$ rpki-client -vvf rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft File: BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft (raw, json) Hash identifier: m9Psw32hc+r/IMZqALnQysJOJZCsb5rt/ktMVcPQvkI= Subject key identifier: 7D:1C:16:8D:80:74:F4:C9:CE:21:8D:55:BB:89:CC:00:C5:DB:28:47 Authority key identifier: 04:E6:C9:24:9E:E3:48:DC:F7:64:DF:0B:9A:40:D3:E8:54:06:64:44 Certificate issuer: /CN=A916BDA4/serialNumber=04E6C9249EE348DCF764DF0B9A40D3E854066444 Certificate serial: 16E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft Manifest number: 1501 Signing time: Sat 26 Apr 2025 17:07:53 +0000 Manifest this update: Sat 26 Apr 2025 17:07:53 +0000 Manifest next update: Sat 03 May 2025 17:07:53 +0000 Files and hashes: 1: BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl (hash: RYruMVH37IDqEgz0tUoGoP+Hbfhk2E2JtY28krnl4n4=) 2: 8D19F1388B3511EF99F24263C4F9AE02.roa (hash: wBFLFOE9+9EoELn+31uYK3O8RqJxSAYt3wddhgCwUNc=) 3: E3F7B966E5A811ECBE11DA6DC4F9AE02.roa (hash: Lx5JMDz+euSwXfN2bBhbtzFpbOuwQ+UGzdRfQfwqwmg=) 4: 164F6E2079BF11EAB3ADD60FC4F9AE02.roa (hash: jFWx3yosTM6Ngdos0+GDHNaOyAPdPCLeZtZ1sRgMYug=) 5: 32BF2AD8F36E11E883FFB865C4F9AE02.roa (hash: 3K7qEYTTRPaMHZTJiAeJCFj5NoW5czqKHLINeQfDKgQ=) 6: D26DDCB6F36C11E88E372D61C4F9AE02.roa (hash: p079JhzkV3DHxp4PDPvrbepGD7tngZQCKWLeyg6QpnQ=) 7: 876FDB56D90211EFB7CAB32BC4F9AE02.roa (hash: p/kEHMx8f7csUo5NBlHkAvj+aoMN4eX/IkrayOB/b3E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 17:07:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5863 (0x16e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BDA4, serialNumber=04E6C9249EE348DCF764DF0B9A40D3E854066444 Validity Not Before: Apr 26 17:07:53 2025 GMT Not After : May 3 17:07:53 2025 GMT Subject: CN=680d12e9-5410 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:02:c5:52:ea:35:91:2f:cd:17:30:76:a3:46: 63:25:b3:7c:d9:5c:d2:4f:58:92:42:ed:0f:a8:15: ef:7b:39:8a:32:9b:53:90:28:10:57:e9:71:e5:8c: af:7b:88:dd:94:3c:e4:98:8d:da:a1:a7:24:70:4b: 2e:a5:d0:f8:59:d8:b3:3c:f8:3b:36:de:30:2a:eb: e3:66:e5:6b:53:de:b3:3c:2b:f3:96:bc:e1:25:b4: ef:bb:f3:09:d1:95:26:da:3c:af:50:35:81:fc:f7: 04:d2:ff:7b:82:c1:4c:e7:49:45:42:f2:f2:b7:b5: 2d:00:cd:83:fa:30:54:6a:d9:41:60:3a:31:13:3c: 40:a3:35:42:b4:5a:e7:65:fb:30:7c:06:ac:65:e1: 7d:74:97:0c:65:aa:92:0b:3a:cb:5a:e9:e6:3a:ad: 85:c3:29:e3:0f:7b:06:e5:ca:4f:30:af:79:c5:d2: ad:60:c5:af:6e:6f:37:55:97:44:18:14:1b:ce:ca: 8b:6f:16:5e:30:98:8a:c4:ea:74:bc:e3:4c:e1:a8: 5e:3d:14:0b:25:62:ee:b5:ba:00:57:89:02:a3:24: 22:6f:f0:76:76:41:98:c9:ef:67:c6:da:6c:07:ca: 8e:fa:0a:6e:4f:34:fb:0b:1e:cc:b3:ea:3d:22:c7: 