$ rpki-client -vvf rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft File: GHAMs9ZQejMEuusnDe7RMBzj2QI.mft (raw, json) Hash identifier: 1F7S/+dlc3qYUuD3JB1kcFokqqadPe6Et3TVs3qeU/0= Subject key identifier: 32:D6:66:AE:D5:BA:55:56:DD:4D:07:D6:3A:93:4C:02:98:5E:03:B9 Authority key identifier: 18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02 Certificate issuer: /CN=A912FBCF/serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902 Certificate serial: 1848 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft Manifest number: 182E Signing time: Sat 26 Apr 2025 16:28:35 +0000 Manifest this update: Sat 26 Apr 2025 16:28:34 +0000 Manifest next update: Sat 03 May 2025 16:28:34 +0000 Files and hashes: 1: GHAMs9ZQejMEuusnDe7RMBzj2QI.crl (hash: W83fXXaTXqDzOUaGcHvUhBrFI6gAKu6mzKd9JukUhDA=) 2: C2BE71E8AA9A11E7B4776E52C4F9AE02.roa (hash: oKQhI+83g6vqFAl7basVs7Sw18T4MEh7Nu9fLLathWs=) 3: E8780C5EAC8011E79D9EAC60C4F9AE02.roa (hash: M0giNeJUYFHHWIGJ3hp4IIxg76YLnoDKySser5XKcL4=) 4: BB9C86EA0B0F11E89DF24170C4F9AE02.roa (hash: tLIsLDvbVjMe1ALZXZoP7laPhfEa7wWbXxVFhcp282s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 15:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6216 (0x1848) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FBCF, serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902 Validity Not Before: Apr 26 16:28:34 2025 GMT Not After : May 3 16:28:34 2025 GMT Subject: CN=680d09b2-3bdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:1e:ca:4d:31:25:6e:22:53:99:f6:da:58:f6: 74:ed:de:ff:72:09:d5:11:9e:6f:cd:34:69:db:56: b6:46:40:5a:07:1b:b9:f8:5c:b0:2d:cc:ad:41:fc: 0b:c0:a1:0a:06:8d:fd:33:6c:14:e8:d9:b7:df:50: 7f:62:25:ec:74:54:a7:bf:56:22:a9:5a:64:99:11: bf:15:09:bf:ad:1b:e2:51:9e:33:07:27:0d:51:42: 7e:60:6f:f8:96:ac:c8:6e:2f:00:b0:a0:a4:5e:d8: f0:56:67:e6:e8:16:4a:bf:e4:4f:86:c7:64:a8:65: ea:4b:a3:f2:ad:ef:0a:21:48:31:70:d1:98:8a:44: 05:85:7b:f0:2b:45:d7:43:07:01:03:d2:be:cb:a0: 0b:8c:ba:f6:e0:3e:75:c6:cf:9d:bf:9c:18:20:b1: 9d:a1:51:3b:83:1b:6d:7b:27:81:d3:c1:28:76:1b: 42:a8:9b:55:da:ec:cb:a5:dd:e7:92:64:0f:b3:d8: d3:74:f3:83:cf:ac:00:79:ad:d0:63:55:09:14:1c: d4:a3:fb:ee:0b:be:71:c2:46:18:a2:eb:68:3c:ad: 82:aa:dc:da:95:d2:65:de:f1:64:fb:3c:40:ce:bc: 11:a4:ab:b4:29:ba:f6:ab:1f:4f:56:89:9a:03:82: d7:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:D6:66:AE:D5:BA:55:56:DD:4D:07:D6:3A:93:4C:02:98:5E:03:B9 X509v3 Authority Key Identifier: keyid:18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:31:48:f2:3d:ea:6e:8d:37:d5:31:34:af:41:b7:32:c5:f1: 86:f6:e8:15:e6:4e:8a:af:d9:82:5f:87:03:09:7e:b0:f3:e2: 27:05:69:d4:80:98:be:14:d0:49:79:94:ad:c9:9c:84:20:86: 7b:97:48:69:30:bf:31:da:71:06:d8:0e:8e:6b:45:22:9f:72: 41:ed:e3:d8:0f:18:7f:25:1e:9c:50:5a:94:2c:fb:5b:cc:29: 0b:c2:2a:d3:0f:79:d3:c0:2f:37:60:95:ec:d1:01:f5:fe:9e: e7:2e:5e:91:64:dc:22:80:9f:35:f3:cb:5c:49:72:2a:ad:82: de:b9:bb:18:6e:4f:ca:19:21:90:2f:a4:8c:57:ef:b1:4f:37: b8:15:91:56:db:2e:a5:a8:fb:6f:e3:9e:00:ce:2c:a2:37:d7: df:ca:df:45:ac:8c:1c:32:88:92:be:bb:65:89:c4:bb:22:bf: 3f:5e:df:7b:9a:24:d5:c0:18:c6:23:03:5b:5d:67:26:19:0a: 47:06:f4:54:60:80:7f:ce:2f:ce:c5:28:73:29:f4:1b:35:b8: 60:c8:7d:d0:24:1a:80:52:98:18:67:f5:16:b6:e0:3f:52:a6: 60:fb:6f:8f:2b:e2:c8:20:3b:6e:ae:48:15:4a:60:f4:aa:67: 4a:17:d6:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGEgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZCQ0YxMTAvBgNVBAUTKDE4NzAwQ0IzRDY1MDdBMzMwNEJBRUIyNzBERUVEMTMw MUNFM0Q5MDIwHhcNMjUwNDI2MTYyODM0WhcNMjUwNTAzMTYyODM0WjAYMRYwFAYD VQQDEw02ODBkMDliMi0zYmRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8x7KTTElbiJTmfbaWPZ07d7/cgnVEZ5vzTRp21a2RkBaBxu5+FywLcytQfwL wKEKBo39M2wU6Nm331B/YiXsdFSnv1YiqVpkmRG/FQm/rRviUZ4zBycNUUJ+YG/4 lqzIbi8AsKCkXtjwVmfm6BZKv+RPhsdkqGXqS6Pyre8KIUgxcNGYikQFhXvwK0XX QwcBA9K+y6ALjLr24D51xs+dv5wYILGdoVE7gxtteyeB08EodhtCqJtV2uzLpd3n kmQPs9jTdPODz6wAea3QY1UJFBzUo/vuC75xwkYYoutoPK2CqtzaldJl3vFk+zxA zrwRpKu0Kbr2qx9PVomaA4LXjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDLWZq7V ulVW3U0H1jqTTAKYXgO5MB8GA1UdIwQYMBaAFBhwDLPWUHozBLrrJw3u0TAc49kC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkJDRi80QUI1NzZCRUFB NUExMUU3QUU0MzZGMzJDNEY5QUUwMi9HSEFNczlaUWVqTUV1dXNuRGU3Uk1Cemoy UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dIQU1zOVpRZWpNRXV1c25EZTdSTUJ6ajJRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkJDRi80QUI1NzZCRUFBNUExMUU3QUU0MzZGMzJDNEY5QUUwMi9HSEFNczlaUWVq TUV1dXNuRGU3Uk1CemoyUUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBMUjyPepujTfVMTSvQbcyxfGG9ugV5k6Kr9mCX4cDCX6w8+InBWnU gJi+FNBJeZStyZyEIIZ7l0hpML8x2nEG2A6Oa0Uin3JB7ePYDxh/JR6cUFqULPtb zCkLwirTD3nTwC83YJXs0QH1/p7nLl6RZNwigJ8188tcSXIqrYLeubsYbk/KGSGQ L6SMV++xTze4FZFW2y6lqPtv454AziyiN9ffyt9FrIwcMoiSvrtlicS7Ir8/Xt97 miTVwBjGIwNbXWcmGQpHBvRUYIB/zi/OxShzKfQbNbhgyH3QJBqAUpgYZ/UWtuA/ UqZg+2+PK+LIIDturkgVSmD0qmdKF9Zq -----END CERTIFICATE-----Generated at Sat Apr 26 18:19:39 2025 by rpki-client on console.sobornost.net