$ rpki-client -vvf rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft File: CVjwl8rkKX3ycoLkGD468UJMj34.mft (raw, json) Hash identifier: X9eZSQXlGmvPMT44RwdK9jeclVKcxyQziP4g0Fb3Wec= Subject key identifier: AA:03:AE:86:AC:DE:20:2F:40:C9:49:8D:0E:4E:7F:18:CD:49:26:3C Authority key identifier: 09:58:F0:97:CA:E4:29:7D:F2:72:82:E4:18:3E:3A:F1:42:4C:8F:7E Certificate issuer: /CN=A916814B/serialNumber=0958F097CAE4297DF27282E4183E3AF1424C8F7E Certificate serial: 1618 Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft Manifest number: 160F Signing time: Sat 26 Apr 2025 16:41:43 +0000 Manifest this update: Sat 26 Apr 2025 16:41:43 +0000 Manifest next update: Sat 03 May 2025 16:41:43 +0000 Files and hashes: 1: CVjwl8rkKX3ycoLkGD468UJMj34.crl (hash: sHqP6/NntaGdEhWr6c+BXp322x+xXMo5P8c9E9T2gA4=) 2: B4450EF68E5311EBB81E6C70C4F9AE02.roa (hash: mykXr6ve/cwvr+LfcirysCKrHVhRt9J9fVkHn/0QFbY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.crl rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 14:50:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5656 (0x1618) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916814B, serialNumber=0958F097CAE4297DF27282E4183E3AF1424C8F7E Validity Not Before: Apr 26 16:41:43 2025 GMT Not After : May 3 16:41:43 2025 GMT Subject: CN=680d0cc7-2195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ed:90:af:b0:f1:7d:e0:e8:98:7f:9b:ba:9a: 29:c4:68:95:c6:89:24:41:47:6f:d8:02:03:79:ec: 21:86:89:a7:f5:51:60:0e:a6:ab:70:3d:fe:c5:c5: ab:e6:ec:94:69:cf:97:66:99:88:f2:cf:9f:ce:c7: a9:bb:a6:2c:a7:53:4c:58:37:46:29:98:d5:e5:e5: 4c:a3:dd:38:73:04:5c:35:ca:ce:9c:bc:9d:0d:1b: 9f:9c:a4:7f:9f:a6:0c:d8:cc:3b:40:07:08:0e:9d: 72:db:a6:57:aa:a2:23:4e:09:30:fb:a5:2a:8e:0a: a6:46:84:07:10:4d:de:19:1c:b2:01:39:4a:a2:5d: 6f:4d:7f:9f:94:0c:1d:3c:23:aa:2f:bf:b8:9e:6d: f6:c9:2a:d4:ec:aa:7d:03:49:bb:4e:db:f7:90:d0: 63:bf:fe:b2:54:b6:0d:4f:7a:29:cd:79:a7:1d:26: b9:79:be:f9:34:c9:13:ec:07:b5:c4:79:aa:16:72: 76:01:81:64:19:76:19:80:ea:f2:81:30:58:4f:89: 7b:af:3b:16:a0:34:df:05:ff:e3:cc:5a:50:97:d9: 8b:bd:89:d9:31:59:91:fc:1e:1c:1f:c2:45:e0:18: c4:cd:a6:ca:17:69:99:a5:90:b2:60:85:c2:6a:dc: 6e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:03:AE:86:AC:DE:20:2F:40:C9:49:8D:0E:4E:7F:18:CD:49:26:3C X509v3 Authority Key Identifier: keyid:09:58:F0:97:CA:E4:29:7D:F2:72:82:E4:18:3E:3A:F1:42:4C:8F:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:ba:2e:5a:17:c2:a8:4f:ce:72:6d:75:67:87:9d:c6:f1:6b: 