$ rpki-client -vvf rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.mft File: 4dsvyCXsO7vnKFenPsCGoIIeIP0.mft (raw, json) Hash identifier: pbrMdgnecO0X/GHF2hI2xEegBvQmeKI922gWg8C6iug= Subject key identifier: 0F:9E:3B:0E:4D:AB:C9:31:31:E7:FD:00:B8:50:78:0E:4D:8C:FB:EA Authority key identifier: E1:DB:2F:C8:25:EC:3B:BB:E7:28:57:A7:3E:C0:86:A0:82:1E:20:FD Certificate issuer: /CN=A9131589/serialNumber=E1DB2FC825EC3BBBE72857A73EC086A0821E20FD Certificate serial: 026E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4dsvyCXsO7vnKFenPsCGoIIeIP0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.mft Manifest number: 026A Signing time: Fri 25 Apr 2025 01:30:46 +0000 Manifest this update: Fri 25 Apr 2025 01:30:45 +0000 Manifest next update: Fri 02 May 2025 01:30:45 +0000 Files and hashes: 1: 4dsvyCXsO7vnKFenPsCGoIIeIP0.crl (hash: ukoMz0XtaKyM0axsxhKwej+HWSr0v47/IKsYvbMdMLs=) 2: 82759C100CCE11ED97C94316C4F9AE02.roa (hash: cG28lDeyahzWWkmTahaq+sCJHYmimDEkICh6+dm+qWU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.crl rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4dsvyCXsO7vnKFenPsCGoIIeIP0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:30:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 622 (0x26e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131589, serialNumber=E1DB2FC825EC3BBBE72857A73EC086A0821E20FD Validity Not Before: Apr 25 01:30:45 2025 GMT Not After : May 2 01:30:45 2025 GMT Subject: CN=680ae5c5-e909 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e3:d7:f4:b9:a8:a9:53:2e:5e:a7:59:e2:d6: c1:a3:52:52:8c:23:f3:fd:7e:4b:dc:d6:9d:11:8c: 1a:14:53:26:2d:69:f3:a7:a4:a5:da:76:66:89:ff: f5:a9:75:6b:22:7d:65:f6:69:a7:6b:ae:e5:b3:2e: 1f:01:2b:ab:96:4a:af:2e:9e:76:27:5f:66:c8:3d: 71:00:77:fd:b4:71:38:ba:bf:e8:a9:1f:60:71:dc: 98:8d:f4:55:8a:ef:7c:b1:e7:d6:16:34:ef:46:59: b3:86:15:81:06:51:73:02:90:68:2d:53:26:41:25: fd:b7:ab:a6:ce:c8:b3:e3:16:e8:d2:7d:bb:b4:0a: d3:e3:37:e4:d0:f5:6b:c3:0d:f7:8b:ae:b2:36:dc: ee:0d:36:f4:9d:ba:1b:07:45:5c:37:35:87:c7:80: 78:9b:d5:73:66:4c:8d:fb:23:0e:94:cd:b5:8d:57: d9:80:23:7b:11:36:6f:47:74:90:07:0b:a6:47:4e: 8b:b7:38:7c:26:75:d5:a1:ac:7b:d4:ca:e3:18:db: 0d:a1:a6:63:3a:b9:68:7e:8f:a5:14:7c:f3:44:b1: 6d:4c:a5:e7:00:7c:43:5f:fb:68:43:12:55:fb:9a: 94:86:ae:c5:c0:43:a6:c8:b5:1e:35:bf:74:39:74: 19:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:9E:3B:0E:4D:AB:C9:31:31:E7:FD:00:B8:50:78:0E:4D:8C:FB:EA X509v3 Authority Key Identifier: keyid:E1:DB:2F:C8:25:EC:3B:BB:E7:28:57:A7:3E:C0:86:A0:82:1E:20:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4dsvyCXsO7vnKFenPsCGoIIeIP0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:a1:c9:c4:07:a5:cb:06:e9:82:b1:07:0d:fb:bc:be:18:6b: 0b:5d:77:4c:74:89:d6:01:35:67:8c:14:66:0d:ee:b2:42:2c: 5d:42:ea:a7:9d:53:f3:38:b0:19:6b:a8:c1:81:a3:1f:c8:9a: de:19:ee:4e:05:7e:2d:f5:a0:97:f2:95:4c:11:0f:a2:e8:a5: 78:06:d0:bd:50:74:20:9d:da:ff:36:3c:93:e2:e9:22:8f:d9: 1a:aa:1a:cc:ad:78:e0:5a:26:a5:2d:66:34:21:a1:f1:d1:27: c2:e6:a0:da:b6:84:9f:dd:03:62:50:98:1b:06:1c:e9:eb:4e: 9a:0d:13:bd:fc:0b:2f:f7:25:44:22:a1:8b:02:6d:95:85:a9: 0b:ed:fb:29:c3:09:ef:85:1f:91:ea:ca:0c:f1:2e:66:98:86: 06:cd:22:56:cd:aa:b1:66:94:c3:ca:6b:bb:d0:16:36:0b:f8: 46:69:cb:ec:26:c4:f8:5c:7b:ec:b5:de:70:0a:0d:a0:4a:a3: 42:0b:72:66:e8:62:9f:9e:d4:5f:ca:db:13:2a:cb:55:a9:b0: 43:ba:e0:d6:f3:a6:a5:c5:7c:2b:76:98:d5:01:b9:21:ce:14: b6:17:92:8a:dc:c3:79:7c:d5:9e:c9:bf:bf:7a:c7:31:73:e8: 38:8e:ca:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAm4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE1ODkxMTAvBgNVBAUTKEUxREIyRkM4MjVFQzNCQkJFNzI4NTdBNzNFQzA4NkEw ODIxRTIwRkQwHhcNMjUwNDI1MDEzMDQ1WhcNMjUwNTAyMDEzMDQ1WjAYMRYwFAYD VQQDEw02ODBhZTVjNS1lOTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArOPX9LmoqVMuXqdZ4tbBo1JSjCPz/X5L3NadEYwaFFMmLWnzp6Sl2nZmif/1 qXVrIn1l9mmna67lsy4fASurlkqvLp52J19myD1xAHf9tHE4ur/oqR9gcdyYjfRV iu98sefWFjTvRlmzhhWBBlFzApBoLVMmQSX9t6umzsiz4xbo0n27tArT4zfk0PVr ww33i66yNtzuDTb0nbobB0VcNzWHx4B4m9VzZkyN+yMOlM21jVfZgCN7ETZvR3SQ BwumR06Ltzh8JnXVoax71MrjGNsNoaZjOrlofo+lFHzzRLFtTKXnAHxDX/toQxJV +5qUhq7FwEOmyLUeNb90OXQZWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA+eOw5N q8kxMef9ALhQeA5NjPvqMB8GA1UdIwQYMBaAFOHbL8gl7Du75yhXpz7AhqCCHiD9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTU4OS8zN0UzOTBBMDBD Q0MxMUVEQjA5OTNDMTVDNEY5QUUwMi80ZHN2eUNYc083dm5LRmVuUHNDR29JSWVJ UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRkc3Z5Q1hzTzd2bktGZW5Qc0NHb0lJZUlQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTU4OS8zN0UzOTBBMDBDQ0MxMUVEQjA5OTNDMTVDNEY5QUUwMi80ZHN2eUNYc083 dm5LRmVuUHNDR29JSWVJUDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5ocnEB6XLBumCsQcN+7y+GGsLXXdMdInWATVnjBRmDe6yQixdQuqn nVPzOLAZa6jBgaMfyJreGe5OBX4t9aCX8pVMEQ+i6KV4BtC9UHQgndr/NjyT4uki j9kaqhrMrXjgWialLWY0IaHx0SfC5qDatoSf3QNiUJgbBhzp606aDRO9/Asv9yVE IqGLAm2VhakL7fspwwnvhR+R6soM8S5mmIYGzSJWzaqxZpTDymu70BY2C/hGacvs JsT4XHvstd5wCg2gSqNCC3Jm6GKfntRfytsTKstVqbBDuuDW86alxXwrdpjVAbkh zhS2F5KK3MN5fNWeyb+/escxc+g4jsrl -----END CERTIFICATE-----Generated at Fri Apr 25 08:23:40 2025 by rpki-client on console.sobornost.net