$ rpki-client -vvf rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft File: JU6vZJB1T1B9uBzpDdtim2IvRmA.mft (raw, json) Hash identifier: YA6bE5l/GHo0Cjj5/cY/5v5mWhM4dNdfRIpFphyc31I= Subject key identifier: 17:0C:F3:E7:DE:0C:B2:B1:77:2C:42:D7:4E:AF:93:A7:50:F2:52:2F Authority key identifier: 25:4E:AF:64:90:75:4F:50:7D:B8:1C:E9:0D:DB:62:9B:62:2F:46:60 Certificate issuer: /CN=A915B8D0/serialNumber=254EAF6490754F507DB81CE90DDB629B622F4660 Certificate serial: D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft Manifest number: CE Signing time: Wed 23 Apr 2025 04:52:14 +0000 Manifest this update: Wed 23 Apr 2025 04:52:13 +0000 Manifest next update: Wed 30 Apr 2025 04:52:13 +0000 Files and hashes: 1: JU6vZJB1T1B9uBzpDdtim2IvRmA.crl (hash: Zclqp++kJYNtovKgdayC0T6rAii6ShdLGQTdL++EZ8s=) 2: 0B2E53E422B711EFB2B15160C4F9AE02.roa (hash: QOXN1nndvSK1AATByodPTKJLPtXr2Sr2FzfqtSOzir4=) 3: FD6286EA22B611EFBF5D3960C4F9AE02.roa (hash: OT9nmfEqQIusq5e8dp/kCIgj5rUezQlTB68c6LVcxWs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.crl rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 04:47:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 211 (0xd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B8D0, serialNumber=254EAF6490754F507DB81CE90DDB629B622F4660 Validity Not Before: Apr 23 04:52:13 2025 GMT Not After : Apr 30 04:52:13 2025 GMT Subject: CN=680871fd-fb26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:a3:8f:6a:61:54:aa:de:fc:9e:72:30:9f:a9: 31:85:04:31:5e:71:ae:73:99:16:38:cf:0a:73:42: 49:d1:2b:0f:73:d4:7d:c4:65:a4:95:bf:e5:f0:ce: ac:b3:2a:c4:f3:bc:e5:1b:ec:ae:60:6c:69:45:9c: 6d:db:7c:d9:b4:7b:6e:56:d8:ed:17:66:a0:d9:ac: 12:60:24:05:3f:94:a0:49:09:62:fb:4c:ba:7b:84: bd:67:58:fd:45:e2:ce:ea:82:77:17:7f:09:dd:eb: 7b:5f:02:d5:0a:ce:9c:7a:e4:f8:6f:7d:8b:18:3a: 92:8e:8d:c8:7c:7c:1e:3c:2e:d1:64:dd:9a:b2:6f: 86:b4:32:a1:7a:50:bf:c8:12:71:01:cd:83:e4:6b: 1e:18:b6:fa:4a:49:ad:1d:e3:92:73:be:ac:44:06: 1f:19:c0:e5:45:d0:6d:28:1a:16:51:3b:4a:32:01: d6:af:de:31:14:52:75:be:44:c8:37:bf:4c:e1:ff: ae:e8:1a:4a:8e:6d:69:1f:9a:0e:54:0b:ec:38:a2: 82:5d:61:35:74:7c:20:8b:23:4b:d6:ac:2a:d7:8c: e4:86:f0:b8:49:58:6e:86:93:1a:9b:a5:c0:07:9a: be:10:53:f5:ad:43:5e:18:48:fb:ab:04:3e:23:d7: 60:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:0C:F3:E7:DE:0C:B2:B1:77:2C:42:D7:4E:AF:93:A7:50:F2:52:2F X509v3 Authority Key Identifier: