$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft File: QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft (raw, json) Hash identifier: jQpZUHcGFfIRl10J0lxKLSkwVp3ZoujZlJmkads1rRI= Subject key identifier: AC:C8:BE:AF:D0:2C:29:FD:E3:39:74:3B:49:70:DF:C6:1B:44:1F:72 Authority key identifier: 40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6 Certificate issuer: /CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6 Certificate serial: 0CCA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft Manifest number: 0C03 Signing time: Mon 28 Apr 2025 19:30:26 +0000 Manifest this update: Mon 28 Apr 2025 19:30:25 +0000 Manifest next update: Mon 05 May 2025 19:30:25 +0000 Files and hashes: 1: QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl (hash: Bx98TyDLOBo2TY+ZFjZyWd/HPuRw6qr+47jF/JrSCgo=) 2: 8CC1AF1417DC11EE959DE671C4F9AE02.roa (hash: bH9ZC4QgjmS/I58+FDGDPuH33W9RsPxq1Xz3UvWrsE8=) 3: 8DB5B2BC17DC11EE959DE671C4F9AE02.roa (hash: MTAUWchwVeKxoXJgsd9CSOqi1gXkAXO05abtX//8zz0=) 4: 8CA2C07889D111EFAFEB2609C4F9AE02.roa (hash: Bbke0XmmIxWIWeMRBoj+nBwWgM3xQtB71wXvSJ5bc/c=) 5: 65A78BCE535F11EE9BC85F83C4F9AE02.roa (hash: onKAfoZCCQvGFRb8T+pywq7Otmi4UdU6B4vavVOep80=) 6: A0F26482C9F211EF986EE370C4F9AE02.roa (hash: 08kq3N2T6u9VBQ7SP6eASP9Fa/uiNzMCtB0p+sr0X3w=) 7: 8BF60AF817DC11EE959DE671C4F9AE02.roa (hash: kh4hhTCX8Fi9NA+V05arYqEhwsTNSKknNhiVN/VBtTs=) 8: 67F68132535F11EE9BC85F83C4F9AE02.roa (hash: 68PnU5mlOA06iDNZ5XmPFrp9fhXfwnla9MbcMx8d36I=) 9: 9C294BEEE9B111EF8FD3E36DC4F9AE02.roa (hash: JnGAM1wsHp5wW5YUc/+ZGIE9EUUS5JBbavsugytK8eo=) 10: 8D2CC3EE17DC11EE959DE671C4F9AE02.roa (hash: zZr/wa0m1rFLaToJf+3XeU5H/f8ci0Eq6bfOYc73d3k=) 11: 8F9A2E2817DC11EE959DE671C4F9AE02.roa (hash: sNGI4IjSttFM+bJq5CDyljE79J+Q6/JoAjLErm5ZlOg=) 12: 6688CA76535F11EE9BC85F83C4F9AE02.roa (hash: X9BJWqFkDoO3Z1AnX2rwWIVc/LG4OOcRfPspBGbkn40=) 13: 67023924535F11EE9BC85F83C4F9AE02.roa (hash: ddZXmXMp+inqC1tu9O/Re3vjJXmPn1T/+0+8I6WAPIc=) 14: 9B3FF0EC1F6D11F0BBEE756AC4F9AE02.roa (hash: 2GnDplQiwMAlUAy3xpN879Pw+i4tKoxvTJrAxvUorrE=) 15: 678847C6535F11EE9BC85F83C4F9AE02.roa (hash: Vs5JYwOpofezkqiiF2qwHaO1ji2DOr491xFoDKani80=) 16: 8B707C6C17DC11EE959DE671C4F9AE02.roa (hash: bv2/9mHV5hvQUwYa7AUUUWrf3R41IAn85lkqotp1enw=) 17: 