$ rpki-client -vvf rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft File: 40soVCBWzp4GUP78CrEkIWy1-cE.mft (raw, json) Hash identifier: zE4PbZdAEbZER/hOqcomwFGBMrX6czB9lDDdcP5eb6g= Subject key identifier: 35:41:B3:BB:E9:B0:8F:82:E4:99:79:E0:A3:F9:39:09:24:C8:27:87 Authority key identifier: E3:4B:28:54:20:56:CE:9E:06:50:FE:FC:0A:B1:24:21:6C:B5:F9:C1 Certificate issuer: /CN=A911C6E1/serialNumber=E34B28542056CE9E0650FEFC0AB124216CB5F9C1 Certificate serial: 02D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft Manifest number: 02CA Signing time: Sun 27 Apr 2025 01:02:27 +0000 Manifest this update: Sun 27 Apr 2025 01:02:26 +0000 Manifest next update: Sun 04 May 2025 01:02:26 +0000 Files and hashes: 1: 40soVCBWzp4GUP78CrEkIWy1-cE.crl (hash: cyMKdrMGUVsMsNWUlIWH5uV+jiuk26drO8Le17MEhTM=) 2: FB1BF574E7E411EC84283679C4F9AE02.roa (hash: ZM5rRUd00+nBfPasOFVmxXpUPYX0MShZkN1FXso/iDI=) 3: FBB9FE90E7E411EC84283679C4F9AE02.roa (hash: pjNUbtH7HoaOJ7Yp/zo9LBV9AiGXTeeEg0CufDMnsg0=) 4: 43CEF64C5E7111EDAD328E21C4F9AE02.roa (hash: CMs488Hhl5oLPF4YmVkuRaqJu0RzsjH0FTfUHm+gkes=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.crl rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 01:02:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 726 (0x2d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C6E1, serialNumber=E34B28542056CE9E0650FEFC0AB124216CB5F9C1 Validity Not Before: Apr 27 01:02:26 2025 GMT Not After : May 4 01:02:26 2025 GMT Subject: CN=680d8223-fa6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a8:d9:2f:9b:67:48:cf:76:7c:a1:3e:aa:f7: 37:54:18:f5:77:dd:eb:45:43:87:80:22:d7:0d:a3: 7d:ab:0c:62:12:41:4c:60:bd:b1:aa:f3:3b:1d:d4: 1c:07:c1:fd:10:df:85:87:7f:83:6d:f9:7a:79:58: 36:d5:f9:07:7d:44:d5:66:a1:0f:fa:40:da:77:d3: 0c:bd:23:2e:fc:70:8d:c2:89:6f:55:4c:74:b7:31: bd:f0:52:2c:d0:e9:11:ce:ec:4f:d3:b4:6d:c7:5b: d5:b3:a6:89:88:b2:76:fb:c3:4f:5c:57:e4:d3:f4: 1a:b3:d1:05:0d:ad:04:fb:6b:06:21:9c:2d:5d:21: b1:d1:31:8a:a2:6c:fc:b4:07:96:c0:7b:b1:8d:89: 8d:c6:2a:33:5e:9c:d8:a6:5a:e6:b3:42:3a:80:e0: 94:e1:36:74:83:83:a6:fa:ae:c0:da:d1:c1:e2:ea: 7e:67:e3:ba:88:31:ae:f0:a2:4a:1e:7d:74:19:ce: 4f:22:50:65:01:f1:ca:cb:f1:a4:30:bd:91:b6:6b: 18:00:65:fc:8a:9f:fe:8c:b2:25:b5:32:22:af:24: 05:2c:c9:c8:7c:d2:73:c7:21:c1:8c:a4:75:92:38: 53:3a:47:19:d4:80:ae:37:61:2a:8a:8f:25:19:a8: ec:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:41:B3:BB:E9:B0:8F:82:E4:99:79:E0:A3:F9:39:09:24:C8:27:87 X509v3 Authority Key Identifier: keyid:E3:4B:28:54:20:56:CE:9E:06:50:FE:FC:0A:B1:24:21:6C:B5:F9:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:f5:e7:35:98:1b:1c:2d:f1:8f:1d:9c:41:2f:a9:46:16:ae: 8b:cb:bd:c5:89:8a:5b:f6:b1:82:3d:1f:72:42:2f:b5:d4:e5: 34:cb:24:94:75:fe:86:fd:cf:31:db:ad:37:a0:2f:54:7c:cd: c9:15:9a:d5:a0:2b:f1:29:ec:f2:f8:a1:88:cc:a0:ec:c5:ef: cf:45:8d:07:8c:c0:d5:c6:86:66:25:59:de:58:e8:cd:d4:51: 0d:27:c2:34:5b:87:3b:a4:2e:7e:27:ab:8b:96:69:55:dc:18: 49:ef:e9:1c:d4:dd:71:e1:19:6b:5d:74:02:35:f1:c0:5a:a5: 4b:78:45:6d:d5:ef:5d:2d:38:36:83:a9:cb:30:cc:8e:0e:d4: e6:26:d2:c3:34:4f:47:16:22:ad:bf:03:18:3f:9c:fa:23:44: 0a:90:e9:3b:2c:09:d4:ae:03:69:33:97:4b:6d:75:10:d5:1f: dc:8e:f7:f4:9a:90:50:a0:49:fb:b8:b7:fb:17:9d:5d:49:07: 1d:d6:31:25:db:00:cf:36:40:7c:b9:86:63:bb:ab:31:f6:e2: 41:fc:a9:aa:a6:58:3e:5d:da:64:8a:fd:e4:cd:5b:84:e2:34: e0:5b:00:a0:2b:24:da:e6:4a:a8:52:21:43:a6:df:21:26:69: 15:6f:85:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM2RTExMTAvBgNVBAUTKEUzNEIyODU0MjA1NkNFOUUwNjUwRkVGQzBBQjEyNDIx NkNCNUY5QzEwHhcNMjUwNDI3MDEwMjI2WhcNMjUwNTA0MDEwMjI2WjAYMRYwFAYD VQQDEw02ODBkODIyMy1mYTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwKjZL5tnSM92fKE+qvc3VBj1d93rRUOHgCLXDaN9qwxiEkFMYL2xqvM7HdQc B8H9EN+Fh3+Dbfl6eVg21fkHfUTVZqEP+kDad9MMvSMu/HCNwolvVUx0tzG98FIs 0OkRzuxP07Rtx1vVs6aJiLJ2+8NPXFfk0/Qas9EFDa0E+2sGIZwtXSGx0TGKomz8 tAeWwHuxjYmNxiozXpzYplrms0I6gOCU4TZ0g4Om+q7A2tHB4up+Z+O6iDGu8KJK Hn10Gc5PIlBlAfHKy/GkML2RtmsYAGX8ip/+jLIltTIiryQFLMnIfNJzxyHBjKR1 kjhTOkcZ1ICuN2Eqio8lGajsOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDVBs7vp sI+C5Jl54KP5OQkkyCeHMB8GA1UdIwQYMBaAFONLKFQgVs6eBlD+/AqxJCFstfnB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzZFMS9BNTdEODZEOEU3 REUxMUVDOEQ4QzVDNURDNEY5QUUwMi80MHNvVkNCV3pwNEdVUDc4Q3JFa0lXeTEt Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQwc29WQ0JXenA0R1VQNzhDckVrSVd5MS1jRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzZFMS9BNTdEODZEOEU3REUxMUVDOEQ4QzVDNURDNEY5QUUwMi80MHNvVkNCV3pw NEdVUDc4Q3JFa0lXeTEtY0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCb9ec1mBscLfGPHZxBL6lGFq6Ly73FiYpb9rGCPR9yQi+11OU0yySU df6G/c8x2603oC9UfM3JFZrVoCvxKezy+KGIzKDsxe/PRY0HjMDVxoZmJVneWOjN 1FENJ8I0W4c7pC5+J6uLlmlV3BhJ7+kc1N1x4RlrXXQCNfHAWqVLeEVt1e9dLTg2 g6nLMMyODtTmJtLDNE9HFiKtvwMYP5z6I0QKkOk7LAnUrgNpM5dLbXUQ1R/cjvf0 mpBQoEn7uLf7F51dSQcd1jEl2wDPNkB8uYZju6sx9uJB/Kmqplg+Xdpkiv3kzVuE 4jTgWwCgKyTa5kqoUiFDpt8hJmkVb4Ut -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:16 2025 by rpki-client on console.sobornost.net