$ rpki-client -vvf rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.mft File: n47RxT7pDTyshKZHDEt1lMVXXYU.mft (raw, json) Hash identifier: QbNS6zCPZPvl5UFveLkgzbw9bETEc6P5opbSzR3GaL0= Subject key identifier: 53:99:F0:42:DC:79:0B:42:EC:48:35:87:ED:07:27:CC:6A:05:84:FF Authority key identifier: 9F:8E:D1:C5:3E:E9:0D:3C:AC:84:A6:47:0C:4B:75:94:C5:57:5D:85 Certificate issuer: /CN=A912B983/serialNumber=9F8ED1C53EE90D3CAC84A6470C4B7594C5575D85 Certificate serial: 0176 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n47RxT7pDTyshKZHDEt1lMVXXYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.mft Manifest number: 016F Signing time: Sun 27 Apr 2025 02:53:33 +0000 Manifest this update: Sun 27 Apr 2025 02:53:33 +0000 Manifest next update: Sun 04 May 2025 02:53:33 +0000 Files and hashes: 1: n47RxT7pDTyshKZHDEt1lMVXXYU.crl (hash: A0G7h6srZrUpHE3yJye5C+ubWGxWk/CYSIL6pWD2LHk=) 2: FD4E307AFEA711EDBC673B4BC4F9AE02.roa (hash: /gcnA3lv0gvYzo5Yy1H0Ai0POjgkW7UZBEUoiqUQvoQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.crl rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n47RxT7pDTyshKZHDEt1lMVXXYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 374 (0x176) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B983, serialNumber=9F8ED1C53EE90D3CAC84A6470C4B7594C5575D85 Validity Not Before: Apr 27 02:53:33 2025 GMT Not After : May 4 02:53:33 2025 GMT Subject: CN=680d9c2d-aa44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:4a:0d:52:1d:7e:b2:96:cc:2b:db:9c:72:0c: c7:40:7e:ef:83:b7:ef:1c:d1:22:4a:fc:33:20:3a: e3:96:28:2d:4d:f2:23:97:97:c9:ee:03:0a:5a:21: 6e:76:d5:e5:8e:7a:01:d6:87:31:a0:e5:a7:0b:7f: a2:96:d1:1d:02:3e:6f:75:8e:2e:66:6f:e7:2a:44: 74:3e:60:d6:99:25:30:39:ca:68:35:56:d5:bc:b5: 5e:d3:8a:d5:bb:53:3c:f8:f0:2c:82:e8:7d:96:71: ba:e7:eb:72:40:0d:f5:2c:f5:38:be:3c:3c:7d:b9: 95:14:42:6d:c9:1f:48:83:cc:5c:13:78:e1:eb:e6: 51:ec:28:25:cf:b6:c2:4d:5f:18:92:1d:fa:be:4e: 64:1b:56:34:6d:de:da:77:71:7b:b6:53:48:ab:6f: 59:9e:b2:37:7f:96:12:dc:8a:85:23:89:91:b9:9d: 6e:8b:b9:bf:e3:1f:ae:37:30:fa:25:39:93:d0:ec: d7:9f:cb:33:fa:bb:64:c7:cb:c9:6b:f5:9e:7b:6f: 2c:ae:f4:2e:73:77:92:5a:d5:af:70:4b:c6:6f:17: 2f:cc:cd:3f:1a:3d:d5:44:54:95:13:59:19:fd:28: a8:27:53:84:74:72:f6:54:aa:2a:29:1a:7a:bf:8b: c2:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:99:F0:42:DC:79:0B:42:EC:48:35:87:ED:07:27:CC:6A:05:84:FF X509v3 Authority Key Identifier: keyid:9F:8E:D1:C5:3E:E9:0D:3C:AC:84:A6:47:0C:4B:75:94:C5:57:5D:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n47RxT7pDTyshKZHDEt1lMVXXYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:66:c2:81:66:34:cd:1b:d1:68:7b:71:b4:8a:a4:88:7a:64: 7b:ab:ea:f2:f4:f4:76:b5:06:4c:b8:cf:95:fa:9f:28:62:ee: 67:f5:12:d1:3c:3f:40:61:43:eb:b6:26:9a:1f:dd:96:a8:b3: a7:d9:4e:03:c0:1f:a6:c0:95:bd:ba:2f:79:83:3f:6a:b4:23: a5:88:19:0f:0f:4d:73:f4:63:7a:44:f4:e9:ab:fa:f0:a4:6f: 4e:d9:2a:4f:a8:3d:25:60:04:3c:69:cd:23:d7:58:9a:ab:63: bc:70:cb:52:4d:d2:26:5c:aa:66:64:97:09:23:f0:58:27:47: fb:5d:8c:d7:0a:a6:96:1b:67:dc:52:58:6d:aa:65:23:e6:fe: d0:a7:c6:df:8a:46:28:71:25:fe:07:5d:f5:f6:8f:ee:64:cf: f3:04:cb:06:ba:e1:09:4e:42:e4:c6:d6:4b:d6:49:3e:db:8f: aa:10:b5:4c:0c:a9:ba:c2:1c:04:bf:b8:ab:b3:a6:e9:8e:a6: 20:82:03:02:75:46:67:c6:79:57:1b:56:e0:7a:6e:a2:18:33: 1f:b4:6b:d5:ea:6b:e7:34:86:e3:a1:8e:28:d7:e8:c7:95:78: 15:3f:64:12:07:41:5b:2f:b4:cb:4d:7e:3f:48:0d:8f:5b:3c: 9c:9a:90:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI5ODMxMTAvBgNVBAUTKDlGOEVEMUM1M0VFOTBEM0NBQzg0QTY0NzBDNEI3NTk0 QzU1NzVEODUwHhcNMjUwNDI3MDI1MzMzWhcNMjUwNTA0MDI1MzMzWjAYMRYwFAYD VQQDEw02ODBkOWMyZC1hYTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAykoNUh1+spbMK9uccgzHQH7vg7fvHNEiSvwzIDrjligtTfIjl5fJ7gMKWiFu dtXljnoB1ocxoOWnC3+iltEdAj5vdY4uZm/nKkR0PmDWmSUwOcpoNVbVvLVe04rV u1M8+PAsguh9lnG65+tyQA31LPU4vjw8fbmVFEJtyR9Ig8xcE3jh6+ZR7Cglz7bC TV8Ykh36vk5kG1Y0bd7ad3F7tlNIq29ZnrI3f5YS3IqFI4mRuZ1ui7m/4x+uNzD6 JTmT0OzXn8sz+rtkx8vJa/Wee28srvQuc3eSWtWvcEvGbxcvzM0/Gj3VRFSVE1kZ /SioJ1OEdHL2VKoqKRp6v4vC1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFOZ8ELc eQtC7Eg1h+0HJ8xqBYT/MB8GA1UdIwQYMBaAFJ+O0cU+6Q08rISmRwxLdZTFV12F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjk4My9FNkE4QUNFQ0ZF QTIxMUVEQUVGMjkwNDdDNEY5QUUwMi9uNDdSeFQ3cERUeXNoS1pIREV0MWxNVlhY WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL240N1J4VDdwRFR5c2hLWkhERXQxbE1WWFhZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Qjk4My9FNkE4QUNFQ0ZFQTIxMUVEQUVGMjkwNDdDNEY5QUUwMi9uNDdSeFQ3cERU eXNoS1pIREV0MWxNVlhYWVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyZsKBZjTNG9Foe3G0iqSIemR7q+ry9PR2tQZMuM+V+p8oYu5n9RLR PD9AYUPrtiaaH92WqLOn2U4DwB+mwJW9ui95gz9qtCOliBkPD01z9GN6RPTpq/rw pG9O2SpPqD0lYAQ8ac0j11iaq2O8cMtSTdImXKpmZJcJI/BYJ0f7XYzXCqaWG2fc UlhtqmUj5v7Qp8bfikYocSX+B1319o/uZM/zBMsGuuEJTkLkxtZL1kk+24+qELVM DKm6whwEv7irs6bpjqYgggMCdUZnxnlXG1bgem6iGDMftGvV6mvnNIbjoY4o1+jH lXgVP2QSB0FbL7TLTX4/SA2PWzycmpDU -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:23 2025 by rpki-client on console.sobornost.net