$ rpki-client -vvf rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft File: h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft (raw, json) Hash identifier: Rpt433rEEfvjh1kCsB2uOqeQn+U02XSWLORO6xbKMHE= Subject key identifier: 2F:10:54:0B:A2:DD:78:85:96:1D:78:05:EE:BD:87:4A:AB:35:43:45 Authority key identifier: 87:95:4C:02:31:CA:AC:B2:BE:2D:FD:B5:67:C7:4A:F5:EC:B7:5B:0C Certificate issuer: /CN=A916BCDF/serialNumber=87954C0231CAACB2BE2DFDB567C74AF5ECB75B0C Certificate serial: 1210 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h5VMAjHKrLK-Lf21Z8dK9ey3Www.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft Manifest number: 1201 Signing time: Mon 28 Apr 2025 17:23:11 +0000 Manifest this update: Mon 28 Apr 2025 17:23:11 +0000 Manifest next update: Mon 05 May 2025 17:23:11 +0000 Files and hashes: 1: h5VMAjHKrLK-Lf21Z8dK9ey3Www.crl (hash: cAguaeVhG7qPmRcDzm+IdKFYlVOzlK2c0eP6JfB2jnY=) 2: 698B3FA6986011EE969A225FC4F9AE02.roa (hash: IPMaIsA9uRnd6F5Aml0jreWHK2WPPMV0a6PLoDBBAuw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.crl rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h5VMAjHKrLK-Lf21Z8dK9ey3Www.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 14:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4624 (0x1210) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BCDF, serialNumber=87954C0231CAACB2BE2DFDB567C74AF5ECB75B0C Validity Not Before: Apr 28 17:23:11 2025 GMT Not After : May 5 17:23:11 2025 GMT Subject: CN=680fb97f-9c02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a2:7c:a5:10:00:0c:b6:5c:b9:3a:41:7b:c9: 00:03:02:8b:1d:1f:46:12:cc:e7:2a:7e:65:5e:48: f3:6d:1b:15:48:36:11:43:3f:cd:ca:ab:68:f8:a7: b7:55:8e:52:2f:1c:c8:39:e0:38:b0:c1:03:c6:d0: d0:49:b3:f7:1b:e3:71:b1:e6:d8:8a:d7:5e:57:e0: 66:2f:a7:25:2d:8d:be:78:14:aa:25:2d:79:e6:e5: 5b:24:5c:54:13:c7:5d:f3:e7:2b:04:55:72:18:47: c6:a8:0f:3e:e7:38:51:01:75:d5:59:be:7b:b9:0d: 4a:bf:34:a6:2b:c6:c5:76:51:62:6e:2b:15:56:19: 18:19:1a:4b:36:43:14:2d:e1:40:b0:3c:11:db:5c: 58:44:47:47:9f:07:31:ec:c2:e8:fd:e4:cd:12:1e: d5:65:3b:d5:de:0b:59:0c:37:bf:50:fb:2c:ef:17: d4:22:a2:02:7b:60:b5:04:51:73:96:a9:55:84:6a: 06:c8:06:5b:8a:50:86:fe:7b:f3:1d:b9:ab:96:8a: 84:cf:7d:7c:87:bf:c2:dc:8d:bd:14:06:bc:eb:f9: be:49:18:c9:7c:5d:cb:70:c1:6e:5f:22:18:81:40: 9a:74:6d:16:53:14:dc:cd:72:cc:23:80:d8:b9:1d: 16:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:10:54:0B:A2:DD:78:85:96:1D:78:05:EE:BD:87:4A:AB:35:43:45 X509v3 Authority Key Identifier: keyid:87:95:4C:02:31:CA:AC:B2:BE:2D:FD:B5:67:C7:4A:F5:EC:B7:5B:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h5VMAjHKrLK-Lf21Z8dK9ey3Www.