$ rpki-client -vvf rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft File: KBiMFu7JB0JxcnjCic-C9QTyWqk.mft (raw, json) Hash identifier: g8JqlL9ZLx5z4AD0fdJ0ipmQXg8mI4W1arZo8/xec6I= Subject key identifier: 9C:1D:23:D3:47:54:08:DB:88:F7:D9:37:F3:3F:21:44:A8:CA:33:ED Authority key identifier: 28:18:8C:16:EE:C9:07:42:71:72:78:C2:89:CF:82:F5:04:F2:5A:A9 Certificate issuer: /CN=A912F387/serialNumber=28188C16EEC90742717278C289CF82F504F25AA9 Certificate serial: FA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KBiMFu7JB0JxcnjCic-C9QTyWqk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft Manifest number: F4 Signing time: Wed 23 Apr 2025 04:04:42 +0000 Manifest this update: Wed 23 Apr 2025 04:04:41 +0000 Manifest next update: Wed 30 Apr 2025 04:04:41 +0000 Files and hashes: 1: KBiMFu7JB0JxcnjCic-C9QTyWqk.crl (hash: l/IsMkIinr7C1em/ehwdmiJEa+q2wuyPToVa0UsqHu8=) 2: FCA046066C8611EFBF35D221C4F9AE02.roa (hash: LLGlR1swQUGpHRHzrbzk96I6Zx3kb8thD/xfxQf3uHA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.crl rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KBiMFu7JB0JxcnjCic-C9QTyWqk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 250 (0xfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F387, serialNumber=28188C16EEC90742717278C289CF82F504F25AA9 Validity Not Before: Apr 23 04:04:41 2025 GMT Not After : Apr 30 04:04:41 2025 GMT Subject: CN=680866da-62dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:fa:0b:c8:23:ed:fa:ca:30:64:9c:ca:17:2a: 71:39:35:63:48:2b:e7:bf:86:23:dd:3a:a2:98:58: 67:29:21:5b:8b:11:0c:90:49:3a:e9:2c:18:1a:4d: c1:ef:d3:a7:76:bc:94:41:a0:9a:02:b1:2b:cc:c1: 93:7f:7d:dc:11:fb:0a:8b:1d:2e:8d:85:8a:5b:5f: 44:e4:09:66:c7:77:85:c1:25:bd:b2:d1:f1:a8:a4: db:24:4c:38:58:71:00:19:e8:31:fa:9b:c1:5e:93: fa:63:ce:52:69:e0:c2:a2:8c:4c:40:2e:6a:03:63: 25:82:85:20:04:0d:3a:2a:8e:39:96:1b:50:26:47: 2f:dd:bf:d1:1f:e9:68:6f:be:f5:36:8c:4e:06:ae: da:b0:5b:58:8a:b5:d8:85:bc:12:24:7b:8e:72:a3: be:12:c4:19:cd:86:1a:e3:05:f2:ae:eb:c6:20:d0: 2d:7c:e4:6d:95:5a:f3:07:90:b2:43:05:12:bc:39: 06:ea:a7:54:22:7c:59:25:43:a5:dd:0b:9a:65:d1: 3b:7a:34:38:10:1b:f5:c8:c8:fd:4c:30:ee:e2:36: 26:59:20:a7:3f:ea:08:e4:34:43:1f:51:3e:4c:36: 34:d7:3f:14:71:75:d8:2c:e9:b9:13:89:01:da:fc: 9f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:1D:23:D3:47:54:08:DB:88:F7:D9:37:F3:3F:21:44:A8:CA:33:ED X509v3 Authority Key Identifier: