$ rpki-client -vvf rpki.apnic.net/member_repository/A915DB10/E4FED3A8B37511E8B25D8F6BC4F9AE02/feQwJk1qtGH2pP_KLkB16KZ0Fck.mft File: feQwJk1qtGH2pP_KLkB16KZ0Fck.mft (raw, json) Hash identifier: UTVWYGIeOrdYbQ8eMNxzukW9GRUNWUlBHBmrbMEdq+Q= Subject key identifier: A0:B4:52:8C:31:C1:5E:1F:BF:BE:C1:18:21:F5:42:A2:4B:ED:56:5D Authority key identifier: 7D:E4:30:26:4D:6A:B4:61:F6:A4:FF:CA:2E:40:75:E8:A6:74:15:C9 Certificate issuer: /CN=A915DB10/serialNumber=7DE430264D6AB461F6A4FFCA2E4075E8A67415C9 Certificate serial: 1302 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/feQwJk1qtGH2pP_KLkB16KZ0Fck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915DB10/E4FED3A8B37511E8B25D8F6BC4F9AE02/feQwJk1qtGH2pP_KLkB16KZ0Fck.mft Manifest number: 12F4 Signing time: Mon 28 Apr 2025 17:16:42 +0000 Manifest this update: Mon 28 Apr 2025 17:16:42 +0000 Manifest next update: Mon 05 May 2025 17:16:42 +0000 Files and hashes: 1: feQwJk1qtGH2pP_KLkB16KZ0Fck.crl (hash: 1/sS084WI5KHpBxtNgzlQaW2RHfydzbeWmVE0L+15iM=) 2: F5EE9E5E96A011EF85606B0DC4F9AE02.roa (hash: /8jhrCUeyEJ+dkS/dj7KrGLt48nPFSHhTYuVcePeKe4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915DB10/E4FED3A8B37511E8B25D8F6BC4F9AE02/feQwJk1qtGH2pP_KLkB16KZ0Fck.crl rsync://rpki.apnic.net/member_repository/A915DB10/E4FED3A8B37511E8B25D8F6BC4F9AE02/feQwJk1qtGH2pP_KLkB16KZ0Fck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/feQwJk1qtGH2pP_KLkB16KZ0Fck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 17:16:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4866 (0x1302) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915DB10, serialNumber=7DE430264D6AB461F6A4FFCA2E4075E8A67415C9 Validity Not Before: Apr 28 17:16:42 2025 GMT Not After : May 5 17:16:42 2025 GMT Subject: CN=680fb7fa-8207 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:ed:85:5e:bd:1d:3e:d4:c5:dc:a1:ab:b5:48: 1f:d2:1c:0f:86:be:a1:48:50:82:5c:fc:24:76:e4: 83:b1:48:25:d2:f1:ad:2d:cc:8c:e8:5b:1c:40:24: ed:dd:94:1b:4c:11:0d:c6:ec:37:11:63:c9:1a:cd: 92:13:98:08:91:16:05:5a:3b:09:ab:21:cf:31:56: f4:23:b7:c4:7a:4d:30:d6:d2:86:d6:4a:4d:4a:b1: eb:14:d0:ec:9a:c2:39:4b:f3:e3:e7:3f:cb:a9:30: ae:d1:af:91:d8:1f:22:f6:6c:ad:84:e7:91:10:f3: 14:e5:69:fc:23:32:43:2b:b3:67:a9:17:c3:ba:97: b7:9a:51:b0:df:11:0b:f3:5f:2c:83:fa:df:71:68: 77:7d:35:45:27:d7:69:d1:ec:44:dd:b3:6c:ff:86: 8e:9a:5a:8d:ac:b4:e6:c7:c9:23:7d:84:d0:6c:6b: 3d:32:2d:07:d9:f8:38:77:f6:78:5f:ea:cd:8d:3c: 52:c5:7d:cb:0c:e0:2b:28:73:2c:c3:db:97:a5:a2: 2d:82:95:71:7a:55:dd:14:52:0f:7f:0d:1b:8d:c2: 69:7e:b7:78:2b:0a:e0:d1:08:65:38:a3:0a:4f:91: 39:88:63:cc:ea:63:1e:b7:e6:ac:e2:1c:01:6d:5d: 60:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:B4:52:8C:31:C1:5E:1F:BF:BE:C1:18:21:F5:42:A2:4B:ED:56:5D X509v3 Authority Key Identifier: keyid:7D:E4:30:26:4D:6A:B4:61:F6:A4:FF:CA:2E:40:75:E8:A6:74:15:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915DB10/E4FED3A8B37511E8B25D8F6BC4F9AE02/feQwJk1qtGH2pP_KLkB16KZ0Fck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/feQwJk1qtGH2pP_KLkB16KZ0Fck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DB10/E4FED3A8B37511E8B25D8F6BC4F9AE02/feQwJk1qtGH2pP_KLkB16KZ0Fck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:72:12:fa:22:74:1e:0d:6a:75:8f:29:d3:cc:d0:83:e2:02: cb:d5:ee:b0:bc:47:db:06:91:ba:4c:8f:7e:8d:d5:a9:06:06: ce:4b:ba:f2:77:f0:ce:d4:6a:cf:eb:a8:02:f1:7e:ac:3b:8f: c0:e3:f5:10:ed:ed:df:83:d1:56:c1:9c:52:7e:75:44:14:85: 2e:a0:fd:29:b3:0c:2b:70:a9:8b:5e:2b:33:82:64:ab:c0:e5: c6:e2:c5:41:f3:ed:a7:3a:33:58:8e:30:4f:f1:37:5f:e3:2a: ca:83:74:83:57:ae:bf:47:c0:3d:37:92:90:3c:40:d8:0d:15: 16:8d:03:ff:97:15:2b:a5:a2:1f:09:4a:c4:6e:5f:08:06:de: 6a:4a:34:dc:27:b9:41:89:a1:59:e3:1f:5e:eb:66:c0:1d:6a: e8:11:49:1c:f6:85:b2:97:71:95:9f:c4:a7:f7:54:1b:c0:d1: 5a:d9:87:15:73:8b:1a:ec:4a:c1:ef:d0:f2:78:4f:07:01:a2: 96:10:5d:db:9b:7d:25:a5:4b:8b:ef:51:70:92:71:22:3c:62: be:f6:a1:1c:3d:c3:7a:df:67:60:b4:67:7f:a0:f2:ba:91:6c: 90:c4:bb:14:5d:a1:d7:33:0e:a0:a0:a4:9b:77:30:7b:ba:c8: 95:0a:87:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEwIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NURCMTAxMTAvBgNVBAUTKDdERTQzMDI2NEQ2QUI0NjFGNkE0RkZDQTJFNDA3NUU4 QTY3NDE1QzkwHhcNMjUwNDI4MTcxNjQyWhcNMjUwNTA1MTcxNjQyWjAYMRYwFAYD VQQDEw02ODBmYjdmYS04MjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6u2FXr0dPtTF3KGrtUgf0hwPhr6hSFCCXPwkduSDsUgl0vGtLcyM6FscQCTt 3ZQbTBENxuw3EWPJGs2SE5gIkRYFWjsJqyHPMVb0I7fEek0w1tKG1kpNSrHrFNDs msI5S/Pj5z/LqTCu0a+R2B8i9mythOeREPMU5Wn8IzJDK7NnqRfDupe3mlGw3xEL 818sg/rfcWh3fTVFJ9dp0exE3bNs/4aOmlqNrLTmx8kjfYTQbGs9Mi0H2fg4d/Z4 X+rNjTxSxX3LDOArKHMsw9uXpaItgpVxelXdFFIPfw0bjcJpfrd4Kwrg0QhlOKMK T5E5iGPM6mMet+as4hwBbV1gNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKC0Uowx wV4fv77BGCH1QqJL7VZdMB8GA1UdIwQYMBaAFH3kMCZNarRh9qT/yi5AdeimdBXJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1REIxMC9FNEZFRDNBOEIz NzUxMUU4QjI1RDhGNkJDNEY5QUUwMi9mZVF3SmsxcXRHSDJwUF9LTGtCMTZLWjBG Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZlUXdKazFxdEdIMnBQX0tMa0IxNktaMEZjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 REIxMC9FNEZFRDNBOEIzNzUxMUU4QjI1RDhGNkJDNEY5QUUwMi9mZVF3SmsxcXRH SDJwUF9LTGtCMTZLWjBGY2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEchL6InQeDWp1jynTzNCD4gLL1e6wvEfbBpG6TI9+jdWpBgbOS7ry d/DO1GrP66gC8X6sO4/A4/UQ7e3fg9FWwZxSfnVEFIUuoP0pswwrcKmLXiszgmSr wOXG4sVB8+2nOjNYjjBP8Tdf4yrKg3SDV66/R8A9N5KQPEDYDRUWjQP/lxUrpaIf CUrEbl8IBt5qSjTcJ7lBiaFZ4x9e62bAHWroEUkc9oWyl3GVn8Sn91QbwNFa2YcV c4sa7ErB79DyeE8HAaKWEF3bm30lpUuL71FwknEiPGK+9qEcPcN632dgtGd/oPK6 kWyQxLsUXaHXMw6goKSbdzB7usiVCofU -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:37 2025 by rpki-client on console.sobornost.net