$ rpki-client -vvf rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft File: 18ttHdz5NKH1nk_-SYLwtMUsNfU.mft (raw, json) Hash identifier: RIbxgiBTv0BUrbdNxpoMlpTEgF8zO7efw3/WQwugbkc= Subject key identifier: 93:2C:FD:AA:E2:F1:BD:C1:23:6F:52:E8:44:43:DA:2A:36:52:66:94 Authority key identifier: D7:CB:6D:1D:DC:F9:34:A1:F5:9E:4F:FE:49:82:F0:B4:C5:2C:35:F5 Certificate issuer: /CN=A914DA2D/serialNumber=D7CB6D1DDCF934A1F59E4FFE4982F0B4C52C35F5 Certificate serial: 0328 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/18ttHdz5NKH1nk_-SYLwtMUsNfU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft Manifest number: 0318 Signing time: Mon 28 Apr 2025 16:33:37 +0000 Manifest this update: Mon 28 Apr 2025 16:33:37 +0000 Manifest next update: Mon 05 May 2025 16:33:37 +0000 Files and hashes: 1: 18ttHdz5NKH1nk_-SYLwtMUsNfU.crl (hash: 7neIYozVEL6dRL2jbeZB940QB9WAAx3m8DYpUZkoQ7o=) 2: B3997DB4F3A311EC8804FE09C4F9AE02.roa (hash: +5HXnch0bIaFJTNcSoFiGhVhNziHj1q+6LRC86AmyjE=) 3: 9EE56DE2B1A611EFAFF48385C4F9AE02.roa (hash: kQ/O3Geufhk7r1SPkBq4glPiyMg+PNsBhw7npGL5FNc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.crl rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/18ttHdz5NKH1nk_-SYLwtMUsNfU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 14:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 808 (0x328) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DA2D, serialNumber=D7CB6D1DDCF934A1F59E4FFE4982F0B4C52C35F5 Validity Not Before: Apr 28 16:33:37 2025 GMT Not After : May 5 16:33:37 2025 GMT Subject: CN=680fade1-a59e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:e3:2d:16:60:7e:b3:01:a3:d3:03:47:55:12: 02:56:e6:85:97:e6:b7:17:64:f2:87:22:f2:0e:a1: 58:7f:1f:d9:dd:31:28:c8:a8:b0:3d:32:fb:3c:85: 01:a0:c9:48:00:64:41:98:f3:49:a5:f6:0d:20:30: 8d:6c:c0:35:81:33:4f:e1:91:05:8f:04:cb:f1:7f: 0c:a7:ed:95:28:82:13:5d:b0:31:0d:7b:e4:e0:de: 56:54:44:07:3f:b7:dd:35:1b:4d:8d:da:2a:ac:3c: 55:8b:9d:25:fd:87:ba:76:4c:77:30:9d:53:4c:53: 07:7e:95:4c:be:c2:50:61:53:2f:d6:7f:80:2c:09: d2:3c:bf:c4:7a:5e:25:e7:29:fb:79:5c:2b:d4:f3: 59:a5:62:a2:f1:0c:57:e5:7f:0f:93:c0:bd:c3:da: e5:7d:f2:7a:f3:92:e2:1f:03:59:0d:ad:fd:01:96: 3f:58:ff:73:00:ca:9c:00:d6:91:fa:b1:4e:b8:b2: d7:ef:a8:77:65:f6:a2:5f:fa:fe:fa:1f:a1:1b:40: ae:5c:c6:4b:65:e5:13:17:da:86:60:a0:e7:7f:ce: 74:5f:15:19:21:fd:a7:ff:b9:32:b9:7f:bc:c7:8d: 9a:ae:1c:f4:72:3a:cb:2f:15:83:8b:71:6f:fb:e1: 46:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:2C:FD:AA:E2:F1:BD:C1:23:6F:52:E8:44:43:DA:2A:36:52:66:94 X509v3 Authority Key Identifier: keyid:D7:CB:6D:1D:DC:F9:34:A1:F5:9E:4F:FE:49:82:F0:B4:C5:2C:35:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/18ttHdz5NKH1nk_-SYLwtMUsNfU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:1a:f8:fa:79:f2:ac:e0:60:63:45:10:26:73:ea:a4:ed:29: 15:2c:6e:1b:ae:ee:f4:f7:33:9d:2b:2e:c8:e3:92:61:49:39: 55:7a:c0:89:0c:64:f2:71:48:18:57:d1:e8:d4:2a:15:c2:58: a5:a7:29:85:59:40:d7:8f:e5:80:ff:f1:03:4a:50:fa:72:32: 14:e5:4d:95:77:7b:c3:bd:50:b4:85:66:98:c9:6d:c3:de:2b: 43:81:37:e8:cb:10:d9:95:5b:5b:00:6e:73:37:c5:03:2b:40: 04:d9:d5:28:a1:28:42:79:d0:d6:87:f1:8d:d8:5c:32:51:f8: ec:54:8d:71:d7:0f:c8:59:01:91:02:dc:2e:a4:d8:1a:ea:27: f2:79:1e:1f:e8:31:d8:d8:75:5e:08:23:2b:b5:f4:eb:b7:72: c0:60:15:bc:30:de:f4:74:4e:90:94:c7:73:bc:44:94:2c:27: 32:15:76:39:3a:9c:fc:c4:78:68:c0:76:47:d6:ee:92:7b:49: 60:f8:89:c3:5e:d7:8c:de:16:aa:f9:aa:b0:8b:88:01:bf:74: a3:eb:c0:0c:62:6d:c2:36:63:65:45:c5:e0:89:e4:aa:b8:7c: 4f:b6:28:0c:5d:b0:d6:04:b9:fb:40:d2:a7:01:49:04:80:1b: 81:3a:0e:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAygwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERBMkQxMTAvBgNVBAUTKEQ3Q0I2RDFERENGOTM0QTFGNTlFNEZGRTQ5ODJGMEI0 QzUyQzM1RjUwHhcNMjUwNDI4MTYzMzM3WhcNMjUwNTA1MTYzMzM3WjAYMRYwFAYD VQQDEw02ODBmYWRlMS1hNTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6OMtFmB+swGj0wNHVRICVuaFl+a3F2TyhyLyDqFYfx/Z3TEoyKiwPTL7PIUB oMlIAGRBmPNJpfYNIDCNbMA1gTNP4ZEFjwTL8X8Mp+2VKIITXbAxDXvk4N5WVEQH P7fdNRtNjdoqrDxVi50l/Ye6dkx3MJ1TTFMHfpVMvsJQYVMv1n+ALAnSPL/Eel4l 5yn7eVwr1PNZpWKi8QxX5X8Pk8C9w9rlffJ685LiHwNZDa39AZY/WP9zAMqcANaR +rFOuLLX76h3ZfaiX/r++h+hG0CuXMZLZeUTF9qGYKDnf850XxUZIf2n/7kyuX+8 x42arhz0cjrLLxWDi3Fv++FGSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJMs/ari 8b3BI29S6ERD2io2UmaUMB8GA1UdIwQYMBaAFNfLbR3c+TSh9Z5P/kmC8LTFLDX1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REEyRC83MkI1RjI5MkQy N0QxMUVDQTczRUYxNTRDNEY5QUUwMi8xOHR0SGR6NU5LSDFua18tU1lMd3RNVXNO ZlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzE4dHRIZHo1TktIMW5rXy1TWUx3dE1Vc05mVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 REEyRC83MkI1RjI5MkQyN0QxMUVDQTczRUYxNTRDNEY5QUUwMi8xOHR0SGR6NU5L SDFua18tU1lMd3RNVXNOZlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoGvj6efKs4GBjRRAmc+qk7SkVLG4bru709zOdKy7I45JhSTlVesCJ DGTycUgYV9Ho1CoVwlilpymFWUDXj+WA//EDSlD6cjIU5U2Vd3vDvVC0hWaYyW3D 3itDgTfoyxDZlVtbAG5zN8UDK0AE2dUooShCedDWh/GN2FwyUfjsVI1x1w/IWQGR AtwupNga6ifyeR4f6DHY2HVeCCMrtfTrt3LAYBW8MN70dE6QlMdzvESULCcyFXY5 Opz8xHhowHZH1u6Se0lg+InDXteM3haq+aqwi4gBv3Sj68AMYm3CNmNlRcXgieSq uHxPtigMXbDWBLn7QNKnAUkEgBuBOg5r -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:33 2025 by rpki-client on console.sobornost.net