$ rpki-client -vvf rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft File: p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft (raw, json) Hash identifier: gvd/GpNv+Lxy56p1e7tt4VDxUYc3OCqrdx1m/THquok= Subject key identifier: 9F:7F:B2:6E:6B:6D:12:7C:75:38:8E:68:EB:35:12:70:3B:2F:DE:8C Authority key identifier: A7:41:EB:41:0D:4B:8E:46:FF:48:AB:70:A1:DA:00:6A:3D:CF:41:A3 Certificate issuer: /CN=A912CED3/serialNumber=A741EB410D4B8E46FF48AB70A1DA006A3DCF41A3 Certificate serial: B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft Manifest number: B1 Signing time: Sun 27 Apr 2025 04:57:45 +0000 Manifest this update: Sun 27 Apr 2025 04:57:45 +0000 Manifest next update: Sun 04 May 2025 04:57:45 +0000 Files and hashes: 1: p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl (hash: AsZaiVHMbIgb1/78wRX9vD95ZGWTHZpqFlVeWwfeOXs=) 2: A5DE28B4216E11EF88CCA84FC4F9AE02.roa (hash: TnSpnLe7j6/9wTqsNRxeaAfjz8zUewbXt/4PsMyvpP4=) 3: A6550254216E11EF88CCA84FC4F9AE02.roa (hash: hgy+s41tW18ZsoIITX25VfjzDwvg0uuSJ0bvy5UWIIA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 185 (0xb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CED3, serialNumber=A741EB410D4B8E46FF48AB70A1DA006A3DCF41A3 Validity Not Before: Apr 27 04:57:45 2025 GMT Not After : May 4 04:57:45 2025 GMT Subject: CN=680db949-a39b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:04:f8:5b:d5:aa:b8:d7:22:47:3d:77:8f:2a: f7:db:aa:f1:57:93:4a:2f:0a:63:00:f4:f3:b7:f9: 97:ff:07:5f:b9:a2:04:31:2c:73:63:b9:a9:99:51: fa:b2:36:12:ee:48:dc:a6:4d:74:0a:2b:43:56:32: 13:cb:94:a5:67:15:d2:d3:54:ce:15:d9:72:ce:f4: c7:a4:a5:fc:16:6e:f9:94:c1:3e:3e:3e:87:bc:26: 95:f3:c6:40:b3:7c:39:93:0f:3d:da:4b:1f:ab:7c: f3:8f:60:7d:45:4e:79:99:a6:f6:be:5b:52:e7:0e: 20:5b:7e:49:76:09:ed:a3:03:48:af:e6:3d:cb:da: 2e:eb:1e:5e:a0:16:1a:b3:ca:96:24:88:4e:1f:cd: fa:86:e5:3d:5a:32:99:50:99:af:61:57:b6:54:3b: ce:18:0a:aa:29:d5:9d:9e:6c:71:83:b8:4b:c9:ba: 21:23:77:9c:89:0e:13:b2:d6:e7:17:3c:9f:f4:f8: 99:0c:61:fb:0b:e6:d9:ac:c2:d5:b0:96:72:15:47: 63:c3:8b:89:12:6f:21:2c:62:4a:b7:49:2b:12:2d: 0f:88:72:ad:b5:50:72:b4:00:d0:05:6e:25:ed:bb: 22:09:18:ee:e5:74:f7:a1:e8:71:8f:53:9a:58:14: 26:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:7F:B2:6E:6B:6D:12:7C:75:38:8E:68:EB:35:12:70:3B:2F:DE:8C X509v3 Authority Key Identifier: keyid:A7:41:EB:41:0D:4B:8E:46:FF:48:AB:70:A1:DA:00:6A:3D:CF:41:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:02:74:87:cd:89:2e:7d:72:67:05:bc:cc:ad:40:e3:70:61: 