$ rpki-client -vvf rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.mft File: gO0g9_wH3gyfPBuOKunNP85u2yE.mft (raw, json) Hash identifier: S+m1KHkUgLb7TUzWeH+fgCqVhj4gYwZN7b/5RQAEEGg= Subject key identifier: B0:40:0B:22:6F:91:EC:C8:39:50:18:81:70:69:4F:E3:02:06:C3:B0 Authority key identifier: 80:ED:20:F7:FC:07:DE:0C:9F:3C:1B:8E:2A:E9:CD:3F:CE:6E:DB:21 Certificate issuer: /CN=A915BE00/serialNumber=80ED20F7FC07DE0C9F3C1B8E2AE9CD3FCE6EDB21 Certificate serial: 053A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gO0g9_wH3gyfPBuOKunNP85u2yE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.mft Manifest number: 0532 Signing time: Sat 26 Apr 2025 23:09:55 +0000 Manifest this update: Sat 26 Apr 2025 23:09:55 +0000 Manifest next update: Sat 03 May 2025 23:09:55 +0000 Files and hashes: 1: gO0g9_wH3gyfPBuOKunNP85u2yE.crl (hash: CWZTciQPZeEnyfcvh4nMy1aeIWYAAFO7urdY65s7Vk0=) 2: 972D6576112511F08AC1A549C4F9AE02.roa (hash: QOFOeJ0/TitkOVKuCtknVXKhDl8rDuqKOlqBjNU794M=) 3: 513D702E112511F081CC4E49C4F9AE02.roa (hash: Kg31LYu7Durk6j8slLyu/vJtO9Dfls9nej9ZAhspvEw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.crl rsync://rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gO0g9_wH3gyfPBuOKunNP85u2yE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 23:09:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1338 (0x53a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BE00, serialNumber=80ED20F7FC07DE0C9F3C1B8E2AE9CD3FCE6EDB21 Validity Not Before: Apr 26 23:09:55 2025 GMT Not After : May 3 23:09:55 2025 GMT Subject: CN=680d67c3-817b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ad:21:3d:3b:03:50:23:dd:d9:36:65:bb:a4: ea:ba:51:af:9f:6c:cc:1f:17:6b:06:26:48:36:d6: 74:62:b0:55:83:a2:b4:41:35:57:a0:00:2a:4a:9c: b3:7a:71:45:66:03:c9:97:c8:f2:a3:12:85:8f:1b: b7:d7:af:0d:22:fb:ee:b2:df:af:64:83:97:60:e6: ba:16:14:65:4a:0e:2b:a1:d5:5c:18:d1:47:28:f4: 4f:7d:72:c3:ff:dc:d2:59:13:2e:47:b7:c7:9a:68: c0:e3:30:a2:67:42:52:8a:56:0d:2c:83:15:11:38: 51:d6:b5:67:04:b9:2e:b7:90:57:32:f8:7a:5e:7c: 1d:0c:ce:24:96:ed:72:8b:43:1e:a9:b3:06:6f:64: e0:66:2e:83:0d:01:ff:95:42:60:38:c0:2c:ff:87: 3e:31:15:1f:dd:2f:9d:c4:59:fa:91:1b:1b:48:60: 44:b0:f1:1c:51:d5:1f:13:10:fa:03:fe:e0:5f:9e: 49:f1:41:2a:36:56:a0:91:b1:1e:9f:df:db:bc:6c: bf:d5:79:22:11:70:e5:f8:8b:ed:e6:2b:4c:26:e2: 27:15:69:92:f9:6e:bc:2d:e3:02:a4:24:e5:86:c2: 5d:8b:fb:61:3b:07:94:ed:f2:36:37:1c:ad:f8:f4: 41:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:40:0B:22:6F:91:EC:C8:39:50:18:81:70:69:4F:E3:02:06:C3:B0 X509v3 Authority Key Identifier: keyid:80:ED:20:F7:FC:07:DE:0C:9F:3C:1B:8E:2A:E9:CD:3F:CE:6E:DB:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gO0g9_wH3gyfPBuOKunNP85u2yE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:cb:35:8b:aa:17:d0:e8:2b:84:17:39:5a:9d:5a:4c:89:d0: 55:c2:08:b1:c1:6c:24:f6:6d:3f:40:12:87:16:36:ec:3b:7d: 2d:09:1a:16:df:48:8f:ad:7f:45:e2:18:cf:e8:c0:71:af:02: 37:bc:47:b9:57:9d:7f:f6:22:b7:9b:05:9e:fd:fd:2f:df:44: cd:46:44:ed:9a:3c:3b:a0:16:35:fa:d7:b6:1c:61:17:66:51: f4:15:b7:ab:c8:f5:68:00:82:dc:a0:5b:e1:fe:6f:99:a9:88: 04:00:b9:6f:f4:95:7f:27:58:19:8e:a6:ed:d8:61:45:ce:e9: 0f:61:c6:45:e3:20:c5:7a:a8:d6:be:f1:08:fd:51:0d:35:d5: 3d:fa:6a:43:89:81:da:fb:06:74:a9:21:9b:2e:05:b6:0e:bb: 8a:a9:75:f5:a5:95:8e:61:a9:cc:f6:9b:05:3a:c4:36:30:4c: 00:d3:24:39:1c:c2:ed:80:6f:af:5c:26:1a:b1:f7:45:9e:73: f9:cf:65:28:84:2f:d0:f9:e2:14:a9:6e:c7:bb:8e:dd:b9:b1: 5b:d4:4c:f7:c2:9f:e6:0a:82:90:5c:a2:83:25:5c:81:91:d5: 7c:96:fb:6a:fb:ff:30:cc:b9:10:7f:39:c2:b2:8b:bc:4c:80: d0:35:84:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJFMDAxMTAvBgNVBAUTKDgwRUQyMEY3RkMwN0RFMEM5RjNDMUI4RTJBRTlDRDNG Q0U2RURCMjEwHhcNMjUwNDI2MjMwOTU1WhcNMjUwNTAzMjMwOTU1WjAYMRYwFAYD VQQDEw02ODBkNjdjMy04MTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxa0hPTsDUCPd2TZlu6TqulGvn2zMHxdrBiZINtZ0YrBVg6K0QTVXoAAqSpyz enFFZgPJl8jyoxKFjxu3168NIvvust+vZIOXYOa6FhRlSg4rodVcGNFHKPRPfXLD /9zSWRMuR7fHmmjA4zCiZ0JSilYNLIMVEThR1rVnBLkut5BXMvh6XnwdDM4klu1y i0MeqbMGb2TgZi6DDQH/lUJgOMAs/4c+MRUf3S+dxFn6kRsbSGBEsPEcUdUfExD6 A/7gX55J8UEqNlagkbEen9/bvGy/1XkiEXDl+Ivt5itMJuInFWmS+W68LeMCpCTl hsJdi/thOweU7fI2Nxyt+PRBiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLBACyJv kezIOVAYgXBpT+MCBsOwMB8GA1UdIwQYMBaAFIDtIPf8B94MnzwbjirpzT/Obtsh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkUwMC8zRDBCMjEyQUY0 RkQxMUVCQTUyQ0UyMTFDNEY5QUUwMi9nTzBnOV93SDNneWZQQnVPS3VuTlA4NXUy eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dPMGc5X3dIM2d5ZlBCdU9LdW5OUDg1dTJ5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkUwMC8zRDBCMjEyQUY0RkQxMUVCQTUyQ0UyMTFDNEY5QUUwMi9nTzBnOV93SDNn eWZQQnVPS3VuTlA4NXUyeUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFyzWLqhfQ6CuEFzlanVpMidBVwgixwWwk9m0/QBKHFjbsO30tCRoW 30iPrX9F4hjP6MBxrwI3vEe5V51/9iK3mwWe/f0v30TNRkTtmjw7oBY1+te2HGEX ZlH0FberyPVoAILcoFvh/m+ZqYgEALlv9JV/J1gZjqbt2GFFzukPYcZF4yDFeqjW vvEI/VENNdU9+mpDiYHa+wZ0qSGbLgW2DruKqXX1pZWOYanM9psFOsQ2MEwA0yQ5 HMLtgG+vXCYasfdFnnP5z2UohC/Q+eIUqW7Hu47dubFb1Ez3wp/mCoKQXKKDJVyB kdV8lvtq+/8wzLkQfznCsou8TIDQNYSl -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:50 2025 by rpki-client on console.sobornost.net