$ rpki-client -vvf rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft File: _zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft (raw, json) Hash identifier: X4oSINxIPyvCcSTSOlJgFwGlKybr1qXjqwCnpmWks6Y= Subject key identifier: 70:78:86:BA:4D:20:12:9F:75:13:F3:E1:B6:DE:32:16:F3:13:9D:D6 Authority key identifier: FF:32:78:A3:AD:58:B1:8A:54:6E:3F:ED:CD:53:78:40:52:77:67:A8 Certificate issuer: /CN=A914A8CB/serialNumber=FF3278A3AD58B18A546E3FEDCD537840527767A8 Certificate serial: 1B12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft Manifest number: 1AFB Signing time: Mon 28 Apr 2025 16:24:18 +0000 Manifest this update: Mon 28 Apr 2025 16:24:18 +0000 Manifest next update: Mon 05 May 2025 16:24:18 +0000 Files and hashes: 1: _zJ4o61YsYpUbj_tzVN4QFJ3Z6g.crl (hash: fClmhGEaqZOZFiOcb4i3i7RtFFsyeaZi4NXzH/SMseU=) 2: 90C8D27021C211E786829418C4F9AE02.roa (hash: LAyDzMwa+0p5sRd95KyHExi3C3Z0niccQY6hw3OgiYs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.crl rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 16:24:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6930 (0x1b12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A8CB, serialNumber=FF3278A3AD58B18A546E3FEDCD537840527767A8 Validity Not Before: Apr 28 16:24:18 2025 GMT Not After : May 5 16:24:18 2025 GMT Subject: CN=680fabb2-b62a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b9:0f:06:e6:77:c5:b6:6e:d9:05:b5:c6:ae: 2f:82:e1:37:f7:b3:eb:e0:73:cb:2d:de:61:8b:cb: be:71:d4:34:43:e4:a4:9c:02:36:29:fb:04:ea:97: 19:32:b3:74:30:73:e5:01:d6:96:6b:f6:85:3a:5c: cc:da:e7:c6:30:0d:f9:4d:50:40:95:cb:7b:9e:0e: 9c:53:5a:e5:47:8e:33:2f:a2:bd:47:58:68:68:49: 40:09:02:ed:28:63:78:f3:7f:d8:6c:5a:0e:f8:74: 25:e9:2a:e5:54:d7:45:2c:15:c2:3b:db:db:cd:b1: ff:6c:b9:26:52:19:4c:df:81:d1:e2:b4:a6:22:63: df:76:51:a2:25:51:31:1c:7a:25:30:62:4f:db:84: bf:1f:56:8d:67:1b:e5:57:18:a0:99:ae:14:8f:cb: 2e:0b:33:d4:e0:ba:74:bf:14:27:4e:7e:49:c5:36: 08:2c:43:13:9c:9e:a5:1d:16:22:4f:20:f1:0e:2a: 41:60:5b:9b:35:16:9a:19:20:32:91:31:a2:db:ac: 5b:ac:89:12:ef:84:71:28:c5:11:bf:57:3d:89:47: 2a:f1:75:8e:76:5c:e9:6f:58:3e:1c:fc:f7:e0:31: 34:00:ca:af:cb:c2:0f:ee:e3:0a:95:59:4e:b4:10: 79:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:78:86:BA:4D:20:12:9F:75:13:F3:E1:B6:DE:32:16:F3:13:9D:D6 X509v3 Authority Key Identifier: keyid:FF:32:78:A3:AD:58:B1:8A:54:6E:3F:ED:CD:53:78:40:52:77:67:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:83:7c:5d:9d:cc:07:0d:48:77:5b:b2:5f:35:9b:e6:26:e9: 