$ rpki-client -vvf rpki.apnic.net/member_repository/A912AD2E/078C62AAC53311E7A11DBB4AC4F9AE02/u7hAsFOTTV4f7dQN0CPvevQouuA.mft File: u7hAsFOTTV4f7dQN0CPvevQouuA.mft (raw, json) Hash identifier: BZ2r/5sFEsEM7yEORFtuwQ1fDGQPtGRmkBm8q4QXedY= Subject key identifier: F3:8E:23:EE:D7:4D:F9:B2:E2:38:A4:BD:8E:22:E0:D0:F0:63:9F:42 Authority key identifier: BB:B8:40:B0:53:93:4D:5E:1F:ED:D4:0D:D0:23:EF:7A:F4:28:BA:E0 Certificate issuer: /CN=A912AD2E/serialNumber=BBB840B053934D5E1FEDD40DD023EF7AF428BAE0 Certificate serial: 17B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7hAsFOTTV4f7dQN0CPvevQouuA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AD2E/078C62AAC53311E7A11DBB4AC4F9AE02/u7hAsFOTTV4f7dQN0CPvevQouuA.mft Manifest number: 17AA Signing time: Mon 28 Apr 2025 16:46:14 +0000 Manifest this update: Mon 28 Apr 2025 16:46:14 +0000 Manifest next update: Mon 05 May 2025 16:46:14 +0000 Files and hashes: 1: u7hAsFOTTV4f7dQN0CPvevQouuA.crl (hash: TrEsxUavt/8RqeBU68WfC/ch0xW2AuDszR1GKqqZ7wk=) 2: E3D5A6F4422411E8804DBC3AC4F9AE02.roa (hash: MtUOG8te7vvd8OgcyO+YgqB1a0uCeqPJKDSTrguzMzA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AD2E/078C62AAC53311E7A11DBB4AC4F9AE02/u7hAsFOTTV4f7dQN0CPvevQouuA.crl rsync://rpki.apnic.net/member_repository/A912AD2E/078C62AAC53311E7A11DBB4AC4F9AE02/u7hAsFOTTV4f7dQN0CPvevQouuA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7hAsFOTTV4f7dQN0CPvevQouuA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 16:46:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6069 (0x17b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AD2E, serialNumber=BBB840B053934D5E1FEDD40DD023EF7AF428BAE0 Validity Not Before: Apr 28 16:46:14 2025 GMT Not After : May 5 16:46:14 2025 GMT Subject: CN=680fb0d6-69b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4f:5a:4d:da:98:dd:44:43:bf:48:fc:95:28: 35:74:4d:d4:3c:82:d3:98:0d:f9:70:5b:1e:a0:f9: fe:c7:ae:db:ee:ac:2d:59:2d:53:ff:40:1e:df:d8: 47:21:5e:8b:05:b0:ba:8d:0e:de:af:7a:fa:51:13: 6d:c8:18:e0:ec:97:13:9b:cd:57:ef:17:bd:a9:a9: 57:6d:72:f0:f6:6b:3a:ba:d1:3b:1f:c2:31:b7:8c: 4a:ac:03:eb:a0:6c:94:1a:21:fe:0c:6f:88:78:08: 9e:e2:d5:5d:e7:8f:b2:25:64:ae:f8:ee:16:91:ab: dd:fe:e0:6d:a8:53:73:f2:98:bf:19:20:4c:b4:ca: a4:e0:db:e3:66:05:d8:d3:e5:64:e1:bd:b8:81:fc: fe:3a:d3:55:04:69:b1:d6:d7:80:05:9e:d8:1a:5a: d3:5d:99:a4:15:33:49:0e:96:ef:0e:f7:e1:96:7a: 8b:58:23:a0:5e:35:0f:fe:e5:e8:e7:a6:a4:e4:1e: 55:df:67:24:e4:38:ea:44:1d:3f:df:36:f1:4e:22: 38:57:57:20:95:6b:bb:4f:0f:8e:fb:bf:27:e5:8b: c7:84:a2:fb:10:bb:59:d1:b5:97:0c:96:2a:48:72: 9e:8a:5e:3b:5a:e2:27:41:e1:3b:65:6e:0e:71:e3: 4c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:8E:23:EE:D7:4D:F9:B2:E2:38:A4:BD:8E:22:E0:D0:F0:63:9F:42 X509v3 Authority Key Identifier: keyid:BB:B8:40:B0:53:93:4D:5E:1F:ED:D4:0D:D0:23:EF:7A:F4:28:BA:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AD2E/078C62AAC53311E7A11DBB4AC4F9AE02/u7hAsFOTTV4f7dQN0CPvevQouuA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7hAsFOTTV4f7dQN0CPvevQouuA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AD2E/078C62AAC53311E7A11DBB4AC4F9AE02/u7hAsFOTTV4f7dQN0CPvevQouuA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:c8:6e:bf:ac:c0:52:ab:df:a1:e5:a6:95:5e:59:f3:3a:bf: 96:ee:bd:18:1d:c3:15:f2:96:00:e5:d1:7b:31:da:8b:e3:11: d7:ea:9b:75:45:ae:a2:2e:fe:a8:1d:35:35:65:af:b2:2a:b1: 1f:c2:cd:6d:cd:c8:05:aa:a1:67:c0:1e:f1:ac:9a:5b:8e:d9: a7:ea:22:2e:1c:61:ae:a9:4c:c6:b1:33:82:88:2e:b6:ff:81: 1d:98:75:e7:d1:d3:de:ee:ac:73:c3:17:49:a7:94:4c:ee:41: ed:63:38:38:b6:a4:45:82:6d:93:32:4b:4a:df:2c:99:e1:5f: f0:86:18:90:05:72:57:f8:4c:61:9b:df:52:53:c7:99:34:c1: e9:6f:e0:3b:75:f1:4e:5d:3d:04:d6:27:90:ff:71:31:33:47: dc:66:87:3d:6f:da:3e:82:57:7f:70:3f:c8:b2:78:80:16:25: 12:52:2b:cd:35:47:e2:44:f9:23:51:43:17:b5:2d:11:91:71: 91:78:2a:5f:85:50:8f:bb:99:7e:3b:c1:97:b3:29:bb:53:69: 98:56:30:c6:9e:ea:bb:ee:f6:4b:bc:d4:95:d4:e7:4e:68:6f: 93:51:0f:c6:e6:fa:7a:3a:95:df:3c:ec:44:6f:e6:53:a8:da: 7b:bb:c2:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF7UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFEMkUxMTAvBgNVBAUTKEJCQjg0MEIwNTM5MzRENUUxRkVERDQwREQwMjNFRjdB RjQyOEJBRTAwHhcNMjUwNDI4MTY0NjE0WhcNMjUwNTA1MTY0NjE0WjAYMRYwFAYD VQQDEw02ODBmYjBkNi02OWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyU9aTdqY3URDv0j8lSg1dE3UPILTmA35cFseoPn+x67b7qwtWS1T/0Ae39hH IV6LBbC6jQ7er3r6URNtyBjg7JcTm81X7xe9qalXbXLw9ms6utE7H8Ixt4xKrAPr oGyUGiH+DG+IeAie4tVd54+yJWSu+O4Wkavd/uBtqFNz8pi/GSBMtMqk4NvjZgXY 0+Vk4b24gfz+OtNVBGmx1teABZ7YGlrTXZmkFTNJDpbvDvfhlnqLWCOgXjUP/uXo 56ak5B5V32ck5DjqRB0/3zbxTiI4V1cglWu7Tw+O+78n5YvHhKL7ELtZ0bWXDJYq SHKeil47WuInQeE7ZW4OceNM8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPOOI+7X Tfmy4jikvY4i4NDwY59CMB8GA1UdIwQYMBaAFLu4QLBTk01eH+3UDdAj73r0KLrg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUQyRS8wNzhDNjJBQUM1 MzMxMUU3QTExREJCNEFDNEY5QUUwMi91N2hBc0ZPVFRWNGY3ZFFOMENQdmV2UW91 dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U3aEFzRk9UVFY0ZjdkUU4wQ1B2ZXZRb3V1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUQyRS8wNzhDNjJBQUM1MzMxMUU3QTExREJCNEFDNEY5QUUwMi91N2hBc0ZPVFRW NGY3ZFFOMENQdmV2UW91dUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQyG6/rMBSq9+h5aaVXlnzOr+W7r0YHcMV8pYA5dF7MdqL4xHX6pt1 Ra6iLv6oHTU1Za+yKrEfws1tzcgFqqFnwB7xrJpbjtmn6iIuHGGuqUzGsTOCiC62 /4EdmHXn0dPe7qxzwxdJp5RM7kHtYzg4tqRFgm2TMktK3yyZ4V/whhiQBXJX+Exh m99SU8eZNMHpb+A7dfFOXT0E1ieQ/3ExM0fcZoc9b9o+gld/cD/IsniAFiUSUivN NUfiRPkjUUMXtS0RkXGReCpfhVCPu5l+O8GXsym7U2mYVjDGnuq77vZLvNSV1OdO aG+TUQ/G5vp6OpXfPOxEb+ZTqNp7u8Ji -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:26 2025 by rpki-client on console.sobornost.net