$ rpki-client -vvf rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/8uBzCSl2BY65hlYUFDf4-2i3IV0.mft File: 8uBzCSl2BY65hlYUFDf4-2i3IV0.mft (raw, json) Hash identifier: BGRNI57RSrEuTByC88WsqMSFmX+hNhkVVtmugsxled8= Subject key identifier: AD:2D:18:96:D0:42:E7:04:6E:06:AE:96:D2:1C:FC:83:3B:A5:F1:89 Authority key identifier: F2:E0:73:09:29:76:05:8E:B9:86:56:14:14:37:F8:FB:68:B7:21:5D Certificate issuer: /CN=A913E62B/serialNumber=F2E073092976058EB98656141437F8FB68B7215D Certificate serial: 04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uBzCSl2BY65hlYUFDf4-2i3IV0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/8uBzCSl2BY65hlYUFDf4-2i3IV0.mft Manifest number: 02 Signing time: Mon 28 Apr 2025 07:45:57 +0000 Manifest this update: Mon 28 Apr 2025 07:45:56 +0000 Manifest next update: Mon 05 May 2025 07:45:56 +0000 Files and hashes: 1: 8uBzCSl2BY65hlYUFDf4-2i3IV0.crl (hash: WaQTkC73n3R4SqTHAYH66eWOdpIG+T0FkN6u0DL+zuk=) 2: CFED56A4240411F0B73CB374C4F9AE02.roa (hash: TpfGApGhA+prYTtrKuMPr+HyR0maVcippBVUdovPN1o=) 3: CF53E5E6240411F0B73CB374C4F9AE02.roa (hash: d0Aa2dhkwbmc35thg8FxejcFY3HZpKRANn1VC0fp3rA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/8uBzCSl2BY65hlYUFDf4-2i3IV0.crl rsync://rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/8uBzCSl2BY65hlYUFDf4-2i3IV0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uBzCSl2BY65hlYUFDf4-2i3IV0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 07:42:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E62B, serialNumber=F2E073092976058EB98656141437F8FB68B7215D Validity Not Before: Apr 28 07:45:56 2025 GMT Not After : May 5 07:45:56 2025 GMT Subject: CN=680f3234-e3d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:7a:3a:ef:e3:2e:bc:94:76:da:4f:b8:c9:15: 77:75:bd:ba:c6:18:07:8a:be:98:ee:ab:e9:fc:ea: 8b:33:2d:3c:a0:f0:f5:42:b9:05:fb:06:96:34:41: d1:89:90:a2:8d:57:8d:9c:8b:87:d4:80:d2:46:65: 09:3b:30:a8:e4:a4:e1:4a:eb:af:82:b5:44:a5:b6: 26:86:2c:6f:7b:a3:e0:10:c2:4b:51:a5:ff:97:a5: 56:44:e6:49:60:e1:1a:54:37:04:4f:16:64:4c:cc: ca:55:41:5f:6d:3e:d5:4e:93:89:50:01:bd:ff:e2: fc:90:d7:3c:92:24:4e:d8:11:04:0a:71:6a:95:80: c7:3f:2b:59:28:a4:ff:1c:d5:a5:e4:cb:7a:2d:46: 84:f9:f1:63:9a:a4:ad:4a:22:1a:a3:60:94:6f:b0: 81:51:2e:1e:d1:5f:4e:61:14:21:28:73:d1:2d:45: fb:34:e2:dc:b0:70:80:50:c3:d5:21:ba:39:2f:c8: e4:0e:8a:0a:95:5e:bf:c2:60:fe:c7:bf:0f:4a:e1: c6:04:9a:5e:5d:ce:90:01:4d:dd:2c:68:2b:34:6e: cf:41:ca:b4:3b:d7:10:14:9a:55:05:2f:df:da:09: 32:6e:b3:f2:9e:e4:7a:c6:bc:e4:fd:2f:85:b9:c7: 02:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:2D:18:96:D0:42:E7:04:6E:06:AE:96:D2:1C:FC:83:3B:A5:F1:89 X509v3 Authority Key Identifier: keyid:F2:E0:73:09:29:76:05:8E:B9:86:56:14:14:37:F8:FB:68:B7:21:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/8uBzCSl2BY65hlYUFDf4-2i3IV0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uBzCSl2BY65hlYUFDf4-2i3IV0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/8uBzCSl2BY65hlYUFDf4-2i3IV0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:01:ea:dc:73:a1:cc:15:da:70:97:48:d6:d5:15:49:dd:f2: c7:1d:59:6d:9e:d3:92:c3:0b:56:6c:fd:3a:d9:63:09:f1:41: 13:4c:2f:fc:e0:a9:15:45:47:cb:1b:1b:64:d5:81:d5:f2:c1: 36:29:ec:fc:f9:5c:88:5b:35:26:d8:5b:5b:37:17:e6:0a:dc: 53:88:4d:96:98:ea:9f:c7:db:ee:5d:ef:5c:7a:e7:63:fc:83: b2:72:b6:84:20:4b:20:20:9a:bb:31:11:e5:ae:50:fa:8d:57: f2:cf:a2:17:6d:e8:d5:a8:f4:7e:9b:a9:13:7b:f3:c9:dc:5f: 60:83:b9:1e:70:9a:bb:eb:8c:80:ba:da:3f:e8:ae:6b:3e:99: bc:f7:9e:7a:25:26:d4:1e:36:0b:80:90:e2:fc:26:bc:68:3a: 48:26:8a:ae:03:39:4c:d9:53:a0:54:7f:de:e9:ba:fd:a5:e6: 1d:bc:56:ab:e0:6a:cc:61:13:ee:d0:db:f0:de:9e:03:96:c9: 11:85:df:66:01:ea:a0:b1:c4:fa:cd:63:aa:f6:d7:b0:04:0b: a8:52:4f:9b:59:f5:40:d4:11:f8:11:d7:14:85:e0:18:a6:6c: 92:ea:9f:6b:48:88:73:04:46:08:49:12:15:29:37:2d:2a:05: e9:11:a6:63 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RTYyQjExMC8GA1UEBRMoRjJFMDczMDkyOTc2MDU4RUI5ODY1NjE0MTQzN0Y4RkI2 OEI3MjE1RDAeFw0yNTA0MjgwNzQ1NTZaFw0yNTA1MDUwNzQ1NTZaMBgxFjAUBgNV BAMTDTY4MGYzMjM0LWUzZDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUejrv4y68lHbaT7jJFXd1vbrGGAeKvpjuq+n86oszLTyg8PVCuQX7BpY0QdGJ kKKNV42ci4fUgNJGZQk7MKjkpOFK66+CtUSltiaGLG97o+AQwktRpf+XpVZE5klg 4RpUNwRPFmRMzMpVQV9tPtVOk4lQAb3/4vyQ1zySJE7YEQQKcWqVgMc/K1kopP8c 1aXky3otRoT58WOapK1KIhqjYJRvsIFRLh7RX05hFCEoc9EtRfs04tywcIBQw9Uh ujkvyOQOigqVXr/CYP7Hvw9K4cYEml5dzpABTd0saCs0bs9ByrQ71xAUmlUFL9/a CTJus/Ke5HrGvOT9L4W5xwLFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrS0YltBC 5wRuBq6W0hz8gzul8YkwHwYDVR0jBBgwFoAU8uBzCSl2BY65hlYUFDf4+2i3IV0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNFNjJCLzYxQjM1NjE2MjQw NDExRjBBNEQwNzI3M0M0RjlBRTAyLzh1QnpDU2wyQlk2NWhsWVVGRGY0LTJpM0lW MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOHVCekNTbDJCWTY1aGxZVUZEZjQtMmkzSVYwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNF NjJCLzYxQjM1NjE2MjQwNDExRjBBNEQwNzI3M0M0RjlBRTAyLzh1QnpDU2wyQlk2 NWhsWVVGRGY0LTJpM0lWMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEgB6txzocwV2nCXSNbVFUnd8scdWW2e05LDC1Zs/TrZYwnxQRNML/zg qRVFR8sbG2TVgdXywTYp7Pz5XIhbNSbYW1s3F+YK3FOITZaY6p/H2+5d71x652P8 g7JytoQgSyAgmrsxEeWuUPqNV/LPohdt6NWo9H6bqRN788ncX2CDuR5wmrvrjIC6 2j/orms+mbz3nnolJtQeNguAkOL8JrxoOkgmiq4DOUzZU6BUf97puv2l5h28Vqvg asxhE+7Q2/DengOWyRGF32YB6qCxxPrNY6r217AEC6hST5tZ9UDUEfgR1xSF4Bim bJLqn2tIiHMERghJEhUpNy0qBekRpmM= -----END CERTIFICATE-----Generated at Mon Apr 28 10:54:26 2025 by rpki-client on console.sobornost.net