$ rpki-client -vvf rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.mft File: T579Q7p5o0lFUQnbIAhFqJCM3Fw.mft (raw, json) Hash identifier: SObPRsbQPfnj5e48KY8BI2U4vishUvMotkUOBW9eut0= Subject key identifier: AF:8A:51:66:4E:CC:2A:A7:A1:2A:ED:6E:E9:7B:6D:6A:64:09:C3:49 Authority key identifier: 4F:9E:FD:43:BA:79:A3:49:45:51:09:DB:20:08:45:A8:90:8C:DC:5C Certificate issuer: /CN=A9135F07/serialNumber=4F9EFD43BA79A349455109DB200845A8908CDC5C Certificate serial: 47 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T579Q7p5o0lFUQnbIAhFqJCM3Fw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.mft Manifest number: 44 Signing time: Fri 25 Apr 2025 06:27:11 +0000 Manifest this update: Fri 25 Apr 2025 06:27:10 +0000 Manifest next update: Fri 02 May 2025 06:27:10 +0000 Files and hashes: 1: T579Q7p5o0lFUQnbIAhFqJCM3Fw.crl (hash: 5LYOFcAGsZNnxQT4OrII6s4g/ocQ9sIALh84JR5lWSE=) 2: 13CA64E4C35B11EFA021A243C4F9AE02.roa (hash: UhUF/9TtUZwnLWqWalCeHKKjGi9TCpHZ26MzC5XnFdw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.crl rsync://rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T579Q7p5o0lFUQnbIAhFqJCM3Fw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71 (0x47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135F07, serialNumber=4F9EFD43BA79A349455109DB200845A8908CDC5C Validity Not Before: Apr 25 06:27:10 2025 GMT Not After : May 2 06:27:10 2025 GMT Subject: CN=680b2b3f-dfec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5b:a9:28:95:cd:ed:aa:11:0e:90:a1:41:8b: 3a:f8:c7:fb:47:d7:2e:1b:18:e5:d3:c5:f7:28:48: 19:6a:7f:de:a1:86:5d:93:f1:d3:1c:b7:5d:c2:ba: 1f:1c:be:a4:f4:27:b3:77:e1:99:a6:47:77:2d:49: 2e:1d:a7:fe:9b:18:a2:d4:31:11:de:f9:1a:6a:e8: 66:3b:11:2d:3f:b6:a5:6b:17:a0:70:ec:7e:49:33: ca:94:fb:2e:4b:f4:ec:9e:ae:ae:6a:d5:c6:7f:6e: 93:c5:41:eb:ad:d3:99:2b:b6:bc:4a:e4:36:56:22: 87:ba:0d:0c:90:5d:e5:c0:f2:e2:9f:1a:11:87:3f: 41:8f:2f:5b:32:21:1e:95:3a:91:3a:0e:be:67:b4: 3d:2e:ba:96:4b:02:38:20:e7:f1:6c:81:2b:24:49: 74:48:fa:ba:60:5a:74:f1:20:79:aa:77:fb:b3:27: 87:08:e2:63:86:70:86:cc:33:50:5e:b6:cb:9b:bd: 48:d2:71:68:67:00:d6:bb:e5:bd:48:e1:c1:b2:0e: 4c:a5:e0:f5:27:3c:31:e5:10:73:be:2e:26:4c:26: dc:ae:1e:e5:a1:e6:1f:09:12:97:44:47:b3:2e:c6: ef:48:32:5c:55:b7:76:5e:58:2f:3a:ed:da:5f:06: 97:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:8A:51:66:4E:CC:2A:A7:A1:2A:ED:6E:E9:7B:6D:6A:64:09:C3:49 X509v3 Authority Key Identifier: keyid:4F:9E:FD:43:BA:79:A3:49:45:51:09:DB:20:08:45:A8:90:8C:DC:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T579Q7p5o0lFUQnbIAhFqJCM3Fw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:3c:c3:0e:8c:93:81:39:48:b2:1c:b0:62:ee:32:b3:9a:73: e2:04:98:6e:27:db:a3:8a:f0:45:35:6d:1b:81:2d:8c:72:8d: 90:55:81:79:31:fa:9c:c3:3e:d1:e1:56:56:d5:bd:aa:14:01: 01:be:9b:c2:58:f3:c4:d7:46:24:f5:f8:9b:59:9c:95:ff:28: 0f:91:46:2e:8a:99:7f:a1:54:4b:7a:ec:cd:3b:96:38:6c:94: b7:ce:9b:92:76:0b:92:4d:9a:a1:67:fb:08:25:07:3b:ff:96: 29:f9:30:62:4d:ed:41:08:50:ba:2d:7d:fd:69:22:44:83:70: c7:32:84:aa:61:91:83:f6:b4:a3:87:0d:fa:71:b5:55:f2:b2: 5e:f2:6f:b7:34:95:7a:32:ae:d3:45:45:77:f1:44:53:30:be: 15:c3:77:f6:7c:f5:3d:1c:e9:7b:bc:b3:da:5a:b4:58:e2:2c: e8:1a:0a:54:cb:c1:7b:ee:15:bc:31:ae:3e:58:e6:55:d1:96: c1:ee:81:02:02:a3:a6:9d:7c:e5:17:3d:de:39:7f:0f:16:c4: 80:1b:c4:49:cd:0e:02:18:e6:51:58:18:c9:dd:25:b1:53:b0: 39:fc:94:24:85:23:e3:1c:b8:78:fd:23:52:b9:a8:78:af:b4: c4:ae:a2:4b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NUYwNzExMC8GA1UEBRMoNEY5RUZENDNCQTc5QTM0OTQ1NTEwOURCMjAwODQ1QTg5 MDhDREM1QzAeFw0yNTA0MjUwNjI3MTBaFw0yNTA1MDIwNjI3MTBaMBgxFjAUBgNV BAMTDTY4MGIyYjNmLWRmZWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCgW6kolc3tqhEOkKFBizr4x/tH1y4bGOXTxfcoSBlqf96hhl2T8dMct13Cuh8c vqT0J7N34ZmmR3ctSS4dp/6bGKLUMRHe+Rpq6GY7ES0/tqVrF6Bw7H5JM8qU+y5L 9Oyerq5q1cZ/bpPFQeut05krtrxK5DZWIoe6DQyQXeXA8uKfGhGHP0GPL1syIR6V OpE6Dr5ntD0uupZLAjgg5/FsgSskSXRI+rpgWnTxIHmqd/uzJ4cI4mOGcIbMM1Be tsubvUjScWhnANa75b1I4cGyDkyl4PUnPDHlEHO+LiZMJtyuHuWh5h8JEpdER7Mu xu9IMlxVt3ZeWC867dpfBpepAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUr4pRZk7M KqehKu1u6XttamQJw0kwHwYDVR0jBBgwFoAUT579Q7p5o0lFUQnbIAhFqJCM3Fww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1RjA3LzJGNzIyQTk4QzM1 QTExRUY4MzE0QzQzRkM0RjlBRTAyL1Q1NzlRN3A1bzBsRlVRbmJJQWhGcUpDTTNG dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVDU3OVE3cDVvMGxGVVFuYklBaEZxSkNNM0Z3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1 RjA3LzJGNzIyQTk4QzM1QTExRUY4MzE0QzQzRkM0RjlBRTAyL1Q1NzlRN3A1bzBs RlVRbmJJQWhGcUpDTTNGdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABg8ww6Mk4E5SLIcsGLuMrOac+IEmG4n26OK8EU1bRuBLYxyjZBVgXkx +pzDPtHhVlbVvaoUAQG+m8JY88TXRiT1+JtZnJX/KA+RRi6KmX+hVEt67M07ljhs lLfOm5J2C5JNmqFn+wglBzv/lin5MGJN7UEIULotff1pIkSDcMcyhKphkYP2tKOH DfpxtVXysl7yb7c0lXoyrtNFRXfxRFMwvhXDd/Z89T0c6Xu8s9patFjiLOgaClTL wXvuFbwxrj5Y5lXRlsHugQICo6adfOUXPd45fw8WxIAbxEnNDgIY5lFYGMndJbFT sDn8lCSFI+McuHj9I1K5qHivtMSuoks= -----END CERTIFICATE-----Generated at Fri Apr 25 08:23:42 2025 by rpki-client on console.sobornost.net