$ rpki-client -vvf rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft File: F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft (raw, json) Hash identifier: GT5MykDHFAtmpybyMDPjN7LOGhJbfS5POQCsK5YuySs= Subject key identifier: A9:70:E2:D9:7B:CB:9D:C0:1C:A9:67:1D:79:81:3A:E4:4A:07:1E:F6 Authority key identifier: 17:57:7F:1E:92:EB:33:B2:CD:E6:E4:89:C0:B9:A9:9A:2E:02:FD:A3 Certificate issuer: /CN=A9148C7B/serialNumber=17577F1E92EB33B2CDE6E489C0B9A99A2E02FDA3 Certificate serial: 34FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft Manifest number: 34BD Signing time: Mon 28 Apr 2025 14:52:32 +0000 Manifest this update: Mon 28 Apr 2025 14:52:31 +0000 Manifest next update: Mon 05 May 2025 14:52:31 +0000 Files and hashes: 1: F1d_HpLrM7LN5uSJwLmpmi4C_aM.crl (hash: lW4Dxfj1p11SL0DR4kLryWauTa4XhVSypXgQaaVEdJA=) 2: 8F40C09ACCDB11EE9490B979C4F9AE02.roa (hash: yiAnHDFzUwZD8NgEs572n3xyr3663E+/9a3ArADXBpc=) 3: 7165DB28E2C911EF8A1C1514C4F9AE02.roa (hash: WlVHKhM+QwijE+SR8uQjozWScXJjKVRCH43Kmj5ogqo=) 4: 9E6876BCE2C911EF9C706014C4F9AE02.roa (hash: HpL5s0fx/k48lcKkhw5hAynAHc+E2GbcH0xb8v2hOgM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.crl rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 14:52:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13565 (0x34fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148C7B, serialNumber=17577F1E92EB33B2CDE6E489C0B9A99A2E02FDA3 Validity Not Before: Apr 28 14:52:31 2025 GMT Not After : May 5 14:52:31 2025 GMT Subject: CN=680f962f-6add Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8f:50:06:79:fb:f9:4a:e7:8b:6c:eb:43:e4: 02:d1:0f:17:82:45:d4:a1:01:06:08:15:53:cf:8f: a1:5c:99:1d:1c:d4:e0:0b:08:ac:02:67:36:32:16: 7b:6e:56:f8:0d:8f:bf:d6:be:1e:63:d8:b2:9b:29: f8:06:b4:c5:1a:50:0c:b7:ee:fa:14:f7:c2:f1:20: 9b:79:06:b2:c4:7c:33:72:7d:3c:79:63:3a:37:4d: 96:db:f2:9f:da:0e:07:7f:3f:cb:7b:95:9e:01:f6: 58:88:67:97:18:cf:e4:2d:9b:0b:0f:35:30:6a:e5: 42:ed:fc:d7:9a:71:55:08:59:50:77:4c:11:97:fa: 94:97:e3:ff:28:32:8b:70:74:84:85:91:90:fc:ac: d1:90:52:ec:13:3e:49:21:14:40:9b:36:51:46:61: 4e:3f:0f:4b:2d:65:ab:a8:68:28:34:0d:d6:14:6d: 5c:a7:9d:db:c4:5a:29:58:69:0e:12:80:39:eb:d1: 67:19:a1:63:22:a5:68:cd:b7:1b:32:18:f7:a9:15: a9:de:00:06:33:2a:5b:e4:5c:9b:fe:eb:31:31:36: ba:4a:dd:25:02:fc:27:75:c2:08:2c:d6:33:a9:28: 08:f1:73:56:94:8b:5a:1a:3f:ce:b4:39:c6:58:06: fa:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:70:E2:D9:7B:CB:9D:C0:1C:A9:67:1D:79:81:3A:E4:4A:07:1E:F6 X509v3 Authority Key Identifier: keyid:17:57:7F:1E:92:EB:33:B2:CD:E6:E4:89:C0:B9:A9:9A:2E:02:FD:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:af:df:66:4f:67:8a:86:27:16:05:e4:1f:c0:45:a8:c0:b1: 9e:f9:4c:8a:ba:26:89:ef:21:42:af:2c:6e:11:c6:8c:35:f3: ad:fb:49:eb:37:dd:e2:01:6b:49:fe:2e:46:c6:be:9c:11:ab: ac:52:2c:ab:da:5e:f6:d2:40:14:33:8f:6e:6d:29:08:1a:35: ff:70:f6:04:95:7b:fa:13:5f:50:ef:8a:ec:e4:75:89:2e:b7: 3f:80:03:ce:56:fd:82:5d:ed:a0:a3:16:08:88:04:f5:fc:8e: 4c:f7:34:a7:fd:1d:90:f6:15:1f:85:8f:46:93:10:a7:e6:4e: 02:d2:33:37:4d:94:0e:16:2d:d6:c0:de:8d:ff:c6:85:09:24: 76:0c:31:46:39:72:72:85:12:1e:78:da:87:c4:6b:bf:ba:4d: 9c:b8:1a:d3:f8:52:95:ba:e7:06:3c:4d:f6:30:1b:4c:c8:d3: 22:25:15:14:fc:b1:cb:ff:c0:71:8f:92:e3:0f:a2:45:69:c2: fe:a9:74:8e:8e:9a:55:04:75:2d:17:c5:ee:e9:90:73:3c:75: 00:f2:42:85:7c:3f:72:13:16:cd:76:93:6b:f7:57:99:94:71: f1:b1:fa:d4:fe:52:46:19:74:40:41:bc:d5:91:4b:3d:35:8b: e3:07:45:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhDN0IxMTAvBgNVBAUTKDE3NTc3RjFFOTJFQjMzQjJDREU2RTQ4OUMwQjlBOTlB MkUwMkZEQTMwHhcNMjUwNDI4MTQ1MjMxWhcNMjUwNTA1MTQ1MjMxWjAYMRYwFAYD VQQDEw02ODBmOTYyZi02YWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoI9QBnn7+Urni2zrQ+QC0Q8XgkXUoQEGCBVTz4+hXJkdHNTgCwisAmc2MhZ7 blb4DY+/1r4eY9iymyn4BrTFGlAMt+76FPfC8SCbeQayxHwzcn08eWM6N02W2/Kf 2g4Hfz/Le5WeAfZYiGeXGM/kLZsLDzUwauVC7fzXmnFVCFlQd0wRl/qUl+P/KDKL cHSEhZGQ/KzRkFLsEz5JIRRAmzZRRmFOPw9LLWWrqGgoNA3WFG1cp53bxFopWGkO EoA569FnGaFjIqVozbcbMhj3qRWp3gAGMypb5Fyb/usxMTa6St0lAvwndcIILNYz qSgI8XNWlItaGj/OtDnGWAb6zQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKlw4tl7 y53AHKlnHXmBOuRKBx72MB8GA1UdIwQYMBaAFBdXfx6S6zOyzebkicC5qZouAv2j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEM3Qi82NzUyMDhBRTFE OTMxMUUyQkNCREU1RjYwOEIwMkNEMi9GMWRfSHBMck03TE41dVNKd0xtcG1pNENf YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0YxZF9IcExyTTdMTjV1U0p3TG1wbWk0Q19hTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEM3Qi82NzUyMDhBRTFEOTMxMUUyQkNCREU1RjYwOEIwMkNEMi9GMWRfSHBMck03 TE41dVNKd0xtcG1pNENfYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAor99mT2eKhicWBeQfwEWowLGe+UyKuiaJ7yFCryxuEcaMNfOt+0nr N93iAWtJ/i5Gxr6cEausUiyr2l720kAUM49ubSkIGjX/cPYElXv6E19Q74rs5HWJ Lrc/gAPOVv2CXe2goxYIiAT1/I5M9zSn/R2Q9hUfhY9GkxCn5k4C0jM3TZQOFi3W wN6N/8aFCSR2DDFGOXJyhRIeeNqHxGu/uk2cuBrT+FKVuucGPE32MBtMyNMiJRUU /LHL/8Bxj5LjD6JFacL+qXSOjppVBHUtF8Xu6ZBzPHUA8kKFfD9yExbNdpNr91eZ lHHxsfrU/lJGGXRAQbzVkUs9NYvjB0Xi -----END CERTIFICATE-----Generated at Mon Apr 28 17:44:50 2025 by rpki-client on console.sobornost.net