keyid:25:4E:AF:64:90:75:4F:50:7D:B8:1C:E9:0D:DB:62:9B:62:2F:46:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:54:77:b9:3b:dc:ac:cc:69:3b:1e:16:df:7a:d7:ec:dd:6d: a7:b6:70:af:3f:af:31:29:42:4f:7f:ae:8b:53:05:85:cb:43: 20:3d:b0:e7:87:ec:e3:24:ab:cf:52:b9:2f:2e:9a:4d:aa:9e: 39:c4:18:04:32:39:8d:56:cc:7d:90:d2:12:68:28:42:0f:bc: af:b7:a3:36:ce:49:4e:65:d7:f3:b9:cf:25:10:49:42:63:92: 94:15:31:f8:d9:37:ac:89:83:95:5c:65:4c:1b:ae:01:0a:c3: 41:cd:61:4c:74:71:f7:86:fb:8e:61:55:45:53:db:45:eb:97: d8:fc:d2:a6:ca:67:3c:c5:ca:99:fd:49:50:7f:9e:34:0f:46: 8b:f1:38:8c:a4:3a:f8:69:27:90:01:79:b4:04:01:85:2d:a8: af:52:03:31:d6:f5:a0:e1:f0:59:a8:f8:7c:37:d2:e3:73:dd: 11:ce:6e:f2:df:f9:4e:57:cb:26:de:e3:ab:dd:56:6f:64:95: 2d:be:b0:3a:dd:4a:64:52:76:9b:03:93:9d:23:22:d0:11:7c: 11:5b:e8:a0:42:29:62:ca:d5:fe:56:ac:03:a7:19:d4:a1:99: 3d:a2:11:30:ec:9a:01:ef:66:16:49:f0:d9:f2:c8:35:94:e9: ce:91:19:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI4RDAxMTAvBgNVBAUTKDI1NEVBRjY0OTA3NTRGNTA3REI4MUNFOTBEREI2MjlC NjIyRjQ2NjAwHhcNMjUwNDIzMDQ1MjEzWhcNMjUwNDMwMDQ1MjEzWjAYMRYwFAYD VQQDEw02ODA4NzFmZC1mYjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9KOPamFUqt78nnIwn6kxhQQxXnGuc5kWOM8Kc0JJ0SsPc9R9xGWklb/l8M6s syrE87zlG+yuYGxpRZxt23zZtHtuVtjtF2ag2awSYCQFP5SgSQli+0y6e4S9Z1j9 ReLO6oJ3F38J3et7XwLVCs6ceuT4b32LGDqSjo3IfHwePC7RZN2asm+GtDKhelC/ yBJxAc2D5GseGLb6SkmtHeOSc76sRAYfGcDlRdBtKBoWUTtKMgHWr94xFFJ1vkTI N79M4f+u6BpKjm1pH5oOVAvsOKKCXWE1dHwgiyNL1qwq14zkhvC4SVhuhpMam6XA B5q+EFP1rUNeGEj7qwQ+I9dgyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBcM8+fe DLKxdyxC106vk6dQ8lIvMB8GA1UdIwQYMBaAFCVOr2SQdU9Qfbgc6Q3bYptiL0Zg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjhEMC80MUUyQkUyOEVC NkUxMUVFODNFM0FFNTFDNEY5QUUwMi9KVTZ2WkpCMVQxQjl1QnpwRGR0aW0ySXZS bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pVNnZaSkIxVDFCOXVCenBEZHRpbTJJdlJtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjhEMC80MUUyQkUyOEVCNkUxMUVFODNFM0FFNTFDNEY5QUUwMi9KVTZ2WkpCMVQx Qjl1QnpwRGR0aW0ySXZSbUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDHVHe5O9yszGk7Hhbfetfs3W2ntnCvP68xKUJPf66LUwWFy0MgPbDn h+zjJKvPUrkvLppNqp45xBgEMjmNVsx9kNISaChCD7yvt6M2zklOZdfzuc8lEElC Y5KUFTH42TesiYOVXGVMG64BCsNBzWFMdHH3hvuOYVVFU9tF65fY/NKmymc8xcqZ /UlQf540D0aL8TiMpDr4aSeQAXm0BAGFLaivUgMx1vWg4fBZqPh8N9Ljc90Rzm7y 3/lOV8sm3uOr3VZvZJUtvrA63UpkUnabA5OdIyLQEXwRW+igQiliytX+VqwDpxnU oZk9ohEw7JoB72YWSfDZ8sg1lOnOkRlU -----END CERTIFICATE-----Generated at Wed Apr 23 06:35:37 2025 by rpki-client on console.sobornost.net