3c:c2:94:30:bb:1e:ba:91:ca:11:6c:cf:1b:29:ad:26:fd:aa: 71:1a:b0:ef:66:b3:d4:9d:29:15:42:c1:be:fa:38:5c:f5:d7: e2:07:67:f8:31:aa:ba:ef:d8:2d:43:4f:58:e6:ba:52:8e:51: d6:0d:d9:36:3f:d9:14:a1:60:0b:35:51:9f:29:0e:8d:ea:45: b2:d0:6a:7b:8a:23:68:19:eb:a9:21:5b:0f:f7:ee:a2:78:ba: 11:db:47:03:b1:58:7b:f0:83:7f:ed:ee:c6:f1:73:a7:de:7a: 8d:54:14:54:33:fe:e3:0c:14:cb:31:8c:25:cf:df:c6:45:d0: 39:3d:ca:42:bc:e1:30:9a:8e:9d:aa:78:dd:91:59:12:f7:35: dd:55:3f:52:dd:95:d3:7e:9a:3e:66:50:4e:7d:ea:72:e3:e0: 60:07:67:10:7b:bc:6d:b0:fe:91:f3:db:b0:d5:16:d7:ab:ca: ed:2b:15:8d:f5:4f:46:71:cb:a7:33:d4:4c:03:c8:93:f0:09: 0c:ab:6f:db:3e:f3:00:de:bb:80:60:70:e4:0d:af:d6:66:87: df:17:e4:c2:ad:5a:67:3b:bb:80:b2:ce:6d:0c:40:2c:c8:c8: a9:f0:51:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGxIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE4Q0IxMTAvBgNVBAUTKEZGMzI3OEEzQUQ1OEIxOEE1NDZFM0ZFRENENTM3ODQw NTI3NzY3QTgwHhcNMjUwNDI4MTYyNDE4WhcNMjUwNTA1MTYyNDE4WjAYMRYwFAYD VQQDEw02ODBmYWJiMi1iNjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt7kPBuZ3xbZu2QW1xq4vguE397Pr4HPLLd5hi8u+cdQ0Q+SknAI2KfsE6pcZ MrN0MHPlAdaWa/aFOlzM2ufGMA35TVBAlct7ng6cU1rlR44zL6K9R1hoaElACQLt KGN483/YbFoO+HQl6SrlVNdFLBXCO9vbzbH/bLkmUhlM34HR4rSmImPfdlGiJVEx HHolMGJP24S/H1aNZxvlVxigma4Uj8suCzPU4Lp0vxQnTn5JxTYILEMTnJ6lHRYi TyDxDipBYFubNRaaGSAykTGi26xbrIkS74RxKMURv1c9iUcq8XWOdlzpb1g+HPz3 4DE0AMqvy8IP7uMKlVlOtBB56wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHB4hrpN IBKfdRPz4bbeMhbzE53WMB8GA1UdIwQYMBaAFP8yeKOtWLGKVG4/7c1TeEBSd2eo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QThDQi9DOEIwRjRGMjIx QzExMUU3OTU0RTg3MTdDNEY5QUUwMi9feko0bzYxWXNZcFVial90elZONFFGSjNa NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL196SjRvNjFZc1lwVWJqX3R6Vk40UUZKM1o2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QThDQi9DOEIwRjRGMjIxQzExMUU3OTU0RTg3MTdDNEY5QUUwMi9feko0bzYxWXNZ cFVial90elZONFFGSjNaNmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTg3xdncwHDUh3W7JfNZvmJuk8wpQwux66kcoRbM8bKa0m/apxGrDv ZrPUnSkVQsG++jhc9dfiB2f4Maq679gtQ09Y5rpSjlHWDdk2P9kUoWALNVGfKQ6N 6kWy0Gp7iiNoGeupIVsP9+6ieLoR20cDsVh78IN/7e7G8XOn3nqNVBRUM/7jDBTL MYwlz9/GRdA5PcpCvOEwmo6dqnjdkVkS9zXdVT9S3ZXTfpo+ZlBOfepy4+BgB2cQ e7xtsP6R89uw1RbXq8rtKxWN9U9GccunM9RMA8iT8AkMq2/bPvMA3ruAYHDkDa/W ZoffF+TCrVpnO7uAss5tDEAsyMip8FEQ -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:32 2025 by rpki-client on console.sobornost.net