$ rpki-client -vvf rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft File: cLDwRtLzp0OW6Cx56OPazyYLOe4.mft (raw, json) Hash identifier: KeD2qVrwM2zMwb39k0AtDUBB3AXhAd+pmdolhxMyg0k= Subject key identifier: 1D:FC:93:D7:18:40:0A:E4:5F:AF:3F:DF:2B:80:B9:7D:A4:B2:4F:82 Authority key identifier: 70:B0:F0:46:D2:F3:A7:43:96:E8:2C:79:E8:E3:DA:CF:26:0B:39:EE Certificate issuer: /CN=A916B6AA/serialNumber=70B0F046D2F3A74396E82C79E8E3DACF260B39EE Certificate serial: 2486 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft Manifest number: 244A Signing time: Mon 28 Apr 2025 15:53:32 +0000 Manifest this update: Mon 28 Apr 2025 15:53:31 +0000 Manifest next update: Mon 05 May 2025 15:53:31 +0000 Files and hashes: 1: cLDwRtLzp0OW6Cx56OPazyYLOe4.crl (hash: voACA4boGY9x3MINYiPacEiMCKyEDHhd30b5Cc4gMbI=) 2: 83684F548DF411E7A230506DC4F9AE02.roa (hash: AclspnZ8iw2tHm0IKz4UG4ixLk56q+FHizPSEyIU7Yg=) 3: 1A8324E28DF311E7B616ED66C4F9AE02.roa (hash: Xinmf1pF0nmD8G1dr/8oh0iZ6My9MutoBSmESSGjfhg=) 4: E080F3508DFC11E7A7F08785C4F9AE02.roa (hash: n5Den4WYpFKZqIXrlnguXiXrj/0j5bJGPd+BTJZJ0No=) 5: 19C92BC88DF311E7B616ED66C4F9AE02.roa (hash: jSQyyyapjlhB60qfeUaNeUQVSh1wYlF7bLfS517NK9o=) 6: B2ED9AEE913311E79B98C45BC4F9AE02.roa (hash: mJ/2raeCJOKJXKOQjY7G8dT5Ehregj8vjnWxt1la42E=) 7: 5C9B073691CD11E7AD932563C4F9AE02.roa (hash: qDvUpQ+pcBdp3oNoCaw3VUb20gdJh67KqNBk3Z1ztMU=) 8: 027532E6385F11EAA879692AC4F9AE02.roa (hash: wjHexyPvkPualq2gUM9+dQ9qJ+4Kj5YvVI5QrOdw33k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.crl rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 15:53:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9350 (0x2486) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B6AA, serialNumber=70B0F046D2F3A74396E82C79E8E3DACF260B39EE Validity Not Before: Apr 28 15:53:31 2025 GMT Not After : May 5 15:53:31 2025 GMT Subject: CN=680fa47c-d536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ba:c0:1f:ba:2f:d7:fb:e5:df:b9:66:50:6b: f3:1e:36:77:1d:ba:ce:a3:e0:89:b9:24:10:e2:17: f4:84:f1:b5:62:30:75:be:c7:2f:a8:fa:ea:4b:db: 70:34:74:d8:0e:aa:6a:cc:d8:83:41:92:10:5b:c2: 3f:98:b2:0e:05:2c:b0:ed:a0:cb:3b:b4:b1:76:78: a3:e0:01:8f:1d:8c:82:15:7f:e1:cc:b1:49:cf:6a: 38:29:2f:9f:3c:96:db:36:37:ca:9e:3a:bc:77:6f: cc:38:3f:4d:32:62:c0:f6:4f:75:dd:de:96:28:b8: 53:1e:b5:9f:fa:7c:af:89:b6:1c:c6:1f:67:4b:b5: a0:6f:71:60:97:96:d6:5f:f8:b5:55:28:c1:9b:4a: f5:ef:ba:f4:14:67:f3:d4:a9:08:36:14:7a:35:5a: ec:0c:bf:21:65:41:2e:9d:6f:72:59:46:e0:bb:a3: 5e:27:20:b2:b0:fc:f0:30:73:af:cd:44:6f:83:e0: f9:e1:df:40:12:4e:fa:51:a3:ae:c2:f0:b0:95:92: 7c:5a:f7:99:28:98:2f:d1:fc:d7:a7:c2:ba:7f:a8: 5d:d7:ab:77:33:30:6e:0f:9a:39:cd:6e:59:62:a3: 