$ rpki-client -vvf rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft File: EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft (raw, json) Hash identifier: Z8dy7e8soXOC2TuU3YSnZ7+dCpPcUZ0ZA4o5tBi9l7Y= Subject key identifier: 66:2D:D4:B3:F8:D1:93:A5:44:05:98:43:04:B8:87:6A:8A:E4:59:E7 Authority key identifier: 10:76:18:E3:6C:91:DB:ED:0C:87:45:29:5D:01:49:84:27:87:AF:83 Certificate issuer: /CN=A914B813/serialNumber=107618E36C91DBED0C8745295D0149842787AF83 Certificate serial: 0121 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft Manifest number: 011D Signing time: Sun 27 Apr 2025 03:39:58 +0000 Manifest this update: Sun 27 Apr 2025 03:39:58 +0000 Manifest next update: Sun 04 May 2025 03:39:58 +0000 Files and hashes: 1: EHYY42yR2-0Mh0UpXQFJhCeHr4M.crl (hash: E5CbfOY8LFtEmnSXRyHNcOqnFjgVYNEPtqV+Qt89r9M=) 2: D6CC557C6E2C11EEBFE28628C4F9AE02.roa (hash: zenPmnV708uWYVdBIohUknKedfQOR1ObJANCzq5j/eI=) 3: D663158A6E2C11EEBFE28628C4F9AE02.roa (hash: cNAOWRyYAIXWiMdboiFgiFug53GcE6u1QmL+e/IQa/M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.crl rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 289 (0x121) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B813, serialNumber=107618E36C91DBED0C8745295D0149842787AF83 Validity Not Before: Apr 27 03:39:58 2025 GMT Not After : May 4 03:39:58 2025 GMT Subject: CN=680da70e-d64d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:68:2f:5b:4a:6c:a7:c5:ee:1b:83:60:95:75: 45:de:66:66:70:37:95:92:77:11:6e:01:3e:9c:8b: d1:16:b2:3e:42:b5:d9:4e:00:80:ac:61:a1:9f:72: 6f:b6:01:f7:85:1e:81:02:49:a9:30:9c:ba:0d:7e: 41:40:f1:78:77:0e:23:85:df:6b:ed:ee:af:a4:de: 7f:af:59:5d:c1:b4:94:05:1e:3e:91:b1:76:61:50: e2:22:06:44:ed:8b:64:30:cc:4f:f6:e4:e5:96:71: ac:f4:2c:f9:04:6a:f1:14:c3:84:dc:0c:de:a8:09: 7a:c3:ba:53:16:04:af:00:d1:3c:1d:26:d3:3d:19: 4b:b3:c5:26:94:ed:20:00:38:cc:f0:15:5b:2a:21: 7c:65:fa:1c:22:94:0c:6c:5d:bb:ff:51:3e:f8:1f: 0b:ca:26:ad:d2:92:aa:b3:8c:62:b5:de:52:23:2d: 2a:95:04:0a:74:4d:dc:3b:bd:21:ef:62:6e:b4:3c: ec:87:91:cd:7f:4a:8d:09:d5:1b:5b:eb:fb:4d:be: db:9b:06:1b:de:ff:cc:ec:33:90:03:0f:65:a8:ef: a2:d1:6f:fb:16:67:a0:85:92:fd:3e:bf:6a:d4:47: 7f:06:3d:6d:56:10:0a:a1:7b:42:87:9e:f3:d8:43: cb:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:2D:D4:B3:F8:D1:93:A5:44:05:98:43:04:B8:87:6A:8A:E4:59:E7 X509v3 Authority Key Identifier: keyid:10:76:18:E3:6C:91:DB:ED:0C:87:45:29:5D:01:49:84:27:87:AF:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:aa:85:e2:d7:9f:0c:d9:c4:f7:a4:87:5f:b5:17:5b:d3:06: 70:41:4c:c5:7d:3d:64:c6:d4:41:67:23:2e:17:f4:ec:de:ed: 1e:0b:ec:0d:22:aa:bd:cb:28:85:3a:2f:97:0f:5a:f4:c2:ec: d6:a5:e4:55:02:2e:8d:d5:e2:2d:11:59:98:36:df:0e:2d:26: cb:5a:2b:1f:3c:75:f5:2e:86:aa:65:03:bc:ff:81:31:93:c2: d6:89:d8:49:66:e9:3b:37:82:d3:35:34:9e:99:ec:d5:c8:9d: 4c:74:78:8b:71:04:be:54:1c:9d:5a:1b:81:a0:0a:24:44:a6: f6:54:da:42:69:a1:8b:3b:e0:66:87:ae:ae:2d:65:b4:38:c3: d9:e9:60:21:d7:20:48:55:3c:b1:73:6c:7c:ad:a1:0e:57:99: 38:51:f4:e5:df:de:1f:4e:7b:38:0b:14:c3:9d:03:cf:8f:94: aa:d9:ab:9e:28:d4:fd:b0:20:4a:7d:46:2c:65:c8:bc:63:e5: 34:d5:3a:94:75:b4:87:00:6d:9e:38:ef:09:c5:2c:dd:07:d6: bb:2f:b4:bf:7a:1f:8c:ef:34:90:d1:9d:40:d3:76:9f:3b:3b: 0c:55:59:ba:70:ab:46:73:a2:29:e5:28:53:7e:79:6b:a2:0a: 94:df:1c:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEI4MTMxMTAvBgNVBAUTKDEwNzYxOEUzNkM5MURCRUQwQzg3NDUyOTVEMDE0OTg0 Mjc4N0FGODMwHhcNMjUwNDI3MDMzOTU4WhcNMjUwNTA0MDMzOTU4WjAYMRYwFAYD VQQDEw02ODBkYTcwZS1kNjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA02gvW0psp8XuG4NglXVF3mZmcDeVkncRbgE+nIvRFrI+QrXZTgCArGGhn3Jv tgH3hR6BAkmpMJy6DX5BQPF4dw4jhd9r7e6vpN5/r1ldwbSUBR4+kbF2YVDiIgZE 7YtkMMxP9uTllnGs9Cz5BGrxFMOE3AzeqAl6w7pTFgSvANE8HSbTPRlLs8UmlO0g ADjM8BVbKiF8ZfocIpQMbF27/1E++B8Lyiat0pKqs4xitd5SIy0qlQQKdE3cO70h 72JutDzsh5HNf0qNCdUbW+v7Tb7bmwYb3v/M7DOQAw9lqO+i0W/7FmeghZL9Pr9q 1Ed/Bj1tVhAKoXtCh57z2EPLlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGYt1LP4 0ZOlRAWYQwS4h2qK5FnnMB8GA1UdIwQYMBaAFBB2GONskdvtDIdFKV0BSYQnh6+D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjgxMy9BODUyNDM2QTZF MkIxMUVFOERENjY3MzVDNEY5QUUwMi9FSFlZNDJ5UjItME1oMFVwWFFGSmhDZUhy NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VIWVk0MnlSMi0wTWgwVXBYUUZKaENlSHI0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjgxMy9BODUyNDM2QTZFMkIxMUVFOERENjY3MzVDNEY5QUUwMi9FSFlZNDJ5UjIt ME1oMFVwWFFGSmhDZUhyNE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDPqoXi158M2cT3pIdftRdb0wZwQUzFfT1kxtRBZyMuF/Ts3u0eC+wN Iqq9yyiFOi+XD1r0wuzWpeRVAi6N1eItEVmYNt8OLSbLWisfPHX1LoaqZQO8/4Ex k8LWidhJZuk7N4LTNTSemezVyJ1MdHiLcQS+VBydWhuBoAokRKb2VNpCaaGLO+Bm h66uLWW0OMPZ6WAh1yBIVTyxc2x8raEOV5k4UfTl394fTns4CxTDnQPPj5Sq2aue KNT9sCBKfUYsZci8Y+U01TqUdbSHAG2eOO8JxSzdB9a7L7S/eh+M7zSQ0Z1A03af OzsMVVm6cKtGc6Ip5ShTfnlrogqU3xy3 -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:42 2025 by rpki-client on console.sobornost.net