$ rpki-client -vvf rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft File: 1fF0__36EIu7L4fnPG6d1RCNOp8.mft (raw, json) Hash identifier: RfFNb1iCQ/36QwZO29lzeGrIbBEp41UTvYj3W1eZBJc= Subject key identifier: F1:5C:F7:43:ED:D0:B3:3C:35:82:AD:2E:EE:3A:B7:59:B0:40:1D:31 Authority key identifier: D5:F1:74:FF:FD:FA:10:8B:BB:2F:87:E7:3C:6E:9D:D5:10:8D:3A:9F Certificate issuer: /CN=A913A5BD/serialNumber=D5F174FFFDFA108BBB2F87E73C6E9DD5108D3A9F Certificate serial: 0242 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1fF0__36EIu7L4fnPG6d1RCNOp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft Manifest number: 023F Signing time: Sun 27 Apr 2025 01:30:31 +0000 Manifest this update: Sun 27 Apr 2025 01:30:30 +0000 Manifest next update: Sun 04 May 2025 01:30:30 +0000 Files and hashes: 1: 1fF0__36EIu7L4fnPG6d1RCNOp8.crl (hash: dvYxLsv4R5jO8UN9lpVc6SlyER16VMGLusQMdn9ZIZ8=) 2: C605A7A01CF911EDBAE62F45C4F9AE02.roa (hash: dkCYBmAm0OsNXUn60urmLpPiFKakWVNsJOBeAK9VAVY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.crl rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1fF0__36EIu7L4fnPG6d1RCNOp8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 01:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 578 (0x242) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A5BD, serialNumber=D5F174FFFDFA108BBB2F87E73C6E9DD5108D3A9F Validity Not Before: Apr 27 01:30:30 2025 GMT Not After : May 4 01:30:30 2025 GMT Subject: CN=680d88b6-94d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e2:15:2e:f4:88:36:12:20:d6:41:66:7e:7a: 2b:9c:39:40:c5:20:b0:6e:50:2e:c8:f1:84:de:32: b5:b0:a6:d1:e9:3c:ea:a9:34:52:67:85:d0:98:19: 04:0b:e6:92:bd:b7:d1:2a:f4:d3:a9:99:0a:fb:60: 87:a5:4f:ef:8a:15:f6:65:32:06:a4:06:ba:24:b0: 65:fc:e4:73:9b:d1:0f:5d:87:a3:96:6d:e0:c4:24: 2e:b3:f9:c1:3a:bb:cc:23:5d:d1:7d:87:bc:e5:60: f7:00:7a:13:ff:e8:86:21:83:ad:76:0a:de:ef:aa: 21:3d:dd:34:08:ef:83:d6:14:13:e3:52:b8:b7:d3: af:04:0a:41:48:c6:69:80:a5:cd:8e:0c:bd:74:aa: 48:fe:d1:66:de:77:bf:ea:bf:c9:2d:34:7d:5c:73: 4f:e2:2e:ab:bb:e8:d1:0c:8e:67:cf:99:1a:f9:3c: 7a:39:91:32:ba:89:85:e1:44:97:80:20:df:dc:0e: a0:34:63:57:4a:ce:f3:e9:de:4b:08:39:86:ca:6d: 41:4b:69:fa:12:14:cc:17:63:1b:28:b8:f1:6c:49: 51:4d:5b:cb:3b:e7:c3:97:45:9b:02:a9:5b:3f:c0: 34:e9:68:7a:04:4b:f5:c8:77:07:bb:27:e1:47:af: 4f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:5C:F7:43:ED:D0:B3:3C:35:82:AD:2E:EE:3A:B7:59:B0:40:1D:31 X509v3 Authority Key Identifier: keyid:D5:F1:74:FF:FD:FA:10:8B:BB:2F:87:E7:3C:6E:9D:D5:10:8D:3A:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1fF0__36EIu7L4fnPG6d1RCNOp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:fd:cb:57:5c:f1:ba:b4:cc:f0:44:20:88:9e:29:e3:e2:60: d4:b7:75:b6:45:81:38:62:59:65:d5:d0:4f:84:7c:46:1a:f1: 48:c3:df:c4:b8:97:8a:87:da:f5:03:ed:5e:88:57:85:cd:fa: b7:21:4e:7f:cb:09:55:c6:d6:77:d1:6a:f5:6c:40:35:20:5a: c2:5a:26:9f:cf:0a:84:bb:ff:cb:f4:08:a2:27:32:61:db:c3: be:90:0d:bd:fe:ca:c0:78:a4:10:d0:a0:f7:58:7f:8f:40:9e: db:d5:e7:e7:5d:ad:d9:bd:5e:27:42:76:fd:59:3d:52:03:d8: c0:c1:6c:b4:f0:4b:a4:8d:34:74:2e:e7:0d:3e:22:30:2e:f1: d5:96:91:42:52:02:9d:e4:bd:85:ef:53:43:e2:d1:c5:67:92: 53:e7:61:3f:66:44:ee:43:3f:25:81:4b:b0:9f:40:86:9d:fe: 0e:25:98:10:5f:fe:af:7a:30:fe:ec:e3:e8:3e:b2:5a:0b:b5: 5c:23:43:08:ae:3f:d0:ae:08:1f:af:db:b0:f8:7a:e9:d1:67: cf:d3:e5:3d:42:82:3f:fa:e8:31:94:c4:36:fe:8a:ac:52:b5: 78:74:19:ae:2c:70:07:8b:08:60:de:67:01:c2:de:38:1b:6d: 9d:df:e7:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0E1QkQxMTAvBgNVBAUTKEQ1RjE3NEZGRkRGQTEwOEJCQjJGODdFNzNDNkU5REQ1 MTA4RDNBOUYwHhcNMjUwNDI3MDEzMDMwWhcNMjUwNTA0MDEzMDMwWjAYMRYwFAYD VQQDEw02ODBkODhiNi05NGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr+IVLvSINhIg1kFmfnornDlAxSCwblAuyPGE3jK1sKbR6TzqqTRSZ4XQmBkE C+aSvbfRKvTTqZkK+2CHpU/vihX2ZTIGpAa6JLBl/ORzm9EPXYejlm3gxCQus/nB OrvMI13RfYe85WD3AHoT/+iGIYOtdgre76ohPd00CO+D1hQT41K4t9OvBApBSMZp gKXNjgy9dKpI/tFm3ne/6r/JLTR9XHNP4i6ru+jRDI5nz5ka+Tx6OZEyuomF4USX gCDf3A6gNGNXSs7z6d5LCDmGym1BS2n6EhTMF2MbKLjxbElRTVvLO+fDl0WbAqlb P8A06Wh6BEv1yHcHuyfhR69PFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPFc90Pt 0LM8NYKtLu46t1mwQB0xMB8GA1UdIwQYMBaAFNXxdP/9+hCLuy+H5zxundUQjTqf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTVCRC80QjJCMzkzRTFD RjcxMUVEQTAwRkQzNDNDNEY5QUUwMi8xZkYwX18zNkVJdTdMNGZuUEc2ZDFSQ05P cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFmRjBfXzM2RUl1N0w0Zm5QRzZkMVJDTk9wOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QTVCRC80QjJCMzkzRTFDRjcxMUVEQTAwRkQzNDNDNEY5QUUwMi8xZkYwX18zNkVJ dTdMNGZuUEc2ZDFSQ05PcDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBA/ctXXPG6tMzwRCCIninj4mDUt3W2RYE4Ylll1dBPhHxGGvFIw9/E uJeKh9r1A+1eiFeFzfq3IU5/ywlVxtZ30Wr1bEA1IFrCWiafzwqEu//L9AiiJzJh 28O+kA29/srAeKQQ0KD3WH+PQJ7b1efnXa3ZvV4nQnb9WT1SA9jAwWy08EukjTR0 LucNPiIwLvHVlpFCUgKd5L2F71ND4tHFZ5JT52E/ZkTuQz8lgUuwn0CGnf4OJZgQ X/6vejD+7OPoPrJaC7VcI0MIrj/Qrggfr9uw+Hrp0WfP0+U9QoI/+ugxlMQ2/oqs UrV4dBmuLHAHiwhg3mcBwt44G22d3+cL -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:32 2025 by rpki-client on console.sobornost.net