$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft File: fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft (raw, json) Hash identifier: 3aaG3IUQulNlxAFZHSKFQnlvvJI8p9vyG/TOGa6TAwk= Subject key identifier: AE:85:D3:C3:0B:12:F1:6D:1F:7C:87:85:03:3C:5C:3B:9B:5A:A8:67 Authority key identifier: 7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18 Certificate issuer: /CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918 Certificate serial: 0BFC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft Manifest number: 0B52 Signing time: Sat 26 Apr 2025 19:21:32 +0000 Manifest this update: Sat 26 Apr 2025 19:21:31 +0000 Manifest next update: Sat 03 May 2025 19:21:31 +0000 Files and hashes: 1: fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl (hash: Yx5eWO7KAstwCM/Ufd1bm2N0qi/HQu3rPLaONeEv2/A=) 2: E8819018178811EC876F5F50C4F9AE02.roa (hash: ge8K5AgiBYS0lt2aIlXaRuN/s03ejKC5FFeDiKonxYg=) 3: CB67A9DC8D1311EF9895E61CC4F9AE02.roa (hash: 0870kwth+ehjE1/zDBzvVMJBFxK3G1/4oTcvNvPtUE0=) 4: DBD7C87C8D2411EF999C6C64C4F9AE02.roa (hash: bGktU9AE3SwaFQKzwhkhkLix1kJ6RLeBuIbARxeGwnA=) 5: 52863B4C9DBA11EB83364624C4F9AE02.roa (hash: 4VRZP8qTlcQa1n8bJBhtrpNFnhAJ9oHxbObRyMSUUQ0=) 6: 1605F9B6169E11EC9D259855C4F9AE02.roa (hash: naxs7ew7s0PkoZdXBSG0ypM8gV7BBZM5t7A8Bm0sDT4=) 7: 065A717E9B6E11EFBCAB692BC4F9AE02.roa (hash: gY1J7cieU4Bsylm5Vte+4cLJIhwXOeU9STopBRqUalg=) 8: 958CC8DA1C2611ECB416AA68C4F9AE02.roa (hash: 8mVeA+SIv0Xg6q5R2kTn0B3EzwQb0xwk0GGq0XOtjBM=) 9: 8008F5CA620C11ECAFF5941AC4F9AE02.roa (hash: hcz8bi79veRCEwuC1ZyFgL8wsxYbSaWcsZHG1CCz/KQ=) 10: 206969823B9411EB9F059D7EC4F9AE02.roa (hash: bCnEGwf5LD7neGa0atn1Npn9cznKZ5NMSfgS5ShjKiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3068 (0xbfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158E3F, serialNumber=7E313AB7FF26E783E03C07851612751881AE4918 Validity Not Before: Apr 26 19:21:31 2025 GMT Not After : May 3 19:21:31 2025 GMT Subject: CN=680d323b-0bc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c3:f3:d8:3b:9b:cf:d0:3e:f1:74:15:c6:c4: 84:7b:64:94:08:54:b4:1b:ae:7d:c1:69:6b:0c:9f: 58:c3:64:dd:83:56:5d:07:6a:85:71:b3:c7:5d:2e: e3:f4:5e:28:f6:92:0d:5b:cc:ad:60:c9:ab:75:4e: f5:26:af:4a:dd:68:4c:97:ed:fd:35:16:b4:5d:d0: a9:13:0f:65:63:4b:5f:40:0a:17:77:36:26:e9:c1: fd:24:25:c1:21:22:e2:ea:6e:88:7a:74:6f:45:d0: cd:5d:fa:c9:d1:9a:a1:4b:f3:ad:ab:b3:2c:7f:0b: b3:d4:ca:fe:81:c1:84:bd:38:8f:4e:38:57:7f:b0: 90:bc:cc:79:1e:64:40:38:78:dd:e5:66:0e:65:84: b7:a2:65:17:54:53:af:0c:87:46:5e:f7:1c:d6:ee: 53:c3:4a:ad:43:8c:3d:1e:a0:de:87:67:61:87:cf: 61:47:ae:b3:fc:da:24:58:3f:92:1f:e2:9b:ec:44: bf:6f:ca:10:53:e4:49:da:ee:ab:4d:e3:79:ff:8b: 07:fa:a0:63:b8:a9:db:fb:c0:25:d4:d0:e1:38:22: b7:c3:50:62:d9:90:aa:02:ac:2f:9d:cc:09:9e:50: 01:01:dc:c1:f8:77:b5:ed:93:8c:16:c8:53:dd:42: df:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:85:D3:C3:0B:12:F1:6D:1F:7C:87:85:03:3C:5C:3B:9B:5A:A8:67 X509v3 Authority Key Identifier: keyid:7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:73:4f:78:e3:6e:a0:80:b3:1b:68:73:0a:3e:d4:10:40:05: 31:1f:c4:07:b3:7c:b1:20:16:65:0f:2e:ac:ad:47:ab:4f:8d: f8:e6:04:b7:c2:56:3f:6a:e5:b7:6c:41:ed:4c:c0:7d:83:c0: 79:8a:1f:13:02:3d:4c:b1:92:44:32:54:7c:12:c4:fd:89:44: 46:6d:0c:14:c9:5e:28:fa:67:4e:27:83:85:4a:8b:36:d9:96: cd:0e:ee:63:e7:a5:a6:4b:4c:a6:d5:4d:61:c4:4e:7d:a4:d5: d3:55:af:fc:5e:81:e4:1c:34:9d:6f:15:20:35:e7:31:95:50: de:9a:a1:c8:69:4d:9f:5a:4f:d2:66:98:de:45:fa:80:4e:46: 16:b6:94:f0:2f:71:90:7a:2b:5a:05:00:33:70:53:fc:be:72: 2d:84:c9:80:1b:84:44:9d:ff:27:96:4e:ce:ba:90:b9:d2:cd: d9:a7:1c:a6:ec:90:62:c7:2a:d3:aa:a7:32:ac:72:ef:7f:ce: 5d:0d:ca:69:dd:d6:b8:e6:79:5d:96:73:f2:20:1d:43:79:2b: 61:92:12:03:bc:b1:c6:88:2d:3d:99:14:50:a5:d3:e4:8a:3b: e2:d9:21:aa:45:bc:8b:50:f5:f7:b8:9e:e8:0e:03:68:5d:fe: 42:49:4c:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThFM0YxMTAvBgNVBAUTKDdFMzEzQUI3RkYyNkU3ODNFMDNDMDc4NTE2MTI3NTE4 ODFBRTQ5MTgwHhcNMjUwNDI2MTkyMTMxWhcNMjUwNTAzMTkyMTMxWjAYMRYwFAYD VQQDEw02ODBkMzIzYi0wYmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo8Pz2Dubz9A+8XQVxsSEe2SUCFS0G659wWlrDJ9Yw2Tdg1ZdB2qFcbPHXS7j 9F4o9pINW8ytYMmrdU71Jq9K3WhMl+39NRa0XdCpEw9lY0tfQAoXdzYm6cH9JCXB ISLi6m6IenRvRdDNXfrJ0ZqhS/Otq7Msfwuz1Mr+gcGEvTiPTjhXf7CQvMx5HmRA OHjd5WYOZYS3omUXVFOvDIdGXvcc1u5Tw0qtQ4w9HqDeh2dhh89hR66z/NokWD+S H+Kb7ES/b8oQU+RJ2u6rTeN5/4sH+qBjuKnb+8Al1NDhOCK3w1Bi2ZCqAqwvncwJ nlABAdzB+He17ZOMFshT3ULf3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK6F08ML EvFtH3yHhQM8XDubWqhnMB8GA1UdIwQYMBaAFH4xOrf/JueD4DwHhRYSdRiBrkkY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEUzRi9DMjQzMjJCQTU0 NDYxMUVBOEMwNTY1MURDNEY5QUUwMi9makU2dF84bTU0UGdQQWVGRmhKMUdJR3VT UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZqRTZ0XzhtNTRQZ1BBZUZGaEoxR0lHdVNSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEUzRi9DMjQzMjJCQTU0NDYxMUVBOEMwNTY1MURDNEY5QUUwMi9makU2dF84bTU0 UGdQQWVGRmhKMUdJR3VTUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9c094426ggLMbaHMKPtQQQAUxH8QHs3yxIBZlDy6srUerT4345gS3 wlY/auW3bEHtTMB9g8B5ih8TAj1MsZJEMlR8EsT9iURGbQwUyV4o+mdOJ4OFSos2 2ZbNDu5j56WmS0ym1U1hxE59pNXTVa/8XoHkHDSdbxUgNecxlVDemqHIaU2fWk/S ZpjeRfqATkYWtpTwL3GQeitaBQAzcFP8vnIthMmAG4REnf8nlk7OupC50s3Zpxym 7JBixyrTqqcyrHLvf85dDcpp3da45nldlnPyIB1DeSthkhIDvLHGiC09mRRQpdPk ijvi2SGqRbyLUPX3uJ7oDgNoXf5CSUw8 -----END CERTIFICATE-----Generated at Sun Apr 27 00:13:59 2025 by rpki-client on console.sobornost.net