$ rpki-client -vvf rpki.apnic.net/member_repository/A91285E3/1B12A824707911EDBAA7CD26C4F9AE02/He-yCnpR7hjdetBq2qxJEePi95Q.mft File: He-yCnpR7hjdetBq2qxJEePi95Q.mft (raw, json) Hash identifier: 0acAmOer3+BJeq7Mlkcldkr9tJJPUQM2Gl2MBGwrkos= Subject key identifier: 16:40:4E:8B:1D:92:E1:49:2B:43:14:01:9D:CD:32:3E:01:FD:33:3E Authority key identifier: 1D:EF:B2:0A:7A:51:EE:18:DD:7A:D0:6A:DA:AC:49:11:E3:E2:F7:94 Certificate issuer: /CN=A91285E3/serialNumber=1DEFB20A7A51EE18DD7AD06ADAAC4911E3E2F794 Certificate serial: 01CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/He-yCnpR7hjdetBq2qxJEePi95Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91285E3/1B12A824707911EDBAA7CD26C4F9AE02/He-yCnpR7hjdetBq2qxJEePi95Q.mft Manifest number: 01C8 Signing time: Sun 27 Apr 2025 02:01:30 +0000 Manifest this update: Sun 27 Apr 2025 02:01:30 +0000 Manifest next update: Sun 04 May 2025 02:01:30 +0000 Files and hashes: 1: He-yCnpR7hjdetBq2qxJEePi95Q.crl (hash: v37PtJz0avmNNnvYQFCtyg1d3Vh69BrAECHMIW1g/SY=) 2: 54365208708411EDA8B14246C4F9AE02.roa (hash: mCCSZ+9WYvhaMFX9tC0Iaz2gMx4GH4ZGb0UPoAirqT8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91285E3/1B12A824707911EDBAA7CD26C4F9AE02/He-yCnpR7hjdetBq2qxJEePi95Q.crl rsync://rpki.apnic.net/member_repository/A91285E3/1B12A824707911EDBAA7CD26C4F9AE02/He-yCnpR7hjdetBq2qxJEePi95Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/He-yCnpR7hjdetBq2qxJEePi95Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 462 (0x1ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91285E3, serialNumber=1DEFB20A7A51EE18DD7AD06ADAAC4911E3E2F794 Validity Not Before: Apr 27 02:01:30 2025 GMT Not After : May 4 02:01:30 2025 GMT Subject: CN=680d8ffa-eea2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:d3:ac:b1:24:c2:b6:5a:5b:9e:72:00:f0:87: 2a:01:f3:00:99:b0:61:86:85:30:f7:8f:09:1a:bd: e2:f2:d6:37:05:28:d4:36:f7:f8:2d:31:8d:60:aa: 85:e6:07:53:63:82:4f:0f:d6:8d:aa:f3:d0:00:30: 34:f6:17:1a:b5:3d:b4:38:ef:ba:2c:97:23:11:5d: 50:03:8a:71:95:a6:bb:1b:60:9a:f4:8d:96:3c:02: 1c:3d:64:bd:f7:df:9c:0d:00:06:7f:70:0c:24:65: c3:e8:de:01:5b:21:bb:86:4d:96:ff:6e:42:7e:24: 73:23:30:cb:97:60:ec:25:36:4c:c0:7c:a1:5d:13: ab:f2:b3:f2:69:8a:3a:44:b6:9d:23:07:b6:7e:78: c2:56:59:ad:42:35:d0:86:25:21:7c:4e:98:5d:ca: 2c:62:c9:94:5b:81:71:2c:ae:2d:0f:04:68:2a:be: 34:6b:28:3c:2d:69:fc:f8:f2:6d:bc:ba:c8:8f:ef: 1a:ed:ba:03:6f:99:9a:10:5c:72:88:f5:6d:51:4f: 8f:c3:04:df:00:90:43:0c:4c:09:39:a7:1a:00:a9: da:53:17:c5:57:54:3d:fb:c5:88:76:d2:bc:63:d1: 9c:40:da:a8:54:54:d1:de:e7:5c:b2:4f:52:14:8f: 7e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:40:4E:8B:1D:92:E1:49:2B:43:14:01:9D:CD:32:3E:01:FD:33:3E X509v3 Authority Key Identifier: keyid:1D:EF:B2:0A:7A:51:EE:18:DD:7A:D0:6A:DA:AC:49:11:E3:E2:F7:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91285E3/1B12A824707911EDBAA7CD26C4F9AE02/He-yCnpR7hjdetBq2qxJEePi95Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/He-yCnpR7hjdetBq2qxJEePi95Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91285E3/1B12A824707911EDBAA7CD26C4F9AE02/He-yCnpR7hjdetBq2qxJEePi95Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:0f:60:fe:e0:e0:68:87:8b:33:f0:fc:b0:84:9b:97:bc:f3: ee:96:ad:4f:da:44:d2:c6:fc:8c:c4:95:1b:68:08:f4:fa:5e: c3:13:a3:78:eb:8d:d0:17:9b:f8:2f:7d:3b:92:5c:de:05:d0: 0e:52:12:2c:4b:b0:e4:de:d4:b7:7d:32:ca:a0:20:7f:11:ec: b2:d2:fe:79:4d:26:ee:b5:85:95:95:03:66:bd:12:dc:fc:32: b5:a0:c2:5e:e4:e0:d8:c2:63:48:4f:98:06:80:99:46:a9:0f: 97:c5:52:a9:7f:4b:b5:00:4b:36:7c:a2:77:51:68:ea:e0:72: 53:ac:d2:cc:bb:6c:14:db:5f:9a:42:0f:4d:16:20:c8:83:a5: 6d:75:09:4d:8f:33:db:b5:df:db:52:68:db:4b:92:44:19:df: 77:3e:e1:ef:89:85:3c:0f:ef:17:03:4d:aa:60:c8:24:4c:ae: c9:78:63:18:5b:5a:b3:1e:78:90:0e:d3:f7:bc:f7:aa:88:df: 7f:ff:21:38:bd:71:fb:ac:ef:b3:63:72:58:45:b1:ee:45:30: d8:ac:ca:ca:f8:b7:d4:3b:a5:d0:57:e9:79:5b:15:8e:ae:b3: 20:6a:42:9a:48:24:5b:d9:7e:78:30:13:72:30:08:1c:ad:d9: e6:11:6a:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg1RTMxMTAvBgNVBAUTKDFERUZCMjBBN0E1MUVFMThERDdBRDA2QURBQUM0OTEx RTNFMkY3OTQwHhcNMjUwNDI3MDIwMTMwWhcNMjUwNTA0MDIwMTMwWjAYMRYwFAYD VQQDEw02ODBkOGZmYS1lZWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5dOssSTCtlpbnnIA8IcqAfMAmbBhhoUw948JGr3i8tY3BSjUNvf4LTGNYKqF 5gdTY4JPD9aNqvPQADA09hcatT20OO+6LJcjEV1QA4pxlaa7G2Ca9I2WPAIcPWS9 99+cDQAGf3AMJGXD6N4BWyG7hk2W/25CfiRzIzDLl2DsJTZMwHyhXROr8rPyaYo6 RLadIwe2fnjCVlmtQjXQhiUhfE6YXcosYsmUW4FxLK4tDwRoKr40ayg8LWn8+PJt vLrIj+8a7boDb5maEFxyiPVtUU+PwwTfAJBDDEwJOacaAKnaUxfFV1Q9+8WIdtK8 Y9GcQNqoVFTR3udcsk9SFI9+4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBZATosd kuFJK0MUAZ3NMj4B/TM+MB8GA1UdIwQYMBaAFB3vsgp6Ue4Y3XrQatqsSRHj4veU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODVFMy8xQjEyQTgyNDcw NzkxMUVEQkFBN0NEMjZDNEY5QUUwMi9IZS15Q25wUjdoamRldEJxMnF4SkVlUGk5 NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hlLXlDbnBSN2hqZGV0QnEycXhKRWVQaTk1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODVFMy8xQjEyQTgyNDcwNzkxMUVEQkFBN0NEMjZDNEY5QUUwMi9IZS15Q25wUjdo amRldEJxMnF4SkVlUGk5NVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUD2D+4OBoh4sz8PywhJuXvPPulq1P2kTSxvyMxJUbaAj0+l7DE6N4 643QF5v4L307klzeBdAOUhIsS7Dk3tS3fTLKoCB/Eeyy0v55TSbutYWVlQNmvRLc /DK1oMJe5ODYwmNIT5gGgJlGqQ+XxVKpf0u1AEs2fKJ3UWjq4HJTrNLMu2wU21+a Qg9NFiDIg6VtdQlNjzPbtd/bUmjbS5JEGd93PuHviYU8D+8XA02qYMgkTK7JeGMY W1qzHniQDtP3vPeqiN9//yE4vXH7rO+zY3JYRbHuRTDYrMrK+LfUO6XQV+l5WxWO rrMgakKaSCRb2X54MBNyMAgcrdnmEWp1 -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:22 2025 by rpki-client on console.sobornost.net