$ rpki-client -vvf rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.mft File: -AoX4Y4_OhL3UjNnLorGf4DlL98.mft (raw, json) Hash identifier: JrvxOsh6jmu/qJ0JmBaYxt42hWdQEha7Y65r2iiotjI= Subject key identifier: 22:6A:DD:0D:C3:C2:F9:6C:AE:A5:BE:19:DF:25:35:A6:B6:5D:48:72 Authority key identifier: F8:0A:17:E1:8E:3F:3A:12:F7:52:33:67:2E:8A:C6:7F:80:E5:2F:DF Certificate issuer: /CN=A916423B/serialNumber=F80A17E18E3F3A12F75233672E8AC67F80E52FDF Certificate serial: 0162 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AoX4Y4_OhL3UjNnLorGf4DlL98.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.mft Manifest number: 015F Signing time: Sun 27 Apr 2025 02:58:39 +0000 Manifest this update: Sun 27 Apr 2025 02:58:39 +0000 Manifest next update: Sun 04 May 2025 02:58:39 +0000 Files and hashes: 1: -AoX4Y4_OhL3UjNnLorGf4DlL98.crl (hash: pQ/VMmVI0SvH3cdlzCuiXXpOVxJXGN5vy2EHK5v/4HI=) 2: 593888C40AB811EE97CC7A32C4F9AE02.roa (hash: Hgvy/rbsLEaWAnrB/PMoMX/RB2XdkdZAeykYpDBMbDc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.crl rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AoX4Y4_OhL3UjNnLorGf4DlL98.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 354 (0x162) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916423B, serialNumber=F80A17E18E3F3A12F75233672E8AC67F80E52FDF Validity Not Before: Apr 27 02:58:39 2025 GMT Not After : May 4 02:58:39 2025 GMT Subject: CN=680d9d5f-157d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e5:b0:d1:e7:3c:e4:d0:28:bb:6f:84:71:c2: c7:3c:8b:8b:45:f8:0f:cc:13:44:83:e6:87:72:5d: 49:71:5d:d4:89:2d:c3:6a:02:14:65:9c:1b:6b:ff: f2:6d:2b:ed:9e:cb:b6:18:94:91:19:bd:5d:67:c0: 4d:38:ca:77:8f:0a:f4:b0:80:38:61:b4:c3:32:d9: 81:7d:1f:45:e9:a1:95:eb:6e:e3:72:e9:c9:bd:ec: 41:83:a2:14:b0:cc:c6:af:c0:a7:da:02:bb:be:75: e2:b9:83:4d:6a:82:3a:e8:a5:a6:11:25:96:75:a4: 97:43:5e:98:f1:e7:31:bd:65:34:dc:e3:a1:f6:b4: e6:3c:72:bf:a7:ad:0e:90:be:35:87:9c:0a:17:f9: ec:fb:82:66:1d:d1:af:0a:90:76:98:52:e7:46:75: 4c:5b:6b:27:07:17:af:b9:fa:f2:61:af:8a:95:33: 48:4f:a3:1f:c2:60:ec:c2:1b:80:8f:40:05:88:f1: 2c:b9:ca:37:e0:7d:03:ab:ee:4d:f0:5a:6e:4d:59: 9b:c4:e7:33:de:35:ac:0c:49:ae:08:35:14:25:1d: 8c:68:59:98:64:70:97:f1:ca:fc:9f:58:f4:4b:aa: cd:0c:ab:84:10:db:ba:52:ef:83:a4:8a:2d:df:0e: 3d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:6A:DD:0D:C3:C2:F9:6C:AE:A5:BE:19:DF:25:35:A6:B6:5D:48:72 X509v3 Authority Key Identifier: keyid:F8:0A:17:E1:8E:3F:3A:12:F7:52:33:67:2E:8A:C6:7F:80:E5:2F:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AoX4Y4_OhL3UjNnLorGf4DlL98.