$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft File: tKlqre7ce-3VfWL8mknqCz_29Qw.mft (raw, json) Hash identifier: dA7GtJUAvhppr+dJLlaMRB3EVKQSMkTq2tutjcCGEuc= Subject key identifier: 86:E0:94:D9:EF:9E:D9:92:48:69:D9:B3:02:C5:CC:85:00:1B:0C:08 Authority key identifier: B4:A9:6A:AD:EE:DC:7B:ED:D5:7D:62:FC:9A:49:EA:0B:3F:F6:F5:0C Certificate issuer: /CN=A916A983/serialNumber=B4A96AADEEDC7BEDD57D62FC9A49EA0B3FF6F50C Certificate serial: 1273 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tKlqre7ce-3VfWL8mknqCz_29Qw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft Manifest number: 126C Signing time: Mon 28 Apr 2025 17:20:05 +0000 Manifest this update: Mon 28 Apr 2025 17:20:05 +0000 Manifest next update: Mon 05 May 2025 17:20:05 +0000 Files and hashes: 1: tKlqre7ce-3VfWL8mknqCz_29Qw.crl (hash: +gDQA2Hjen0sRB3KBKj50SiiuwHqw1kEU+zTLrVNfCM=) 2: 1C839F861BA111EA8BDD6114C4F9AE02.roa (hash: /xC7PbFaPdYR1z14EMh8nZ3np50j+H8RH/0TSNmCnBQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.crl rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tKlqre7ce-3VfWL8mknqCz_29Qw.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 14:50:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4723 (0x1273) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A983, serialNumber=B4A96AADEEDC7BEDD57D62FC9A49EA0B3FF6F50C Validity Not Before: Apr 28 17:20:05 2025 GMT Not After : May 5 17:20:05 2025 GMT Subject: CN=680fb8c5-7856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:d3:70:94:c3:f5:44:e2:d7:c3:cb:5b:f5:be: e1:53:11:33:50:a1:1b:f5:b6:d6:9a:54:3f:77:cf: 94:bf:22:05:ea:35:90:c3:55:8c:05:fe:0a:99:13: 8d:b8:db:65:fc:d2:bc:e7:7b:95:fb:a8:81:bc:aa: cc:6e:f2:2b:2a:bd:c0:46:fd:3a:67:3c:db:ca:9f: 8e:b6:5e:95:59:c1:89:b6:87:48:8c:66:a6:4d:fe: 34:42:e5:56:8c:03:4d:15:86:c9:46:74:73:36:1f: 3d:61:d0:27:92:14:72:94:6d:e7:1f:56:e6:f5:12: 56:61:c3:71:b8:8c:2a:96:d9:ea:71:94:b2:84:c3: 67:c9:d0:6c:fc:18:5d:d9:5f:a8:af:78:10:54:db: c6:6d:e6:36:18:f0:31:d1:47:25:54:12:e3:fe:f2: 7c:af:d9:5d:72:84:6d:75:0f:55:d5:60:a9:0b:19: f9:e7:af:b0:7a:f4:de:cc:15:cf:50:49:42:2b:12: b4:7a:6a:b9:48:41:b4:be:61:5b:a6:28:29:29:7f: 26:bf:79:70:2c:97:4e:34:e6:36:8c:c8:6d:fb:a9: 72:62:80:d8:ef:da:e8:53:29:d1:e5:b0:7c:c4:a9: f4:4e:58:ab:04:29:cc:b4:e8:5a:9a:45:a6:f5:a6: dc:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:E0:94:D9:EF:9E:D9:92:48:69:D9:B3:02:C5:CC:85:00:1B:0C:08 X509v3 Authority Key Identifier: keyid:B4:A9:6A:AD:EE:DC:7B:ED:D5:7D:62:FC:9A:49:EA:0B:3F:F6:F5:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tKlqre7ce-3VfWL8mknqCz_29Qw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:84:02:1e:52:5d:c8:0c:18:37:6d:d0:e1:7e:88:25:27:4f: 