$ rpki-client -vvf rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft File: iTrFeQFBVhhq6vUDS6C0km-S43Q.mft (raw, json) Hash identifier: qKOM8A581z720Sf316RBpjDx7VYsoCxS4DO2oeoheFs= Subject key identifier: 2C:76:DA:2C:6D:51:DA:C3:C5:CC:66:B5:A8:29:17:E2:FD:03:E9:6C Authority key identifier: 89:3A:C5:79:01:41:56:18:6A:EA:F5:03:4B:A0:B4:92:6F:92:E3:74 Certificate issuer: /CN=A912E3C7/serialNumber=893AC579014156186AEAF5034BA0B4926F92E374 Certificate serial: 50 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iTrFeQFBVhhq6vUDS6C0km-S43Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft Manifest number: 4E Signing time: Sun 27 Apr 2025 06:09:59 +0000 Manifest this update: Sun 27 Apr 2025 06:09:59 +0000 Manifest next update: Sun 04 May 2025 06:09:58 +0000 Files and hashes: 1: iTrFeQFBVhhq6vUDS6C0km-S43Q.crl (hash: PiuMVfXj20P61eTOER8172fdbApnuhzYAD2xTUtQ9kE=) 2: FB729544B57F11EF8BDF3346C4F9AE02.roa (hash: wnr7gdAIv5Jdc15Z3sjp6boqd+eAUfOZ3eJD4U6UCSM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.crl rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iTrFeQFBVhhq6vUDS6C0km-S43Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 80 (0x50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E3C7, serialNumber=893AC579014156186AEAF5034BA0B4926F92E374 Validity Not Before: Apr 27 06:09:59 2025 GMT Not After : May 4 06:09:58 2025 GMT Subject: CN=680dca37-9f57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:f6:67:b0:ba:5a:20:9b:6a:66:e0:dd:70:af: 93:6c:df:12:0e:c6:ad:7d:3e:fa:12:ae:d2:ed:75: 2a:5f:5e:5c:ca:10:5b:dc:9e:0a:74:72:21:11:e6: c6:4e:9a:6c:2c:ee:30:d9:69:5d:77:58:85:93:26: 8e:53:5f:dc:ff:c8:26:26:6b:a1:d8:0f:ae:d5:38: 53:9a:14:cb:75:3c:bf:01:5f:35:c0:db:45:99:b9: 4f:39:6e:96:07:f2:1b:de:68:81:fc:22:bf:53:84: 98:ea:4f:0e:d0:a2:c1:34:86:de:80:fb:3d:a5:01: 8e:58:0c:b4:55:17:de:a9:55:a7:3d:b6:b6:35:7d: a2:11:0f:a7:f9:0c:64:ca:94:0b:0c:7e:cd:2f:54: e1:3b:d7:a5:d7:17:a5:64:5a:cf:72:c1:a9:aa:b5: 67:de:a5:15:4a:6d:d0:d6:df:82:1e:cf:b5:2d:5e: 25:ab:34:45:26:b3:f5:1f:22:58:ad:49:34:3b:25: a1:28:a2:bf:37:04:80:2e:f3:d5:51:8c:72:9f:1a: e9:b4:18:5f:11:52:1f:21:cc:1c:8d:50:74:4b:30: ea:cd:4e:ee:fb:d4:11:ac:a1:01:99:e5:c5:e8:eb: 7d:fd:da:4c:42:7c:c4:a5:40:d8:50:11:63:7e:1f: b2:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:76:DA:2C:6D:51:DA:C3:C5:CC:66:B5:A8:29:17:E2:FD:03:E9:6C X509v3 Authority Key Identifier: keyid:89:3A:C5:79:01:41:56:18:6A:EA:F5:03:4B:A0:B4:92:6F:92:E3:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iTrFeQFBVhhq6vUDS6C0km-S43Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:3b:7b:82:59:15:b9:81:67:3b:0d:47:3a:c2:93:b8:c5:6d: a2:54:b6:cc:d2:dd:2b:2b:22:69:86:cb:31:1a:01:8f:85:ce: d8:3a:82:e2:bb:00:61:f9:9b:01:ae:0e:10:2e:eb:5c:b4:b1: 0c:3e:8d:1f:d2:07:ae:97:18:e8:8f:b8:5c:36:2e:b6:2b:7e: f3:a1:20:23:35:a7:91:b4:2a:e3:72:cf:72:3a:fe:ff:19:0d: 24:f7:03:f3:07:08:2a:8c:9d:a1:92:07:03:86:17:15:5f:97: 71:9e:6e:bd:27:21:c3:71:45:35:1f:33:ed:fc:9b:be:8d:9b: 09:03:6a:8f:79:18:77:66:3c:9b:ff:42:b6:4e:55:34:b8:66: 23:da:d0:fa:9b:90:63:a9:01:60:c1:86:81:f7:bb:80:5d:90: 40:b0:ef:e4:6f:14:ff:f5:04:ee:2e:27:24:0b:5a:66:67:7e: 22:e8:54:01:c5:73:b2:d3:f9:d2:b4:9d:66:4a:f6:98:83:40: 56:34:35:04:f6:e1:9f:09:11:c0:94:52:80:42:f1:f6:60:b8: ea:b0:74:02:ac:bc:7d:24:0f:82:95:dd:7b:ae:85:d2:22:a4: 2d:32:ed:86:f7:56:b0:4b:00:2b:f4:98:fd:ba:b8:be:9a:81: f6:5e:e9:e9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RTNDNzExMC8GA1UEBRMoODkzQUM1NzkwMTQxNTYxODZBRUFGNTAzNEJBMEI0OTI2 RjkyRTM3NDAeFw0yNTA0MjcwNjA5NTlaFw0yNTA1MDQwNjA5NThaMBgxFjAUBgNV BAMTDTY4MGRjYTM3LTlmNTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDv9mewulogm2pm4N1wr5Ns3xIOxq19PvoSrtLtdSpfXlzKEFvcngp0ciER5sZO mmws7jDZaV13WIWTJo5TX9z/yCYma6HYD67VOFOaFMt1PL8BXzXA20WZuU85bpYH 8hveaIH8Ir9ThJjqTw7QosE0ht6A+z2lAY5YDLRVF96pVac9trY1faIRD6f5DGTK lAsMfs0vVOE716XXF6VkWs9ywamqtWfepRVKbdDW34Iez7UtXiWrNEUms/UfIlit STQ7JaEoor83BIAu89VRjHKfGum0GF8RUh8hzByNUHRLMOrNTu771BGsoQGZ5cXo 63392kxCfMSlQNhQEWN+H7IxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULHbaLG1R 2sPFzGa1qCkX4v0D6WwwHwYDVR0jBBgwFoAUiTrFeQFBVhhq6vUDS6C0km+S43Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJFM0M3Lzg2NTg4N0I2QjI2 NzExRUZBNTY1QTg0OUM0RjlBRTAyL2lUckZlUUZCVmhocTZ2VURTNkMwa20tUzQz US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaVRyRmVRRkJWaGhxNnZVRFM2QzBrbS1TNDNRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJF M0M3Lzg2NTg4N0I2QjI2NzExRUZBNTY1QTg0OUM0RjlBRTAyL2lUckZlUUZCVmho cTZ2VURTNkMwa20tUzQzUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEA7e4JZFbmBZzsNRzrCk7jFbaJUtszS3SsrImmGyzEaAY+Fztg6guK7 AGH5mwGuDhAu61y0sQw+jR/SB66XGOiPuFw2LrYrfvOhICM1p5G0KuNyz3I6/v8Z DST3A/MHCCqMnaGSBwOGFxVfl3Gebr0nIcNxRTUfM+38m76NmwkDao95GHdmPJv/ QrZOVTS4ZiPa0PqbkGOpAWDBhoH3u4BdkECw7+RvFP/1BO4uJyQLWmZnfiLoVAHF c7LT+dK0nWZK9piDQFY0NQT24Z8JEcCUUoBC8fZguOqwdAKsvH0kD4KV3XuuhdIi pC0y7Yb3VrBLACv0mP26uL6agfZe6ek= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:41 2025 by rpki-client on console.sobornost.net