$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.mft File: 6CbZQgvPRaEIfTATu05KhJYNYcc.mft (raw, json) Hash identifier: 8zB6KjEl9Rh5W3Q4aiBmsM//dUrVz8dm6zfKCnHNFNc= Subject key identifier: E2:64:29:7E:11:5C:68:6E:57:1B:A6:7C:6B:BB:BF:34:8C:1B:70:4D Authority key identifier: E8:26:D9:42:0B:CF:45:A1:08:7D:30:13:BB:4E:4A:84:96:0D:61:C7 Certificate issuer: /CN=A914EAE4/serialNumber=E826D9420BCF45A1087D3013BB4E4A84960D61C7 Certificate serial: 1AFD Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6CbZQgvPRaEIfTATu05KhJYNYcc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.mft Manifest number: 1AFB Signing time: Mon 28 Apr 2025 16:24:55 +0000 Manifest this update: Mon 28 Apr 2025 16:24:54 +0000 Manifest next update: Mon 05 May 2025 16:24:54 +0000 Files and hashes: 1: 6CbZQgvPRaEIfTATu05KhJYNYcc.crl (hash: J9TmgGa0eHdeeBkCxvoBk/FEmnuVfuhL4SGrCXCslXI=) 2: D810AAAAB60B11EFB476C022C4F9AE02.roa (hash: W3khPMeaOIIvZA6XChV502z9D4IWV/QOl7ps2nePO0c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.crl rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6CbZQgvPRaEIfTATu05KhJYNYcc.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 14:50:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6909 (0x1afd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE4, serialNumber=E826D9420BCF45A1087D3013BB4E4A84960D61C7 Validity Not Before: Apr 28 16:24:54 2025 GMT Not After : May 5 16:24:54 2025 GMT Subject: CN=680fabd7-bc6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:5e:7a:f7:13:a7:a4:a1:53:68:7f:4d:a8:98: b9:9d:7b:16:6a:49:0b:f8:20:77:61:c6:c9:c7:a2: 06:25:e8:b9:1c:a7:56:57:c8:c6:2b:a8:ab:37:c3: 3e:43:e4:c6:af:94:d4:46:21:11:28:7d:21:34:75: 51:9e:17:b9:b8:84:1a:5f:c1:74:97:05:60:b7:95: 22:3f:cf:2b:94:12:21:9b:00:bf:89:e3:4f:76:f9: c1:01:64:fb:72:fd:e5:fc:a2:bc:de:8b:c6:7e:26: bf:9d:1e:94:e9:ce:05:09:74:bd:dd:39:10:59:f8: ca:9d:45:54:71:60:a9:68:61:bd:8c:1a:c0:2a:a0: 46:c1:be:d3:dd:ef:bb:51:c7:51:1f:3f:42:2e:48: 20:3e:7f:d8:78:6f:ee:1b:76:2f:57:f6:50:f0:75: 1a:b7:bc:44:f6:84:72:31:a4:1b:17:bc:ea:6a:9d: 01:af:90:17:42:38:d5:61:fa:8f:a1:8a:4f:2c:92: b8:e8:f9:91:17:ac:a8:c0:4a:77:57:44:01:55:52: d4:f1:87:10:d2:34:60:8c:13:fb:fe:93:99:9d:9c: e6:7c:25:d5:1b:dc:c5:09:32:12:bc:25:e6:b9:5d: 67:f8:28:52:ea:78:8d:67:51:a6:3f:25:91:05:7f: b0:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:64:29:7E:11:5C:68:6E:57:1B:A6:7C:6B:BB:BF:34:8C:1B:70:4D X509v3 Authority Key Identifier: keyid:E8:26:D9:42:0B:CF:45:A1:08:7D:30:13:BB:4E:4A:84:96:0D:61:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6CbZQgvPRaEIfTATu05KhJYNYcc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:49:77:91:68:49:46:90:81:7f:f5:5e:f6:73:16:9d:7f:63: 