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:fe:ae:14:43:3b:d0:92:b8:42:db:c4:34:22:6c:eb:14:d8: 2f:ec:6d:b6:26:a7:b1:fb:be:ff:79:49:7b:ff:74:12:70:a4: 38:f6:61:2f:68:2e:0c:6f:4f:61:00:07:eb:b0:a8:87:3a:94: cd:43:56:e4:5c:40:72:25:1a:c4:a0:d7:f9:5b:90:ad:e5:e5: 30:7f:6c:f1:ce:72:f9:fd:71:78:95:cd:bf:7b:86:9f:52:9b: 55:55:dd:b9:b0:83:82:18:d4:24:34:5d:99:40:b3:b2:20:1e: 4f:d4:62:f5:83:f4:0a:ca:9e:bc:6c:c2:e6:95:03:ba:d2:56: e8:ee:ad:ae:ce:5e:79:09:1d:36:2f:f7:47:71:9e:4d:4d:b1: d4:1b:97:20:0d:59:54:85:be:ff:b3:c4:7a:a0:83:de:b6:95: bf:20:51:05:78:89:de:1c:a7:58:2d:3d:75:b1:b6:a6:0e:29: 02:0f:8c:aa:1c:3f:c1:ed:c0:60:be:05:47:3d:5f:71:d5:4d: 4b:d4:67:ab:8a:96:44:d1:00:08:18:3c:b9:62:33:ab:3a:c5: 84:1b:aa:2a:c3:44:85:e9:eb:e5:35:5c:27:92:40:42:c8:fb: f8:09:be:78:7d:5d:0e:2d:03:55:0e:49:9f:c1:19:32:a2:09: 48:bb:02:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEhAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJDREYxMTAvBgNVBAUTKDg3OTU0QzAyMzFDQUFDQjJCRTJERkRCNTY3Qzc0QUY1 RUNCNzVCMEMwHhcNMjUwNDI4MTcyMzExWhcNMjUwNTA1MTcyMzExWjAYMRYwFAYD VQQDEw02ODBmYjk3Zi05YzAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwaJ8pRAADLZcuTpBe8kAAwKLHR9GEsznKn5lXkjzbRsVSDYRQz/Nyqto+Ke3 VY5SLxzIOeA4sMEDxtDQSbP3G+NxsebYitdeV+BmL6clLY2+eBSqJS155uVbJFxU E8dd8+crBFVyGEfGqA8+5zhRAXXVWb57uQ1KvzSmK8bFdlFibisVVhkYGRpLNkMU LeFAsDwR21xYREdHnwcx7MLo/eTNEh7VZTvV3gtZDDe/UPss7xfUIqICe2C1BFFz lqlVhGoGyAZbilCG/nvzHbmrloqEz318h7/C3I29FAa86/m+SRjJfF3LcMFuXyIY gUCadG0WUxTczXLMI4DYuR0WbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC8QVAui 3XiFlh14Be69h0qrNUNFMB8GA1UdIwQYMBaAFIeVTAIxyqyyvi39tWfHSvXst1sM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkNERi9FQ0UwRkJFNkUz NkQxMUU4OTU2RjM1MTZDNEY5QUUwMi9oNVZNQWpIS3JMSy1MZjIxWjhkSzlleTNX d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2g1Vk1BakhLckxLLUxmMjFaOGRLOWV5M1d3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkNERi9FQ0UwRkJFNkUzNkQxMUU4OTU2RjM1MTZDNEY5QUUwMi9oNVZNQWpIS3JM Sy1MZjIxWjhkSzlleTNXd3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCk/q4UQzvQkrhC28Q0ImzrFNgv7G22Jqex+77/eUl7/3QScKQ49mEv aC4Mb09hAAfrsKiHOpTNQ1bkXEByJRrEoNf5W5Ct5eUwf2zxznL5/XF4lc2/e4af UptVVd25sIOCGNQkNF2ZQLOyIB5P1GL1g/QKyp68bMLmlQO60lbo7q2uzl55CR02 L/dHcZ5NTbHUG5cgDVlUhb7/s8R6oIPetpW/IFEFeIneHKdYLT11sbamDikCD4yq HD/B7cBgvgVHPV9x1U1L1GeripZE0QAIGDy5YjOrOsWEG6oqw0SF6evlNVwnkkBC yPv4Cb54fV0OLQNVDkmfwRkyoglIuwJA -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:40 2025 by rpki-client on console.sobornost.net