$ rpki-client -vvf rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft File: f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft (raw, json) Hash identifier: JEOfWUGYFBZj97ZTAVuCn8nFcOC+6GYliXr+FM9fOV4= Subject key identifier: 85:8C:F0:37:51:9B:BE:F8:FE:72:66:60:C7:8F:0F:90:EB:83:41:FE Authority key identifier: 7F:79:66:5E:63:BF:3C:D5:6D:C2:4A:0A:70:D5:7F:9A:94:2D:D1:B8 Certificate issuer: /CN=A9148C7B/serialNumber=7F79665E63BF3CD56DC24A0A70D57F9A942DD1B8 Certificate serial: 086D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft Manifest number: 0843 Signing time: Sat 26 Apr 2025 14:45:41 +0000 Manifest this update: Sat 26 Apr 2025 14:45:41 +0000 Manifest next update: Sat 03 May 2025 14:45:41 +0000 Files and hashes: 1: f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl (hash: +ix12ZQJY05ugU9ANEn1/uFDTk24W9u5TnbDjnib4CI=) 2: AB20F8C0DD3311EF8B8A711FC4F9AE02.roa (hash: 1n8TN0elhXHHBL8i9K1T+oGXrUVuH0sd4JxY2m2xOlU=) 3: 664604CCD8E211ED913C4684C4F9AE02.roa (hash: bF+cQvGTN6hj6Su+AW4ebeZcP3ajFMubLlVPlkZn8CY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 14:45:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2157 (0x86d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148C7B, serialNumber=7F79665E63BF3CD56DC24A0A70D57F9A942DD1B8 Validity Not Before: Apr 26 14:45:41 2025 GMT Not After : May 3 14:45:41 2025 GMT Subject: CN=680cf195-0380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ac:5c:79:4a:6a:fa:b0:16:e1:19:48:8c:84: 26:28:f8:8d:b5:bf:49:86:ed:bf:1b:cf:d8:84:2a: 9c:4f:27:24:db:1e:1d:04:e6:bf:65:ca:b8:6d:bd: 97:47:35:02:94:a0:3c:ad:ce:57:8d:1b:19:75:40: 6b:b9:5e:fb:4a:6c:69:ab:f8:76:bf:41:36:fc:dc: 54:92:c1:f2:fd:3c:cb:74:8c:cf:ff:ad:b1:12:d3: f7:d8:a1:4f:84:61:53:bb:f8:24:ac:01:83:50:21: db:10:32:2c:bf:c3:b1:e7:84:9d:9d:98:1d:8f:72: a0:ec:90:af:30:a2:b9:0a:52:83:aa:b4:4f:dc:b5: 04:09:87:ed:b1:a7:48:be:0f:9a:aa:a7:27:c6:89: 47:87:62:a1:99:9c:3f:28:03:e9:50:24:07:7a:22: 2e:85:82:f6:4c:32:4e:56:53:9e:e7:d8:1e:1f:7d: b8:f3:75:a2:27:c8:6f:1c:d4:42:9d:8c:04:c7:79: ed:4b:38:67:ec:12:26:fd:e0:e3:67:fc:49:9f:2a: 99:ec:68:d1:d3:e5:d9:65:c4:9d:c0:00:b0:8b:16: bc:4d:cb:da:b3:07:1e:7b:85:46:31:92:86:75:b9: 98:87:ef:c8:cf:63:01:9a:b6:41:5b:a7:89:31:3c: 77:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:8C:F0:37:51:9B:BE:F8:FE:72:66:60:C7:8F:0F:90:EB:83:41:FE X509v3 Authority Key Identifier: keyid:7F:79:66:5E:63:BF:3C:D5:6D:C2:4A:0A:70:D5:7F:9A:94:2D:D1:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:b1:a4:78:41:02:e8:e6:da:13:f7:d7:75:23:31:df:9f:48: 