$ rpki-client -vvf rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft File: dF_08GOrXRceBSUbMeKUpLx5c7E.mft (raw, json) Hash identifier: e9yyIRHt0j7NMCssGSRZT4n/A/3aGyLHT6HoJ+BE/sM= Subject key identifier: 01:1D:01:49:FF:E5:7C:F9:2F:33:C7:54:E4:A8:73:FF:CA:DA:AC:B5 Authority key identifier: 74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1 Certificate issuer: /CN=A915E475/serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1 Certificate serial: 0A1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft Manifest number: 0935 Signing time: Sat 26 Apr 2025 20:30:07 +0000 Manifest this update: Sat 26 Apr 2025 20:30:06 +0000 Manifest next update: Sat 03 May 2025 20:30:06 +0000 Files and hashes: 1: dF_08GOrXRceBSUbMeKUpLx5c7E.crl (hash: wbFhUZHWu3EKS7c+iCXuwFaANJviU+rr6BDrRp33SZE=) 2: E0039822DDDD11EF84C13A22C4F9AE02.roa (hash: hwOF3wEGPYN9Coi28CC6fcXclDNnN/zPBkBKCSSYw20=) 3: 4E6E940C612211EB8166284BC4F9AE02.roa (hash: SMU4xFi1+BMgC34BsBqVGrlL7Nhi/uMYFKO8+xvL4gc=) 4: E94D73BE291D11EF86792873C4F9AE02.roa (hash: qoIoX0JsFREycCLqPoVIIwH985mBQUcv+rcmwGljHCU=) 5: 315D1630DDD911EFBAA4D977C4F9AE02.roa (hash: W4Wbfb9YnYtu8VIOO6jpXdYrtPZMihSeu+gvyUB2w5I=) 6: 4020FFBCF80111ECAC7ADB0CC4F9AE02.roa (hash: /WqiErWrMk0Gg59ZNQRQV8k1iCmu38eqjuLSdgpmAoA=) 7: B80A9FF60B4111EF919B0B7DC4F9AE02.roa (hash: 808jJ7dFgnwvbwRsKTU5jr+nJdVb6zUdp+50FtVbbEI=) 8: 55124B02F3C511EFAD4ACE37C4F9AE02.roa (hash: Fk3lDfrttuAZqg6Wfn2O1TB2kJ0lsCcdFlnPaQQgPgQ=) 9: 20AF7940433811EFA525DA49C4F9AE02.roa (hash: auhnazCcpZ7TKgsrAgKTEGN+Zxpu+wqNpKG4gMblQpk=) 10: 7C9D0D66546811EBBF7C8469C4F9AE02.roa (hash: 6gpu6/dBOZ2MchgvmUzyjPzKbIW+kNyxsH+MazWyCl4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.crl rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2586 (0xa1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E475, serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1 Validity Not Before: Apr 26 20:30:06 2025 GMT Not After : May 3 20:30:06 2025 GMT Subject: CN=680d424f-3eaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9c:4a:ea:96:7b:26:52:cf:64:c7:ee:ca:3f: c7:2f:08:3a:3e:02:ea:46:a9:e4:a7:05:13:44:37: 7d:2e:03:fc:2d:75:28:fd:21:2f:c7:55:94:1a:fe: 18:d6:26:e2:dc:8e:13:51:84:f1:be:a2:c2:af:30: ec:c4:1f:46:fa:57:c8:23:72:5e:b4:12:8f:fc:98: 37:ac:cb:25:bc:a2:84:b1:af:94:b9:66:df:4d:50: d8:45:9f:aa:fd:98:87:60:3c:ec:b5:d2:0e:a6:ba: 67:59:48:9c:8d:d0:29:3d:de:1a:a1:ba:63:2d:7d: de:8a:df:32:b0:f8:0a:9d:c6:92:38:f2:2e:31:12: d9:d9:6e:22:9e:d6:da:2b:e1:ea:02:a0:02:0b:55: ec:fe:b5:79:f9:ea:9d:3d:e2:07:6f:40:22:24:7b: e7:ab:7b:9c:83:fe:5f:0e:c4:fd:d3:79:83:7a:21: c9:1e:0a:34:e4:f7:93:14:9e:77:87:0f:62:bb:8a: 3b:6e:40:3a:80:d1:3e:53:e5:21:a2:1d:d7:e6:f8: 29:9e:9b:fd:71:8f:91:f9:e0:3a:4e:c0:bc:d7:4b: 