$ rpki-client -vvf rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft File: FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft (raw, json) Hash identifier: kbQS8sdY2bjjRNV2mH/fuarwoJs9LPKLvbyaqZGnmvM= Subject key identifier: 9A:64:47:AA:45:12:C6:DB:90:31:17:F0:2F:67:D3:F6:06:31:B4:7B Authority key identifier: 14:02:B6:4F:9A:E7:81:61:D0:D6:5D:A7:25:FD:D0:BB:C8:E1:52:D8 Certificate issuer: /CN=A911C564/serialNumber=1402B64F9AE78161D0D65DA725FDD0BBC8E152D8 Certificate serial: 0544 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft Manifest number: 053F Signing time: Sat 26 Apr 2025 23:06:54 +0000 Manifest this update: Sat 26 Apr 2025 23:06:53 +0000 Manifest next update: Sat 03 May 2025 23:06:53 +0000 Files and hashes: 1: FAK2T5rngWHQ1l2nJf3Qu8jhUtg.crl (hash: ycxs+dUGkyr3ch9vpk2Ltkg9ua4A4rPEEMA23rp9MkI=) 2: A3B2B0A8EE9711EB8EF1A50AC4F9AE02.roa (hash: Jf8QtUinuXEmxe7plhHtwAZrMyKb/TssbL3bZiwtCVs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.crl rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 23:06:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1348 (0x544) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C564, serialNumber=1402B64F9AE78161D0D65DA725FDD0BBC8E152D8 Validity Not Before: Apr 26 23:06:53 2025 GMT Not After : May 3 23:06:53 2025 GMT Subject: CN=680d670d-9c54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c1:0d:99:bb:20:02:a9:cc:d6:97:b8:eb:ff: 72:e5:82:73:dd:3e:3b:ff:b7:ff:a0:be:72:2a:a6: 36:ca:cc:55:86:42:08:d9:97:ff:f0:09:1b:dc:09: 2f:b8:72:b5:a1:f5:4e:35:f0:a0:b2:cc:1a:18:e2: de:68:45:91:25:43:92:67:3c:8f:25:f3:f5:f0:4d: 2c:a0:87:f4:be:c0:86:00:e5:b1:6f:7e:1e:9e:2a: 60:0e:90:e3:80:61:b5:47:b4:13:89:29:a2:7d:c3: 49:69:a7:68:e2:83:9e:b7:9e:c4:af:1e:1f:a8:08: 4f:cb:ee:fb:3b:94:e4:81:25:61:32:44:24:10:5b: 97:0f:af:83:37:ee:3b:d7:f5:90:c6:54:04:9f:5b: 17:e1:3b:49:e6:3f:5a:6d:7b:91:48:62:c7:5c:e0: 21:96:99:8a:ff:90:00:80:e1:bf:36:47:40:cf:87: fa:56:86:9a:1b:5d:d4:f4:c1:78:02:17:06:a5:6c: 8f:b0:ea:57:48:37:4b:f2:6c:10:80:26:9b:7c:94: 32:95:13:f5:cd:94:fc:24:9e:cc:3c:f4:5a:b0:93: d5:11:b6:99:ed:e2:4f:3a:b1:47:9a:d1:ab:61:bf: 13:a0:c2:7d:01:28:b4:14:5c:14:b3:0b:e2:af:90: c6:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:64:47:AA:45:12:C6:DB:90:31:17:F0:2F:67:D3:F6:06:31:B4:7B X509v3 Authority Key Identifier: keyid:14:02:B6:4F:9A:E7:81:61:D0:D6:5D:A7:25:FD:D0:BB:C8:E1:52:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:f2:f4:6b:40:15:dd:7e:4b:99:c4:3f:c5:de:60:de:9f:1d: 