$ rpki-client -vvf rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft File: 2Qg5PFuoA1r2i37ACVWOgS7QleA.mft (raw, json) Hash identifier: 3aHz6vT83JchSWz+Bn0l7Q/e1rexXrkl+Z8fiyC0LSw= Subject key identifier: 4B:79:41:D8:8B:2D:A1:DB:7F:72:81:84:C6:08:A1:EC:7C:E4:88:3C Authority key identifier: D9:08:39:3C:5B:A8:03:5A:F6:8B:7E:C0:09:55:8E:81:2E:D0:95:E0 Certificate issuer: /CN=A916069A/serialNumber=D908393C5BA8035AF68B7EC009558E812ED095E0 Certificate serial: 5E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Qg5PFuoA1r2i37ACVWOgS7QleA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft Manifest number: 5C Signing time: Sun 27 Apr 2025 05:56:58 +0000 Manifest this update: Sun 27 Apr 2025 05:56:57 +0000 Manifest next update: Sun 04 May 2025 05:56:57 +0000 Files and hashes: 1: 2Qg5PFuoA1r2i37ACVWOgS7QleA.crl (hash: ZQU1ZEhpcjLbMEMk8v2RZwe5z4k6xPu6c2qNIqXhI20=) 2: C62E0568C52811EF9EDAD649C4F9AE02.roa (hash: F5uXTjMiJni5HqVRUwrgZPii2IL1VQzAUq1Dx9Qk/Co=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.crl rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Qg5PFuoA1r2i37ACVWOgS7QleA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916069A, serialNumber=D908393C5BA8035AF68B7EC009558E812ED095E0 Validity Not Before: Apr 27 05:56:57 2025 GMT Not After : May 4 05:56:57 2025 GMT Subject: CN=680dc729-4a83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:fa:aa:3b:28:f7:7f:51:62:68:f0:6c:24:26: 98:80:b4:c7:1d:a5:7b:da:74:12:da:a8:3f:12:f1: b3:c2:06:6a:06:60:71:14:22:c3:e5:83:61:ae:31: 8a:fd:8d:b7:ce:98:16:23:8e:4f:b6:50:d2:d9:2d: 38:e0:4c:f6:af:68:59:c0:20:11:82:5c:f5:2b:8d: ef:ab:af:dd:38:ba:d1:f7:54:17:66:5d:f2:5a:fe: 9f:e0:88:14:24:15:f0:b8:d2:78:9a:84:a1:90:17: 72:5d:49:13:22:ad:8f:35:18:b7:24:7b:fd:5d:13: 4e:89:8c:7a:ff:97:d6:f5:37:ea:a3:ab:bc:06:44: f6:d3:5f:9f:41:5e:a0:d8:10:fc:f9:8c:11:8b:60: 5d:2d:6c:41:ae:84:dd:03:99:a8:9e:3f:c0:ec:49: 5f:e2:95:38:ff:70:e4:f1:d9:e2:b9:50:d4:94:75: 55:f6:fe:ab:7a:3b:4b:cc:f9:09:c5:f9:73:e8:a9: 09:d3:c7:18:b6:15:e0:3f:77:c9:72:4b:0a:44:58: 6d:1e:de:5e:37:cf:04:0e:b5:9f:7b:09:60:b8:01: ff:5e:c7:b7:a7:b1:79:f5:ff:51:c8:d9:50:2d:87: f2:51:5f:30:26:b1:51:09:71:b5:4d:8c:bd:f1:f2: 0d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:79:41:D8:8B:2D:A1:DB:7F:72:81:84:C6:08:A1:EC:7C:E4:88:3C X509v3 Authority Key Identifier: keyid:D9:08:39:3C:5B:A8:03:5A:F6:8B:7E:C0:09:55:8E:81:2E:D0:95:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Qg5PFuoA1r2i37ACVWOgS7QleA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:94:9c:80:42:98:72:c3:8c:18:45:ec:e2:f1:fb:a5:df:fc: