$ rpki-client -vvf rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.mft File: TRdqC0V6blaV03p-y43LOnPLSBI.mft (raw, json) Hash identifier: kk5SQVVAqmtDNocQDXpJmR1IptIHjR4tFmd5wnrKuTU= Subject key identifier: 1C:9E:61:85:3B:43:B8:19:7D:8B:07:DB:06:D7:F3:C5:05:54:F8:EE Authority key identifier: 4D:17:6A:0B:45:7A:6E:56:95:D3:7A:7E:CB:8D:CB:3A:73:CB:48:12 Certificate issuer: /CN=A913A8A4/serialNumber=4D176A0B457A6E5695D37A7ECB8DCB3A73CB4812 Certificate serial: 121F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRdqC0V6blaV03p-y43LOnPLSBI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.mft Manifest number: 11F4 Signing time: Mon 28 Apr 2025 17:23:56 +0000 Manifest this update: Mon 28 Apr 2025 17:23:56 +0000 Manifest next update: Mon 05 May 2025 17:23:56 +0000 Files and hashes: 1: TRdqC0V6blaV03p-y43LOnPLSBI.crl (hash: Dx8DPiOpnEVlBPSrNBTa5IltsWzbUksjfc4E9A+7KLQ=) 2: FDBAF28A0DD911F083E3DA5FC4F9AE02.roa (hash: kIAHkFLOpwolSJf04aD3JLXYoBABYe2ZStZeaKIW870=) 3: 20FA35820DD811F08B2CB42FC4F9AE02.roa (hash: ivlmtXesZi45jYGzQTce8ZrgJvENn+C2mo88/M8f84c=) 4: E7C319C60DD911F0A4D25B5FC4F9AE02.roa (hash: Fb+Ti1WbP+2ky2gp08ieDxdIQQX1VZl4dWu/c8T0fjM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.crl rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRdqC0V6blaV03p-y43LOnPLSBI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 17:23:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4639 (0x121f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A8A4, serialNumber=4D176A0B457A6E5695D37A7ECB8DCB3A73CB4812 Validity Not Before: Apr 28 17:23:56 2025 GMT Not After : May 5 17:23:56 2025 GMT Subject: CN=680fb9ac-90a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8d:64:11:2c:5c:c7:f7:7a:2d:b0:70:56:a1: c9:a8:ac:49:aa:2c:e3:9b:c4:c5:0c:d9:09:2d:e7: b3:6f:56:28:f3:3c:5b:f3:4c:3e:86:07:48:a3:8f: 7e:5a:19:0c:63:88:92:56:a2:e6:65:53:4c:ea:07: c5:64:ec:70:a1:9b:e6:ea:f7:4f:ac:be:5f:e1:cb: fb:d2:fb:d5:15:6a:d5:2c:19:65:b8:05:84:b7:6b: aa:6f:73:bc:1a:c5:93:02:e3:45:fb:44:67:d0:03: 71:7d:41:94:b8:a8:81:7a:0d:aa:55:59:fc:e4:91: e1:b5:8e:98:dd:b0:3e:ab:71:50:48:30:c7:35:9e: e4:f6:7a:0a:99:82:bc:e0:73:3f:68:8f:e1:2e:af: a3:2c:b5:05:aa:f2:5b:0a:d8:5d:45:c7:22:36:33: d5:58:7c:68:4b:6c:1f:94:1f:6b:92:99:33:39:f6: f5:a3:e8:e1:8e:9e:49:f0:b9:82:85:00:98:f8:84: 29:b9:9e:62:71:68:1a:a7:6f:86:4d:aa:8c:4b:24: 7f:11:0e:5c:d7:7e:44:59:8f:2c:b1:30:61:b2:65: 17:33:c6:80:5d:2b:3c:72:ae:3d:8c:72:61:1b:05: a8:81:08:84:73:00:37:41:fe:9d:d9:e1:a8:bd:f8: bb:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:9E:61:85:3B:43:B8:19:7D:8B:07:DB:06:D7:F3:C5:05:54:F8:EE X509v3 