$ rpki-client -vvf rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft File: ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft (raw, json) Hash identifier: KZZExqz2MSgoyN0j0JkaRBkQvzoTJPcOmgqGQPNLr1M= Subject key identifier: E0:68:86:A3:5B:69:38:9D:B2:61:3B:70:1D:4B:9B:B7:09:B4:41:9A Authority key identifier: 4E:83:DB:81:EA:E5:60:24:75:78:3C:11:BC:E9:D3:55:0C:D3:D5:44 Certificate issuer: /CN=A9162FF2/serialNumber=4E83DB81EAE5602475783C11BCE9D3550CD3D544 Certificate serial: 01E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToPbgerlYCR1eDwRvOnTVQzT1UQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft Manifest number: 01E0 Signing time: Sun 27 Apr 2025 01:44:30 +0000 Manifest this update: Sun 27 Apr 2025 01:44:29 +0000 Manifest next update: Sun 04 May 2025 01:44:29 +0000 Files and hashes: 1: ToPbgerlYCR1eDwRvOnTVQzT1UQ.crl (hash: Vq4ocDCewQL9GIDXVmnITXNIDuem7n0kyOF06+3XpSA=) 2: 1A302138448311EDB0572C4CC4F9AE02.roa (hash: 91vo57eXpy+XLfc+60pdKiOcpCWF0pprhkB0No7XRi4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.crl rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToPbgerlYCR1eDwRvOnTVQzT1UQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 01:44:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 483 (0x1e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162FF2, serialNumber=4E83DB81EAE5602475783C11BCE9D3550CD3D544 Validity Not Before: Apr 27 01:44:29 2025 GMT Not After : May 4 01:44:29 2025 GMT Subject: CN=680d8bfe-2f07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:41:32:88:1b:63:0e:89:31:e1:e2:7b:71:e7: 67:6c:75:6e:7d:5f:2c:f7:59:d1:fa:e5:f4:a5:b8: 15:48:4e:63:f5:e5:b6:dd:06:35:53:9c:88:a8:34: ee:1e:ce:dc:ca:9c:47:db:5c:8f:50:fa:6b:74:6d: cb:3c:e5:27:df:3b:57:fa:74:b1:8e:dd:e8:80:7a: ee:22:59:0d:53:2a:f2:a8:00:65:07:26:61:4d:5c: b1:11:6b:d1:ea:14:91:51:01:62:5a:d0:2d:30:c1: e9:b7:c6:a7:9a:e8:ed:fa:45:b9:40:ee:3e:d1:68: c8:a0:e2:88:aa:5e:63:96:01:42:9f:99:9a:39:eb: e5:13:64:0c:32:90:ba:2f:46:3a:40:ca:d2:3b:9f: 9b:95:50:de:77:e5:78:c8:bb:0f:16:b1:10:af:bb: 3c:28:e0:80:c6:e0:71:b7:60:4c:69:f7:3b:45:fb: 20:5b:90:09:72:61:a6:07:3b:17:46:87:b3:ee:01: ad:0a:9e:4a:04:ee:7c:16:9e:2c:be:06:75:c5:1c: 3d:0c:a2:5d:7d:30:f3:58:57:81:a9:e3:36:92:86: 95:dc:65:06:ad:49:a8:b1:b9:4b:72:cb:33:30:a2: 49:48:0b:76:2c:dc:33:c7:7f:25:48:90:01:0e:91: 04:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:68:86:A3:5B:69:38:9D:B2:61:3B:70:1D:4B:9B:B7:09:B4:41:9A X509v3 Authority Key Identifier: