$ rpki-client -vvf rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft File: 1cBKCsLVKt_nBVZHjcsOHYHtENo.mft (raw, json) Hash identifier: c+WagX4gGyS8E14BS3RB0dzIxKKuovLtggHsbXAA8h4= Subject key identifier: D5:B3:19:45:6A:53:7C:5F:F1:AA:4B:8F:C2:36:E2:C1:B3:8B:57:AF Authority key identifier: D5:C0:4A:0A:C2:D5:2A:DF:E7:05:56:47:8D:CB:0E:1D:81:ED:10:DA Certificate issuer: /CN=A91284EC/serialNumber=D5C04A0AC2D52ADFE70556478DCB0E1D81ED10DA Certificate serial: 0467 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft Manifest number: 0461 Signing time: Sat 26 Apr 2025 23:49:21 +0000 Manifest this update: Sat 26 Apr 2025 23:49:20 +0000 Manifest next update: Sat 03 May 2025 23:49:20 +0000 Files and hashes: 1: 1cBKCsLVKt_nBVZHjcsOHYHtENo.crl (hash: dSqbxSCDpt+mh3e9DmO7heh1B/STgvEb51X7mBE6bUY=) 2: F11B4C14E40111ECBD78E571C4F9AE02.roa (hash: yrgJiB4VmkkkL0wy5q4A23svX1r+S/7CECcoJjyrMso=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.crl rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 23:49:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1127 (0x467) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91284EC, serialNumber=D5C04A0AC2D52ADFE70556478DCB0E1D81ED10DA Validity Not Before: Apr 26 23:49:20 2025 GMT Not After : May 3 23:49:20 2025 GMT Subject: CN=680d7100-e09e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:46:dd:86:08:64:b2:85:b0:d5:a7:52:a1:b0: 34:c9:8e:08:0d:21:92:09:67:11:75:ea:e2:45:23: bd:f9:33:28:f3:7c:bd:7f:f3:37:d3:94:da:98:ad: 19:dc:62:64:bc:c9:f2:83:dd:86:ea:60:01:67:10: ca:66:a8:db:9d:3e:9f:05:0c:bf:ac:8c:3e:2d:b5: bc:95:19:45:91:bc:cc:a3:d1:2e:9f:3a:e2:41:ec: db:16:d1:44:93:1a:df:2a:6e:d2:c6:13:3a:8b:e2: 41:2d:d1:64:f0:af:44:75:0c:a2:b1:95:fc:3a:89: c8:8c:8c:62:a0:19:6b:b7:f2:b2:35:f6:76:33:89: a5:62:2f:3c:ff:1c:7c:81:a0:00:5f:21:e2:79:4e: de:6a:cb:db:3d:fb:83:c8:9a:37:f8:00:d9:13:ab: d0:fb:12:c3:11:dc:3a:a8:90:1a:fb:01:fb:db:76: df:42:c0:75:18:d3:6f:a2:78:b9:49:67:1a:88:39: 1e:e6:8c:a5:8f:c1:ce:74:1d:55:9d:d7:cb:cb:6d: 16:1b:43:1d:40:4d:df:30:f4:70:94:a5:f4:d4:09: 0c:b1:0b:ca:90:c3:67:08:98:a3:38:ad:90:8c:04: 16:31:4f:3d:58:5a:5a:58:69:4d:fc:8e:82:59:6b: 61:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B3:19:45:6A:53:7C:5F:F1:AA:4B:8F:C2:36:E2:C1:B3:8B:57:AF X509v3 Authority Key Identifier: keyid:D5:C0:4A:0A:C2:D5:2A:DF:E7:05:56:47:8D:CB:0E:1D:81:ED:10:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:a4:89:4c:3a:7f:9d:d4:44:22:fb:99:1f:bc:32:90:81:f0: 