$ rpki-client -vvf rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft File: idd5xQ8U7RH8WtuEA3iSsmC5leY.mft (raw, json) Hash identifier: FKLZ7fcGCXIaARD7GGXtysUZBcNnB+dUb8WjbX8Gvy8= Subject key identifier: CF:7B:F5:C6:FE:8F:1F:62:FA:58:CE:07:8D:7C:C6:CA:68:43:9D:68 Authority key identifier: 89:D7:79:C5:0F:14:ED:11:FC:5A:DB:84:03:78:92:B2:60:B9:95:E6 Certificate issuer: /CN=A913120A/serialNumber=89D779C50F14ED11FC5ADB84037892B260B995E6 Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft Manifest number: 6B Signing time: Sun 27 Apr 2025 05:47:26 +0000 Manifest this update: Sun 27 Apr 2025 05:47:26 +0000 Manifest next update: Sun 04 May 2025 05:47:25 +0000 Files and hashes: 1: idd5xQ8U7RH8WtuEA3iSsmC5leY.crl (hash: sgQeOyWJ4obK8g3/dKGC3IG7kIhZ6d/WtzJfhQkLSuo=) 2: D4F24058870411EF8D8D2635C4F9AE02.roa (hash: 8wQaCvv1woKjsPYKk6t73PO7JjxXLb0AQ69vXhKv7NA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.crl rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913120A, serialNumber=89D779C50F14ED11FC5ADB84037892B260B995E6 Validity Not Before: Apr 27 05:47:26 2025 GMT Not After : May 4 05:47:25 2025 GMT Subject: CN=680dc4ee-208a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2e:91:6b:33:34:e9:33:b1:e4:1d:b3:f6:8e: 38:ca:dd:46:8e:97:1f:f7:1a:7e:cc:f1:e7:e7:28: 20:84:89:98:34:19:83:70:2f:fd:ab:41:04:44:21: 6e:c3:e6:6a:05:f3:17:45:73:2d:30:4b:31:ed:4a: 55:49:b0:1b:0e:48:31:41:0e:92:1c:6a:75:8b:48: d4:34:b3:2f:0a:31:e5:57:61:3e:ed:7c:06:7b:c2: b5:ab:0b:e4:9a:da:d9:37:f5:d8:36:3d:9e:07:9d: 30:10:74:34:37:03:3c:4b:ea:5e:b9:2b:22:ee:e4: ce:28:4f:4e:b0:28:fe:15:d7:d8:85:0f:fd:e0:44: 98:6a:a1:2d:f0:4f:07:30:2d:ad:5c:02:fb:0e:d7: af:84:7e:36:d5:74:84:29:97:3e:14:a1:d2:9d:4b: 39:9c:eb:31:7a:66:63:c8:31:1f:63:a6:02:58:c2: f0:42:1b:5d:81:f1:3c:89:cd:41:8a:38:42:cf:90: 57:7c:3b:11:c1:5c:e0:ae:a1:89:88:86:c4:54:bf: dd:09:bd:94:9a:35:cd:76:1f:ac:48:db:07:74:54: e5:ba:05:7b:62:8c:b0:7d:f6:1a:72:64:a1:24:f0: d8:4d:22:41:e4:63:e0:9c:a2:1b:34:69:12:30:5b: 19:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:7B:F5:C6:FE:8F:1F:62:FA:58:CE:07:8D:7C:C6:CA:68:43:9D:68 X509v3 Authority Key Identifier: keyid:89:D7:79:C5:0F:14:ED:11:FC:5A:DB:84:03:78:92:B2:60:B9:95:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:3b:ff:4b:ba:65:1f:46:9c:51:14:a9:89:5a:5b:bd:74:89: