$ rpki-client -vvf rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft File: T4QeODPgrG_hvu69ABI10VKOzno.mft (raw, json) Hash identifier: SonYcSQTfroepev5Fz+t/mGLlQjMZBaFWfWIMvqJMZM= Subject key identifier: FF:2A:26:8B:5E:AF:F1:23:C7:14:39:5D:D8:91:22:6D:38:5B:AC:8D Authority key identifier: 4F:84:1E:38:33:E0:AC:6F:E1:BE:EE:BD:00:12:35:D1:52:8E:CE:7A Certificate issuer: /CN=A913AF6A/serialNumber=4F841E3833E0AC6FE1BEEEBD001235D1528ECE7A Certificate serial: F6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft Manifest number: F4 Signing time: Sun 27 Apr 2025 04:07:05 +0000 Manifest this update: Sun 27 Apr 2025 04:07:04 +0000 Manifest next update: Sun 04 May 2025 04:07:04 +0000 Files and hashes: 1: T4QeODPgrG_hvu69ABI10VKOzno.crl (hash: evFuBmiIQCwQ0673YI6QYmnN7QF8Ka5CSWLHRhwf45k=) 2: 658B1AC8AE4711EE8C130419C4F9AE02.roa (hash: pBuyb8tUeoDi0BGNU1PyCW1Le78/gB9wiXHTRO2r0pw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.crl rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 246 (0xf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913AF6A, serialNumber=4F841E3833E0AC6FE1BEEEBD001235D1528ECE7A Validity Not Before: Apr 27 04:07:04 2025 GMT Not After : May 4 04:07:04 2025 GMT Subject: CN=680dad69-bde1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1b:a3:b1:ab:dc:f5:6d:2d:cf:d8:b8:34:36: 7a:7e:b0:91:96:5f:7a:d2:54:53:b6:51:42:4f:a6: 84:71:40:9f:be:68:3c:fe:d0:0e:51:cb:5c:c2:b0: 6a:53:66:7a:3c:19:7b:5f:9a:cd:4c:25:b4:41:e8: f9:5c:95:61:bc:c8:12:89:f9:31:3c:b9:b3:af:cd: a0:1d:56:47:4b:1d:75:77:03:01:86:67:3f:22:0c: ed:87:75:ee:03:64:7b:14:cf:54:7d:d5:77:9c:cf: e8:92:5c:2f:7e:f3:c7:62:97:c1:68:b5:41:45:bd: d8:39:55:e0:fb:42:39:c0:52:2b:96:43:c3:4c:11: 76:37:64:3b:67:c2:62:46:38:d0:7d:14:f8:63:13: ee:63:9f:01:23:09:89:81:6b:d4:18:e7:c5:c6:7a: 00:b4:aa:a7:38:1f:73:9b:15:2d:ad:5e:9e:25:f0: 90:e9:6c:a9:37:85:c0:74:c8:02:c4:6d:85:84:dd: 8a:b2:7d:ea:3e:b0:de:50:39:e0:0a:63:7f:f7:ae: 55:3d:27:23:1c:04:54:9f:69:10:df:e6:c4:83:2a: 8d:d9:3a:f2:78:4b:9b:9d:d2:69:22:cd:fa:74:ff: 54:e6:a9:00:60:ca:3e:65:cb:ba:a7:c3:41:b9:c8: 5e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:2A:26:8B:5E:AF:F1:23:C7:14:39:5D:D8:91:22:6D:38:5B:AC:8D X509v3 Authority Key Identifier: keyid:4F:84:1E:38:33:E0:AC:6F:E1:BE:EE:BD:00:12:35:D1:52:8E:CE:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:28:f9:c8:cf:83:f3:29:46:50:d3:6c:88:6b:d5:34:fb:49: