$ rpki-client -vvf rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.mft File: 7ALNBrdHN4ssHMWiIebghmHagiU.mft (raw, json) Hash identifier: My0qBXMZob2YK+nsMxU9JJ6mLggnqG5GyUDRDtzJ4Gg= Subject key identifier: F1:0F:1C:63:06:0F:21:E5:85:1E:DE:DD:74:0B:E4:9A:2A:05:69:9A Authority key identifier: EC:02:CD:06:B7:47:37:8B:2C:1C:C5:A2:21:E6:E0:86:61:DA:82:25 Certificate issuer: /CN=A912142C/serialNumber=EC02CD06B747378B2C1CC5A221E6E08661DA8225 Certificate serial: 47 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ALNBrdHN4ssHMWiIebghmHagiU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.mft Manifest number: 41 Signing time: Sat 26 Apr 2025 14:27:31 +0000 Manifest this update: Sat 26 Apr 2025 14:27:30 +0000 Manifest next update: Sat 03 May 2025 14:27:30 +0000 Files and hashes: 1: 7ALNBrdHN4ssHMWiIebghmHagiU.crl (hash: 4YIWAkgGwb/nIGfjbN/r5r1/S9x1vDhlCRqJcdQNBRw=) 2: AE5D0E84EEBD11EFBA2D7586C4F9AE02.roa (hash: aHRMsUiiCZcaoYDZ7FKWAlCPT4264RLq5QWpPmMZea0=) 3: 4F5B2B86EEBE11EF846DA10BC4F9AE02.roa (hash: GDTBPp4WE9Ezmla7awNs0CkIUNNSTnoRfm7f06nojtk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.crl rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ALNBrdHN4ssHMWiIebghmHagiU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71 (0x47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912142C, serialNumber=EC02CD06B747378B2C1CC5A221E6E08661DA8225 Validity Not Before: Apr 26 14:27:30 2025 GMT Not After : May 3 14:27:30 2025 GMT Subject: CN=680ced53-7277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2a:b3:b4:77:59:1f:50:43:83:27:b3:fd:c8: 3d:4a:42:3c:27:37:57:f3:1a:6a:91:08:78:6c:32: a4:2b:13:ff:1f:d1:17:67:ac:71:ac:f1:bc:47:57: 6d:79:7b:5c:1d:07:b1:1b:a2:17:43:4f:27:12:78: 1c:f9:3e:c7:c2:e2:9f:f3:d0:47:b9:c4:36:37:9e: 51:8b:f3:45:3b:f3:02:70:ba:4a:5b:b2:1c:47:1f: c1:08:6b:f3:25:8f:a8:53:ee:11:7e:43:89:a5:ea: cf:8e:f5:b3:80:04:99:53:84:d2:f3:8c:d3:68:7d: 9c:bf:69:f1:3a:ca:10:48:b5:30:63:af:e7:09:0b: 4e:2f:dc:9c:73:60:3f:4e:31:48:d7:33:dc:2f:08: 1e:df:55:60:9a:2e:86:3d:71:cd:c1:90:27:0d:cf: 13:5a:56:1b:7b:d9:f0:35:d8:a3:78:96:78:0d:65: a7:c1:ad:52:14:fb:0b:1c:34:ab:a4:17:5d:4a:3b: 57:cc:b6:51:a4:a3:ea:7c:2f:7c:f6:ee:64:61:cf: ca:fb:0d:fa:81:bd:b0:67:be:f5:69:3e:a7:3c:11: 57:1a:34:46:f8:f0:19:a2:97:69:7e:e4:e7:4e:7c: aa:1d:fb:0c:51:31:fe:e5:51:91:de:74:ad:64:aa: f1:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:0F:1C:63:06:0F:21:E5:85:1E:DE:DD:74:0B:E4:9A:2A:05:69:9A X509v3 Authority Key Identifier: keyid:EC:02:CD:06:B7:47:37:8B:2C:1C:C5:A2:21:E6:E0:86:61:DA:82:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ALNBrdHN4ssHMWiIebghmHagiU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:ce:35:68:f2:14:8c:20:eb:a1:2c:af:8b:82:4e:72:bb:73: 43:e8:cb:b7:f7:be:af:e9:6c:7f:7b:7e:f9:d5:71:12:8b:14: ef:0c:fa:af:8d:a6:e0:02:46:4e:53:0a:91:87:8d:b9:03:66: f1:12:51:4a:0e:32:58:2c:38:6d:66:df:1e:2a:85:30:73:b7: 25:99:00:3e:07:16:7a:69:bd:d6:c9:9d:33:32:0a:4d:38:2f: 31:07:cd:a4:3e:39:61:73:18:4a:03:d4:c9:43:ed:ee:71:93: 7b:6f:dd:0b:97:57:9d:4e:1b:e2:36:56:50:13:85:ef:ed:bb: b0:53:12:8c:f3:4d:67:8d:52:36:70:e5:89:43:69:ca:31:ad: 0c:6e:8d:df:91:5e:43:c7:d1:f3:6e:b8:ea:a0:0c:9b:99:ee: 65:97:5a:05:a1:87:30:03:1b:0c:12:32:14:e6:b5:ef:91:1b: b7:1e:75:9c:da:29:66:d3:19:c9:15:8d:88:c1:42:24:00:ee: 5a:aa:7d:53:c3:dc:43:5d:9e:fd:32:93:69:43:23:67:e0:78: 5e:97:38:9a:63:b4:1b:88:77:82:f7:1a:32:b7:be:74:7e:9d: 37:39:65:75:13:cc:b5:14:f9:71:e1:ce:e8:26:55:ea:a9:99: 4c:c2:74:86 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MTQyQzExMC8GA1UEBRMoRUMwMkNEMDZCNzQ3Mzc4QjJDMUNDNUEyMjFFNkUwODY2 MURBODIyNTAeFw0yNTA0MjYxNDI3MzBaFw0yNTA1MDMxNDI3MzBaMBgxFjAUBgNV BAMTDTY4MGNlZDUzLTcyNzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5KrO0d1kfUEODJ7P9yD1KQjwnN1fzGmqRCHhsMqQrE/8f0RdnrHGs8bxHV215 e1wdB7EbohdDTycSeBz5PsfC4p/z0Ee5xDY3nlGL80U78wJwukpbshxHH8EIa/Ml j6hT7hF+Q4ml6s+O9bOABJlThNLzjNNofZy/afE6yhBItTBjr+cJC04v3JxzYD9O MUjXM9wvCB7fVWCaLoY9cc3BkCcNzxNaVht72fA12KN4lngNZafBrVIU+wscNKuk F11KO1fMtlGko+p8L3z27mRhz8r7DfqBvbBnvvVpPqc8EVcaNEb48Bmil2l+5OdO fKod+wxRMf7lUZHedK1kqvG9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8Q8cYwYP IeWFHt7ddAvkmioFaZowHwYDVR0jBBgwFoAU7ALNBrdHN4ssHMWiIebghmHagiUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIxNDJDLzJDMkY2RTUwQ0VF OTExRUZCREZEM0E2N0M0RjlBRTAyLzdBTE5CcmRITjRzc0hNV2lJZWJnaG1IYWdp VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvN0FMTkJyZEhONHNzSE1XaUllYmdobUhhZ2lVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIx NDJDLzJDMkY2RTUwQ0VFOTExRUZCREZEM0E2N0M0RjlBRTAyLzdBTE5CcmRITjRz c0hNV2lJZWJnaG1IYWdpVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJjONWjyFIwg66Esr4uCTnK7c0Poy7f3vq/pbH97fvnVcRKLFO8M+q+N puACRk5TCpGHjbkDZvESUUoOMlgsOG1m3x4qhTBztyWZAD4HFnppvdbJnTMyCk04 LzEHzaQ+OWFzGEoD1MlD7e5xk3tv3QuXV51OG+I2VlAThe/tu7BTEozzTWeNUjZw 5YlDacoxrQxujd+RXkPH0fNuuOqgDJuZ7mWXWgWhhzADGwwSMhTmte+RG7cedZza KWbTGckVjYjBQiQA7lqqfVPD3ENdnv0yk2lDI2fgeF6XOJpjtBuId4L3GjK3vnR+ nTc5ZXUTzLUU+XHhzugmVeqpmUzCdIY= -----END CERTIFICATE-----Generated at Sat Apr 26 15:55:40 2025 by rpki-client on console.sobornost.net