$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/C7AFcf321rzGNEbrOmSR-uqpCG8.mft File: C7AFcf321rzGNEbrOmSR-uqpCG8.mft (raw, json) Hash identifier: Pgfw/spztDRdQdx/ZuseOE3O8E6n/H+ATA20MgioTA0= Subject key identifier: BF:9B:59:CF:65:71:AA:3A:97:C6:F9:DB:E2:AF:BE:48:82:25:4F:AA Authority key identifier: 0B:B0:05:71:FD:F6:D6:BC:C6:34:46:EB:3A:64:91:FA:EA:A9:08:6F Certificate issuer: /CN=A912AC83/serialNumber=0BB00571FDF6D6BCC63446EB3A6491FAEAA9086F Certificate serial: 052E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7AFcf321rzGNEbrOmSR-uqpCG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/C7AFcf321rzGNEbrOmSR-uqpCG8.mft Manifest number: 0529 Signing time: Sat 26 Apr 2025 23:11:16 +0000 Manifest this update: Sat 26 Apr 2025 23:11:16 +0000 Manifest next update: Sat 03 May 2025 23:11:16 +0000 Files and hashes: 1: C7AFcf321rzGNEbrOmSR-uqpCG8.crl (hash: tXgfVzXybEQVbecB5BfKZppLbOeIDuJ5MsZMrRfhip0=) 2: 6B191E20F75811EB9C2B5D4DC4F9AE02.roa (hash: gIqEUytD692JqpeV91M06iKGJH68vEW3s4YtICieKE0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/C7AFcf321rzGNEbrOmSR-uqpCG8.crl rsync://rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/C7AFcf321rzGNEbrOmSR-uqpCG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7AFcf321rzGNEbrOmSR-uqpCG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 23:11:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1326 (0x52e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AC83, serialNumber=0BB00571FDF6D6BCC63446EB3A6491FAEAA9086F Validity Not Before: Apr 26 23:11:16 2025 GMT Not After : May 3 23:11:16 2025 GMT Subject: CN=680d6814-5404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:da:f6:c1:31:ab:d0:7b:74:fe:18:45:8b:97: 07:d2:8a:f5:6c:62:e0:12:51:92:ba:d3:37:11:e0: b7:3c:25:d9:8a:ca:2f:8c:9e:62:83:a2:c7:06:b5: 1e:16:41:8e:0a:2e:e2:48:0f:90:6c:33:20:a2:80: bb:89:b9:59:99:b2:2e:42:b6:38:6b:8d:80:07:64: 93:29:dc:71:d7:41:2e:1d:ad:c3:50:18:4d:18:cc: cd:40:51:1f:2a:b3:42:99:06:45:ed:d5:9d:cb:95: 05:69:85:17:2c:1d:72:52:5b:7d:52:f5:57:49:81: 3f:20:70:02:1c:4a:00:f9:0a:a2:9d:48:44:c2:23: 5a:49:1d:55:7c:b1:1f:70:bd:be:a2:3e:6b:a2:d1: 02:8e:c6:23:d2:7b:bc:7e:e9:1b:c6:cd:83:e5:1f: c2:41:6b:8c:c3:aa:69:af:40:10:93:a0:8d:d4:f3: 3f:90:8f:22:2b:61:16:cc:2c:21:3a:30:7b:02:64: 42:f1:4a:2d:0e:47:03:36:63:2d:27:64:32:4e:32: fc:bf:f2:53:5a:ee:f5:92:d1:1c:a2:fe:f2:55:33: 8d:88:95:7b:b8:c8:e5:fd:cd:aa:e8:ed:e4:18:a5: 94:77:bd:e6:2c:76:fb:48:4b:2a:62:cf:ce:bc:b5: 01:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:9B:59:CF:65:71:AA:3A:97:C6:F9:DB:E2:AF:BE:48:82:25:4F:AA X509v3 Authority Key Identifier: