqbKtgzpxrlEMqml5xWyvU1f tcJ1UI69Ri9LH4qxVE9CgCZGWGNYJRLARieHu2B/YypvdGTqFKxKY/h9PXwZmj+2 P8wuDhArpj1BEaMl5jwz05qC7c3E/A6gHMcmMclkiwWGbJpdpQpPsKJ0FL8B7SA5 g894BjAU16SQmGLcpUaZnMR74/qZxcgDMcgYdMrM8kH217canaryQBv2QrD0qjm+ pbV+kLDk9YlIee1BJQsDFm0InwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLeqnZqC lL4qDsxIiiHhBExDzIbdMB8GA1UdIwQYMBaAFCtPMjxYp3a051OG3ug3IuBFYjLG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkM2Mi9FRTk1RkQ0MkI3 NjYxMUU5ODZDMEU1MTRDNEY5QUUwMi9LMDh5UEZpbmRyVG5VNGJlNkRjaTRFVmlN c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0swOHlQRmluZHJUblU0YmU2RGNpNEVWaU1zWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkM2Mi9FRTk1RkQ0MkI3NjYxMUU5ODZDMEU1MTRDNEY5QUUwMi9LMDh5UEZpbmRy VG5VNGJlNkRjaTRFVmlNc1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDyeoIt+rNwNk02czAyOVpomYuVAgO6vNozMqKp8YuqPsJtDFF+lAH m55SNastBa2SZCAgYjfTI4UC40tcSOCHBbOa/HAMql/ZMalCzs1GICl5X2zpKsMX u3U3i6FvSSCKVkBgZqax1V8kmMFcFqht1zW0CFhvMQQzTwx2Ouyg44SwFTGc5TNK j8EqR7aLvkwnNp2LWOwsifL19jbs7NFZIWJSKN3E+CK9xvUzPNExmNOOp443LqjV m5ce8fYZSCZtG+MQYlgp68D95Ms/lC8f8TxEhSeJQics0Eoc5BwrLAjVdAM5PRqG wQGrcEZ+vCa6UXs/2lA8nGP1Z2aT+1mE -----END CERTIFICATE-----Generated at Mon Apr 28 17:44:43 2025 by rpki-client on console.sobornost.net