$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft File: aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft (raw, json) Hash identifier: m451moFDQ/2CJSjhrn3+SbA+b+Cir0tWa/Lm4PvIvLw= Subject key identifier: A6:75:AE:CA:B1:1C:A8:6D:CD:04:B5:3D:D3:8A:87:5F:2B:4F:02:40 Authority key identifier: 68:41:3D:41:F6:00:5E:03:16:E0:E2:57:6F:22:6C:21:88:AA:15:6F Certificate issuer: /CN=A911CA82/serialNumber=68413D41F6005E0316E0E2576F226C2188AA156F Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEE9QfYAXgMW4OJXbyJsIYiqFW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft Manifest number: 3E Signing time: Thu 24 Apr 2025 22:54:15 +0000 Manifest this update: Thu 24 Apr 2025 22:54:14 +0000 Manifest next update: Thu 01 May 2025 22:54:14 +0000 Files and hashes: 1: aEE9QfYAXgMW4OJXbyJsIYiqFW8.crl (hash: 9yyNDR/8n6+AmrNfsFcGY5UABps6G0xYOm6wF8kSj9U=) 2: AF4301D4CF8511EF94856A41C4F9AE02.roa (hash: eqsW8B/nzh24Js41J8yQQdlaY75NMXqpYi5U4uiBwdI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.crl rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEE9QfYAXgMW4OJXbyJsIYiqFW8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:54:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CA82, serialNumber=68413D41F6005E0316E0E2576F226C2188AA156F Validity Not Before: Apr 24 22:54:14 2025 GMT Not After : May 1 22:54:14 2025 GMT Subject: CN=680ac117-cb99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:22:fe:7f:80:f0:cb:7e:f6:f0:0f:e6:6b:f0: 4d:0b:e8:26:c8:33:ca:81:e7:86:c4:5e:46:1d:52: 0c:3f:2a:1d:53:cc:88:7e:cc:2c:44:2b:60:0d:be: 2d:74:05:ae:d4:2c:1a:78:d2:b5:3f:77:f9:57:98: 74:16:94:5e:e6:36:36:6a:32:b3:5b:5b:14:ea:25: 09:35:2f:94:eb:9c:f6:47:95:54:32:82:f6:96:78: ca:b7:10:f3:bd:ed:76:3d:00:67:ed:5f:9a:42:30: 63:d8:a1:82:eb:8f:98:3e:2a:5f:4c:68:f8:36:a4: a1:e1:17:7c:92:bc:46:de:a3:28:bf:bb:5a:d8:52: 9e:3f:13:dd:5d:65:a0:85:d5:3e:7f:bf:c1:29:d4: 12:b0:da:9a:ae:ab:89:2f:48:cf:73:47:52:b1:a9: e0:5b:0b:c2:1f:de:b0:23:74:79:a9:69:f4:e6:39: 74:1f:3a:a5:37:9d:89:b1:78:77:d0:93:27:7f:22: 8f:58:47:27:d7:19:61:51:65:15:46:57:a4:a5:21: f6:97:54:01:bd:c4:96:af:fc:e9:e3:ac:b9:9a:91: d1:70:e6:59:1e:55:00:97:4a:95:5a:9d:aa:70:f7: f9:8c:64:2a:9e:7e:46:30:8c:15:9c:5f:81:3c:0c: d2:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:75:AE:CA:B1:1C:A8:6D:CD:04:B5:3D:D3:8A:87:5F:2B:4F:02:40 X509v3 Authority Key Identifier: keyid:68:41:3D:41:F6:00:5E:03:16:E0:E2:57:6F:22:6C:21:88:AA:15:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEE9QfYAXgMW4OJXbyJsIYiqFW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:26:c7:79:84:d4:d5:cc:6c:a3:47:b7:77:01:27:a4:7f:6d: 8a:46:28:3d:5d:e9:c5:ac:39:99:a1:34:f1:1e:b6:63:35:b7: 41:62:f7:ed:8d:3c:dd:a8:5b:84:9e:6c:35:3b:5f:e8:c5:f1: 98:92:36:e6:0f:73:65:06:e1:e5:09:e2:4f:02:10:3c:87:e7: 2d:66:05:5a:e1:cc:93:91:a8:e9:2b:f3:96:5e:6d:c6:50:86: ce:81:d3:70:3d:3a:60:2b:6e:36:6e:6b:93:3b:23:e1:64:53: ba:a9:85:de:91:0b:ed:72:6f:c8:81:e8:87:d1:80:96:fc:1f: b9:5e:ff:48:33:c3:7f:4d:5a:21:01:e9:b4:55:d9:a2:2f:b4: f1:32:e5:19:f8:43:2b:73:d6:69:6f:c7:97:ba:0a:80:84:bc: 16:a9:ce:0a:b4:ae:2d:0f:19:52:4a:0e:cd:9c:72:06:43:35: 49:e8:a1:67:13:83:23:8f:44:e8:4f:96:d7:45:df:9a:0b:05: 13:1f:e7:a5:a8:bd:5b:23:87:04:30:a0:97:23:bf:a0:23:a4: 74:e4:7a:08:f0:12:18:dd:fd:9c:c6:05:fd:e9:28:92:04:cf: 98:3e:0c:93:26:6b:67:87:76:21:ab:06:14:19:90:f7:2a:e1: 6b:26:73:73 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx Q0E4MjExMC8GA1UEBRMoNjg0MTNENDFGNjAwNUUwMzE2RTBFMjU3NkYyMjZDMjE4 OEFBMTU2RjAeFw0yNTA0MjQyMjU0MTRaFw0yNTA1MDEyMjU0MTRaMBgxFjAUBgNV BAMTDTY4MGFjMTE3LWNiOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqIv5/gPDLfvbwD+Zr8E0L6CbIM8qB54bEXkYdUgw/Kh1TzIh+zCxEK2ANvi10 Ba7ULBp40rU/d/lXmHQWlF7mNjZqMrNbWxTqJQk1L5TrnPZHlVQygvaWeMq3EPO9 7XY9AGftX5pCMGPYoYLrj5g+Kl9MaPg2pKHhF3ySvEbeoyi/u1rYUp4/E91dZaCF 1T5/v8Ep1BKw2pquq4kvSM9zR1KxqeBbC8If3rAjdHmpafTmOXQfOqU3nYmxeHfQ kyd/Io9YRyfXGWFRZRVGV6SlIfaXVAG9xJav/OnjrLmakdFw5lkeVQCXSpVanapw 9/mMZCqefkYwjBWcX4E8DNKXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpnWuyrEc qG3NBLU904qHXytPAkAwHwYDVR0jBBgwFoAUaEE9QfYAXgMW4OJXbyJsIYiqFW8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFDQTgyL0Y2OTlFMzU0Q0Yx MjExRUY4RjFEMjA1QkM0RjlBRTAyL2FFRTlRZllBWGdNVzRPSlhieUpzSVlpcUZX OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYUVFOVFmWUFYZ01XNE9KWGJ5SnNJWWlxRlc4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFD QTgyL0Y2OTlFMzU0Q0YxMjExRUY4RjFEMjA1QkM0RjlBRTAyL2FFRTlRZllBWGdN VzRPSlhieUpzSVlpcUZXOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABMmx3mE1NXMbKNHt3cBJ6R/bYpGKD1d6cWsOZmhNPEetmM1t0Fi9+2N PN2oW4SebDU7X+jF8ZiSNuYPc2UG4eUJ4k8CEDyH5y1mBVrhzJORqOkr85ZebcZQ hs6B03A9OmArbjZua5M7I+FkU7qphd6RC+1yb8iB6IfRgJb8H7le/0gzw39NWiEB 6bRV2aIvtPEy5Rn4Qytz1mlvx5e6CoCEvBapzgq0ri0PGVJKDs2ccgZDNUnooWcT gyOPROhPltdF35oLBRMf56WovVsjhwQwoJcjv6AjpHTkegjwEhjd/ZzGBf3pKJIE z5g+DJMma2eHdiGrBhQZkPcq4Wsmc3M= -----END CERTIFICATE-----Generated at Fri Apr 25 08:23:35 2025 by rpki-client on console.sobornost.net