$ rpki-client -vvf rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.mft File: SC2tuZLeLPG_mQg2R44ZlEmVseA.mft (raw, json) Hash identifier: odBtv0u5n8qWYHVqwQKqxnzVgdhIy/11MQXdi3HgRzU= Subject key identifier: E7:B0:75:9D:FC:B3:1C:CE:65:FF:36:06:FA:48:2F:75:48:7E:0B:0F Authority key identifier: 48:2D:AD:B9:92:DE:2C:F1:BF:99:08:36:47:8E:19:94:49:95:B1:E0 Certificate issuer: /CN=A912E898/serialNumber=482DADB992DE2CF1BF990836478E19944995B1E0 Certificate serial: 0EA4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC2tuZLeLPG_mQg2R44ZlEmVseA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.mft Manifest number: 0E9B Signing time: Mon 28 Apr 2025 17:55:15 +0000 Manifest this update: Mon 28 Apr 2025 17:55:14 +0000 Manifest next update: Mon 05 May 2025 17:55:14 +0000 Files and hashes: 1: SC2tuZLeLPG_mQg2R44ZlEmVseA.crl (hash: ZQPIxNYBS9s+tlH+HfOEVeTt+24G7Gp/uENb52S2uxs=) 2: 6E37C53C72CA11EC8CE7244BC4F9AE02.roa (hash: IptQh9J7jeiBWTQD/hPt8ei062oDoKw0nZ49KCuQKMI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.crl rsync://rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC2tuZLeLPG_mQg2R44ZlEmVseA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 17:55:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3748 (0xea4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E898, serialNumber=482DADB992DE2CF1BF990836478E19944995B1E0 Validity Not Before: Apr 28 17:55:14 2025 GMT Not After : May 5 17:55:14 2025 GMT Subject: CN=680fc103-3dee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:45:09:f3:6f:64:7c:cc:61:8f:35:bd:6b:68: fb:aa:45:63:d8:09:38:bc:c0:9a:fb:a5:0c:80:e9: 10:eb:67:67:3b:f0:53:25:92:19:fb:85:05:cd:83: e4:27:73:10:80:b6:52:0d:70:9c:22:d0:66:a2:16: 0b:81:25:7c:e6:68:64:94:6c:6e:43:6f:64:59:56: 9d:2f:88:76:62:1d:64:f4:64:94:6b:57:e6:04:1a: ca:ed:64:f9:b5:cb:b2:f7:bd:da:e4:51:b5:87:b7: 9c:5e:83:38:b3:7b:5e:93:c1:35:8a:04:d6:5f:80: dc:21:0a:21:8f:84:53:33:62:ce:0d:c6:31:dc:a5: 99:10:eb:c7:03:58:6f:77:e0:20:9a:f3:b0:56:3e: f7:d7:46:33:50:72:38:1c:80:18:1e:d3:95:4c:f1: 99:75:47:46:4f:e7:f3:82:8a:a6:71:53:e3:02:af: ef:b4:b7:d3:e4:bb:d0:02:82:3b:8e:92:7d:a6:52: 47:a6:16:10:69:4d:55:fe:df:f3:24:09:30:dc:e2: 1b:fb:8a:ea:4a:b3:68:1d:82:95:13:92:e2:04:ba: e9:51:a4:13:44:35:5e:8b:96:3c:12:21:9d:0f:44: 0d:79:6b:8e:59:99:a9:04:1a:2f:e3:ba:96:b8:25: a6:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:B0:75:9D:FC:B3:1C:CE:65:FF:36:06:FA:48:2F:75:48:7E:0B:0F X509v3 Authority Key Identifier: keyid:48:2D:AD:B9:92:DE:2C:F1:BF:99:08:36:47:8E:19:94:49:95:B1:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC2tuZLeLPG_mQg2R44ZlEmVseA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:42:bb:53:61:89:e4:37:d6:72:06:09:67:e2:a4:7d:02:49: d4:9d:94:80:11:d1:3a:e6:df:a5:b6:d6:a3:cd:63:4b:d3:28: b2:67:63:ff:27:b9:8c:b6:a0:15:c8:0b:c2:4c:8e:24:ec:c7: 5c:c7:54:29:cc:3e:9b:04:6e:14:75:10:33:f3:2c:53:82:71: e3:13:ba:60:9f:1f:ed:90:5b:17:8e:c3:56:eb:bc:1f:7e:c0: 61:01:69:c4:dc:bd:9c:70:42:5b:44:a1:46:a9:d7:e6:94:8e: 9a:16:d9:50:c4:e1:a8:6e:ef:db:39:cf:c0:f9:36:7d:38:1e: 9d:57:be:33:70:18:ee:47:dc:74:cc:d5:06:42:e5:21:c7:71: 9d:a6:01:47:28:4c:dd:34:ef:f2:24:0b:7c:4f:8f:91:f6:b4: bb:f5:fd:5c:2a:fd:7c:6a:2b:e1:c0:c0:66:f7:28:ea:15:c5: c1:d0:76:b9:d1:20:eb:9b:2a:39:7c:21:b1:b7:f8:99:c2:ee: 57:95:df:7b:f8:26:8d:b2:bb:9c:7a:5a:49:22:60:a8:3c:5c: 0d:75:c3:dc:a3:35:c3:d7:93:2c:f3:21:d5:82:e6:85:9a:f5: a3:08:a4:f2:87:33:27:3d:86:c3:54:1a:e2:78:53:7b:3b:93: 02:4e:9c:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDqQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU4OTgxMTAvBgNVBAUTKDQ4MkRBREI5OTJERTJDRjFCRjk5MDgzNjQ3OEUxOTk0 NDk5NUIxRTAwHhcNMjUwNDI4MTc1NTE0WhcNMjUwNTA1MTc1NTE0WjAYMRYwFAYD VQQDEw02ODBmYzEwMy0zZGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA40UJ829kfMxhjzW9a2j7qkVj2Ak4vMCa+6UMgOkQ62dnO/BTJZIZ+4UFzYPk J3MQgLZSDXCcItBmohYLgSV85mhklGxuQ29kWVadL4h2Yh1k9GSUa1fmBBrK7WT5 tcuy973a5FG1h7ecXoM4s3tek8E1igTWX4DcIQohj4RTM2LODcYx3KWZEOvHA1hv d+AgmvOwVj7310YzUHI4HIAYHtOVTPGZdUdGT+fzgoqmcVPjAq/vtLfT5LvQAoI7 jpJ9plJHphYQaU1V/t/zJAkw3OIb+4rqSrNoHYKVE5LiBLrpUaQTRDVei5Y8EiGd D0QNeWuOWZmpBBov47qWuCWm4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOewdZ38 sxzOZf82BvpIL3VIfgsPMB8GA1UdIwQYMBaAFEgtrbmS3izxv5kINkeOGZRJlbHg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTg5OC8yMTFDNjQ0NjhD MjgxMUU5QjAyQkNEODBDNEY5QUUwMi9TQzJ0dVpMZUxQR19tUWcyUjQ0WmxFbVZz ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NDMnR1WkxlTFBHX21RZzJSNDRabEVtVnNlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTg5OC8yMTFDNjQ0NjhDMjgxMUU5QjAyQkNEODBDNEY5QUUwMi9TQzJ0dVpMZUxQ R19tUWcyUjQ0WmxFbVZzZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbQrtTYYnkN9ZyBgln4qR9AknUnZSAEdE65t+lttajzWNL0yiyZ2P/ J7mMtqAVyAvCTI4k7Mdcx1QpzD6bBG4UdRAz8yxTgnHjE7pgnx/tkFsXjsNW67wf fsBhAWnE3L2ccEJbRKFGqdfmlI6aFtlQxOGobu/bOc/A+TZ9OB6dV74zcBjuR9x0 zNUGQuUhx3GdpgFHKEzdNO/yJAt8T4+R9rS79f1cKv18aivhwMBm9yjqFcXB0Ha5 0SDrmyo5fCGxt/iZwu5Xld97+CaNsrucelpJImCoPFwNdcPcozXD15Ms8yHVguaF mvWjCKTyhzMnPYbDVBrieFN7O5MCTpyB -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:26 2025 by rpki-client on console.sobornost.net