keyid:4E:83:DB:81:EA:E5:60:24:75:78:3C:11:BC:E9:D3:55:0C:D3:D5:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToPbgerlYCR1eDwRvOnTVQzT1UQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:af:60:7d:fe:4b:04:dc:e0:86:80:db:1b:71:f9:e4:51:9b: 12:11:5e:3c:c3:98:0f:c5:79:04:73:4b:4a:8f:5c:19:de:2e: d9:9a:ae:6a:03:1c:76:45:72:ef:5c:55:54:a0:83:f5:ea:27: 4f:70:b6:d4:ea:57:8a:18:00:ff:e7:9b:f8:f7:d2:3f:29:5b: 37:85:12:34:c8:74:ed:05:48:c6:3b:69:bd:4d:7a:a7:50:c8: 8c:96:ea:ab:fe:b3:45:05:64:05:fa:4e:de:ac:2a:79:a4:41: bc:40:9a:79:05:03:1b:a6:1e:69:19:1d:1a:3d:1d:13:47:26: 01:01:1e:25:80:3a:86:3a:9d:24:9b:50:94:85:7a:91:84:3c: b9:1f:35:b2:f6:0a:fa:23:9d:28:26:a9:1a:d7:59:32:d1:84: ea:d4:6d:63:e3:7d:1e:e6:61:42:8c:c2:07:57:cf:8c:8d:ae: be:87:a0:a5:a6:91:af:79:4e:1a:64:84:f6:d9:fe:27:6c:97: e3:fb:38:ee:f5:31:ec:2d:ff:0a:8f:93:84:42:a0:50:2e:fa: cc:18:bf:16:ea:71:42:29:d8:af:ca:2e:73:c3:03:05:a4:fa: 83:f2:7e:6f:c8:e8:06:74:c4:36:2d:b9:2e:37:cd:b8:ee:ce: e2:05:67:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjJGRjIxMTAvBgNVBAUTKDRFODNEQjgxRUFFNTYwMjQ3NTc4M0MxMUJDRTlEMzU1 MENEM0Q1NDQwHhcNMjUwNDI3MDE0NDI5WhcNMjUwNTA0MDE0NDI5WjAYMRYwFAYD VQQDEw02ODBkOGJmZS0yZjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwEEyiBtjDokx4eJ7cednbHVufV8s91nR+uX0pbgVSE5j9eW23QY1U5yIqDTu Hs7cypxH21yPUPprdG3LPOUn3ztX+nSxjt3ogHruIlkNUyryqABlByZhTVyxEWvR 6hSRUQFiWtAtMMHpt8anmujt+kW5QO4+0WjIoOKIql5jlgFCn5maOevlE2QMMpC6 L0Y6QMrSO5+blVDed+V4yLsPFrEQr7s8KOCAxuBxt2BMafc7RfsgW5AJcmGmBzsX Roez7gGtCp5KBO58Fp4svgZ1xRw9DKJdfTDzWFeBqeM2koaV3GUGrUmosblLcssz MKJJSAt2LNwzx38lSJABDpEEawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOBohqNb aTidsmE7cB1Lm7cJtEGaMB8GA1UdIwQYMBaAFE6D24Hq5WAkdXg8Ebzp01UM09VE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MkZGMi8zMjEwRDZDNjQ0 N0UxMUVEOTQ4RDQ0MkZDNEY5QUUwMi9Ub1BiZ2VybFlDUjFlRHdSdk9uVFZRelQx VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RvUGJnZXJsWUNSMWVEd1J2T25UVlF6VDFVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MkZGMi8zMjEwRDZDNjQ0N0UxMUVEOTQ4RDQ0MkZDNEY5QUUwMi9Ub1BiZ2VybFlD UjFlRHdSdk9uVFZRelQxVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZr2B9/ksE3OCGgNsbcfnkUZsSEV48w5gPxXkEc0tKj1wZ3i7Zmq5q Axx2RXLvXFVUoIP16idPcLbU6leKGAD/55v499I/KVs3hRI0yHTtBUjGO2m9TXqn UMiMluqr/rNFBWQF+k7erCp5pEG8QJp5BQMbph5pGR0aPR0TRyYBAR4lgDqGOp0k m1CUhXqRhDy5HzWy9gr6I50oJqka11ky0YTq1G1j430e5mFCjMIHV8+Mja6+h6Cl ppGveU4aZIT22f4nbJfj+zju9THsLf8Kj5OEQqBQLvrMGL8W6nFCKdivyi5zwwMF pPqD8n5vyOgGdMQ2LbkuN8247s7iBWcv -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:55 2025 by rpki-client on console.sobornost.net