5b:86:96:90:33:f4:ad:67:aa:a8:fe:a9:80:da:da: 2f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:FC:93:D7:18:40:0A:E4:5F:AF:3F:DF:2B:80:B9:7D:A4:B2:4F:82 X509v3 Authority Key Identifier: keyid:70:B0:F0:46:D2:F3:A7:43:96:E8:2C:79:E8:E3:DA:CF:26:0B:39:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:1d:ce:80:f4:ea:55:88:10:7d:0f:11:ab:6e:66:97:b7:9b: c7:66:94:40:4f:e8:c8:7f:45:fd:a1:25:7c:55:f8:ef:b3:1d: a5:4b:91:a8:da:e2:d7:7a:71:58:20:8a:6e:48:cb:e0:18:c0: b8:94:19:65:25:89:fa:53:ba:75:ed:28:da:f2:a2:49:6b:cc: b8:64:29:03:98:81:e9:b7:fb:91:a7:02:a0:44:f8:bb:61:06: 08:45:55:b9:49:24:eb:48:85:44:93:69:1e:d6:3d:c4:b0:4b: 04:1e:15:55:51:02:c0:9e:60:29:f3:85:1c:c0:d2:45:cf:49: a9:eb:1c:de:85:86:5e:35:79:b1:4b:dc:42:51:a9:e6:b9:75: 5e:d0:54:53:45:0e:cf:5d:dc:ac:05:ec:d1:91:ee:1d:21:80: bf:be:32:e9:b5:f9:a4:2c:2a:01:68:31:12:d9:5c:07:44:24: 3c:ed:cf:26:e5:44:e3:bf:fe:a8:eb:a9:84:f6:6d:91:6e:b1: 70:c9:68:9f:7c:ce:c8:5c:7e:6a:0b:9d:46:a3:97:f3:b5:0b: 2a:a7:f8:a2:5c:3c:ad:3d:51:16:8e:7e:be:ac:9e:25:c5:51: 53:b5:72:0f:d7:57:5d:45:32:14:a7:da:64:1e:89:f7:60:81: 9e:94:2d:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI2QUExMTAvBgNVBAUTKDcwQjBGMDQ2RDJGM0E3NDM5NkU4MkM3OUU4RTNEQUNG MjYwQjM5RUUwHhcNMjUwNDI4MTU1MzMxWhcNMjUwNTA1MTU1MzMxWjAYMRYwFAYD VQQDEw02ODBmYTQ3Yy1kNTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwrrAH7ov1/vl37lmUGvzHjZ3HbrOo+CJuSQQ4hf0hPG1YjB1vscvqPrqS9tw NHTYDqpqzNiDQZIQW8I/mLIOBSyw7aDLO7Sxdnij4AGPHYyCFX/hzLFJz2o4KS+f PJbbNjfKnjq8d2/MOD9NMmLA9k913d6WKLhTHrWf+nyvibYcxh9nS7Wgb3Fgl5bW X/i1VSjBm0r177r0FGfz1KkINhR6NVrsDL8hZUEunW9yWUbgu6NeJyCysPzwMHOv zURvg+D54d9AEk76UaOuwvCwlZJ8WveZKJgv0fzXp8K6f6hd16t3MzBuD5o5zW5Z YqNbhpaQM/StZ6qo/qmA2tov/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB38k9cY QArkX68/3yuAuX2ksk+CMB8GA1UdIwQYMBaAFHCw8EbS86dDlugseejj2s8mCznu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjZBQS80NkM3RjE3MjRG MTYxMUU1OEQyQTMzMjdDNEY5QUUwMi9jTER3UnRMenAwT1c2Q3g1Nk9QYXp5WUxP ZTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NMRHdSdEx6cDBPVzZDeDU2T1BhenlZTE9lNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjZBQS80NkM3RjE3MjRGMTYxMUU1OEQyQTMzMjdDNEY5QUUwMi9jTER3UnRMenAw T1c2Q3g1Nk9QYXp5WUxPZTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYHc6A9OpViBB9DxGrbmaXt5vHZpRAT+jIf0X9oSV8Vfjvsx2lS5Go 2uLXenFYIIpuSMvgGMC4lBllJYn6U7p17Sja8qJJa8y4ZCkDmIHpt/uRpwKgRPi7 YQYIRVW5SSTrSIVEk2ke1j3EsEsEHhVVUQLAnmAp84UcwNJFz0mp6xzehYZeNXmx S9xCUanmuXVe0FRTRQ7PXdysBezRke4dIYC/vjLptfmkLCoBaDES2VwHRCQ87c8m 5UTjv/6o66mE9m2RbrFwyWiffM7IXH5qC51Go5fztQsqp/iiXDytPVEWjn6+rJ4l xVFTtXIP11ddRTIUp9pkHon3YIGelC1o -----END CERTIFICATE-----Generated at Mon Apr 28 17:45:09 2025 by rpki-client on console.sobornost.net