ec:88:1a:38:e3:a2:3c:73:95:2a:f5:37:c8:31:08:60:f7:35: 97:93:91:44:05:ff:b2:79:dd:95:31:18:23:a4:12:33:54:6a: d8:6f:cc:04:a5:e1:c2:17:cf:b6:ee:72:67:85:b3:16:93:47: 3f:f0:99:ee:93:92:57:41:17:69:9f:18:3d:d2:de:57:de:23: 4a:87:b1:26:45:82:30:a8:91:98:c4:be:77:1d:89:2e:c2:ca: 6c:aa:f6:38:ff:64:52:7d:24:a5:f1:eb:16:f3:f6:64:d5:e6: f8:c4:4d:65:23:c2:c7:af:c9:84:57:7d:46:07:b9:a5:a0:c8: ab:bc:94:81:ff:22:b1:e0:85:66:0d:ef:d9:c4:a1:f0:90:88: 47:4b:11:46:fe:3e:39:d4:3e:7a:1e:10:96:de:cf:ce:68:2c: a5:2d:dc:69:de:32:82:8b:5e:4c:b3:6d:23:79:c9:c9:4f:cd: 68:cc:de:5a:f6:7c:23:54:74:69:16:c0:66:8c:40:0b:97:af: fc:a9:d2:6b:be:30:24:5d:bd:c5:dc:40:a6:a9:52:9a:69:cb: b5:ce:2d:24:1d:01:21:53:f0:c6:f3:99:4d:8c:4f:7a:ba:6e: 31:af:6b:b6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MDY5QTExMC8GA1UEBRMoRDkwODM5M0M1QkE4MDM1QUY2OEI3RUMwMDk1NThFODEy RUQwOTVFMDAeFw0yNTA0MjcwNTU2NTdaFw0yNTA1MDQwNTU2NTdaMBgxFjAUBgNV BAMTDTY4MGRjNzI5LTRhODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDL+qo7KPd/UWJo8GwkJpiAtMcdpXvadBLaqD8S8bPCBmoGYHEUIsPlg2GuMYr9 jbfOmBYjjk+2UNLZLTjgTPavaFnAIBGCXPUrje+rr904utH3VBdmXfJa/p/giBQk FfC40niahKGQF3JdSRMirY81GLcke/1dE06JjHr/l9b1N+qjq7wGRPbTX59BXqDY EPz5jBGLYF0tbEGuhN0DmaieP8DsSV/ilTj/cOTx2eK5UNSUdVX2/qt6O0vM+QnF +XPoqQnTxxi2FeA/d8lySwpEWG0e3l43zwQOtZ97CWC4Af9ex7ensXn1/1HI2VAt h/JRXzAmsVEJcbVNjL3x8g0pAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUS3lB2Ist odt/coGExgih7HzkiDwwHwYDVR0jBBgwFoAU2Qg5PFuoA1r2i37ACVWOgS7QleAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYwNjlBLzJFQjYwNzk2OUJG MDExRUY4MUM5MDI2N0M0RjlBRTAyLzJRZzVQRnVvQTFyMmkzN0FDVldPZ1M3UWxl QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMlFnNVBGdW9BMXIyaTM3QUNWV09nUzdRbGVBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYw NjlBLzJFQjYwNzk2OUJGMDExRUY4MUM5MDI2N0M0RjlBRTAyLzJRZzVQRnVvQTFy MmkzN0FDVldPZ1M3UWxlQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMWUnIBCmHLDjBhF7OLx+6Xf/OyIGjjjojxzlSr1N8gxCGD3NZeTkUQF /7J53ZUxGCOkEjNUathvzASl4cIXz7bucmeFsxaTRz/wme6TkldBF2mfGD3S3lfe I0qHsSZFgjCokZjEvncdiS7Cymyq9jj/ZFJ9JKXx6xbz9mTV5vjETWUjwsevyYRX fUYHuaWgyKu8lIH/IrHghWYN79nEofCQiEdLEUb+PjnUPnoeEJbez85oLKUt3Gne MoKLXkyzbSN5yclPzWjM3lr2fCNUdGkWwGaMQAuXr/yp0mu+MCRdvcXcQKapUppp y7XOLSQdASFT8MbzmU2MT3q6bjGva7Y= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:48 2025 by rpki-client on console.sobornost.net