Authority Key Identifier: keyid:4D:17:6A:0B:45:7A:6E:56:95:D3:7A:7E:CB:8D:CB:3A:73:CB:48:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRdqC0V6blaV03p-y43LOnPLSBI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:f8:59:f9:b0:1e:1a:18:dd:e1:c5:3f:03:e1:15:12:a5:8c: e7:42:62:2f:70:94:78:fd:89:ff:3c:f8:73:4b:6b:1c:49:70: b2:48:07:a5:3c:5c:6c:72:e9:cb:5d:a1:3b:89:db:66:85:aa: a6:b0:5c:ee:c8:8f:7e:eb:71:db:08:d7:94:b9:b0:2e:c1:18: b5:9b:58:7c:5d:c3:19:3a:e7:02:6a:93:8b:f3:69:10:dc:c7: 5f:bf:25:ff:fa:a6:ca:ce:49:91:74:45:f1:81:82:af:bd:80: 33:1c:03:b3:a6:8a:72:8b:9d:48:02:44:71:13:86:9c:ec:75: 39:a1:bf:9e:32:f1:28:98:15:b2:ae:fd:8a:77:96:e3:00:34: d5:32:5c:33:73:31:65:8e:e2:10:d9:10:22:3f:c1:79:39:b7: 9d:d3:48:1f:08:51:b4:30:8b:41:8e:c2:03:8a:95:b4:7e:73: 3a:84:1b:c1:ad:97:fe:e3:e0:ee:d6:88:b7:cb:07:d0:ac:70: 41:36:19:75:8d:be:69:ca:e0:8c:ea:a8:26:dd:4a:22:9b:4f: 7e:fc:6e:a0:a1:d8:ac:c9:1b:83:cf:9b:72:40:56:e3:8b:84: 05:31:22:0d:50:81:d6:b3:8c:0d:27:88:64:f2:b7:43:84:b4: 32:1b:1c:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0E4QTQxMTAvBgNVBAUTKDREMTc2QTBCNDU3QTZFNTY5NUQzN0E3RUNCOERDQjNB NzNDQjQ4MTIwHhcNMjUwNDI4MTcyMzU2WhcNMjUwNTA1MTcyMzU2WjAYMRYwFAYD VQQDEw02ODBmYjlhYy05MGE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt41kESxcx/d6LbBwVqHJqKxJqizjm8TFDNkJLeezb1Yo8zxb80w+hgdIo49+ WhkMY4iSVqLmZVNM6gfFZOxwoZvm6vdPrL5f4cv70vvVFWrVLBlluAWEt2uqb3O8 GsWTAuNF+0Rn0ANxfUGUuKiBeg2qVVn85JHhtY6Y3bA+q3FQSDDHNZ7k9noKmYK8 4HM/aI/hLq+jLLUFqvJbCthdRcciNjPVWHxoS2wflB9rkpkzOfb1o+jhjp5J8LmC hQCY+IQpuZ5icWgap2+GTaqMSyR/EQ5c135EWY8ssTBhsmUXM8aAXSs8cq49jHJh GwWogQiEcwA3Qf6d2eGovfi76wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFByeYYU7 Q7gZfYsH2wbX88UFVPjuMB8GA1UdIwQYMBaAFE0XagtFem5WldN6fsuNyzpzy0gS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQThBNC83OTBFNjEwQ0U5 QzMxMUU4QTlDRUQ2NDhDNEY5QUUwMi9UUmRxQzBWNmJsYVYwM3AteTQzTE9uUExT QkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RSZHFDMFY2YmxhVjAzcC15NDNMT25QTFNCSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QThBNC83OTBFNjEwQ0U5QzMxMUU4QTlDRUQ2NDhDNEY5QUUwMi9UUmRxQzBWNmJs YVYwM3AteTQzTE9uUExTQkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAE+Fn5sB4aGN3hxT8D4RUSpYznQmIvcJR4/Yn/PPhzS2scSXCySAel PFxscunLXaE7idtmhaqmsFzuyI9+63HbCNeUubAuwRi1m1h8XcMZOucCapOL82kQ 3MdfvyX/+qbKzkmRdEXxgYKvvYAzHAOzpopyi51IAkRxE4ac7HU5ob+eMvEomBWy rv2Kd5bjADTVMlwzczFljuIQ2RAiP8F5Obed00gfCFG0MItBjsIDipW0fnM6hBvB rZf+4+Du1oi3ywfQrHBBNhl1jb5pyuCM6qgm3Uoim09+/G6godisyRuDz5tyQFbj i4QFMSINUIHWs4wNJ4hk8rdDhLQyGxyn -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:29 2025 by rpki-client on console.sobornost.net