$ rpki-client -vvf rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft File: dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft (raw, json) Hash identifier: 20Wg1Ew+NbMdH5eeUUveJrNH9MBO1+EOeSMwMfkI2nI= Subject key identifier: 59:35:EA:70:5B:C8:F0:25:83:AC:05:F8:B8:1A:E1:2C:A0:ED:D1:5A Authority key identifier: 76:4D:1C:E6:72:7D:31:BD:8F:39:66:2E:20:04:C4:68:9D:A6:B7:E5 Certificate issuer: /CN=A911D971/serialNumber=764D1CE6727D31BD8F39662E2004C4689DA6B7E5 Certificate serial: 01FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft Manifest number: 01E8 Signing time: Sun 27 Apr 2025 01:50:50 +0000 Manifest this update: Sun 27 Apr 2025 01:50:50 +0000 Manifest next update: Sun 04 May 2025 01:50:50 +0000 Files and hashes: 1: dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl (hash: mJfsOUsTQ+P3boqP4Pa61MnvuPZmzs/ciU/1sPipxAA=) 2: 18687FD8C0C111EE84A55128C4F9AE02.roa (hash: kRaDTp8G2EF9JgUPQyISIt8vSz18lBQQZApo1JhwgSs=) 3: 197CE9C2C0C111EE84A55128C4F9AE02.roa (hash: MYK+90f38qq09MaAriFmkTSiCYzdZCdhPOebzwsp0Co=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 01:50:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 508 (0x1fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D971, serialNumber=764D1CE6727D31BD8F39662E2004C4689DA6B7E5 Validity Not Before: Apr 27 01:50:50 2025 GMT Not After : May 4 01:50:50 2025 GMT Subject: CN=680d8d7a-405a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:70:4f:4d:d4:87:ac:92:cb:06:58:ac:e9:08: 73:c3:d0:07:fc:1c:d2:bf:e9:1b:b3:9c:6d:86:9a: d4:88:57:f9:25:7a:68:b9:1e:c8:1d:0c:24:cf:97: 38:7b:1e:e7:f5:52:eb:09:4f:1b:65:d9:19:ae:fa: de:67:89:4b:6b:64:29:cb:22:80:dc:16:43:ba:12: 6b:05:4d:95:66:88:1e:94:9e:e9:c4:cc:70:d4:2a: 1a:f4:ef:66:e2:dd:85:9a:c5:f5:8b:57:f1:59:fd: 10:73:c9:e0:8a:93:88:e2:48:0e:08:07:8e:dd:1f: c9:b3:0e:fa:04:ee:e3:ff:d2:d8:29:8d:8c:4a:c8: 95:1e:c5:69:0c:fe:b1:18:d3:5b:5e:06:1f:d6:ae: 2c:98:95:67:02:93:c7:cd:96:a7:c4:e1:37:46:80: 0d:ca:37:7c:89:04:fe:da:29:c6:fd:dc:af:45:ae: 09:20:bf:75:43:c9:fb:ae:ac:ec:ec:61:70:6d:5e: 0c:a5:47:66:06:fb:06:be:ee:39:1f:b4:84:8e:07: 24:94:5f:27:12:76:d9:5b:b0:20:4d:41:da:9d:9b: 86:49:f5:38:f2:9c:ce:23:fc:81:a0:49:cb:af:17: c1:f0:c8:38:9b:41:b7:2f:03:7e:64:47:88:8e:88: d5:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:35:EA:70:5B:C8:F0:25:83:AC:05:F8:B8:1A:E1:2C:A0:ED:D1:5A X509v3 Authority Key Identifier: keyid:76:4D:1C:E6:72:7D:31:BD:8F:39:66:2E:20:04:C4:68:9D:A6:B7:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:ce:57:02:a6:78:c9:7b:4e:80:d1:e1:a6:97:22:d9:eb:9f: 33:58:3e:15:7a:17:60:96:e0:2b:22:c2:cc:bb:84:e6:49:e2: c7:10:dc:65:d2:c3:71:56:b7:f2:7a:a3:32:54:a2:91:10:f0: 1d:ef:1f:68:f8:0d:0d:cc:a5:ad:ad:8c:58:46:ab:85:ed:73: 8b:f6:d5:c8:00:98:b9:59:4c:ef:a7:ae:cd:a4:fd:15:98:f6: f2:b5:43:3f:fa:47:14:2c:b4:b8:4c:ee:27:2b:14:5b:27:06: 5d:dd:96:75:98:4e:ae:7b:b2:d3:6e:d3:6c:89:53:a8:fc:5e: 39:01:9b:da:14:e3:0b:9b:67:98:9b:00:2c:12:fa:4b:51:29: 52:ec:03:04:3f:91:01:79:61:36:44:92:77:ff:ef:f7:89:57: 94:47:47:5d:89:95:17:2d:93:a5:d3:53:00:2a:8d:1e:82:75: 85:3f:12:b4:5a:78:e3:cf:66:e8:ea:41:e8:eb:2a:4b:dc:69: 87:60:5c:57:e6:3a:3b:45:31:11:65:78:f8:a7:fa:29:5e:ee: 08:64:fe:16:e4:68:27:7a:e6:f8:82:4f:9c:d5:2c:a7:a3:2d: a9:1d:3d:56:e0:7d:8d:88:b9:06:92:05:28:0c:a1:e9:89:14: 73:66:21:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ5NzExMTAvBgNVBAUTKDc2NEQxQ0U2NzI3RDMxQkQ4RjM5NjYyRTIwMDRDNDY4 OURBNkI3RTUwHhcNMjUwNDI3MDE1MDUwWhcNMjUwNTA0MDE1MDUwWjAYMRYwFAYD VQQDEw02ODBkOGQ3YS00MDVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt3BPTdSHrJLLBlis6Qhzw9AH/BzSv+kbs5xthprUiFf5JXpouR7IHQwkz5c4 ex7n9VLrCU8bZdkZrvreZ4lLa2QpyyKA3BZDuhJrBU2VZogelJ7pxMxw1Coa9O9m 4t2FmsX1i1fxWf0Qc8ngipOI4kgOCAeO3R/Jsw76BO7j/9LYKY2MSsiVHsVpDP6x GNNbXgYf1q4smJVnApPHzZanxOE3RoANyjd8iQT+2inG/dyvRa4JIL91Q8n7rqzs 7GFwbV4MpUdmBvsGvu45H7SEjgcklF8nEnbZW7AgTUHanZuGSfU48pzOI/yBoEnL rxfB8Mg4m0G3LwN+ZEeIjojVfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFk16nBb yPAlg6wF+Lga4Syg7dFaMB8GA1UdIwQYMBaAFHZNHOZyfTG9jzlmLiAExGidprfl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDk3MS9ERTI1Qjg2ODU2 QTQxMUVEQThDMDBDM0VDNEY5QUUwMi9kazBjNW5KOU1iMlBPV1l1SUFURWFKMm10 LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RrMGM1bko5TWIyUE9XWXVJQVRFYUoybXQtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDk3MS9ERTI1Qjg2ODU2QTQxMUVEQThDMDBDM0VDNEY5QUUwMi9kazBjNW5KOU1i MlBPV1l1SUFURWFKMm10LVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPzlcCpnjJe06A0eGmlyLZ658zWD4VehdgluArIsLMu4TmSeLHENxl 0sNxVrfyeqMyVKKREPAd7x9o+A0NzKWtrYxYRquF7XOL9tXIAJi5WUzvp67NpP0V mPbytUM/+kcULLS4TO4nKxRbJwZd3ZZ1mE6ue7LTbtNsiVOo/F45AZvaFOMLm2eY mwAsEvpLUSlS7AMEP5EBeWE2RJJ3/+/3iVeUR0ddiZUXLZOl01MAKo0egnWFPxK0 Wnjjz2bo6kHo6ypL3GmHYFxX5jo7RTERZXj4p/opXu4IZP4W5Ggneub4gk+c1Syn oy2pHT1W4H2NiLkGkgUoDKHpiRRzZiED -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:17 2025 by rpki-client on console.sobornost.net