3b:e7:68:43:75:e3:1c:ca:4e:da:84:26:46:ff:ec:cf:99:34: 68:35:fe:e6:be:1c:25:79:91:ff:f0:75:b1:b9:91:5f:7d:ac: 1a:52:e1:7b:42:2b:f7:f1:d3:1c:db:24:a0:0f:1d:67:0e:54: 9e:e7:92:7f:fe:09:2b:71:4a:44:a9:35:c5:59:86:c3:c6:b6: 77:ee:13:5f:d0:6d:99:8b:ea:5d:17:9f:52:4b:34:98:8f:79: 26:75:00:a7:40:01:38:91:c5:cf:00:3f:9c:77:4a:30:ba:02: 86:7e:f8:d5:6c:63:b9:35:03:77:dd:93:d9:f8:af:68:b6:13: 57:82:02:f7:5d:77:a2:c9:01:a0:48:20:c3:51:35:0c:df:df: 27:de:52:4f:08:e6:0a:75:88:24:48:e0:08:13:3a:02:5e:c1: 89:4e:82:e5:3e:fa:34:e8:3a:09:9a:7c:a0:c6:96:18:df:b8: 0e:72:82:68:60:b4:33:7a:e6:4f:ec:83:db:f5:fd:c0:ea:73: ba:bd:ad:d8:26:10:a1:90:e5:ca:02:29:a9:f4:27:b6:49:ab: 8d:2a:ef:e4:47:e6:f4:03:04:a1:56:0b:a9:f6:08:ba:68:37: e7:2d:cc:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg0RUMxMTAvBgNVBAUTKEQ1QzA0QTBBQzJENTJBREZFNzA1NTY0NzhEQ0IwRTFE ODFFRDEwREEwHhcNMjUwNDI2MjM0OTIwWhcNMjUwNTAzMjM0OTIwWjAYMRYwFAYD VQQDEw02ODBkNzEwMC1lMDllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuEbdhghksoWw1adSobA0yY4IDSGSCWcRderiRSO9+TMo83y9f/M305TamK0Z 3GJkvMnyg92G6mABZxDKZqjbnT6fBQy/rIw+LbW8lRlFkbzMo9EunzriQezbFtFE kxrfKm7SxhM6i+JBLdFk8K9EdQyisZX8OonIjIxioBlrt/KyNfZ2M4mlYi88/xx8 gaAAXyHieU7easvbPfuDyJo3+ADZE6vQ+xLDEdw6qJAa+wH723bfQsB1GNNvoni5 SWcaiDke5oylj8HOdB1VndfLy20WG0MdQE3fMPRwlKX01AkMsQvKkMNnCJijOK2Q jAQWMU89WFpaWGlN/I6CWWthywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNWzGUVq U3xf8apLj8I24sGzi1evMB8GA1UdIwQYMBaAFNXASgrC1Srf5wVWR43LDh2B7RDa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODRFQy9FQkY2MDFGQzQ4 Q0YxMUVDQTY2NkIwM0VDNEY5QUUwMi8xY0JLQ3NMVkt0X25CVlpIamNzT0hZSHRF Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFjQktDc0xWS3RfbkJWWkhqY3NPSFlIdEVOby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODRFQy9FQkY2MDFGQzQ4Q0YxMUVDQTY2NkIwM0VDNEY5QUUwMi8xY0JLQ3NMVkt0 X25CVlpIamNzT0hZSHRFTm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBapIlMOn+d1EQi+5kfvDKQgfA752hDdeMcyk7ahCZG/+zPmTRoNf7m vhwleZH/8HWxuZFffawaUuF7Qiv38dMc2ySgDx1nDlSe55J//gkrcUpEqTXFWYbD xrZ37hNf0G2Zi+pdF59SSzSYj3kmdQCnQAE4kcXPAD+cd0owugKGfvjVbGO5NQN3 3ZPZ+K9othNXggL3XXeiyQGgSCDDUTUM398n3lJPCOYKdYgkSOAIEzoCXsGJToLl Pvo06DoJmnygxpYY37gOcoJoYLQzeuZP7IPb9f3A6nO6va3YJhChkOXKAimp9Ce2 SauNKu/kR+b0AwShVgup9gi6aDfnLcyN -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:22 2025 by rpki-client on console.sobornost.net