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:9a:10:1b:1b:c2:d2:fe:9d:0c:ea:cc:85:8c:4d:46:9a:d0: d8:ad:e1:91:76:18:e5:91:73:b4:46:e8:91:8f:57:58:08:e5: 5c:46:eb:22:d5:41:b0:a1:c4:bf:21:05:90:dd:99:30:6d:3c: 04:4b:55:39:72:e5:1c:34:6c:45:53:81:4d:5b:43:d4:1b:93: 39:82:ec:f4:9b:1b:41:5f:e1:d2:b3:68:10:b2:6b:2f:a0:5a: 56:1e:79:95:03:5b:da:e1:d4:a5:f9:dd:7c:d6:2e:27:71:1a: 71:b5:76:e3:b3:4f:54:52:4b:32:9c:dc:20:7f:c2:aa:e1:78: 17:69:bc:d3:18:6d:96:f4:72:a1:0d:cb:cc:2a:66:3b:ed:29: 26:0d:73:12:72:d2:d1:58:32:cb:a7:a0:37:2f:09:94:fd:7e: ff:bd:26:4e:fd:9c:0f:b6:a8:3d:74:aa:74:7b:f9:63:2f:91: 03:66:17:2c:4d:18:fb:db:11:13:de:82:34:cd:2f:a7:f9:33: 6a:7b:1c:83:44:1c:6d:74:49:15:f5:72:7d:57:c7:ac:7d:46: d0:10:2e:a4:0a:a1:92:88:b1:5d:d8:22:9e:66:9a:da:ca:5e: c0:37:a2:19:32:ed:4f:c8:fb:a3:1a:57:cb:b5:13:be:39:e5: 57:59:99:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQyM0IxMTAvBgNVBAUTKEY4MEExN0UxOEUzRjNBMTJGNzUyMzM2NzJFOEFDNjdG ODBFNTJGREYwHhcNMjUwNDI3MDI1ODM5WhcNMjUwNTA0MDI1ODM5WjAYMRYwFAYD VQQDEw02ODBkOWQ1Zi0xNTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApuWw0ec85NAou2+EccLHPIuLRfgPzBNEg+aHcl1JcV3UiS3DagIUZZwba//y bSvtnsu2GJSRGb1dZ8BNOMp3jwr0sIA4YbTDMtmBfR9F6aGV627jcunJvexBg6IU sMzGr8Cn2gK7vnXiuYNNaoI66KWmESWWdaSXQ16Y8ecxvWU03OOh9rTmPHK/p60O kL41h5wKF/ns+4JmHdGvCpB2mFLnRnVMW2snBxevufryYa+KlTNIT6MfwmDswhuA j0AFiPEsuco34H0Dq+5N8FpuTVmbxOcz3jWsDEmuCDUUJR2MaFmYZHCX8cr8n1j0 S6rNDKuEENu6Uu+DpIot3w49BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCJq3Q3D wvlsrqW+Gd8lNaa2XUhyMB8GA1UdIwQYMBaAFPgKF+GOPzoS91IzZy6Kxn+A5S/f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDIzQi9EQzQ5QTVGQTBB QjIxMUVFODBCMzU1MzdDNEY5QUUwMi8tQW9YNFk0X09oTDNVak5uTG9yR2Y0RGxM OTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1Bb1g0WTRfT2hMM1VqTm5Mb3JHZjREbEw5OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDIzQi9EQzQ5QTVGQTBBQjIxMUVFODBCMzU1MzdDNEY5QUUwMi8tQW9YNFk0X09o TDNVak5uTG9yR2Y0RGxMOTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKmhAbG8LS/p0M6syFjE1GmtDYreGRdhjlkXO0RuiRj1dYCOVcRusi 1UGwocS/IQWQ3ZkwbTwES1U5cuUcNGxFU4FNW0PUG5M5guz0mxtBX+HSs2gQsmsv oFpWHnmVA1va4dSl+d181i4ncRpxtXbjs09UUksynNwgf8Kq4XgXabzTGG2W9HKh DcvMKmY77SkmDXMSctLRWDLLp6A3LwmU/X7/vSZO/ZwPtqg9dKp0e/ljL5EDZhcs TRj72xET3oI0zS+n+TNqexyDRBxtdEkV9XJ9V8esfUbQEC6kCqGSiLFd2CKeZpra yl7AN6IZMu1PyPujGlfLtRO+OeVXWZlk -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:55 2025 by rpki-client on console.sobornost.net