ae:2e:61:eb:d3:75:10:df:0e:3c:3e:e9:2c:5a:79:3a:40:6b: 30:87:ab:8e:5d:43:ff:42:75:a6:77:56:77:fc:10:13:0a:17: 23:2c:9b:a2:4a:b1:4e:6f:67:7c:d7:66:41:a4:f8:fc:37:2e: 32:41:3b:7f:a8:ac:c5:c7:ff:5e:e8:b1:82:18:95:79:f1:7b: 84:ca:8a:aa:b7:08:8b:24:29:df:60:4c:dd:ed:11:b5:6e:e7: 17:ad:15:61:95:c4:a3:e3:d8:77:6e:04:c8:90:cc:9a:c4:92: 83:ac:57:e3:85:db:ef:24:17:78:4e:a8:82:0c:90:2a:8b:36: 08:06:f1:b0:60:d5:b7:eb:54:87:07:4c:07:03:22:94:50:70: b6:f8:12:12:75:8c:a4:fd:7b:4f:67:bd:24:bc:50:45:51:4c: 28:70:0c:c7:90:cd:09:43:64:66:3c:1d:13:50:1f:c1:fd:75: f2:ec:e9:76:75:44:a9:22:0b:5e:1a:a3:71:8d:df:1a:35:9c: 89:47:53:11:f3:0d:f3:2f:fc:7c:a0:dc:5f:74:e3:8e:62:5a: 31:94:40:74:7d:90:26:2c:e6:d1:8f:1e:ca:76:62:da:96:58: b4:03:b7:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FGNkExMTAvBgNVBAUTKDRGODQxRTM4MzNFMEFDNkZFMUJFRUVCRDAwMTIzNUQx NTI4RUNFN0EwHhcNMjUwNDI3MDQwNzA0WhcNMjUwNTA0MDQwNzA0WjAYMRYwFAYD VQQDEw02ODBkYWQ2OS1iZGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArBujsavc9W0tz9i4NDZ6frCRll960lRTtlFCT6aEcUCfvmg8/tAOUctcwrBq U2Z6PBl7X5rNTCW0Qej5XJVhvMgSifkxPLmzr82gHVZHSx11dwMBhmc/Igzth3Xu A2R7FM9UfdV3nM/oklwvfvPHYpfBaLVBRb3YOVXg+0I5wFIrlkPDTBF2N2Q7Z8Ji RjjQfRT4YxPuY58BIwmJgWvUGOfFxnoAtKqnOB9zmxUtrV6eJfCQ6WypN4XAdMgC xG2FhN2Ksn3qPrDeUDngCmN/965VPScjHARUn2kQ3+bEgyqN2TryeEubndJpIs36 dP9U5qkAYMo+Zcu6p8NBuche3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP8qJote r/EjxxQ5XdiRIm04W6yNMB8GA1UdIwQYMBaAFE+EHjgz4Kxv4b7uvQASNdFSjs56 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUY2QS84MzdDRDM0NkFF NDIxMUVFQkY2NERBNjlDNEY5QUUwMi9UNFFlT0RQZ3JHX2h2dTY5QUJJMTBWS096 bm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1Q0UWVPRFBnckdfaHZ1NjlBQkkxMFZLT3puby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QUY2QS84MzdDRDM0NkFFNDIxMUVFQkY2NERBNjlDNEY5QUUwMi9UNFFlT0RQZ3JH X2h2dTY5QUJJMTBWS096bm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzKPnIz4PzKUZQ02yIa9U0+0muLmHr03UQ3w48PuksWnk6QGswh6uO XUP/QnWmd1Z3/BATChcjLJuiSrFOb2d812ZBpPj8Ny4yQTt/qKzFx/9e6LGCGJV5 8XuEyoqqtwiLJCnfYEzd7RG1bucXrRVhlcSj49h3bgTIkMyaxJKDrFfjhdvvJBd4 TqiCDJAqizYIBvGwYNW361SHB0wHAyKUUHC2+BISdYyk/XtPZ70kvFBFUUwocAzH kM0JQ2RmPB0TUB/B/XXy7Ol2dUSpIgteGqNxjd8aNZyJR1MR8w3zL/x8oNxfdOOO YloxlEB0fZAmLObRjx7KdmLalli0A7eH -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:42 2025 by rpki-client on console.sobornost.net