$ rpki-client -vvf rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft File: fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft (raw, json) Hash identifier: KVDbRlrvsNObX14ZPS3H+8Scn3XWDcRMnEDzaQpH93w= Subject key identifier: BE:CA:D3:DD:C1:F4:33:06:1B:F4:66:6D:51:C3:31:FA:96:48:C0:DE Authority key identifier: 7D:17:22:8F:44:5E:18:4B:14:84:9B:E4:08:FB:D9:DB:29:7B:B8:01 Certificate issuer: /CN=A916892A/serialNumber=7D17228F445E184B14849BE408FBD9DB297BB801 Certificate serial: 86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRcij0ReGEsUhJvkCPvZ2yl7uAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft Manifest number: 84 Signing time: Sun 27 Apr 2025 05:26:32 +0000 Manifest this update: Sun 27 Apr 2025 05:26:32 +0000 Manifest next update: Sun 04 May 2025 05:26:32 +0000 Files and hashes: 1: fRcij0ReGEsUhJvkCPvZ2yl7uAE.crl (hash: ecBwT39S0JskKLWe7WLSM1Xn21nLCY3y8mOO7mCgJbY=) 2: 53287AF45DDF11EF9B31E965C4F9AE02.roa (hash: l9NwgF2p4gRADdXEDeNTklsFvOfiw2xnBPOYK8nZgtQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.crl rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRcij0ReGEsUhJvkCPvZ2yl7uAE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 134 (0x86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916892A, serialNumber=7D17228F445E184B14849BE408FBD9DB297BB801 Validity Not Before: Apr 27 05:26:32 2025 GMT Not After : May 4 05:26:32 2025 GMT Subject: CN=680dc008-04d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f5:f5:28:d1:0b:54:08:28:1a:f0:3a:17:cb: bc:0b:df:68:15:ab:42:d6:e8:48:00:8c:44:4c:08: f5:60:9a:23:11:0e:68:c3:5b:b9:db:4c:4f:4b:64: 65:7d:70:5c:19:cd:42:b3:55:48:8c:22:8b:95:5b: 05:ae:f8:63:10:43:26:77:28:de:5a:0c:e0:57:bc: d1:e0:3a:72:45:fd:67:5a:6d:74:29:59:85:8a:b5: 34:d1:c4:a2:0e:cb:a7:7c:d2:11:28:a0:b2:42:a4: 5f:ec:bf:d9:49:48:12:24:37:67:c8:2a:bb:a1:7b: 06:1c:59:3a:95:73:57:81:96:c3:0a:9c:95:ad:45: c3:67:50:8f:8e:c5:11:9b:aa:0d:59:d1:6a:4a:63: 03:ee:1d:8d:68:fa:ee:c5:c1:d1:ae:f9:d0:2e:d4: 7e:64:88:0e:31:a5:90:4b:c6:50:60:5b:36:be:d1: eb:8d:ec:d6:4b:b1:78:65:2c:80:bd:46:6b:d2:3a: 71:b7:00:8e:86:d0:c8:d4:ef:ae:6b:ee:40:02:69: 62:83:b5:70:79:5f:7f:02:5d:cb:f1:1d:b6:0a:be: 79:3e:89:1b:c1:ea:45:63:4d:92:73:60:71:16:e0: f5:c8:d3:41:bd:31:c3:64:52:5e:c5:6c:b7:e6:7a: 58:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:CA:D3:DD:C1:F4:33:06:1B:F4:66:6D:51:C3:31:FA:96:48:C0:DE X509v3 Authority Key Identifier: keyid:7D:17:22:8F:44:5E:18:4B:14:84:9B:E4:08:FB:D9:DB:29:7B:B8:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRcij0ReGEsUhJvkCPvZ2yl7uAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:09:53:9f:ab:01:00:d9:df:e6:77:f8:69:25:7f:24:32:59: c1:cf:f9:6d:5b:f6:27:9a:69:6f:3a:f0:65:2b:f2:61:35:89: d5:08:e2:e5:59:db:2d:6d:9f:32:b6:5f:bd:27:9b:e7:9b:8c: a3:a4:e6:7a:e0:78:3c:c6:c0:c8:ad:b2:d4:b6:20:0d:d6:3b: c9:d0:7d:da:05:b8:b0:25:99:0d:26:9b:f9:1e:d1:af:51:43: bb:c3:cf:ad:f6:90:2c:4b:2f:3c:68:c2:d1:57:62:74:f3:55: b9:ca:bf:8e:b0:c5:95:51:89:0c:0c:2e:32:a7:76:9f:67:cf: c6:81:b5:28:5d:4d:80:dc:19:7f:96:d8:90:65:48:5a:80:0c: bb:d5:75:8f:a6:7f:0b:3d:96:a5:64:90:99:73:90:eb:e3:6f: 33:a7:ea:35:14:98:b6:43:ed:56:4c:0b:b2:d4:16:12:9b:5b: 9e:97:97:b1:2c:cd:65:69:c6:5b:ef:cf:c6:34:79:ad:c2:6e: 17:88:f6:4c:b8:fa:35:6b:df:a9:40:c6:06:eb:6e:6c:c2:fb: 27:6c:2d:22:e0:e1:81:04:dd:5f:81:53:d7:ac:21:c4:c9:f6: 46:e1:43:36:c2:5f:a0:d9:86:6d:e4:36:44:5e:c8:6e:8c:f7: db:97:aa:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg5MkExMTAvBgNVBAUTKDdEMTcyMjhGNDQ1RTE4NEIxNDg0OUJFNDA4RkJEOURC Mjk3QkI4MDEwHhcNMjUwNDI3MDUyNjMyWhcNMjUwNTA0MDUyNjMyWjAYMRYwFAYD VQQDEw02ODBkYzAwOC0wNGQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2PX1KNELVAgoGvA6F8u8C99oFatC1uhIAIxETAj1YJojEQ5ow1u520xPS2Rl fXBcGc1Cs1VIjCKLlVsFrvhjEEMmdyjeWgzgV7zR4DpyRf1nWm10KVmFirU00cSi DsunfNIRKKCyQqRf7L/ZSUgSJDdnyCq7oXsGHFk6lXNXgZbDCpyVrUXDZ1CPjsUR m6oNWdFqSmMD7h2NaPruxcHRrvnQLtR+ZIgOMaWQS8ZQYFs2vtHrjezWS7F4ZSyA vUZr0jpxtwCOhtDI1O+ua+5AAmlig7VweV9/Al3L8R22Cr55PokbwepFY02Sc2Bx FuD1yNNBvTHDZFJexWy35npYVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL7K093B 9DMGG/RmbVHDMfqWSMDeMB8GA1UdIwQYMBaAFH0XIo9EXhhLFISb5Aj72dspe7gB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODkyQS8wQzUyNkRDRTVE REYxMUVGOEI1ODMzNjVDNEY5QUUwMi9mUmNpajBSZUdFc1VoSnZrQ1B2WjJ5bDd1 QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZSY2lqMFJlR0VzVWhKdmtDUHZaMnlsN3VBRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODkyQS8wQzUyNkRDRTVEREYxMUVGOEI1ODMzNjVDNEY5QUUwMi9mUmNpajBSZUdF c1VoSnZrQ1B2WjJ5bDd1QUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0CVOfqwEA2d/md/hpJX8kMlnBz/ltW/YnmmlvOvBlK/JhNYnVCOLl WdstbZ8ytl+9J5vnm4yjpOZ64Hg8xsDIrbLUtiAN1jvJ0H3aBbiwJZkNJpv5HtGv UUO7w8+t9pAsSy88aMLRV2J081W5yr+OsMWVUYkMDC4yp3afZ8/GgbUoXU2A3Bl/ ltiQZUhagAy71XWPpn8LPZalZJCZc5Dr428zp+o1FJi2Q+1WTAuy1BYSm1uel5ex LM1lacZb78/GNHmtwm4XiPZMuPo1a9+pQMYG625swvsnbC0i4OGBBN1fgVPXrCHE yfZG4UM2wl+g2YZt5DZEXshujPfbl6ok -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:48 2025 by rpki-client on console.sobornost.net