$ rpki-client -vvf rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft File: 788TGtZIDR3QTx1EduNZVFL_RBw.mft (raw, json) Hash identifier: RlKwnRf+PGxEogSBWmHP7oAuj2H1UjAL5zv+QwAnbAM= Subject key identifier: B5:DB:C6:B0:33:2C:3A:6F:D9:36:A1:E7:D2:C9:A3:CB:A0:20:CD:0C Authority key identifier: EF:CF:13:1A:D6:48:0D:1D:D0:4F:1D:44:76:E3:59:54:52:FF:44:1C Certificate issuer: /CN=A9140D20/serialNumber=EFCF131AD6480D1DD04F1D4476E3595452FF441C Certificate serial: 080A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft Manifest number: 0801 Signing time: Sat 26 Apr 2025 20:38:20 +0000 Manifest this update: Sat 26 Apr 2025 20:38:19 +0000 Manifest next update: Sat 03 May 2025 20:38:19 +0000 Files and hashes: 1: 788TGtZIDR3QTx1EduNZVFL_RBw.crl (hash: +HEpN5864TU4F/awILLprCq1f627nuvyQAP4zp8qaMQ=) 2: 01E652108F4F11EEA2E9CA7DC4F9AE02.roa (hash: pjchJ6cFRSOrYYA+BU/yT4PSr0ftFhi06QMViMdoOGo=) 3: 5E4A01CA941111EE84D37717C4F9AE02.roa (hash: QHVhADIvelk+RcB2dDEApwkg1zDr9XWT50JUlNL3d6E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.crl rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2058 (0x80a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140D20, serialNumber=EFCF131AD6480D1DD04F1D4476E3595452FF441C Validity Not Before: Apr 26 20:38:19 2025 GMT Not After : May 3 20:38:19 2025 GMT Subject: CN=680d443b-7e6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7f:66:54:d1:fc:47:67:0d:2d:23:bf:a3:1b: c6:0e:7c:ac:a7:cb:ee:3e:36:97:a4:02:97:34:32: 41:8a:96:dc:48:aa:91:f5:3e:65:bd:44:94:8e:d7: 10:53:b4:49:a9:9c:c1:67:2f:ef:47:11:03:aa:8c: e9:65:c9:e4:47:3d:e5:a5:0b:95:65:fb:1b:43:2f: 94:dc:2a:93:b5:2d:be:bc:2c:23:09:ac:61:a6:0b: 34:1d:32:aa:20:01:73:b0:0f:a5:fa:98:90:36:44: a2:44:a3:6b:08:fc:c1:96:f8:a8:d0:88:7f:9b:14: 77:e5:32:d8:3e:bb:90:dd:d6:22:82:4a:37:9b:cb: 0f:7b:74:46:4a:21:0c:6e:ea:bd:19:05:9f:87:25: cd:dc:a8:86:14:55:14:c6:24:0a:39:77:21:c3:88: 5b:f1:13:8b:29:4f:11:f2:29:b5:ce:b2:3f:65:9f: ab:c9:b2:15:54:9b:ea:5a:a1:06:90:c5:31:33:4c: 0a:8c:61:54:ba:0f:2c:e9:91:34:be:03:45:c4:5a: 3a:c3:82:e5:66:d2:19:d2:6a:cf:77:9d:0a:31:6b: be:c2:c6:70:9f:89:b9:fe:c8:a2:fd:0b:3e:6d:63: 31:89:28:d0:0d:90:b3:8e:9a:77:48:21:99:81:9e: 40:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:DB:C6:B0:33:2C:3A:6F:D9:36:A1:E7:D2:C9:A3:CB:A0:20:CD:0C X509v3 Authority Key Identifier: keyid:EF:CF:13:1A:D6:48:0D:1D:D0:4F:1D:44:76:E3:59:54:52:FF:44:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:70:3c:ce:04:d9:a2:91:60:7a:e4:d1:3f:21:4b:a3:be:ba: c9:29:45:49:3c:0d:6a:fc:c2:ce:02:41:02:a6:89:3b:8a:f9: 0b:8d:3a:ea:17:84:c8:6d:72:87:81:38:0f:d8:cd:6a:10:2e: b2:6d:5c:fb:fa:20:44:0b:dd:5b:cc:3f:8e:53:d1:f9:a2:ce: 65:fd:44:48:16:99:9f:6a:63:80:71:3e:e5:57:f9:00:49:3b: 40:3a:8d:f5:6b:e3:cd:cd:00:ee:9d:ce:11:d0:ee:87:80:c1: f6:9a:0d:90:fc:9e:f3:af:c7:52:10:9e:c7:55:c9:2e:93:6f: 0b:a3:0a:f1:62:c7:9c:51:55:b8:c2:cc:1c:23:c4:43:d8:8f: f0:25:68:d6:ad:a4:4a:c9:54:1c:a5:23:2f:6b:59:2a:fe:ba: 86:94:68:87:94:39:d9:71:c4:aa:64:2f:ba:8c:be:ed:a6:f0: ae:09:16:be:62:53:b9:6f:01:28:79:0f:58:7c:47:cf:66:ed: 09:1a:d4:ba:c4:1e:46:d3:68:a2:cd:09:c1:a7:18:6a:ac:69: c2:dc:65:b2:20:67:22:15:bb:65:7d:b7:32:4d:2e:9a:79:17: 1f:b3:e9:f9:1c:ad:c9:f4:f2:01:8c:49:5d:e9:a2:44:01:dd: 6c:fd:62:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBEMjAxMTAvBgNVBAUTKEVGQ0YxMzFBRDY0ODBEMUREMDRGMUQ0NDc2RTM1OTU0 NTJGRjQ0MUMwHhcNMjUwNDI2MjAzODE5WhcNMjUwNTAzMjAzODE5WjAYMRYwFAYD VQQDEw02ODBkNDQzYi03ZTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw39mVNH8R2cNLSO/oxvGDnysp8vuPjaXpAKXNDJBipbcSKqR9T5lvUSUjtcQ U7RJqZzBZy/vRxEDqozpZcnkRz3lpQuVZfsbQy+U3CqTtS2+vCwjCaxhpgs0HTKq IAFzsA+l+piQNkSiRKNrCPzBlvio0Ih/mxR35TLYPruQ3dYigko3m8sPe3RGSiEM buq9GQWfhyXN3KiGFFUUxiQKOXchw4hb8ROLKU8R8im1zrI/ZZ+rybIVVJvqWqEG kMUxM0wKjGFUug8s6ZE0vgNFxFo6w4LlZtIZ0mrPd50KMWu+wsZwn4m5/sii/Qs+ bWMxiSjQDZCzjpp3SCGZgZ5AHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLXbxrAz LDpv2Tah59LJo8ugIM0MMB8GA1UdIwQYMBaAFO/PExrWSA0d0E8dRHbjWVRS/0Qc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEQyMC9EOTQzQTQ1QURC REExMUVBQTJDQzJCNDFDNEY5QUUwMi83ODhUR3RaSURSM1FUeDFFZHVOWlZGTF9S QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc4OFRHdFpJRFIzUVR4MUVkdU5aVkZMX1JCdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEQyMC9EOTQzQTQ1QURCREExMUVBQTJDQzJCNDFDNEY5QUUwMi83ODhUR3RaSURS M1FUeDFFZHVOWlZGTF9SQncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9cDzOBNmikWB65NE/IUujvrrJKUVJPA1q/MLOAkECpok7ivkLjTrq F4TIbXKHgTgP2M1qEC6ybVz7+iBEC91bzD+OU9H5os5l/URIFpmfamOAcT7lV/kA STtAOo31a+PNzQDunc4R0O6HgMH2mg2Q/J7zr8dSEJ7HVckuk28LowrxYsecUVW4 wswcI8RD2I/wJWjWraRKyVQcpSMva1kq/rqGlGiHlDnZccSqZC+6jL7tpvCuCRa+ YlO5bwEoeQ9YfEfPZu0JGtS6xB5G02iizQnBpxhqrGnC3GWyIGciFbtlfbcyTS6a eRcfs+n5HK3J9PIBjEld6aJEAd1s/WLd -----END CERTIFICATE-----Generated at Sun Apr 27 00:13:57 2025 by rpki-client on console.sobornost.net