3a:48:36:6f:60:b5:1c:6e:0c:7d:71:89:ba:8b:30:ba:d0:ea: a7:0b:85:72:e9:81:28:3c:c3:27:b0:d8:74:0f:db:ea:f2:95: d5:ee:ef:80:dc:79:8e:e3:d2:ff:8e:76:d4:de:f7:01:67:9d: 55:1c:33:d7:26:29:9f:a8:18:30:b7:62:4a:8d:fa:4c:e6:bf: 6b:16:d5:e3:f9:53:fe:6e:ae:0b:c3:62:7c:c3:e8:08:60:9c: 5d:a4:bc:06:0c:8c:38:20:57:d8:86:60:3d:89:f8:1e:96:78: 1c:99:35:ab:41:ed:86:70:17:b7:4b:6a:ed:e6:fe:d3:5e:4d: d1:d1:45:8d:a8:9b:88:8a:5d:44:61:81:d8:c7:5f:1a:70:88: f3:50:d8:04:ac:bd:e1:c5:38:29:77:69:98:d9:01:df:c8:8e: 5b:95:8a:78:b5:7a:93:e1:a1:18:79:ec:fa:72:fe:28:c2:f1: 3c:2c:73:ba:67:0f:81:f7:37:25:92:bc:c8:70:ab:10:f9:13: d8:6f:ae:ef:15:8c:fd:f3:87:8a:75:0e:5c:15:0a:de:01:00: 9e:b9:5f:be:3e:9b:13:a6:08:6f:20:aa:21:f7:16:c9:a1:b4: 51:57:fb:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGv0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVBRTQxMTAvBgNVBAUTKEU4MjZEOTQyMEJDRjQ1QTEwODdEMzAxM0JCNEU0QTg0 OTYwRDYxQzcwHhcNMjUwNDI4MTYyNDU0WhcNMjUwNTA1MTYyNDU0WjAYMRYwFAYD VQQDEw02ODBmYWJkNy1iYzZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+l569xOnpKFTaH9NqJi5nXsWakkL+CB3YcbJx6IGJei5HKdWV8jGK6irN8M+ Q+TGr5TURiERKH0hNHVRnhe5uIQaX8F0lwVgt5UiP88rlBIhmwC/ieNPdvnBAWT7 cv3l/KK83ovGfia/nR6U6c4FCXS93TkQWfjKnUVUcWCpaGG9jBrAKqBGwb7T3e+7 UcdRHz9CLkggPn/YeG/uG3YvV/ZQ8HUat7xE9oRyMaQbF7zqap0Br5AXQjjVYfqP oYpPLJK46PmRF6yowEp3V0QBVVLU8YcQ0jRgjBP7/pOZnZzmfCXVG9zFCTISvCXm uV1n+ChS6niNZ1GmPyWRBX+wLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOJkKX4R XGhuVxumfGu7vzSMG3BNMB8GA1UdIwQYMBaAFOgm2UILz0WhCH0wE7tOSoSWDWHH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUFFNC83NjRBMDY2MDI1 NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi82Q2JaUWd2UFJhRUlmVEFUdTA1S2hKWU5Z Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzZDYlpRZ3ZQUmFFSWZUQVR1MDVLaEpZTlljYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUFFNC83NjRBMDY2MDI1NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi82Q2JaUWd2UFJh RUlmVEFUdTA1S2hKWU5ZY2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1SXeRaElGkIF/9V72cxadf2M6SDZvYLUcbgx9cYm6izC60OqnC4Vy 6YEoPMMnsNh0D9vq8pXV7u+A3HmO49L/jnbU3vcBZ51VHDPXJimfqBgwt2JKjfpM 5r9rFtXj+VP+bq4Lw2J8w+gIYJxdpLwGDIw4IFfYhmA9ifgelngcmTWrQe2GcBe3 S2rt5v7TXk3R0UWNqJuIil1EYYHYx18acIjzUNgErL3hxTgpd2mY2QHfyI5blYp4 tXqT4aEYeez6cv4owvE8LHO6Zw+B9zclkrzIcKsQ+RPYb67vFYz984eKdQ5cFQre AQCeuV++PpsTpghvIKoh9xbJobRRV/sQ -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:34 2025 by rpki-client on console.sobornost.net