2a:9a:ae:a8:3f:99:cb:c3:c2:1a:4f:5e:6b:9d:5d: 7d:de:50:7c:38:56:d8:80:65:53:20:f1:8e:7a:59: 6a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:1D:01:49:FF:E5:7C:F9:2F:33:C7:54:E4:A8:73:FF:CA:DA:AC:B5 X509v3 Authority Key Identifier: keyid:74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:93:a4:5e:a1:ca:47:63:b2:2c:32:c1:30:1b:fe:e9:53:eb: 06:99:ce:98:b4:be:33:af:45:81:90:70:15:ba:7b:5f:4a:94: d4:e2:13:35:87:dd:e7:a6:d7:9c:d1:f9:c0:bb:e1:92:c3:59: a4:65:62:9a:d4:dd:41:36:8a:68:9c:35:13:2f:44:27:74:12: 35:84:2a:82:23:2d:ff:f1:ce:cd:df:f6:6f:1e:45:9a:f6:b1: 67:54:35:e2:e5:a6:42:93:3a:d1:4b:5c:48:c6:c7:d5:69:77: d7:1d:b2:89:68:35:a8:e5:bc:5d:54:6a:c1:29:ac:32:71:bf: 8f:a3:42:03:8e:d7:f9:93:02:e5:e7:a4:ba:36:de:1e:3b:33: 75:2a:62:d3:6c:13:56:65:8e:b7:3f:8a:46:7b:7e:df:94:2c: 34:01:f4:7c:e0:15:4c:77:f6:25:ca:7d:16:98:4c:47:c6:27: 48:e3:c4:72:24:c0:ee:0c:9b:21:07:45:76:0f:12:3f:21:1a: d6:28:82:8f:71:b1:24:98:48:d4:a6:57:2b:03:56:da:8c:03: 84:db:72:25:ad:f9:27:fc:8d:d3:ec:01:6d:ce:1e:cc:28:03: b2:e8:7e:c7:63:2a:f1:07:ad:92:33:87:08:5f:a5:8d:cf:6d: fe:a5:3a:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICChowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUU0NzUxMTAvBgNVBAUTKDc0NUZGNEYwNjNBQjVEMTcxRTA1MjUxQjMxRTI5NEE0 QkM3OTczQjEwHhcNMjUwNDI2MjAzMDA2WhcNMjUwNTAzMjAzMDA2WjAYMRYwFAYD VQQDEw02ODBkNDI0Zi0zZWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAppxK6pZ7JlLPZMfuyj/HLwg6PgLqRqnkpwUTRDd9LgP8LXUo/SEvx1WUGv4Y 1ibi3I4TUYTxvqLCrzDsxB9G+lfII3JetBKP/Jg3rMslvKKEsa+UuWbfTVDYRZ+q /ZiHYDzstdIOprpnWUicjdApPd4aobpjLX3eit8ysPgKncaSOPIuMRLZ2W4intba K+HqAqACC1Xs/rV5+eqdPeIHb0AiJHvnq3ucg/5fDsT903mDeiHJHgo05PeTFJ53 hw9iu4o7bkA6gNE+U+Uhoh3X5vgpnpv9cY+R+eA6TsC810sqmq6oP5nLw8IaT15r nV193lB8OFbYgGVTIPGOellqCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAEdAUn/ 5Xz5LzPHVOSoc//K2qy1MB8GA1UdIwQYMBaAFHRf9PBjq10XHgUlGzHilKS8eXOx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTQ3NS9EQTgzQUE3QUNB MTExMUVBQTQ3OUM3MzRDNEY5QUUwMi9kRl8wOEdPclhSY2VCU1ViTWVLVXBMeDVj N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RGXzA4R09yWFJjZUJTVWJNZUtVcEx4NWM3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTQ3NS9EQTgzQUE3QUNBMTExMUVBQTQ3OUM3MzRDNEY5QUUwMi9kRl8wOEdPclhS Y2VCU1ViTWVLVXBMeDVjN0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnk6ReocpHY7IsMsEwG/7pU+sGmc6YtL4zr0WBkHAVuntfSpTU4hM1 h93nptec0fnAu+GSw1mkZWKa1N1BNoponDUTL0QndBI1hCqCIy3/8c7N3/ZvHkWa 9rFnVDXi5aZCkzrRS1xIxsfVaXfXHbKJaDWo5bxdVGrBKawycb+Po0IDjtf5kwLl 56S6Nt4eOzN1KmLTbBNWZY63P4pGe37flCw0AfR84BVMd/Ylyn0WmExHxidI48Ry JMDuDJshB0V2DxI/IRrWKIKPcbEkmEjUplcrA1bajAOE23Ilrfkn/I3T7AFtzh7M KAOy6H7HYyrxB62SM4cIX6WNz23+pTqF -----END CERTIFICATE-----Generated at Sun Apr 27 00:13:59 2025 by rpki-client on console.sobornost.net