8f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:1C:16:8D:80:74:F4:C9:CE:21:8D:55:BB:89:CC:00:C5:DB:28:47 X509v3 Authority Key Identifier: keyid:04:E6:C9:24:9E:E3:48:DC:F7:64:DF:0B:9A:40:D3:E8:54:06:64:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:da:eb:fc:13:e0:19:63:2e:23:1c:db:8b:a8:4e:d2:c5:86: 4c:4a:40:c7:61:d0:2c:fa:8e:a2:e7:60:51:d3:88:02:c6:22: 6e:ee:00:8c:78:9c:59:8f:63:f9:5b:95:de:b8:74:70:a4:9a: df:6c:31:af:e3:9b:f7:ea:50:5a:fc:43:d2:a6:92:d3:d6:bb: de:60:1b:5c:c0:b8:db:ca:bb:78:3d:31:0c:7a:5e:13:e9:be: 59:93:2c:6c:fd:02:2e:b4:54:14:e6:0e:cd:f3:0a:fd:57:25: 51:bf:00:ec:9c:ab:9e:99:99:20:e2:5a:91:05:95:c0:8c:b9: 73:f7:6c:d8:05:06:d7:5d:a5:b1:1b:36:a6:d0:53:3b:34:27: 0f:80:63:56:b8:47:69:e4:70:fd:e2:b8:c8:ad:cb:b6:ca:d4: 23:17:6a:2c:71:fd:82:7a:3e:29:0c:ad:2c:03:5f:66:39:3e: a7:37:57:cb:6a:70:02:6b:76:59:26:f3:17:81:b1:20:84:bb: 6b:8a:c4:eb:ce:e6:d5:87:d7:97:ff:db:15:20:87:a5:c7:70: e9:65:93:ba:41:8f:90:61:5b:79:d5:b9:ff:e4:4d:8d:5a:14: 70:6e:bf:a1:78:18:dd:69:9f:77:cc:64:f0:2f:e5:78:de:de: 97:b2:0a:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFucwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJEQTQxMTAvBgNVBAUTKDA0RTZDOTI0OUVFMzQ4RENGNzY0REYwQjlBNDBEM0U4 NTQwNjY0NDQwHhcNMjUwNDI2MTcwNzUzWhcNMjUwNTAzMTcwNzUzWjAYMRYwFAYD VQQDEw02ODBkMTJlOS01NDEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ALFUuo1kS/NFzB2o0ZjJbN82VzST1iSQu0PqBXvezmKMptTkCgQV+lx5Yyv e4jdlDzkmI3aoackcEsupdD4WdizPPg7Nt4wKuvjZuVrU96zPCvzlrzhJbTvu/MJ 0ZUm2jyvUDWB/PcE0v97gsFM50lFQvLyt7UtAM2D+jBUatlBYDoxEzxAozVCtFrn ZfswfAasZeF9dJcMZaqSCzrLWunmOq2FwynjD3sG5cpPMK95xdKtYMWvbm83VZdE GBQbzsqLbxZeMJiKxOp0vONM4ahePRQLJWLutboAV4kCoyQib/B2dkGYye9nxtps B8qO+gpuTzT7Cx7Ms+o9IsePJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH0cFo2A dPTJziGNVbuJzADF2yhHMB8GA1UdIwQYMBaAFATmySSe40jc92TfC5pA0+hUBmRE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkRBNC8xRUM3MDJCQ0Yx QTcxMUU4OTBGMDY2NTBDNEY5QUUwMi9CT2JKSko3alNOejNaTjhMbWtEVDZGUUda RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JPYkpKSjdqU056M1pOOExta0RUNkZRR1pFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkRBNC8xRUM3MDJCQ0YxQTcxMUU4OTBGMDY2NTBDNEY5QUUwMi9CT2JKSko3alNO ejNaTjhMbWtEVDZGUUdaRVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBw2uv8E+AZYy4jHNuLqE7SxYZMSkDHYdAs+o6i52BR04gCxiJu7gCM eJxZj2P5W5XeuHRwpJrfbDGv45v36lBa/EPSppLT1rveYBtcwLjbyrt4PTEMel4T 6b5Zkyxs/QIutFQU5g7N8wr9VyVRvwDsnKuemZkg4lqRBZXAjLlz92zYBQbXXaWx Gzam0FM7NCcPgGNWuEdp5HD94rjIrcu2ytQjF2oscf2Cej4pDK0sA19mOT6nN1fL anACa3ZZJvMXgbEghLtrisTrzubVh9eX/9sVIIelx3DpZZO6QY+QYVt51bn/5E2N WhRwbr+heBjdaZ93zGTwL+V43t6Xsgqm -----END CERTIFICATE-----Generated at Sat Apr 26 21:01:55 2025 by rpki-client on console.sobornost.net