$ rpki-client -vvf rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft File: r4P0CG-0oWWIvizFUNW42dRCOYU.mft (raw, json) Hash identifier: PH+Ib+BYEJbHIX8ifkSsKyr37qTsd7UvRt/F3Aot4Hs= Subject key identifier: D1:65:FB:56:40:47:D3:41:3C:3A:F6:F1:B1:32:70:41:EC:DC:D3:70 Authority key identifier: AF:83:F4:08:6F:B4:A1:65:88:BE:2C:C5:50:D5:B8:D9:D4:42:39:85 Certificate issuer: /CN=A913BEA2/serialNumber=AF83F4086FB4A16588BE2CC550D5B8D9D4423985 Certificate serial: 07A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft Manifest number: 0797 Signing time: Sat 26 Apr 2025 20:59:59 +0000 Manifest this update: Sat 26 Apr 2025 20:59:59 +0000 Manifest next update: Sat 03 May 2025 20:59:59 +0000 Files and hashes: 1: r4P0CG-0oWWIvizFUNW42dRCOYU.crl (hash: hTnlft/sMN6WbQxpLv/S752ew7K2+kAnK4grLfHVzJg=) 2: BF529990959F11EC844CAD64C4F9AE02.roa (hash: nebZkphHnCGcHsK4OPuyoN2DWSVg+M+V/082vsrCEns=) 3: 6AB65D92AD1811EB84E05F5BC4F9AE02.roa (hash: tXMl2RtLfZvDGfhyJ5diezkCwv50p552Np4xQThv520=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.crl rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1953 (0x7a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913BEA2, serialNumber=AF83F4086FB4A16588BE2CC550D5B8D9D4423985 Validity Not Before: Apr 26 20:59:59 2025 GMT Not After : May 3 20:59:59 2025 GMT Subject: CN=680d494f-32d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:74:92:cb:63:90:ef:46:d6:ff:dd:f4:cd:93: 5d:2d:2f:83:64:ec:c7:13:e9:cd:e9:b9:43:f5:75: 84:a7:16:92:44:0a:a7:98:a2:8e:1f:01:72:9f:fd: 17:d7:fa:14:a9:61:a4:4a:0b:bc:24:20:90:ed:15: 16:aa:b4:fb:38:4a:a4:7f:45:6b:f3:2e:ec:fc:f9: bd:58:2f:d2:8f:e5:e8:0a:36:c8:4a:de:a6:7a:24: 55:3f:43:78:67:75:ec:c5:e7:05:9e:c9:bf:45:23: 66:e0:e7:7f:df:ee:0a:ee:7b:17:a6:92:55:a4:54: 3b:15:a9:03:0c:08:85:94:a4:17:dd:1f:81:ef:b2: a0:07:99:c8:06:27:bc:43:ee:30:34:a5:0b:79:39: b8:38:12:60:14:ae:70:7c:52:e8:f6:82:8d:93:6d: fa:4b:87:ae:5d:eb:2c:7a:bc:e7:96:5a:c4:d6:0e: b8:d7:bb:b0:e1:82:2d:84:3b:19:e3:3e:07:28:b7: c5:d1:9e:59:8f:2b:8d:c8:1a:97:e9:56:a8:9d:01: ec:40:7d:15:85:22:d3:9f:8b:0a:57:a9:71:52:70: b6:eb:f8:d4:4f:47:28:5d:e2:af:48:50:8b:39:37: ee:30:5c:bb:e6:51:78:b5:be:41:2c:a2:63:db:a5: 1d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:65:FB:56:40:47:D3:41:3C:3A:F6:F1:B1:32:70:41:EC:DC:D3:70 X509v3 Authority Key Identifier: keyid:AF:83:F4:08:6F:B4:A1:65:88:BE:2C:C5:50:D5:B8:D9:D4:42:39:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:6e:08:73:ab:3a:a1:6d:4c:92:61:00:0d:ec:f6:fd:4c:e0: 