$ rpki-client -vvf rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.mft File: 4BlKpTtYIbm9DFx7g1K7E4GFP50.mft (raw, json) Hash identifier: 0w7eKZswvMD/tM7bc7EC1ZcJKZimXczXhlDEes7iKgQ= Subject key identifier: F2:C3:F4:CB:45:0E:AD:88:6F:86:49:BE:F0:CF:C1:F6:56:1B:8F:BF Authority key identifier: E0:19:4A:A5:3B:58:21:B9:BD:0C:5C:7B:83:52:BB:13:81:85:3F:9D Certificate issuer: /CN=A914E0B6/serialNumber=E0194AA53B5821B9BD0C5C7B8352BB1381853F9D Certificate serial: E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BlKpTtYIbm9DFx7g1K7E4GFP50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.mft Manifest number: E9 Signing time: Sun 27 Apr 2025 04:16:36 +0000 Manifest this update: Sun 27 Apr 2025 04:16:36 +0000 Manifest next update: Sun 04 May 2025 04:16:36 +0000 Files and hashes: 1: 4BlKpTtYIbm9DFx7g1K7E4GFP50.crl (hash: 5FzD+pGZT4nEe6ihMoDptQLu5oIyUqU1DrKEro5h/7c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.crl rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BlKpTtYIbm9DFx7g1K7E4GFP50.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 233 (0xe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E0B6, serialNumber=E0194AA53B5821B9BD0C5C7B8352BB1381853F9D Validity Not Before: Apr 27 04:16:36 2025 GMT Not After : May 4 04:16:36 2025 GMT Subject: CN=680dafa4-1f4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f8:63:72:2d:12:6a:60:0c:1f:21:25:3b:8f: 87:86:f1:9b:a8:2e:04:7e:38:72:7e:64:3f:ac:70: b2:71:98:ab:f4:7c:a1:f7:18:dd:57:b9:d2:14:8a: 68:49:76:cc:2e:8f:9d:2c:9c:23:b3:c1:10:da:3c: 4f:73:d7:1a:42:fd:1c:57:cc:a7:f7:2c:48:71:8a: e7:92:9a:82:36:67:78:ec:86:63:9e:06:04:a2:d0: 9e:10:5e:01:66:c0:de:3a:35:f1:e5:62:7b:98:4f: 1c:31:69:f0:0c:93:21:ff:93:f9:66:cf:8a:6e:3d: 8c:68:96:a7:d8:7e:f5:f5:13:e8:99:be:ce:e4:a3: 11:86:0a:c9:ba:d2:d8:2c:b7:d1:58:9c:28:29:fc: e3:b3:3e:e2:f5:15:24:17:c5:b9:27:41:a5:69:ab: 91:ec:13:fd:dc:96:2f:a6:a2:e3:0e:ce:b3:16:cb: 23:a3:9c:14:5d:76:72:76:5e:68:de:47:95:bd:a7: bf:46:74:60:c3:03:de:43:54:73:61:43:27:0d:a3: 08:c6:a9:60:18:80:4c:91:3e:03:ef:56:d7:eb:53: 42:88:65:20:d5:fb:a0:75:86:4c:8e:38:32:df:58: 1b:f6:4d:54:79:19:7d:7b:fd:16:1e:40:ee:d6:d3: f3:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:C3:F4:CB:45:0E:AD:88:6F:86:49:BE:F0:CF:C1:F6:56:1B:8F:BF X509v3 Authority Key Identifier: keyid:E0:19:4A:A5:3B:58:21:B9:BD:0C:5C:7B:83:52:BB:13:81:85:3F:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BlKpTtYIbm9DFx7g1K7E4GFP50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:96:d8:bf:fb:e4:e9:7c:37:20:ad:f0:b3:fc:86:59:79:e5: 