85:c0:66:b2:78:cd:74:6c:dd:33:06:ae:d0:b6:ca:6e:6e:21: 46:8f:2c:af:98:76:0c:0d:1d:1a:06:31:d3:4c:20:08:40:48: 2e:57:65:2b:19:58:27:43:b3:c2:a0:96:ff:f6:21:e9:fe:a4: 4b:1e:f3:eb:6d:59:91:83:1e:bf:eb:72:d8:38:96:66:05:f3: 6d:7a:c6:17:df:7d:0f:6d:19:a9:0f:fa:6d:fa:7e:90:85:cc: 82:cb:e7:45:d9:05:d9:78:fd:3b:91:33:44:d7:e2:bf:46:23: a4:71:3a:f2:61:9b:ee:5b:a6:8d:0c:85:21:5c:a8:45:97:50: 6c:2d:19:fe:19:31:44:21:88:0f:2d:c8:c1:38:4a:c8:62:c9: fe:c3:9a:9c:52:77:84:90:4d:c6:5c:1c:c0:89:4a:e6:82:98: fd:4a:c7:09:53:c9:90:76:73:4d:f5:06:da:a7:6e:0d:db:be: 0c:9c:7e:d7:22:af:c4:08:af:93:27:ea:13:42:5a:3a:90:58: 7a:f2:42:06:d2:d7:16:14:d0:c2:5f:4a:0a:4b:0b:77:70:ed: 2b:cf:0a:69:9f:4c:bd:92:88:7c:e9:62:d7:3c:3c:8b:0a:96: e7:d9:9c:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM1NjQxMTAvBgNVBAUTKDE0MDJCNjRGOUFFNzgxNjFEMEQ2NURBNzI1RkREMEJC QzhFMTUyRDgwHhcNMjUwNDI2MjMwNjUzWhcNMjUwNTAzMjMwNjUzWjAYMRYwFAYD VQQDEw02ODBkNjcwZC05YzU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAycENmbsgAqnM1pe46/9y5YJz3T47/7f/oL5yKqY2ysxVhkII2Zf/8Akb3Akv uHK1ofVONfCgsswaGOLeaEWRJUOSZzyPJfP18E0soIf0vsCGAOWxb34enipgDpDj gGG1R7QTiSmifcNJaado4oOet57Erx4fqAhPy+77O5TkgSVhMkQkEFuXD6+DN+47 1/WQxlQEn1sX4TtJ5j9abXuRSGLHXOAhlpmK/5AAgOG/NkdAz4f6VoaaG13U9MF4 AhcGpWyPsOpXSDdL8mwQgCabfJQylRP1zZT8JJ7MPPRasJPVEbaZ7eJPOrFHmtGr Yb8ToMJ9ASi0FFwUswvir5DGzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJpkR6pF EsbbkDEX8C9n0/YGMbR7MB8GA1UdIwQYMBaAFBQCtk+a54Fh0NZdpyX90LvI4VLY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzU2NC9FODA4QUVENkVF OTQxMUVCQjNEODVBODZDNEY5QUUwMi9GQUsyVDVybmdXSFExbDJuSmYzUXU4amhV dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZBSzJUNXJuZ1dIUTFsMm5KZjNRdThqaFV0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzU2NC9FODA4QUVENkVFOTQxMUVCQjNEODVBODZDNEY5QUUwMi9GQUsyVDVybmdX SFExbDJuSmYzUXU4amhVdGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC48vRrQBXdfkuZxD/F3mDenx2FwGayeM10bN0zBq7QtspubiFGjyyv mHYMDR0aBjHTTCAIQEguV2UrGVgnQ7PCoJb/9iHp/qRLHvPrbVmRgx6/63LYOJZm BfNtesYX330PbRmpD/pt+n6QhcyCy+dF2QXZeP07kTNE1+K/RiOkcTryYZvuW6aN DIUhXKhFl1BsLRn+GTFEIYgPLcjBOErIYsn+w5qcUneEkE3GXBzAiUrmgpj9SscJ U8mQdnNN9Qbap24N274MnH7XIq/ECK+TJ+oTQlo6kFh68kIG0tcWFNDCX0oKSwt3 cO0rzwppn0y9koh86WLXPDyLCpbn2Zy0 -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:16 2025 by rpki-client on console.sobornost.net