de:4a:f6:8f:ef:bb:15:3b:4e:0f:ee:3e:19:a9:ff:60:9e:4c: e0:a3:d0:5d:99:8e:fb:be:50:36:42:c5:4d:52:b5:3a:31:7a: d9:75:2e:8e:d5:26:4c:3f:e2:5c:13:9a:d9:f5:dc:af:84:e3: 4d:00:b3:36:5b:9a:d0:95:00:37:71:8b:83:ce:5d:a7:41:bc: d2:57:2a:a5:d7:e7:81:be:bd:b4:38:a8:f4:85:f9:3e:ec:37: 17:7c:7f:6e:07:f9:10:45:af:6d:7f:ed:64:e4:fd:b2:69:38: 47:e6:ac:30:36:0d:5b:81:64:3c:d7:a8:41:7c:82:ab:93:ef: f3:13:8e:31:a8:37:eb:ae:43:93:aa:e7:91:cc:49:3e:12:0e: 1c:c8:6d:6d:b6:ba:7b:35:e3:c6:07:51:3d:53:ea:59:c0:a0: c9:9a:3f:98:1d:80:ad:c0:46:a3:26:dc:d4:6f:e6:56:45:ae: d8:fb:0f:39:e8:d5:c4:f4:b8:35:42:2a:cc:03:07:5c:42:93: 30:99:23:13:93:eb:46:8d:2a:75:90:a5:45:e0:5d:f5:c2:89: eb:3c:46:67:ce:3b:9b:b8:26:af:21:67:7e:ed:a4:df:d8:35: cc:42:f6:5f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MTIwQTExMC8GA1UEBRMoODlENzc5QzUwRjE0RUQxMUZDNUFEQjg0MDM3ODkyQjI2 MEI5OTVFNjAeFw0yNTA0MjcwNTQ3MjZaFw0yNTA1MDQwNTQ3MjVaMBgxFjAUBgNV BAMTDTY4MGRjNGVlLTIwOGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHLpFrMzTpM7HkHbP2jjjK3UaOlx/3Gn7M8efnKCCEiZg0GYNwL/2rQQREIW7D 5moF8xdFcy0wSzHtSlVJsBsOSDFBDpIcanWLSNQ0sy8KMeVXYT7tfAZ7wrWrC+Sa 2tk39dg2PZ4HnTAQdDQ3AzxL6l65KyLu5M4oT06wKP4V19iFD/3gRJhqoS3wTwcw La1cAvsO16+EfjbVdIQplz4UodKdSzmc6zF6ZmPIMR9jpgJYwvBCG12B8TyJzUGK OELPkFd8OxHBXOCuoYmIhsRUv90JvZSaNc12H6xI2wd0VOW6BXtijLB99hpyZKEk 8NhNIkHkY+Ccohs0aRIwWxljAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUz3v1xv6P H2L6WM4HjXzGymhDnWgwHwYDVR0jBBgwFoAUidd5xQ8U7RH8WtuEA3iSsmC5leYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMxMjBBLzgyOUE3NEE4ODZG MzExRUZCRTAyNTM2QkM0RjlBRTAyL2lkZDV4UThVN1JIOFd0dUVBM2lTc21DNWxl WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaWRkNXhROFU3Ukg4V3R1RUEzaVNzbUM1bGVZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMx MjBBLzgyOUE3NEE4ODZGMzExRUZCRTAyNTM2QkM0RjlBRTAyL2lkZDV4UThVN1JI OFd0dUVBM2lTc21DNWxlWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEY7/0u6ZR9GnFEUqYlaW710id5K9o/vuxU7Tg/uPhmp/2CeTOCj0F2Z jvu+UDZCxU1StToxetl1Lo7VJkw/4lwTmtn13K+E400AszZbmtCVADdxi4POXadB vNJXKqXX54G+vbQ4qPSF+T7sNxd8f24H+RBFr21/7WTk/bJpOEfmrDA2DVuBZDzX qEF8gquT7/MTjjGoN+uuQ5Oq55HMST4SDhzIbW22uns148YHUT1T6lnAoMmaP5gd gK3ARqMm3NRv5lZFrtj7Dzno1cT0uDVCKswDB1xCkzCZIxOT60aNKnWQpUXgXfXC ies8RmfOO5u4Jq8hZ37tpN/YNcxC9l8= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:42 2025 by rpki-client on console.sobornost.net