keyid:0B:B0:05:71:FD:F6:D6:BC:C6:34:46:EB:3A:64:91:FA:EA:A9:08:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/C7AFcf321rzGNEbrOmSR-uqpCG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7AFcf321rzGNEbrOmSR-uqpCG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/C7AFcf321rzGNEbrOmSR-uqpCG8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:8f:2a:7d:26:6f:5b:c9:30:28:64:8a:9d:fc:93:84:23:4b: 94:46:83:f7:e3:8f:bd:e6:8b:b9:77:ce:50:84:c6:44:2e:d7: 2b:ff:e3:87:6d:be:99:bd:6e:96:7a:e2:e2:12:e3:67:9d:1a: e1:2e:7f:9f:2c:bc:8b:f0:b8:2b:75:cb:6a:9a:d9:f7:c2:11: 45:3f:1c:43:8b:ed:2e:4e:78:5a:27:b1:2d:89:37:4e:b3:b7: b2:e0:e4:06:04:8a:2b:36:b1:65:ea:73:51:ec:4f:6a:8d:8d: 58:76:74:1b:fa:02:2e:91:fd:a5:b8:11:5d:02:0a:d0:0c:86: 20:4c:2b:ce:ee:04:2e:d3:b3:dc:7c:86:8e:b2:53:6e:ea:71: 67:70:3d:86:6b:12:e7:20:bf:3c:92:f6:25:7e:f5:84:9d:e8: 77:05:d2:ef:3b:b4:4a:24:cf:5b:73:c1:b7:0d:c6:9b:07:9c: 02:e2:97:b7:4f:5d:60:f7:8e:58:93:51:21:6c:a8:3c:cd:28: b6:a2:bb:e2:dc:d4:50:22:10:be:78:3d:ff:65:04:74:4f:9a: d2:d8:c2:1a:6f:f0:e2:89:d6:35:1d:ed:5a:89:35:2d:64:b0: 4a:d9:89:a0:66:6c:bd:aa:37:aa:f3:60:be:1b:86:70:1e:07: d1:89:e5:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFDODMxMTAvBgNVBAUTKDBCQjAwNTcxRkRGNkQ2QkNDNjM0NDZFQjNBNjQ5MUZB RUFBOTA4NkYwHhcNMjUwNDI2MjMxMTE2WhcNMjUwNTAzMjMxMTE2WjAYMRYwFAYD VQQDEw02ODBkNjgxNC01NDA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz9r2wTGr0Ht0/hhFi5cH0or1bGLgElGSutM3EeC3PCXZisovjJ5ig6LHBrUe FkGOCi7iSA+QbDMgooC7iblZmbIuQrY4a42AB2STKdxx10EuHa3DUBhNGMzNQFEf KrNCmQZF7dWdy5UFaYUXLB1yUlt9UvVXSYE/IHACHEoA+QqinUhEwiNaSR1VfLEf cL2+oj5rotECjsYj0nu8fukbxs2D5R/CQWuMw6ppr0AQk6CN1PM/kI8iK2EWzCwh OjB7AmRC8UotDkcDNmMtJ2QyTjL8v/JTWu71ktEcov7yVTONiJV7uMjl/c2q6O3k GKWUd73mLHb7SEsqYs/OvLUBMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL+bWc9l cao6l8b52+KvvkiCJU+qMB8GA1UdIwQYMBaAFAuwBXH99ta8xjRG6zpkkfrqqQhv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUM4My80QkFGQjExOEY3 NTYxMUVCOTlGOTEwNENDNEY5QUUwMi9DN0FGY2YzMjFyekdORWJyT21TUi11cXBD RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M3QUZjZjMyMXJ6R05FYnJPbVNSLXVxcENHOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUM4My80QkFGQjExOEY3NTYxMUVCOTlGOTEwNENDNEY5QUUwMi9DN0FGY2YzMjFy ekdORWJyT21TUi11cXBDRzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxjyp9Jm9byTAoZIqd/JOEI0uURoP344+95ou5d85QhMZELtcr/+OH bb6ZvW6WeuLiEuNnnRrhLn+fLLyL8Lgrdctqmtn3whFFPxxDi+0uTnhaJ7EtiTdO s7ey4OQGBIorNrFl6nNR7E9qjY1YdnQb+gIukf2luBFdAgrQDIYgTCvO7gQu07Pc fIaOslNu6nFncD2GaxLnIL88kvYlfvWEneh3BdLvO7RKJM9bc8G3DcabB5wC4pe3 T11g945Yk1EhbKg8zSi2orvi3NRQIhC+eD3/ZQR0T5rS2MIab/DiidY1He1aiTUt ZLBK2YmgZmy9qjeq82C+G4ZwHgfRieUN -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:23 2025 by rpki-client on console.sobornost.net