$ rpki-client -vvf rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft File: 3604bKySNIOAxXSS2xjyvIScUoY.mft (raw, json) Hash identifier: DOvOXa4KEOvRZ/p9cScJDmlHpqxEaSmnH1nT34tawRQ= Subject key identifier: 82:B5:56:F8:02:28:B9:08:34:38:B1:8A:C6:3F:5E:44:D7:A9:F4:A9 Authority key identifier: DF:AD:38:6C:AC:92:34:83:80:C5:74:92:DB:18:F2:BC:84:9C:52:86 Certificate issuer: /CN=A913E36B/serialNumber=DFAD386CAC92348380C57492DB18F2BC849C5286 Certificate serial: 0925 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft Manifest number: 0917 Signing time: Mon 28 Apr 2025 20:46:42 +0000 Manifest this update: Mon 28 Apr 2025 20:46:41 +0000 Manifest next update: Mon 05 May 2025 20:46:41 +0000 Files and hashes: 1: 3604bKySNIOAxXSS2xjyvIScUoY.crl (hash: LGIicXj7dmImtJPul/lyceP/zRjAzVm8btMG8jUjOrg=) 2: 649A355C5F0F11EBBDB7C113C4F9AE02.roa (hash: bw4sMGnKDiftNLfRmiZR5SdnMpNduWFQjTQlPL6jZYY=) 3: 20544B84F14511ECA1AE5F4EC4F9AE02.roa (hash: FPAklaM71rdV3Mf7CFthJcOnotN1vw1BtN7p9xcPR+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.crl rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2341 (0x925) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E36B, serialNumber=DFAD386CAC92348380C57492DB18F2BC849C5286 Validity Not Before: Apr 28 20:46:41 2025 GMT Not After : May 5 20:46:41 2025 GMT Subject: CN=680fe932-8610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ba:2e:76:92:c4:1d:9a:f4:1e:e5:a4:74:c7: 05:8f:b4:49:de:19:18:9c:f9:80:ce:1d:9e:3c:d5: 49:cb:cf:c2:04:54:0d:b3:8c:85:dd:97:4d:3c:86: f3:b5:8c:26:21:9c:cf:91:31:0e:a5:c2:58:21:4c: 0d:7c:6e:8c:55:c6:44:bb:4a:77:d1:7a:c6:50:c0: 6c:e3:32:36:56:2c:80:3f:7a:7d:3a:54:a3:4b:e0: ba:19:c4:1f:c7:4a:aa:5b:ea:50:35:31:ec:fa:22: 51:03:9c:63:96:18:aa:ff:7c:29:46:a3:08:eb:1d: 29:4d:7e:00:70:16:4e:f2:57:4d:0d:f4:2c:ed:62: 26:95:91:37:4d:1d:34:e3:58:45:2a:75:d9:33:c7: 9f:40:ac:5c:7e:70:8a:c3:57:00:29:45:65:ab:52: ac:e9:e3:42:46:8b:f4:e6:36:97:01:79:6b:ee:b3: 87:83:14:b7:04:75:19:cd:1e:83:be:8e:09:09:c6: 5a:d4:bf:11:ae:ec:e6:23:26:8a:f1:20:d1:be:d3: 9f:a6:b0:11:3f:93:3a:fd:37:7a:c8:e1:18:fb:45: c3:4b:4c:87:af:f0:2e:f7:e0:52:ba:60:6b:48:c3: b5:4e:4f:f2:3e:2a:8f:42:c5:12:5c:e3:c4:fe:d8: 55:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:B5:56:F8:02:28:B9:08:34:38:B1:8A:C6:3F:5E:44:D7:A9:F4:A9 X509v3 Authority Key Identifier: keyid:DF:AD:38:6C:AC:92:34:83:80:C5:74:92:DB:18:F2:BC:84:9C:52:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:c4:3a:36:0e:cf:06:a8:59:46:a8:ad:87:8a:b4:b0:42:09: b8:72:8c:a0:d0:ed:37:d5:19:0b:22:22:13:1e:99:24:4f:bd: 2c:37:cc:da:04:6f:0f:a6:a8:c5:9e:7b:e1:0a:de:91:8b:d2: 64:dc:42:b8:4a:88:a0:ad:3e:c4:0d:04:86:2a:64:b7:08:61: f7:f6:4c:0c:88:a2:ae:97:5b:24:b1:f9:21:8e:d0:35:d2:2f: 20:16:5e:60:ca:6a:1a:25:07:f2:a0:1f:56:c5:4d:65:2e:c4: 51:45:e7:00:1d:1f:ae:da:1a:7f:f2:ac:db:12:91:d7:49:fd: 0f:5d:10:69:53:7c:c9:dd:97:8f:cb:23:37:39:b6:2d:6a:32: 88:79:10:46:ee:98:f9:bd:40:89:5e:f4:2a:58:9c:c1:43:95: f4:06:93:9c:a3:2e:71:bc:96:0b:90:7f:86:c2:8c:50:ed:d1: 86:b5:72:df:3a:38:93:74:81:93:6f:db:d6:8e:34:c1:51:55: d1:31:8c:38:5f:9e:ea:09:d2:5d:d6:6a:ed:97:4a:99:7e:30: b1:fa:33:bd:40:87:c2:3f:bd:40:2c:a3:2d:69:28:42:37:01: da:30:ec:aa:1f:93:2d:0a:ff:08:75:92:83:37:fb:10:1d:8c: dd:19:40:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCSUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0UzNkIxMTAvBgNVBAUTKERGQUQzODZDQUM5MjM0ODM4MEM1NzQ5MkRCMThGMkJD ODQ5QzUyODYwHhcNMjUwNDI4MjA0NjQxWhcNMjUwNTA1MjA0NjQxWjAYMRYwFAYD VQQDEw02ODBmZTkzMi04NjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzboudpLEHZr0HuWkdMcFj7RJ3hkYnPmAzh2ePNVJy8/CBFQNs4yF3ZdNPIbz tYwmIZzPkTEOpcJYIUwNfG6MVcZEu0p30XrGUMBs4zI2ViyAP3p9OlSjS+C6GcQf x0qqW+pQNTHs+iJRA5xjlhiq/3wpRqMI6x0pTX4AcBZO8ldNDfQs7WImlZE3TR00 41hFKnXZM8efQKxcfnCKw1cAKUVlq1Ks6eNCRov05jaXAXlr7rOHgxS3BHUZzR6D vo4JCcZa1L8RruzmIyaK8SDRvtOfprARP5M6/Td6yOEY+0XDS0yHr/Au9+BSumBr SMO1Tk/yPiqPQsUSXOPE/thVUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIK1VvgC KLkINDixisY/XkTXqfSpMB8GA1UdIwQYMBaAFN+tOGyskjSDgMV0ktsY8ryEnFKG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTM2Qi83QzJDNjI0MEEw OTExMUVBQTk0MjdDNDRDNEY5QUUwMi8zNjA0Ykt5U05JT0F4WFNTMnhqeXZJU2NV b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM2MDRiS3lTTklPQXhYU1MyeGp5dklTY1VvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTM2Qi83QzJDNjI0MEEwOTExMUVBQTk0MjdDNDRDNEY5QUUwMi8zNjA0Ykt5U05J T0F4WFNTMnhqeXZJU2NVb1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcxDo2Ds8GqFlGqK2HirSwQgm4coyg0O031RkLIiITHpkkT70sN8za BG8PpqjFnnvhCt6Ri9Jk3EK4SoigrT7EDQSGKmS3CGH39kwMiKKul1sksfkhjtA1 0i8gFl5gymoaJQfyoB9WxU1lLsRRRecAHR+u2hp/8qzbEpHXSf0PXRBpU3zJ3ZeP yyM3ObYtajKIeRBG7pj5vUCJXvQqWJzBQ5X0BpOcoy5xvJYLkH+GwoxQ7dGGtXLf OjiTdIGTb9vWjjTBUVXRMYw4X57qCdJd1mrtl0qZfjCx+jO9QIfCP71ALKMtaShC NwHaMOyqH5MtCv8IdZKDN/sQHYzdGUAG -----END CERTIFICATE-----Generated at Mon Apr 28 23:05:03 2025 by rpki-client on console.sobornost.net