10:9c:a9:57:58:15:1a:cb:ab:4f:1c:62:c7:6f:bf:31:84:7e: a6:4c:a9:14:59:38:ad:a7:67:cd:c6:33:7f:fc:e7:0d:c5:c1: a9:42:0d:33:fa:de:d3:42:a4:af:c5:43:81:6e:c0:da:18:68: c4:f7:af:33:6f:d5:3b:7d:a6:00:94:da:d8:61:f7:ab:82:25: 9a:55:d8:61:30:d5:39:b0:86:c6:57:6a:02:79:40:11:c6:52: f6:7f:0f:0f:38:15:f4:c4:f0:78:9f:03:50:68:ce:96:5d:0d: 85:bc:83:1b:ce:ae:1b:b3:ab:cc:a1:9b:ae:fd:e6:7b:e7:26: d3:3f:fb:c7:e6:46:12:f9:b0:d3:76:b4:08:28:a2:6b:bc:29: 24:37:fc:88:65:ca:88:ce:90:52:d5:6f:c0:84:f8:32:59:51: 54:f2:94:4a:e8:d6:87:db:e9:b2:44:87:12:58:f2:9f:ea:ec: 85:08:84:a6:36:bb:b8:ab:41:ae:68:1d:4b:52:dc:00:90:25: 4c:33:99:03:72:71:bb:86:43:7e:72:ee:62:d4:2c:21:7a:a6: fd:69:79:81:09:9c:90:c6:a7:e9:fa:e4:c5:49:26:1f:8d:c3: 62:10:b9:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwQjYxMTAvBgNVBAUTKEUwMTk0QUE1M0I1ODIxQjlCRDBDNUM3QjgzNTJCQjEz ODE4NTNGOUQwHhcNMjUwNDI3MDQxNjM2WhcNMjUwNTA0MDQxNjM2WjAYMRYwFAYD VQQDEw02ODBkYWZhNC0xZjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyvhjci0SamAMHyElO4+HhvGbqC4EfjhyfmQ/rHCycZir9Hyh9xjdV7nSFIpo SXbMLo+dLJwjs8EQ2jxPc9caQv0cV8yn9yxIcYrnkpqCNmd47IZjngYEotCeEF4B ZsDeOjXx5WJ7mE8cMWnwDJMh/5P5Zs+Kbj2MaJan2H719RPomb7O5KMRhgrJutLY LLfRWJwoKfzjsz7i9RUkF8W5J0GlaauR7BP93JYvpqLjDs6zFssjo5wUXXZydl5o 3keVvae/RnRgwwPeQ1RzYUMnDaMIxqlgGIBMkT4D71bX61NCiGUg1fugdYZMjjgy 31gb9k1UeRl9e/0WHkDu1tPz9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPLD9MtF Dq2Ib4ZJvvDPwfZWG4+/MB8GA1UdIwQYMBaAFOAZSqU7WCG5vQxce4NSuxOBhT+d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTBCNi82OTU2QUUzRUJG MzAxMUVFQkU0RjNDMUVDNEY5QUUwMi80QmxLcFR0WUlibTlERng3ZzFLN0U0R0ZQ NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRCbEtwVHRZSWJtOURGeDdnMUs3RTRHRlA1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTBCNi82OTU2QUUzRUJGMzAxMUVFQkU0RjNDMUVDNEY5QUUwMi80QmxLcFR0WUli bTlERng3ZzFLN0U0R0ZQNTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXlti/++TpfDcgrfCz/IZZeeUQnKlXWBUay6tPHGLHb78xhH6mTKkU WTitp2fNxjN//OcNxcGpQg0z+t7TQqSvxUOBbsDaGGjE968zb9U7faYAlNrYYfer giWaVdhhMNU5sIbGV2oCeUARxlL2fw8POBX0xPB4nwNQaM6WXQ2FvIMbzq4bs6vM oZuu/eZ75ybTP/vH5kYS+bDTdrQIKKJrvCkkN/yIZcqIzpBS1W/AhPgyWVFU8pRK 6NaH2+myRIcSWPKf6uyFCISmNru4q0GuaB1LUtwAkCVMM5kDcnG7hkN+cu5i1Cwh eqb9aXmBCZyQxqfp+uTFSSYfjcNiELn8 -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:43 2025 by rpki-client on console.sobornost.net