$ rpki-client -vvf rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft File: r-cn5CCdzfgnYldLXjPICDeHoY8.mft (raw, json) Hash identifier: CXrtOU6pUxtiPWnRHKIl+tw++qlEwgwgNX5QeNYf1Pw= Subject key identifier: 3F:9C:4B:17:F8:BE:73:59:77:14:8D:BB:4D:34:8D:02:F6:4B:FC:F5 Authority key identifier: AF:E7:27:E4:20:9D:CD:F8:27:62:57:4B:5E:33:C8:08:37:87:A1:8F Certificate issuer: /CN=A915AE5F/serialNumber=AFE727E4209DCDF82762574B5E33C8083787A18F Certificate serial: 1E97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft Manifest number: 1E36 Signing time: Mon 28 Apr 2025 16:11:50 +0000 Manifest this update: Mon 28 Apr 2025 16:11:49 +0000 Manifest next update: Mon 05 May 2025 16:11:49 +0000 Files and hashes: 1: r-cn5CCdzfgnYldLXjPICDeHoY8.crl (hash: EtAyCLDGQqxqV54wGX7MnqISLiTz0EaBkV9puWRizuU=) 2: 7EFB8A6E885311E6BDE50A80C4F9AE02.roa (hash: WKYh+NxnsT3X7rLjv5qUGFM6/m1tIHkeIZefmgprnPs=) 3: D80B013A172011EEB3A9C124C4F9AE02.roa (hash: i+bH68t7yKzy0Rw6D9wkVEOs5mv50GBBoWxW4vThyQY=) 4: CF946690E5E711EE89AF4E5AC4F9AE02.roa (hash: Hy5wV1LNqpxbM5ijt7NUzM7tVBcEJ4OJJPk557Hpy8c=) 5: 882AC358E1F511EE9188A919C4F9AE02.roa (hash: 7XnoI3SWGKSLq9zz7HLNS32aw+KK++smhLaAOQ+1lDo=) 6: 5C6A7BE6E1F511EEA08A5519C4F9AE02.roa (hash: T6jmHSx80+1QapW6ywMYadpctCcOQDce4QIxekTXdlo=) 7: B0ACAB905A2011EA9E34F70BC4F9AE02.roa (hash: K3rejCNdQ0NeO9mAgLHI687zq5GLAF1vM1BDZ4QHrk0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.crl rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 16:11:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7831 (0x1e97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915AE5F, serialNumber=AFE727E4209DCDF82762574B5E33C8083787A18F Validity Not Before: Apr 28 16:11:49 2025 GMT Not After : May 5 16:11:49 2025 GMT Subject: CN=680fa8c5-8b5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:25:d0:0f:9f:c7:54:f8:6d:49:43:49:64:36: 40:35:e5:1c:fb:8e:05:93:ae:6f:ac:2b:63:54:de: 3b:47:71:ff:4e:d0:fa:be:cb:0d:ec:3e:ea:9d:14: 02:5d:7a:cf:e2:5f:e2:e4:78:8c:97:74:8f:84:7f: 26:cf:51:b4:b8:e3:b4:bc:78:07:05:bb:b5:75:2e: ba:0c:dd:00:37:64:b5:4f:cb:75:e9:39:ac:98:3f: 5c:a8:3c:57:50:db:a9:b4:26:d2:93:1f:8b:26:26: 59:e0:be:1b:3f:08:c1:f4:c6:4e:57:dc:df:2e:b7: 37:7c:b1:c4:3e:b7:bb:65:85:7f:58:dd:9c:68:d2: 8a:8c:56:f1:17:af:d6:d2:9d:42:49:66:55:ac:d0: e1:b8:19:df:b8:d9:19:2f:af:20:6a:2d:9f:6c:cb: 2a:5b:b3:9b:46:54:bf:d2:59:5c:57:cb:59:5e:5a: c2:3c:c7:f8:77:47:fe:15:3c:86:0c:74:ec:b9:c4: 4a:28:37:b8:12:16:67:b3:38:dc:3a:58:16:b4:06: f4:9c:a0:63:7e:2a:f7:e4:24:cf:40:9b:27:2a:0f: d4:e3:32:0c:be:7e:aa:89:a2:5b:29:5a:3f:5e:50: 28:64:f1:7f:a2:b3:1c:46:f7:ae:eb:b9:23:29:30: b4:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:9C:4B:17:F8:BE:73:59:77:14:8D:BB:4D:34:8D:02:F6:4B:FC:F5 X509v3 Authority Key Identifier: keyid:AF:E7:27:E4:20:9D:CD:F8:27:62:57:4B:5E:33:C8:08:37:87:A1:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:d5:77:73:8b:b7:72:1d:26:9b:c1:44:c6:b6:4f:10:2e:1c: ca:a1:e4:5c:ad:6c:91:67:5d:e6:d1:a5:59:9f:b0:23:1f:c0: 15:d5:34:1d:d6:eb:5f:de:90:a9:12:62:0e:b8:c0:00:9e:0a: 12:54:a9:34:03:14:81:65:6e:de:c8:23:14:c8:65:d6:75:14: 09:b8:7e:5a:bc:fa:17:c5:a2:64:c0:0d:7f:64:68:60:dc:6e: 10:f5:a1:36:88:b9:be:b3:f6:fb:24:b1:b8:53:22:5e:3e:a1: 85:b7:e1:22:de:91:90:36:d0:65:e1:2a:0f:40:e7:3f:b2:0d: 0a:ec:c4:a8:03:88:34:d3:56:d2:6b:6b:35:d4:34:8f:68:55: 45:de:59:39:d3:ee:fd:4a:38:71:d4:88:13:4a:2e:05:69:f7: 1c:8d:7c:4f:dc:41:0a:2d:94:39:7e:c3:44:29:d1:17:8c:66: 93:4d:7b:c0:d3:ef:3d:e9:89:b5:ed:ca:72:98:68:6e:b6:f1: 0b:35:d6:9e:16:89:43:bc:6f:d5:d0:05:10:dc:0d:73:b9:6b: 17:05:e9:be:44:67:bc:c1:d7:e9:49:b3:b5:42:e0:b5:f6:93: 78:e6:25:3d:78:e6:08:5b:92:76:84:c8:da:27:b2:26:a6:36: 44:9b:51:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHpcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFFNUYxMTAvBgNVBAUTKEFGRTcyN0U0MjA5RENERjgyNzYyNTc0QjVFMzNDODA4 Mzc4N0ExOEYwHhcNMjUwNDI4MTYxMTQ5WhcNMjUwNTA1MTYxMTQ5WjAYMRYwFAYD VQQDEw02ODBmYThjNS04YjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2SXQD5/HVPhtSUNJZDZANeUc+44Fk65vrCtjVN47R3H/TtD6vssN7D7qnRQC XXrP4l/i5HiMl3SPhH8mz1G0uOO0vHgHBbu1dS66DN0AN2S1T8t16TmsmD9cqDxX UNuptCbSkx+LJiZZ4L4bPwjB9MZOV9zfLrc3fLHEPre7ZYV/WN2caNKKjFbxF6/W 0p1CSWZVrNDhuBnfuNkZL68gai2fbMsqW7ObRlS/0llcV8tZXlrCPMf4d0f+FTyG DHTsucRKKDe4EhZnszjcOlgWtAb0nKBjfir35CTPQJsnKg/U4zIMvn6qiaJbKVo/ XlAoZPF/orMcRveu67kjKTC0TwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD+cSxf4 vnNZdxSNu000jQL2S/z1MB8GA1UdIwQYMBaAFK/nJ+Qgnc34J2JXS14zyAg3h6GP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QUU1Ri84Qjc5QjY3ODg4 NTExMUU2QTY5MkRFNzhDNEY5QUUwMi9yLWNuNUNDZHpmZ25ZbGRMWGpQSUNEZUhv WTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ItY241Q0NkemZnbllsZExYalBJQ0RlSG9ZOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QUU1Ri84Qjc5QjY3ODg4NTExMUU2QTY5MkRFNzhDNEY5QUUwMi9yLWNuNUNDZHpm Z25ZbGRMWGpQSUNEZUhvWTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCz1Xdzi7dyHSabwUTGtk8QLhzKoeRcrWyRZ13m0aVZn7AjH8AV1TQd 1utf3pCpEmIOuMAAngoSVKk0AxSBZW7eyCMUyGXWdRQJuH5avPoXxaJkwA1/ZGhg 3G4Q9aE2iLm+s/b7JLG4UyJePqGFt+Ei3pGQNtBl4SoPQOc/sg0K7MSoA4g001bS a2s11DSPaFVF3lk50+79Sjhx1IgTSi4FafccjXxP3EEKLZQ5fsNEKdEXjGaTTXvA 0+896Ym17cpymGhutvELNdaeFolDvG/V0AUQ3A1zuWsXBem+RGe8wdfpSbO1QuC1 9pN45iU9eOYIW5J2hMjaJ7ImpjZEm1HX -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:36 2025 by rpki-client on console.sobornost.net