9b:6e:b7:f7:11:9f:df:0c:a2:01:24:6a:1b:2d:55:fa:08:6f: ba:2c:62:71:44:d5:66:42:2f:a3:24:57:ad:de:0d:ff:ea:6a: ab:ec:50:92:ee:da:e9:61:3c:18:79:cc:4d:62:42:e4:d9:66: 76:ae:aa:26:64:04:d9:23:19:2f:c6:e6:7f:1f:c5:f5:9e:a0: ea:4d:20:0f:52:d3:c5:12:55:8a:4c:85:db:7c:16:2a:36:78: c5:09:cc:05:26:f7:73:5e:df:35:fb:3d:6c:56:30:32:02:94: e2:41:25:22:d0:1f:f2:43:55:77:24:c3:de:05:d1:85:b1:c2: 72:fa:ae:21:2e:0f:d0:ca:2a:0a:30:d0:94:5a:df:a9:14:26: 2c:6f:59:7c:86:93:c2:c8:4f:a0:da:22:4c:01:41:c9:90:12: 2e:2d:e0:76:f7:eb:11:10:86:cf:0b:30:e2:bf:e0:f9:28:cd: 2b:7e:3a:f9:2b:ad:90:1f:31:b1:f3:e0:38:d4:94:ed:68:64: 53:c7:a2:22:70:47:a8:fb:af:ea:7d:ed:fb:b8:d2:2c:47:7b: f4:c4:3c:55:e0:98:e2:2e:da:31:67:9e:48:f0:a1:68:a1:5d: 7e:4f:8e:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEnMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE5ODMxMTAvBgNVBAUTKEI0QTk2QUFERUVEQzdCRURENTdENjJGQzlBNDlFQTBC M0ZGNkY1MEMwHhcNMjUwNDI4MTcyMDA1WhcNMjUwNTA1MTcyMDA1WjAYMRYwFAYD VQQDEw02ODBmYjhjNS03ODU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA79NwlMP1ROLXw8tb9b7hUxEzUKEb9bbWmlQ/d8+UvyIF6jWQw1WMBf4KmRON uNtl/NK853uV+6iBvKrMbvIrKr3ARv06Zzzbyp+Otl6VWcGJtodIjGamTf40QuVW jANNFYbJRnRzNh89YdAnkhRylG3nH1bm9RJWYcNxuIwqltnqcZSyhMNnydBs/Bhd 2V+or3gQVNvGbeY2GPAx0UclVBLj/vJ8r9ldcoRtdQ9V1WCpCxn556+wevTezBXP UElCKxK0emq5SEG0vmFbpigpKX8mv3lwLJdONOY2jMht+6lyYoDY79roUynR5bB8 xKn0TlirBCnMtOhamkWm9abc0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIbglNnv ntmSSGnZswLFzIUAGwwIMB8GA1UdIwQYMBaAFLSpaq3u3Hvt1X1i/JpJ6gs/9vUM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTk4My8yOEIxQjYxQ0NE MEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi90S2xxcmU3Y2UtM1ZmV0w4bWtucUN6XzI5 UXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3RLbHFyZTdjZS0zVmZXTDhta25xQ3pfMjlRdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTk4My8yOEIxQjYxQ0NEMEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi90S2xxcmU3Y2Ut M1ZmV0w4bWtucUN6XzI5UXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBphAIeUl3IDBg3bdDhfoglJ0+bbrf3EZ/fDKIBJGobLVX6CG+6LGJx RNVmQi+jJFet3g3/6mqr7FCS7trpYTwYecxNYkLk2WZ2rqomZATZIxkvxuZ/H8X1 nqDqTSAPUtPFElWKTIXbfBYqNnjFCcwFJvdzXt81+z1sVjAyApTiQSUi0B/yQ1V3 JMPeBdGFscJy+q4hLg/QyioKMNCUWt+pFCYsb1l8hpPCyE+g2iJMAUHJkBIuLeB2 9+sREIbPCzDiv+D5KM0rfjr5K62QHzGx8+A41JTtaGRTx6IicEeo+6/qfe37uNIs R3v0xDxV4JjiLtoxZ55I8KFooV1+T457 -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:40 2025 by rpki-client on console.sobornost.net