keyid:28:18:8C:16:EE:C9:07:42:71:72:78:C2:89:CF:82:F5:04:F2:5A:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KBiMFu7JB0JxcnjCic-C9QTyWqk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:66:e8:f4:1f:a3:8e:3c:2a:3f:a6:c0:29:75:92:e7:43:53: fc:f3:d4:29:2b:b8:e7:df:df:92:98:ed:39:ab:ce:65:c4:2b: 0c:3b:d9:65:9d:12:f1:6e:dc:ab:59:be:0a:ed:dc:32:d5:0e: 07:ad:a8:48:b2:d7:ed:26:d9:59:4b:ea:26:a1:06:86:a7:9e: c2:23:ee:6f:5c:84:80:f5:38:cf:6e:ee:61:f1:0d:07:e2:10: 6b:b3:79:0e:bb:34:58:ef:47:9d:3c:e0:65:88:9a:ce:b7:3c: 06:7b:d3:1a:52:c9:3f:7a:2f:1a:c6:aa:48:3d:1e:db:05:b3: 66:93:b0:85:f8:14:37:50:87:39:e4:1c:c9:a8:08:98:60:d7: a2:00:52:8a:85:6e:77:7c:7f:be:69:57:ee:4d:d1:ca:ff:d8: 7e:56:ab:57:ab:1d:21:a4:cd:41:30:cb:cd:43:c0:33:34:57: c3:60:1f:c6:e5:0f:94:77:e7:81:81:9d:86:64:80:4b:72:e3: f1:f2:50:cf:42:de:95:f9:63:43:a3:94:10:93:87:0a:b7:e9: 54:a4:8a:0d:00:6e:bb:34:1b:03:ed:03:33:ba:c0:17:07:ce: cc:48:78:1e:8b:13:b1:b3:ff:e1:46:83:d8:5c:b4:43:53:db: c6:bb:f3:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYzODcxMTAvBgNVBAUTKDI4MTg4QzE2RUVDOTA3NDI3MTcyNzhDMjg5Q0Y4MkY1 MDRGMjVBQTkwHhcNMjUwNDIzMDQwNDQxWhcNMjUwNDMwMDQwNDQxWjAYMRYwFAYD VQQDEw02ODA4NjZkYS02MmRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4/oLyCPt+sowZJzKFypxOTVjSCvnv4Yj3TqimFhnKSFbixEMkEk66SwYGk3B 79OndryUQaCaArErzMGTf33cEfsKix0ujYWKW19E5Almx3eFwSW9stHxqKTbJEw4 WHEAGegx+pvBXpP6Y85SaeDCooxMQC5qA2MlgoUgBA06Ko45lhtQJkcv3b/RH+lo b771NoxOBq7asFtYirXYhbwSJHuOcqO+EsQZzYYa4wXyruvGINAtfORtlVrzB5Cy QwUSvDkG6qdUInxZJUOl3QuaZdE7ejQ4EBv1yMj9TDDu4jYmWSCnP+oI5DRDH1E+ TDY01z8UcXXYLOm5E4kB2vyfMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJwdI9NH VAjbiPfZN/M/IUSoyjPtMB8GA1UdIwQYMBaAFCgYjBbuyQdCcXJ4wonPgvUE8lqp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjM4Ny9GRTRENzhFMkI1 QzExMUVFOTVCNTgzNDFDNEY5QUUwMi9LQmlNRnU3SkIwSnhjbmpDaWMtQzlRVHlX cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0tCaU1GdTdKQjBKeGNuakNpYy1DOVFUeVdxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjM4Ny9GRTRENzhFMkI1QzExMUVFOTVCNTgzNDFDNEY5QUUwMi9LQmlNRnU3SkIw SnhjbmpDaWMtQzlRVHlXcWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYZuj0H6OOPCo/psApdZLnQ1P889QpK7jn39+SmO05q85lxCsMO9ll nRLxbtyrWb4K7dwy1Q4HrahIstftJtlZS+omoQaGp57CI+5vXISA9TjPbu5h8Q0H 4hBrs3kOuzRY70edPOBliJrOtzwGe9MaUsk/ei8axqpIPR7bBbNmk7CF+BQ3UIc5 5BzJqAiYYNeiAFKKhW53fH++aVfuTdHK/9h+VqtXqx0hpM1BMMvNQ8AzNFfDYB/G 5Q+Ud+eBgZ2GZIBLcuPx8lDPQt6V+WNDo5QQk4cKt+lUpIoNAG67NBsD7QMzusAX B87MSHgeixOxs//hRoPYXLRDU9vGu/NW -----END CERTIFICATE-----Generated at Wed Apr 23 06:35:28 2025 by rpki-client on console.sobornost.net