$ rpki-client -vvf rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.mft File: SJpvztfcY7erNmbjW9UJ2eoVdeA.mft (raw, json) Hash identifier: sEAsmUW3wnNLXw2wycw18p+kDNp9C3JBfqQtpr0utPE= Subject key identifier: B0:03:09:1D:BB:A0:51:5B:F7:FA:81:14:C1:29:37:2A:10:D3:FE:70 Authority key identifier: 48:9A:6F:CE:D7:DC:63:B7:AB:36:66:E3:5B:D5:09:D9:EA:15:75:E0 Certificate issuer: /CN=A914410E/serialNumber=489A6FCED7DC63B7AB3666E35BD509D9EA1575E0 Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJpvztfcY7erNmbjW9UJ2eoVdeA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.mft Manifest number: 12 Signing time: Sun 27 Apr 2025 06:54:33 +0000 Manifest this update: Sun 27 Apr 2025 06:54:32 +0000 Manifest next update: Sun 04 May 2025 06:54:32 +0000 Files and hashes: 1: SJpvztfcY7erNmbjW9UJ2eoVdeA.crl (hash: cG6jFuNOl7CWPUPvnCCy0W3gBUOWSy+TdKoxZ6q4z1A=) 2: 3057138E143F11F08A345E0AC4F9AE02.roa (hash: litZH04YNtCR4iuEOlm91tI8Ccgt0oYZlfR5gRznpNA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.crl rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJpvztfcY7erNmbjW9UJ2eoVdeA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914410E, serialNumber=489A6FCED7DC63B7AB3666E35BD509D9EA1575E0 Validity Not Before: Apr 27 06:54:32 2025 GMT Not After : May 4 06:54:32 2025 GMT Subject: CN=680dd4a8-258d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9e:19:a6:99:59:df:f7:95:8a:fe:2d:2e:df: f9:13:7a:ae:56:17:68:9f:57:8e:97:74:b2:8d:98: 9c:bd:d3:b5:52:fa:4e:9a:bc:8d:db:20:11:85:7e: 87:22:7a:68:ff:26:69:ae:d8:6b:02:af:fc:08:c8: 43:4e:7c:60:e8:18:d2:cf:6d:9b:c2:66:8a:4a:35: c1:ce:96:69:ba:bc:dc:d5:b5:46:64:c4:c3:2d:bc: 01:89:11:31:2d:7a:96:68:e5:81:f7:88:bf:59:93: d3:e7:d0:ce:19:c0:22:b8:d9:12:f3:1d:5e:02:fd: 2c:d2:b5:39:77:ec:e0:96:f0:65:09:08:02:77:cb: 29:72:1f:f5:3f:42:2a:cb:cf:85:a8:f0:89:94:8e: b9:ce:c3:ea:14:c8:2c:2e:28:65:58:2d:e3:89:43: ae:5b:11:26:ac:07:86:ab:f1:7e:ae:31:4d:d9:48: 87:bf:6a:89:e4:dd:78:cf:1a:d5:d3:9d:6f:3f:ee: 71:e6:8c:ca:71:14:e1:a3:dd:61:0e:40:e4:94:fc: 83:f9:2e:40:e2:eb:d4:c9:ec:7f:85:07:ad:0c:0d: 71:28:36:8c:ad:2d:ab:c6:ca:59:67:ee:5d:30:a8: 0f:04:1f:af:eb:71:5b:32:14:b1:3a:fb:2f:bd:e9: e7:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:03:09:1D:BB:A0:51:5B:F7:FA:81:14:C1:29:37:2A:10:D3:FE:70 X509v3 Authority Key Identifier: keyid:48:9A:6F:CE:D7:DC:63:B7:AB:36:66:E3:5B:D5:09:D9:EA:15:75:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJpvztfcY7erNmbjW9UJ2eoVdeA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:06:08:6e:ab:92:0e:d2:21:21:44:34:10:d2:64:94:10:0b: ac:6b:88:3a:ea:0f:b2:fb:89:7f:5a:e6:bd:5e:fb:29:29:2a: 36:68:39:79:6a:a0:a4:62:c3:53:c5:38:4f:96:c2:5c:be:86: 22:71:91:94:71:bf:d1:36:8a:d3:b1:76:33:74:5e:be:c7:e1: 60:67:c4:78:47:f3:52:77:78:87:75:73:fe:52:f9:71:85:42: 67:32:49:5e:9d:28:e1:32:6c:36:1a:c9:18:f5:99:86:6d:d1: 19:8e:a3:d0:5e:97:ab:4a:9e:fc:21:b7:c8:7f:ba:db:6c:61: ae:03:20:44:9f:d2:d8:b2:f4:14:4a:95:eb:b6:34:c7:1d:be: c8:4d:ba:16:9d:6b:9c:b0:47:c7:6c:43:ee:67:20:ba:ff:55: 33:a7:b3:b5:d3:85:f9:c0:bd:ef:16:f7:21:de:04:eb:59:a2: 63:5e:ee:68:97:57:2e:39:bc:87:00:72:8c:7d:65:d4:4b:ac: 3b:29:bc:6b:e4:74:b7:b1:28:67:ff:5b:9f:51:60:21:24:51: f5:72:c4:b2:16:b3:41:e2:ed:86:cb:57:e9:1b:fa:60:e9:3f: c7:28:e0:02:c3:67:8e:18:d1:9b:31:67:a2:78:aa:05:59:a9: 5a:13:39:00 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NDEwRTExMC8GA1UEBRMoNDg5QTZGQ0VEN0RDNjNCN0FCMzY2NkUzNUJENTA5RDlF QTE1NzVFMDAeFw0yNTA0MjcwNjU0MzJaFw0yNTA1MDQwNjU0MzJaMBgxFjAUBgNV BAMTDTY4MGRkNGE4LTI1OGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsnhmmmVnf95WK/i0u3/kTeq5WF2ifV46XdLKNmJy907VS+k6avI3bIBGFfoci emj/Jmmu2GsCr/wIyENOfGDoGNLPbZvCZopKNcHOlmm6vNzVtUZkxMMtvAGJETEt epZo5YH3iL9Zk9Pn0M4ZwCK42RLzHV4C/SzStTl37OCW8GUJCAJ3yylyH/U/QirL z4Wo8ImUjrnOw+oUyCwuKGVYLeOJQ65bESasB4ar8X6uMU3ZSIe/aonk3XjPGtXT nW8/7nHmjMpxFOGj3WEOQOSU/IP5LkDi69TJ7H+FB60MDXEoNoytLavGylln7l0w qA8EH6/rcVsyFLE6+y+96eeTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsAMJHbug UVv3+oEUwSk3KhDT/nAwHwYDVR0jBBgwFoAUSJpvztfcY7erNmbjW9UJ2eoVdeAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0MTBFLzJGMDMyOThBMTA4 NjExRjA4QUVBNDgwQ0M0RjlBRTAyL1NKcHZ6dGZjWTdlck5tYmpXOVVKMmVvVmRl QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvU0pwdnp0ZmNZN2VyTm1ialc5VUoyZW9WZGVBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0 MTBFLzJGMDMyOThBMTA4NjExRjA4QUVBNDgwQ0M0RjlBRTAyL1NKcHZ6dGZjWTdl ck5tYmpXOVVKMmVvVmRlQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKkGCG6rkg7SISFENBDSZJQQC6xriDrqD7L7iX9a5r1e+ykpKjZoOXlq oKRiw1PFOE+Wwly+hiJxkZRxv9E2itOxdjN0Xr7H4WBnxHhH81J3eId1c/5S+XGF QmcySV6dKOEybDYayRj1mYZt0RmOo9Bel6tKnvwht8h/uttsYa4DIESf0tiy9BRK leu2NMcdvshNuhada5ywR8dsQ+5nILr/VTOns7XThfnAve8W9yHeBOtZomNe7miX Vy45vIcAcox9ZdRLrDspvGvkdLexKGf/W59RYCEkUfVyxLIWs0Hi7YbLV+kb+mDp P8co4ALDZ44Y0ZsxZ6J4qgVZqVoTOQA= -----END CERTIFICATE-----Generated at Sun Apr 27 10:27:17 2025 by rpki-client on console.sobornost.net