2c:ea:d4:35:14:8d:ce:3b:40:f9:78:c3:45:a6:ef:17:a5:82: f7:dc:4d:ed:21:5c:ee:88:f9:ed:ee:08:5f:69:05:21:72:43: b2:9d:8c:73:90:ec:ee:23:44:22:58:57:1c:e3:28:94:7e:f0: 1c:03:d5:52:58:0f:32:aa:9b:3a:52:cb:75:00:6b:d2:ca:35: 03:93:61:c4:2c:e2:95:7d:13:56:8a:77:e1:a3:47:cf:35:77: 5b:f0:72:b2:3a:fc:0e:87:92:6c:68:c7:4d:67:4d:5b:7d:9a: e9:dd:c2:ec:ef:bb:cb:07:a5:d4:18:c8:14:d8:70:63:a0:7d: 76:d7:77:b5:80:4e:0a:a9:be:c4:6a:d4:2d:c1:32:58:af:db: 77:b4:73:8f:de:55:35:86:36:28:36:3c:2d:c2:db:fd:cb:14: 0a:ee:28:7b:17:09:38:02:a4:8c:37:5f:50:0b:6e:2e:26:fe: af:52:b7:ca:f3:03:67:08:a2:ca:3c:0e:f6:cc:1b:42:72:68: 4a:94:39:8a:a7:f7:50:34:2f:65:2d:d4:58:8d:c1:9a:f0:1a: 56:b5:12:4a:9f:ba:53:2e:2a:c5:08:04:b5:12:d1:6d:1c:29: 4b:94:fd:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFhgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgxNEIxMTAvBgNVBAUTKDA5NThGMDk3Q0FFNDI5N0RGMjcyODJFNDE4M0UzQUYx NDI0QzhGN0UwHhcNMjUwNDI2MTY0MTQzWhcNMjUwNTAzMTY0MTQzWjAYMRYwFAYD VQQDEw02ODBkMGNjNy0yMTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy+2Qr7DxfeDomH+bupopxGiVxokkQUdv2AIDeewhhomn9VFgDqarcD3+xcWr 5uyUac+XZpmI8s+fzsepu6Ysp1NMWDdGKZjV5eVMo904cwRcNcrOnLydDRufnKR/ n6YM2Mw7QAcIDp1y26ZXqqIjTgkw+6UqjgqmRoQHEE3eGRyyATlKol1vTX+flAwd PCOqL7+4nm32ySrU7Kp9A0m7Ttv3kNBjv/6yVLYNT3opzXmnHSa5eb75NMkT7Ae1 xHmqFnJ2AYFkGXYZgOrygTBYT4l7rzsWoDTfBf/jzFpQl9mLvYnZMVmR/B4cH8JF 4BjEzabKF2mZpZCyYIXCatxuVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKoDroas 3iAvQMlJjQ5OfxjNSSY8MB8GA1UdIwQYMBaAFAlY8JfK5Cl98nKC5Bg+OvFCTI9+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODE0Qi9GQjYwNkY1NjE2 MkUxMUU4QjhERTI2NjlDNEY5QUUwMi9DVmp3bDhya0tYM3ljb0xrR0Q0NjhVSk1q MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL0NWandsOHJrS1gzeWNvTGtHRDQ2OFVKTWozNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODE0Qi9GQjYwNkY1NjE2MkUxMUU4QjhERTI2NjlDNEY5QUUwMi9DVmp3bDhya0tY M3ljb0xrR0Q0NjhVSk1qMzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAui5aF8KoT85ybXVnh53G8Wss6tQ1FI3OO0D5eMNFpu8XpYL33E3t IVzuiPnt7ghfaQUhckOynYxzkOzuI0QiWFcc4yiUfvAcA9VSWA8yqps6Ust1AGvS yjUDk2HELOKVfRNWinfho0fPNXdb8HKyOvwOh5JsaMdNZ01bfZrp3cLs77vLB6XU GMgU2HBjoH1213e1gE4Kqb7EatQtwTJYr9t3tHOP3lU1hjYoNjwtwtv9yxQK7ih7 Fwk4AqSMN19QC24uJv6vUrfK8wNnCKLKPA72zBtCcmhKlDmKp/dQNC9lLdRYjcGa 8BpWtRJKn7pTLirFCAS1EtFtHClLlP2w -----END CERTIFICATE-----Generated at Sat Apr 26 21:01:54 2025 by rpki-client on console.sobornost.net