$ rpki-client -vvf rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.mft File: 4_FvnXPM7iaTkVokT0S1U6TbPcw.mft (raw, json) Hash identifier: 2QoCtQyMaFz4nS/Y/YNMei+K5ln35vzVG2M9Cg4jiSw= Subject key identifier: 9A:11:C1:90:E1:DE:4C:B1:A8:D4:C3:02:D3:30:AE:20:76:90:46:0F Authority key identifier: E3:F1:6F:9D:73:CC:EE:26:93:91:5A:24:4F:44:B5:53:A4:DB:3D:CC Certificate issuer: /CN=A9145B13/serialNumber=E3F16F9D73CCEE2693915A244F44B553A4DB3DCC Certificate serial: 4D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4_FvnXPM7iaTkVokT0S1U6TbPcw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.mft Manifest number: 4C Signing time: Sun 27 Apr 2025 06:09:28 +0000 Manifest this update: Sun 27 Apr 2025 06:09:28 +0000 Manifest next update: Sun 04 May 2025 06:09:28 +0000 Files and hashes: 1: 4_FvnXPM7iaTkVokT0S1U6TbPcw.crl (hash: FN4tojg5d7w8lBQ0ONVQ+err5fPaG+O7tnouq/y/yLE=) 2: 05E4CBECB12911EF993BC12DC4F9AE02.roa (hash: 6bS2IOUFxNL/dxgXXkv7hlgTjA3VB1/wSeyQ+zl4/9o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.crl rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4_FvnXPM7iaTkVokT0S1U6TbPcw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145B13, serialNumber=E3F16F9D73CCEE2693915A244F44B553A4DB3DCC Validity Not Before: Apr 27 06:09:28 2025 GMT Not After : May 4 06:09:28 2025 GMT Subject: CN=680dca18-d79e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:75:f1:f6:92:7b:2a:c5:88:32:c2:d2:50:87: c1:3b:0d:09:18:fb:55:6b:82:9e:0d:7c:fb:b3:25: e5:8e:96:82:53:0b:b5:ba:58:2b:ae:3c:80:2e:83: c4:df:cd:34:c5:79:b2:a1:db:b8:4d:b7:73:b9:9d: b0:d5:3b:8a:53:8e:07:77:76:e8:16:e7:79:37:9c: 06:04:2b:d4:1c:8b:35:8f:12:69:07:d6:b5:37:21: 78:14:f9:a4:79:b9:56:a5:c9:51:42:ff:f1:2a:79: 1b:4b:3a:9a:81:f6:2e:d8:5d:18:55:88:e0:76:de: 08:ea:0e:77:a2:94:58:75:5a:29:ed:32:d0:0a:77: 6c:d4:9d:a8:49:b1:d1:f9:f8:48:99:4f:46:44:2a: 63:c2:62:d9:37:ce:3d:be:cd:ec:49:b0:17:43:e4: c1:42:20:23:cd:de:c5:3b:87:76:01:6a:e3:cb:b8: cf:27:20:b9:78:f8:37:9f:fa:88:a3:06:ac:9b:cb: 77:a9:fc:b5:d4:43:ac:3f:bd:ff:19:50:86:e3:9d: 0b:e7:b6:f3:9f:ed:be:9f:b0:26:07:91:43:31:f4: 9b:df:a3:d0:d1:ec:9f:7c:5e:b3:dc:34:d3:6a:cf: 01:a4:cf:a5:a6:90:5d:cb:52:e6:cb:bb:15:d4:4d: 64:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:11:C1:90:E1:DE:4C:B1:A8:D4:C3:02:D3:30:AE:20:76:90:46:0F X509v3 Authority Key Identifier: keyid:E3:F1:6F:9D:73:CC:EE:26:93:91:5A:24:4F:44:B5:53:A4:DB:3D:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4_FvnXPM7iaTkVokT0S1U6TbPcw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:e6:6f:a4:a7:97:0b:6a:13:c4:62:22:9f:e3:53:b3:40:d1: e7:26:4b:d7:e4:0d:84:0a:de:84:08:c1:52:35:05:0d:08:e5: 67:81:de:7a:ec:0a:89:d5:81:8b:8b:8d:59:e4:81:94:fc:58: 9b:0a:0e:fd:00:2c:29:42:37:1e:7b:0b:8d:02:40:31:19:73: 20:51:10:1b:87:44:42:8d:80:65:0b:f1:d8:6d:88:58:07:3a: 04:3a:18:cd:49:f2:76:e0:83:6d:69:b1:00:74:8c:3c:7d:0f: cb:b4:20:b5:ca:bc:7c:ed:1c:9e:94:8b:44:21:c8:80:b1:c2: 6f:2a:bb:d8:be:64:b7:55:cd:34:2c:50:e4:af:9b:94:d8:16: a7:37:43:6b:eb:a8:2f:2e:df:59:4c:3c:75:9d:1d:b0:04:d5: be:ad:9b:b4:b8:0a:09:d8:84:59:24:b2:77:78:a7:ab:20:1f: 8c:19:1c:5c:45:a2:f5:d7:2e:65:77:1e:86:7d:48:1c:34:a1: 5a:60:85:7c:f7:dd:8c:cd:cb:a7:4e:1c:65:1f:ef:a2:96:a8: cb:d1:7b:d2:72:7b:ee:66:b7:1e:bb:c7:8b:34:ff:80:fc:10: 67:5e:c2:f6:22:6a:c3:f9:26:c1:13:9f:f4:e4:f6:62:cd:7f: 2e:97:a2:71 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NUIxMzExMC8GA1UEBRMoRTNGMTZGOUQ3M0NDRUUyNjkzOTE1QTI0NEY0NEI1NTNB NERCM0RDQzAeFw0yNTA0MjcwNjA5MjhaFw0yNTA1MDQwNjA5MjhaMBgxFjAUBgNV BAMTDTY4MGRjYTE4LWQ3OWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDcdfH2knsqxYgywtJQh8E7DQkY+1Vrgp4NfPuzJeWOloJTC7W6WCuuPIAug8Tf zTTFebKh27hNt3O5nbDVO4pTjgd3dugW53k3nAYEK9QcizWPEmkH1rU3IXgU+aR5 uValyVFC//EqeRtLOpqB9i7YXRhViOB23gjqDneilFh1WintMtAKd2zUnahJsdH5 +EiZT0ZEKmPCYtk3zj2+zexJsBdD5MFCICPN3sU7h3YBauPLuM8nILl4+Def+oij Bqyby3ep/LXUQ6w/vf8ZUIbjnQvntvOf7b6fsCYHkUMx9Jvfo9DR7J98XrPcNNNq zwGkz6WmkF3LUubLuxXUTWQ/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmhHBkOHe TLGo1MMC0zCuIHaQRg8wHwYDVR0jBBgwFoAU4/FvnXPM7iaTkVokT0S1U6TbPcww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1QjEzLzQ2MzdGQkYyQjEy ODExRUZCNzUwQTUyQkM0RjlBRTAyLzRfRnZuWFBNN2lhVGtWb2tUMFMxVTZUYlBj dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNF9Gdm5YUE03aWFUa1Zva1QwUzFVNlRiUGN3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1 QjEzLzQ2MzdGQkYyQjEyODExRUZCNzUwQTUyQkM0RjlBRTAyLzRfRnZuWFBNN2lh VGtWb2tUMFMxVTZUYlBjdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJzmb6SnlwtqE8RiIp/jU7NA0ecmS9fkDYQK3oQIwVI1BQ0I5WeB3nrs ConVgYuLjVnkgZT8WJsKDv0ALClCNx57C40CQDEZcyBREBuHREKNgGUL8dhtiFgH OgQ6GM1J8nbgg21psQB0jDx9D8u0ILXKvHztHJ6Ui0QhyICxwm8qu9i+ZLdVzTQs UOSvm5TYFqc3Q2vrqC8u31lMPHWdHbAE1b6tm7S4CgnYhFkksnd4p6sgH4wZHFxF ovXXLmV3HoZ9SBw0oVpghXz33YzNy6dOHGUf76KWqMvRe9Jye+5mtx67x4s0/4D8 EGdewvYiasP5JsETn/Tk9mLNfy6XonE= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:43 2025 by rpki-client on console.sobornost.net