$ rpki-client -vvf rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.mft File: cmIg2YvMfcZqPM83Z36go9sJDaQ.mft (raw, json) Hash identifier: 8ETItgMrxLT4MbFvjm83VkTlFLXtEEEX4qdZREk1lpk= Subject key identifier: B7:FB:44:D9:4F:20:B6:37:4E:CB:BC:77:9D:AE:D7:81:CB:2F:AB:8F Authority key identifier: 72:62:20:D9:8B:CC:7D:C6:6A:3C:CF:37:67:7E:A0:A3:DB:09:0D:A4 Certificate issuer: /CN=A914AE22/serialNumber=726220D98BCC7DC66A3CCF37677EA0A3DB090DA4 Certificate serial: 0BC7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmIg2YvMfcZqPM83Z36go9sJDaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.mft Manifest number: 0BBF Signing time: Mon 28 Apr 2025 19:14:16 +0000 Manifest this update: Mon 28 Apr 2025 19:14:16 +0000 Manifest next update: Mon 05 May 2025 19:14:16 +0000 Files and hashes: 1: cmIg2YvMfcZqPM83Z36go9sJDaQ.crl (hash: LrB+7RFPsKYbtupsAqy0zY+r1kEu0IWaMgTtZXjPRVs=) 2: 2CD5AAF8060311EBBE15EA18C4F9AE02.roa (hash: mW8L1FLDXuwnCDk5B3rFgpB45GljzNSPgwbjM/e2Wu0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.crl rsync://rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmIg2YvMfcZqPM83Z36go9sJDaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 19:14:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3015 (0xbc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914AE22, serialNumber=726220D98BCC7DC66A3CCF37677EA0A3DB090DA4 Validity Not Before: Apr 28 19:14:16 2025 GMT Not After : May 5 19:14:16 2025 GMT Subject: CN=680fd388-4614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:55:0f:2e:7e:ee:3c:59:bb:9e:d6:eb:bd:b1: fb:fd:53:f3:81:d1:f9:5b:16:6a:06:69:ea:75:78: 62:22:f1:1b:8a:6d:3e:1d:cd:7e:c7:92:5c:ba:94: 71:fa:5f:ce:20:d2:47:bf:ef:0e:44:8f:c9:5f:c4: 06:29:ef:da:54:bc:45:e7:03:d3:07:86:6f:33:25: 9a:bd:95:08:57:8f:75:47:f2:ee:09:3c:96:39:1e: cd:da:76:53:39:58:2f:07:7e:f7:35:b0:e0:07:cc: 4f:ce:35:85:5f:24:5a:50:b6:f8:83:ba:bb:c4:18: 4e:d8:21:e9:0f:70:ed:69:a6:8e:8a:9d:9a:45:3e: 15:04:c7:00:36:4e:87:0c:3d:89:b2:62:76:2f:18: 02:61:0b:ed:c3:a6:26:23:ba:88:45:fa:c7:c9:70: 73:bc:bb:47:75:bd:4d:d8:a8:45:5c:39:a4:1e:89: 90:29:5f:66:18:cd:8d:f1:b9:a4:f0:4b:ab:d1:b5: 08:72:fd:89:3c:cb:ea:2c:3f:70:dd:95:c7:e9:c5: e4:51:a9:92:85:d3:64:e4:6a:bf:2d:ef:3e:98:5e: 97:d2:5e:1e:c8:e9:3b:d0:a3:33:98:f4:cf:11:c4: 8f:ac:53:37:95:19:5d:e9:53:1a:c3:cf:d9:67:d2: 0a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:FB:44:D9:4F:20:B6:37:4E:CB:BC:77:9D:AE:D7:81:CB:2F:AB:8F X509v3 Authority Key Identifier: keyid:72:62:20:D9:8B:CC:7D:C6:6A:3C:CF:37:67:7E:A0:A3:DB:09:0D:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmIg2YvMfcZqPM83Z36go9sJDaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e7:bd:00:a1:5e:60:76:bd:d5:eb:e3:70:70:35:ba:73:e4:22: ff:57:6c:92:55:f1:f9:cf:91:e0:37:a6:39:a8:8f:1b:c8:83: 12:51:ab:8b:f0:91:5c:62:54:ce:f5:ef:26:f4:df:54:5f:89: ac:ea:e0:87:06:f4:f1:57:78:46:00:13:90:87:8b:90:05:72: 90:3a:e7:d0:82:0d:3c:7b:2c:40:c6:e7:f3:b9:41:e0:9e:57: e1:96:d5:4e:b2:88:4a:f5:ed:e7:df:67:83:90:79:0b:af:61: 00:80:50:17:10:ae:e5:2f:0c:3f:4d:bb:ca:83:3c:01:02:70: 94:82:ec:f2:1c:4b:37:c4:0e:1b:78:ac:90:3b:af:02:1b:f6: 12:7e:68:07:b9:d6:53:ac:2b:9a:ed:97:ff:ec:cf:78:f3:74: 78:88:09:77:77:de:2c:d1:5f:b4:a5:6a:9e:32:17:4c:4d:7f: b8:47:12:4a:b6:fa:58:98:ee:ee:a2:60:da:46:34:1f:1b:ed: 42:82:9e:65:a9:56:e6:d9:69:34:58:58:a7:b5:e9:ab:4e:af: b7:e8:54:17:3e:fb:61:02:58:de:0d:77:41:02:64:e7:e8:a9: 38:f7:63:13:a6:e3:62:cf:a3:45:63:9e:7e:ca:5d:33:7b:70: 6a:da:61:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEFFMjIxMTAvBgNVBAUTKDcyNjIyMEQ5OEJDQzdEQzY2QTNDQ0YzNzY3N0VBMEEz REIwOTBEQTQwHhcNMjUwNDI4MTkxNDE2WhcNMjUwNTA1MTkxNDE2WjAYMRYwFAYD VQQDEw02ODBmZDM4OC00NjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw1UPLn7uPFm7ntbrvbH7/VPzgdH5WxZqBmnqdXhiIvEbim0+Hc1+x5JcupRx +l/OINJHv+8ORI/JX8QGKe/aVLxF5wPTB4ZvMyWavZUIV491R/LuCTyWOR7N2nZT OVgvB373NbDgB8xPzjWFXyRaULb4g7q7xBhO2CHpD3DtaaaOip2aRT4VBMcANk6H DD2JsmJ2LxgCYQvtw6YmI7qIRfrHyXBzvLtHdb1N2KhFXDmkHomQKV9mGM2N8bmk 8Eur0bUIcv2JPMvqLD9w3ZXH6cXkUamShdNk5Gq/Le8+mF6X0l4eyOk70KMzmPTP EcSPrFM3lRld6VMaw8/ZZ9IKWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLf7RNlP ILY3Tsu8d52u14HLL6uPMB8GA1UdIwQYMBaAFHJiINmLzH3GajzPN2d+oKPbCQ2k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QUUyMi9CMTc4NDM5RTFC QkYxMUVBQjZBNzRGNzFDNEY5QUUwMi9jbUlnMll2TWZjWnFQTTgzWjM2Z285c0pE YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NtSWcyWXZNZmNacVBNODNaMzZnbzlzSkRhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QUUyMi9CMTc4NDM5RTFCQkYxMUVBQjZBNzRGNzFDNEY5QUUwMi9jbUlnMll2TWZj WnFQTTgzWjM2Z285c0pEYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDnvQChXmB2vdXr43BwNbpz5CL/V2ySVfH5z5HgN6Y5qI8byIMSUauL 8JFcYlTO9e8m9N9UX4ms6uCHBvTxV3hGABOQh4uQBXKQOufQgg08eyxAxufzuUHg nlfhltVOsohK9e3n32eDkHkLr2EAgFAXEK7lLww/TbvKgzwBAnCUguzyHEs3xA4b eKyQO68CG/YSfmgHudZTrCua7Zf/7M9483R4iAl3d94s0V+0pWqeMhdMTX+4RxJK tvpYmO7uomDaRjQfG+1Cgp5lqVbm2Wk0WFintemrTq+36FQXPvthAljeDXdBAmTn 6Kk492MTpuNiz6NFY55+yl0ze3Bq2mGz -----END CERTIFICATE-----Generated at Mon Apr 28 23:05:07 2025 by rpki-client on console.sobornost.net