0a:07:43:8a:02:de:62:c4:4e:64:87:e2:70:66:30:79:ae:b9: c1:50:cd:a9:a7:8b:b2:8d:c8:f2:f1:2d:db:7a:1f:fa:ba:2f: f7:99:95:d3:39:26:4f:6c:00:82:bd:a8:d7:65:9f:19:04:a5: 4a:66:dc:a8:db:f9:6a:69:53:2a:21:ec:4d:7f:0f:67:20:50: ca:7b:f9:61:43:de:1b:6d:f0:21:c7:19:a7:ec:ae:06:6b:db: 87:c2:ef:a1:25:11:c1:ae:14:2e:c1:d2:0b:00:e3:66:e6:d3: 89:24:3a:bc:67:ee:c1:96:41:91:a3:64:82:85:e9:0f:0a:26: 57:e4:0a:b1:76:03:50:06:35:1c:d3:b8:b7:82:03:78:90:e1: 7e:74:a9:e8:73:49:1c:a2:d1:01:7c:c3:e3:4d:b1:21:4c:df: d7:13:3a:75:75:27:8f:ba:75:3b:f1:e2:ba:c9:77:7e:2b:48: 3e:c9:bc:5a:c2:99:2a:31:2c:ca:ad:74:6b:52:ca:a7:50:b9: 6f:8f:ce:e1:ac:14:57:ae:00:a1:bb:8c:cc:9b:63:93:5e:d5: 77:4a:24:15:eb:8d:74:51:04:14:40:b8:ae:ab:19:3a:3f:bb: cd:8c:88:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNFRDMxMTAvBgNVBAUTKEE3NDFFQjQxMEQ0QjhFNDZGRjQ4QUI3MEExREEwMDZB M0RDRjQxQTMwHhcNMjUwNDI3MDQ1NzQ1WhcNMjUwNTA0MDQ1NzQ1WjAYMRYwFAYD VQQDEw02ODBkYjk0OS1hMzliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAngT4W9WquNciRz13jyr326rxV5NKLwpjAPTzt/mX/wdfuaIEMSxzY7mpmVH6 sjYS7kjcpk10CitDVjITy5SlZxXS01TOFdlyzvTHpKX8Fm75lME+Pj6HvCaV88ZA s3w5kw892ksfq3zzj2B9RU55mab2vltS5w4gW35JdgntowNIr+Y9y9ou6x5eoBYa s8qWJIhOH836huU9WjKZUJmvYVe2VDvOGAqqKdWdnmxxg7hLybohI3eciQ4Tstbn Fzyf9PiZDGH7C+bZrMLVsJZyFUdjw4uJEm8hLGJKt0krEi0PiHKttVBytADQBW4l 7bsiCRju5XT3oehxj1OaWBQmhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ9/sm5r bRJ8dTiOaOs1EnA7L96MMB8GA1UdIwQYMBaAFKdB60ENS45G/0ircKHaAGo9z0Gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0VEMy8zQzE2MUZBNjIx NkMxMUVGODBCMTUzMkJDNEY5QUUwMi9wMEhyUVExTGprYl9TS3R3b2RvQWFqM1BR YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AwSHJRUTFMamtiX1NLdHdvZG9BYWozUFFhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0VEMy8zQzE2MUZBNjIxNkMxMUVGODBCMTUzMkJDNEY5QUUwMi9wMEhyUVExTGpr Yl9TS3R3b2RvQWFqM1BRYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOAnSHzYkufXJnBbzMrUDjcGEKB0OKAt5ixE5kh+JwZjB5rrnBUM2p p4uyjcjy8S3beh/6ui/3mZXTOSZPbACCvajXZZ8ZBKVKZtyo2/lqaVMqIexNfw9n IFDKe/lhQ94bbfAhxxmn7K4Ga9uHwu+hJRHBrhQuwdILAONm5tOJJDq8Z+7BlkGR o2SChekPCiZX5AqxdgNQBjUc07i3ggN4kOF+dKnoc0kcotEBfMPjTbEhTN/XEzp1 dSePunU78eK6yXd+K0g+ybxawpkqMSzKrXRrUsqnULlvj87hrBRXrgChu4zMm2OT XtV3SiQV6410UQQUQLiuqxk6P7vNjIha -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:41 2025 by rpki-client on console.sobornost.net