82:37:50:2e:4f:ca:26:90:53:80:e0:82:ac:a8:16:ea:8f:30: 74:06:a7:c2:b8:a4:92:36:f8:c0:14:c3:a8:07:33:7b:54:1c: cc:98:37:ac:a4:6b:54:c3:1e:db:88:46:4b:40:89:36:a8:be: 79:ca:d4:08:2d:ef:c5:e3:f0:f8:9f:1e:3d:f9:c8:11:b7:17: 8e:1a:3b:85:19:46:77:f7:2b:ef:2f:50:d1:19:8d:ab:fd:01: d7:43:81:07:ca:fb:c7:76:1c:5a:d1:27:02:24:83:aa:41:68: be:75:d8:74:a3:4c:6c:2f:5c:ee:8f:0d:fa:ae:8a:a3:9e:29: ee:ab:9a:7c:2f:06:06:1a:0a:9b:3c:02:de:21:38:24:32:47: 42:65:b8:01:80:9a:b1:20:79:22:1c:e1:d1:65:e4:64:9e:59: 76:4e:56:04:0e:70:5d:17:45:8b:4c:a7:ed:32:fa:9b:ae:52: d2:b0:68:6a:36:a8:8e:a7:61:6a:24:b3:70:24:d3:4c:2e:52: 58:30:5d:4d:58:ce:65:9d:e9:ba:91:1f:a5:41:3e:b5:36:06: ec:61:f3:1c:4b:02:8f:60:3e:df:32:0f:16:b9:4a:ac:88:9f: 9a:89:4d:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCG0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhDN0IxMTAvBgNVBAUTKDdGNzk2NjVFNjNCRjNDRDU2REMyNEEwQTcwRDU3RjlB OTQyREQxQjgwHhcNMjUwNDI2MTQ0NTQxWhcNMjUwNTAzMTQ0NTQxWjAYMRYwFAYD VQQDEw02ODBjZjE5NS0wMzgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzKxceUpq+rAW4RlIjIQmKPiNtb9Jhu2/G8/YhCqcTyck2x4dBOa/Zcq4bb2X RzUClKA8rc5XjRsZdUBruV77Smxpq/h2v0E2/NxUksHy/TzLdIzP/62xEtP32KFP hGFTu/gkrAGDUCHbEDIsv8Ox54SdnZgdj3Kg7JCvMKK5ClKDqrRP3LUECYftsadI vg+aqqcnxolHh2KhmZw/KAPpUCQHeiIuhYL2TDJOVlOe59geH32483WiJ8hvHNRC nYwEx3ntSzhn7BIm/eDjZ/xJnyqZ7GjR0+XZZcSdwACwixa8Tcvaswcee4VGMZKG dbmYh+/Iz2MBmrZBW6eJMTx3xQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIWM8DdR m774/nJmYMePD5Drg0H+MB8GA1UdIwQYMBaAFH95Zl5jvzzVbcJKCnDVf5qULdG4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEM3Qi81QkZDRkY4Q0Q2 MzAxMUVBOTQwREEwMzlDNEY5QUUwMi9mM2xtWG1PX1BOVnR3a29LY05WX21wUXQw YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2YzbG1YbU9fUE5WdHdrb0tjTlZfbXBRdDBiZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEM3Qi81QkZDRkY4Q0Q2MzAxMUVBOTQwREEwMzlDNEY5QUUwMi9mM2xtWG1PX1BO VnR3a29LY05WX21wUXQwYmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5saR4QQLo5toT99d1IzHfn0iCN1AuT8omkFOA4IKsqBbqjzB0BqfC uKSSNvjAFMOoBzN7VBzMmDespGtUwx7biEZLQIk2qL55ytQILe/F4/D4nx49+cgR txeOGjuFGUZ39yvvL1DRGY2r/QHXQ4EHyvvHdhxa0ScCJIOqQWi+ddh0o0xsL1zu jw36roqjninuq5p8LwYGGgqbPALeITgkMkdCZbgBgJqxIHkiHOHRZeRknll2TlYE DnBdF0WLTKftMvqbrlLSsGhqNqiOp2FqJLNwJNNMLlJYMF1NWM5lnem6kR+lQT61 NgbsYfMcSwKPYD7fMg8WuUqsiJ+aiU0l -----END CERTIFICATE-----Generated at Sat Apr 26 18:19:40 2025 by rpki-client on console.sobornost.net