$ rpki-client -vvf rpki.apnic.net/member_repository/A915393C/6D04315E640E11EFB5446458C4F9AE02/S5R0cysQASlff10ywBNpOhk3aBM.mft File: S5R0cysQASlff10ywBNpOhk3aBM.mft (raw, json) Hash identifier: LknywabZaKFI3Ljr6dPvirlwkwgllfje6KnfIUny5eU= Subject key identifier: 6B:23:9E:9C:23:E6:B2:18:BB:8F:7A:43:4E:D3:B3:9B:EE:C4:3C:FD Authority key identifier: 4B:94:74:73:2B:10:01:29:5F:7F:5D:32:C0:13:69:3A:19:37:68:13 Certificate issuer: /CN=A915393C/serialNumber=4B9474732B1001295F7F5D32C013693A19376813 Certificate serial: 7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5R0cysQASlff10ywBNpOhk3aBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915393C/6D04315E640E11EFB5446458C4F9AE02/S5R0cysQASlff10ywBNpOhk3aBM.mft Manifest number: 7E Signing time: Sun 27 Apr 2025 05:29:59 +0000 Manifest this update: Sun 27 Apr 2025 05:29:59 +0000 Manifest next update: Sun 04 May 2025 05:29:59 +0000 Files and hashes: 1: S5R0cysQASlff10ywBNpOhk3aBM.crl (hash: OSWS8If5vgjPvIvB65UBS/HKEyHtdTm7umsix0hV/aY=) 2: D970354A640E11EF93D18659C4F9AE02.roa (hash: k3HZpqynszzvTxkVmhHqGRdf/ZQZ2uvnxZO8lo9Yzko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915393C/6D04315E640E11EFB5446458C4F9AE02/S5R0cysQASlff10ywBNpOhk3aBM.crl rsync://rpki.apnic.net/member_repository/A915393C/6D04315E640E11EFB5446458C4F9AE02/S5R0cysQASlff10ywBNpOhk3aBM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5R0cysQASlff10ywBNpOhk3aBM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 127 (0x7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915393C, serialNumber=4B9474732B1001295F7F5D32C013693A19376813 Validity Not Before: Apr 27 05:29:59 2025 GMT Not After : May 4 05:29:59 2025 GMT Subject: CN=680dc0d7-9506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b1:bc:5f:02:64:b8:25:43:e7:6e:a3:dd:72: 4c:07:58:62:4e:bd:5b:cc:0b:7c:20:36:76:f5:15: d3:ef:09:9c:23:ba:b9:a4:0d:50:2c:da:3e:c5:2c: 2b:28:cb:b4:39:26:e2:d9:ee:4f:9b:96:87:32:45: 19:25:13:4d:1d:17:23:24:d2:79:68:03:20:34:3e: 1f:dd:c8:2a:8f:8e:de:89:27:64:5c:d4:d8:5f:30: ca:8c:7b:7c:f6:87:fb:c8:16:59:3d:a9:4e:88:96: 7b:6c:a8:70:3c:d7:8e:06:22:4f:06:4b:37:9e:2f: 73:b8:2a:f8:13:7e:9f:5b:38:ae:69:f5:6b:4a:4b: dd:62:1b:7f:ad:54:f3:76:f8:7d:42:4f:4f:72:98: 90:c0:c7:1c:ad:0c:fa:18:ae:60:4b:f5:ef:23:31: 6b:ef:d1:53:22:6a:bc:7d:e1:48:ae:5a:aa:04:54: b2:0d:88:bb:01:b4:3d:aa:77:43:9e:91:da:4d:29: a2:8f:d2:6e:73:31:8f:29:a8:db:c7:57:28:a3:88: 49:42:c1:c7:bc:f2:d1:6c:6d:65:23:b6:8c:bc:88: 09:36:de:66:2b:f6:f6:e5:b3:37:e9:b4:e8:9b:d0: 32:c9:ce:6a:61:b8:be:46:41:3b:f0:a5:94:fd:3d: aa:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:23:9E:9C:23:E6:B2:18:BB:8F:7A:43:4E:D3:B3:9B:EE:C4:3C:FD X509v3 Authority Key Identifier: keyid:4B:94:74:73:2B:10:01:29:5F:7F:5D:32:C0:13:69:3A:19:37:68:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915393C/6D04315E640E11EFB5446458C4F9AE02/S5R0cysQASlff10ywBNpOhk3aBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5R0cysQASlff10ywBNpOhk3aBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915393C/6D04315E640E11EFB5446458C4F9AE02/S5R0cysQASlff10ywBNpOhk3aBM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:97:3f:aa:68:7b:67:bf:28:f2:34:3e:b0:ad:39:f9:c4:c9: df:48:a1:b6:1c:b9:1e:ad:0a:88:f5:f2:01:36:68:f9:22:cc: b5:2c:e1:ff:93:45:06:d8:07:ac:3b:98:4c:7b:90:20:7c:9b: 06:47:0f:3b:07:dd:b5:b8:f2:cf:18:38:19:9c:dd:04:fb:f0: 03:eb:1c:51:c8:4c:89:c4:e7:84:fc:2d:a1:13:ef:c1:c0:a3: ae:83:19:2d:dc:96:f0:0f:05:8d:e1:f4:2f:ec:38:e8:b7:26: 02:ac:30:42:41:91:6b:4f:10:25:33:fa:e8:35:ae:c1:7b:88: a3:6c:77:6f:82:12:24:40:1b:f1:60:8f:c0:a3:a4:e5:3d:36: af:20:14:87:ee:c3:eb:1f:5a:7b:22:20:ec:d3:e8:0c:94:e2: 97:bf:f7:b4:93:47:05:b8:65:8c:84:92:e0:44:fa:9c:ba:2e: 30:91:f7:22:c4:53:3f:92:c9:b8:3f:fd:45:0e:e1:95:16:24: ac:76:65:c6:a3:bd:04:e9:a6:4e:5b:a5:e8:0a:56:72:c9:f4: 99:75:35:c1:0a:23:75:7d:cf:7a:87:1c:e0:14:92:a0:06:bb: 64:da:86:1e:54:18:78:7f:92:f3:55:3d:05:ee:96:76:1a:a7: 77:69:6b:dd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MzkzQzExMC8GA1UEBRMoNEI5NDc0NzMyQjEwMDEyOTVGN0Y1RDMyQzAxMzY5M0Ex OTM3NjgxMzAeFw0yNTA0MjcwNTI5NTlaFw0yNTA1MDQwNTI5NTlaMBgxFjAUBgNV BAMTDTY4MGRjMGQ3LTk1MDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3sbxfAmS4JUPnbqPdckwHWGJOvVvMC3wgNnb1FdPvCZwjurmkDVAs2j7FLCso y7Q5JuLZ7k+blocyRRklE00dFyMk0nloAyA0Ph/dyCqPjt6JJ2Rc1NhfMMqMe3z2 h/vIFlk9qU6IlntsqHA8144GIk8GSzeeL3O4KvgTfp9bOK5p9WtKS91iG3+tVPN2 +H1CT09ymJDAxxytDPoYrmBL9e8jMWvv0VMiarx94UiuWqoEVLINiLsBtD2qd0Oe kdpNKaKP0m5zMY8pqNvHVyijiElCwce88tFsbWUjtoy8iAk23mYr9vblszfptOib 0DLJzmphuL5GQTvwpZT9ParjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUayOenCPm shi7j3pDTtOzm+7EPP0wHwYDVR0jBBgwFoAUS5R0cysQASlff10ywBNpOhk3aBMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzOTNDLzZEMDQzMTVFNjQw RTExRUZCNTQ0NjQ1OEM0RjlBRTAyL1M1UjBjeXNRQVNsZmYxMHl3Qk5wT2hrM2FC TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUzVSMGN5c1FBU2xmZjEweXdCTnBPaGszYUJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUz OTNDLzZEMDQzMTVFNjQwRTExRUZCNTQ0NjQ1OEM0RjlBRTAyL1M1UjBjeXNRQVNs ZmYxMHl3Qk5wT2hrM2FCTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALyXP6poe2e/KPI0PrCtOfnEyd9IobYcuR6tCoj18gE2aPkizLUs4f+T RQbYB6w7mEx7kCB8mwZHDzsH3bW48s8YOBmc3QT78APrHFHITInE54T8LaET78HA o66DGS3clvAPBY3h9C/sOOi3JgKsMEJBkWtPECUz+ug1rsF7iKNsd2+CEiRAG/Fg j8CjpOU9Nq8gFIfuw+sfWnsiIOzT6AyU4pe/97STRwW4ZYyEkuBE+py6LjCR9yLE Uz+Sybg//UUO4ZUWJKx2ZcajvQTppk5bpegKVnLJ9Jl1NcEKI3V9z3qHHOAUkqAG u2Tahh5UGHh/kvNVPQXulnYap3dpa90= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:47 2025 by rpki-client on console.sobornost.net