31:12:79:96:a1:30:fe:5f:31:f6:d6:2d:e7:b4:3f:a5:40:21: 77:b7:80:9a:77:29:69:72:b6:f9:8d:e2:4e:70:c6:2c:8b:0c: 36:4b:f6:22:07:08:9b:92:59:9c:d3:ff:5c:29:7c:76:cd:e2: 7a:e4:ef:fb:86:3a:e5:33:b6:57:af:d9:ee:fa:db:c5:45:30: 90:fc:b4:cf:55:eb:55:9a:b3:b9:76:e7:5e:48:db:d3:6d:79: cc:33:75:0e:34:f1:f2:1f:b7:47:70:43:5e:db:91:d4:a4:e8: 2f:ab:f2:0e:bc:ff:84:6d:0e:9f:dc:d3:25:3c:c9:be:2b:8e: bd:ce:ab:6c:8d:18:1c:7a:39:ca:3d:42:bc:af:ad:e0:5e:63: c3:91:ab:a6:b8:ae:c2:8f:c7:21:7c:8a:8b:4d:dd:68:e2:e0: 56:f8:0e:2a:85:a2:db:f2:71:ed:a9:90:56:73:27:69:20:c3: 2b:66:c3:f9:40:1a:5a:fe:40:38:1d:eb:f7:f7:bf:63:7e:fb: f1:e1:c6:77:39:3c:40:0e:02:32:21:5c:6d:0a:fb:9a:e8:6c: 04:e2:e8:84:ae:a6:2a:46:b2:1c:20:0b:69:58:ff:b3:ca:c7: a7:c8:c9:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0JFQTIxMTAvBgNVBAUTKEFGODNGNDA4NkZCNEExNjU4OEJFMkNDNTUwRDVCOEQ5 RDQ0MjM5ODUwHhcNMjUwNDI2MjA1OTU5WhcNMjUwNTAzMjA1OTU5WjAYMRYwFAYD VQQDEw02ODBkNDk0Zi0zMmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqHSSy2OQ70bW/930zZNdLS+DZOzHE+nN6blD9XWEpxaSRAqnmKKOHwFyn/0X 1/oUqWGkSgu8JCCQ7RUWqrT7OEqkf0Vr8y7s/Pm9WC/Sj+XoCjbISt6meiRVP0N4 Z3XsxecFnsm/RSNm4Od/3+4K7nsXppJVpFQ7FakDDAiFlKQX3R+B77KgB5nIBie8 Q+4wNKULeTm4OBJgFK5wfFLo9oKNk236S4euXesserznllrE1g6417uw4YIthDsZ 4z4HKLfF0Z5ZjyuNyBqX6VaonQHsQH0VhSLTn4sKV6lxUnC26/jUT0coXeKvSFCL OTfuMFy75lF4tb5BLKJj26UdFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNFl+1ZA R9NBPDr28bEycEHs3NNwMB8GA1UdIwQYMBaAFK+D9AhvtKFliL4sxVDVuNnUQjmF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkVBMi8xOUZFQTQ1ODAz MzIxMUVCQjA1RDU4MTRDNEY5QUUwMi9yNFAwQ0ctMG9XV0l2aXpGVU5XNDJkUkNP WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I0UDBDRy0wb1dXSXZpekZVTlc0MmRSQ09ZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QkVBMi8xOUZFQTQ1ODAzMzIxMUVCQjA1RDU4MTRDNEY5QUUwMi9yNFAwQ0ctMG9X V0l2aXpGVU5XNDJkUkNPWVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjbghzqzqhbUySYQAN7Pb9TOAxEnmWoTD+XzH21i3ntD+lQCF3t4Ca dylpcrb5jeJOcMYsiww2S/YiBwibklmc0/9cKXx2zeJ65O/7hjrlM7ZXr9nu+tvF RTCQ/LTPVetVmrO5dudeSNvTbXnMM3UONPHyH7dHcENe25HUpOgvq/IOvP+EbQ6f 3NMlPMm+K469zqtsjRgcejnKPUK8r63gXmPDkaumuK7Cj8chfIqLTd1o4uBW+A4q haLb8nHtqZBWcydpIMMrZsP5QBpa/kA4Hev3979jfvvx4cZ3OTxADgIyIVxtCvua 6GwE4uiErqYqRrIcIAtpWP+zysenyMl9 -----END CERTIFICATE-----Generated at Sun Apr 27 00:13:56 2025 by rpki-client on console.sobornost.net