48E219C209C311EEA9D88A34C4F9AE02.roa (hash: ojzmtYL5oSSSDRNMHS4oBfQHwOO76KE3+ooyFQgsmPI=) 18: 8AD3E23A17DC11EE959DE671C4F9AE02.roa (hash: obVSxBoAnqffXMDTd+Z9+Lr3d6TSTuDzUuAxF1nefiI=) 19: 8EADC8C617DC11EE959DE671C4F9AE02.roa (hash: qWKBqzVZNaIWfle8O0qZvhFMlwqBUkUBmN22bjyzZlw=) 20: 8F1DD9E017DC11EE959DE671C4F9AE02.roa (hash: arl4UC92qPVUXs/4JsFRSGmU8q2ljxGq2A9CpZD8w3Q=) 21: DE0563C21F7111F0A41C9D84C4F9AE02.roa (hash: DPPDsUuLV78/5+KBuh51JsOidIpZY5CzHFHdoKE0S1c=) 22: 9005E6F417DC11EE959DE671C4F9AE02.roa (hash: nX+JdTppyQxuLXZd5ew3GC3f/sbog2Yk6PdmM9yWumY=) 23: 651E60A6535F11EE9BC85F83C4F9AE02.roa (hash: 4i6VJPAbegLRPG1TiRgqleRdlv3u9kO2DBkdXwrkMys=) 24: 8E2676DC17DC11EE959DE671C4F9AE02.roa (hash: 6WaRYsNX6RMzPE3WdzfKlbLBu0LngwxXI10OdHloqKc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 19:30:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3274 (0xcca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CA78, serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6 Validity Not Before: Apr 28 19:30:25 2025 GMT Not After : May 5 19:30:25 2025 GMT Subject: CN=680fd751-75d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fa:a6:78:c2:d3:61:e5:0f:6e:5c:4b:89:f5: 21:9a:0c:34:ad:b2:8b:ba:13:15:14:a3:01:e6:ac: a2:84:04:98:e0:03:33:c1:24:7c:67:62:5f:2c:30: 5e:b2:d5:30:d3:1c:83:50:84:01:31:30:54:61:a8: 22:b9:ad:cc:14:d3:e2:56:b4:ee:ef:54:77:cb:7a: 84:f5:1d:9d:3b:ea:80:b0:75:cb:52:f0:38:7e:7f: c0:5c:41:4b:20:5f:e8:57:94:dc:21:d3:70:fa:bd: 87:b5:d7:3c:e9:d8:e9:dc:56:b1:e2:94:63:3e:1c: 06:3a:28:72:ac:fe:af:92:81:86:a7:a4:12:cd:10: 50:24:e5:4b:e2:76:22:a6:84:ba:6d:d9:db:77:f1: e3:00:cf:49:8b:6b:7a:e2:20:97:08:b7:52:18:ee: dc:c6:01:21:3a:8c:a8:96:4c:03:a2:98:9e:a6:01: e9:10:67:9a:c9:f1:5b:b6:aa:b9:3c:1a:57:2e:d2: f9:34:f7:c0:90:89:57:bc:f9:5c:85:dc:e2:83:8d: c6:09:29:cf:fa:79:0d:c3:76:57:11:cd:0c:35:2e: d2:26:eb:55:a4:e1:da:fa:32:f1:1d:ae:3a:52:58: f1:88:8b:da:0a:18:c3:f9:fa:39:a2:70:be:7b:6a: f5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:C8:BE:AF:D0:2C:29:FD:E3:39:74:3B:49:70:DF:C6:1B:44:1F:72 X509v3 Authority Key Identifier: keyid:40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:53:48:7c:67:81:74:90:09:d4:82:99:f9:16:87:db:67:83: 7b:5b:32:bb:3f:53:8c:cb:96:7f:be:b7:dc:d1:72:54:1d:b9: a7:b3:16:3f:09:f8:46:a2:cc:59:10:7c:e8:d7:c3:4c:c3:be: a7:f8:eb:64:08:64:55:0c:00:bc:cb:5c:37:ba:3f:07:4f:4d: cc:50:1c:5f:db:3c:b7:4b:b2:bf:a4:43:ae:03:62:bd:11:49: 2d:c9:92:40:8f:8b:8b:15:15:98:e3:44:dc:f4:8e:53:c5:c0: eb:f3:b8:56:59:63:ba:7f:0c:6d:cf:4f:b8:9d:4a:13:2b:2a: 05:f6:f9:41:1b:ec:5e:29:d9:fa:cc:06:22:69:85:ff:c6:23: 24:c0:b0:fb:8e:68:3c:05:fe:fd:29:a2:84:5c:89:da:47:9c: ba:63:93:55:76:16:3c:06:74:51:98:63:52:0d:78:62:97:a0: 94:04:f9:a7:c0:dd:6a:37:a2:6f:44:9d:74:76:82:85:c8:69: 8e:ae:d2:d6:48:40:c8:54:b7:4b:ae:23:49:3f:24:cc:96:80: f1:f7:1d:af:49:ea:fa:38:e0:aa:8d:b1:5f:da:75:b0:5e:b7: 1e:3a:cf:f9:2c:51:c0:60:db:07:95:f9:02:eb:97:5a:56:0c: 59:25:4f:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNBNzgxMTAvBgNVBAUTKDQwNTYyQzE0M0EyOUNCMTlDNzBGRkM5Qjk5QjYwQkJF Q0QxRDczQjYwHhcNMjUwNDI4MTkzMDI1WhcNMjUwNTA1MTkzMDI1WjAYMRYwFAYD VQQDEw02ODBmZDc1MS03NWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx/qmeMLTYeUPblxLifUhmgw0rbKLuhMVFKMB5qyihASY4AMzwSR8Z2JfLDBe stUw0xyDUIQBMTBUYagiua3MFNPiVrTu71R3y3qE9R2dO+qAsHXLUvA4fn/AXEFL IF/oV5TcIdNw+r2Htdc86djp3Fax4pRjPhwGOihyrP6vkoGGp6QSzRBQJOVL4nYi poS6bdnbd/HjAM9Ji2t64iCXCLdSGO7cxgEhOoyolkwDopiepgHpEGeayfFbtqq5 PBpXLtL5NPfAkIlXvPlchdzig43GCSnP+nkNw3ZXEc0MNS7SJutVpOHa+jLxHa46 UljxiIvaChjD+fo5onC+e2r1+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKzIvq/Q LCn94zl0O0lw38YbRB9yMB8GA1UdIwQYMBaAFEBWLBQ6KcsZxw/8m5m2C77NHXO2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0E3OC9CRTg4NDZEMjM1 RDgxMUVBQTczMEVDNDZDNEY5QUUwMi9RRllzRkRvcHl4bkhEX3libWJZTHZzMGRj N1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FGWXNGRG9weXhuSERfeWJtYllMdnMwZGM3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Q0E3OC9CRTg4NDZEMjM1RDgxMUVBQTczMEVDNDZDNEY5QUUwMi9RRllzRkRvcHl4 bkhEX3libWJZTHZzMGRjN1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYU0h8Z4F0kAnUgpn5FofbZ4N7WzK7P1OMy5Z/vrfc0XJUHbmnsxY/ CfhGosxZEHzo18NMw76n+OtkCGRVDAC8y1w3uj8HT03MUBxf2zy3S7K/pEOuA2K9 EUktyZJAj4uLFRWY40Tc9I5TxcDr87hWWWO6fwxtz0+4nUoTKyoF9vlBG+xeKdn6 zAYiaYX/xiMkwLD7jmg8Bf79KaKEXInaR5y6Y5NVdhY8BnRRmGNSDXhil6CUBPmn wN1qN6JvRJ10doKFyGmOrtLWSEDIVLdLriNJPyTMloDx9x2vSer6OOCqjbFf2nWw XrceOs/5LFHAYNsHlfkC65daVgxZJU8F -----END CERTIFICATE-----Generated at Mon Apr 28 23:04:53 2025 by rpki-client on console.sobornost.net