$ rpki-client -vvf rpki.apnic.net/member_repository/A916D750/0FA7C6B62A1911EB9CAF267EC4F9AE02/8YnN8PufnGkSkaFGaBnRPE6MlgA.mft File: 8YnN8PufnGkSkaFGaBnRPE6MlgA.mft (raw, json) Hash identifier: fHDUr97nwgBeNfEArUnPogQlQQoxVmzvKWp/o/EIytM= Subject key identifier: B3:CB:F8:AD:25:F4:8F:90:73:9F:6F:E6:F5:E8:D4:72:69:46:0F:7E Authority key identifier: F1:89:CD:F0:FB:9F:9C:69:12:91:A1:46:68:19:D1:3C:4E:8C:96:00 Certificate issuer: /CN=A916D750/serialNumber=F189CDF0FB9F9C691291A1466819D13C4E8C9600 Certificate serial: 0737 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YnN8PufnGkSkaFGaBnRPE6MlgA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D750/0FA7C6B62A1911EB9CAF267EC4F9AE02/8YnN8PufnGkSkaFGaBnRPE6MlgA.mft Manifest number: 0731 Signing time: Sat 26 Apr 2025 21:26:17 +0000 Manifest this update: Sat 26 Apr 2025 21:26:17 +0000 Manifest next update: Sat 03 May 2025 21:26:17 +0000 Files and hashes: 1: 8YnN8PufnGkSkaFGaBnRPE6MlgA.crl (hash: jvkzJCnpkVAbOzyo+rfxSZsYVvvBafUA3v1YTxSyLaw=) 2: 1687F94A2A1B11EB97B90C81C4F9AE02.roa (hash: g3w/XsJqAxVEVlKlr0cv2aQ+w+aC0v9T6kWu2Ywl2js=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D750/0FA7C6B62A1911EB9CAF267EC4F9AE02/8YnN8PufnGkSkaFGaBnRPE6MlgA.crl rsync://rpki.apnic.net/member_repository/A916D750/0FA7C6B62A1911EB9CAF267EC4F9AE02/8YnN8PufnGkSkaFGaBnRPE6MlgA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YnN8PufnGkSkaFGaBnRPE6MlgA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1847 (0x737) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D750, serialNumber=F189CDF0FB9F9C691291A1466819D13C4E8C9600 Validity Not Before: Apr 26 21:26:17 2025 GMT Not After : May 3 21:26:17 2025 GMT Subject: CN=680d4f79-a99c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:68:51:20:22:ab:50:fe:02:69:24:e0:6d:19: 4c:5f:09:2d:8e:5a:fc:35:0b:d8:16:df:16:8c:e0: 60:98:a7:c3:5c:a2:5a:6f:bb:95:87:a2:3c:7d:08: cd:65:47:23:bf:22:6e:7a:bc:08:0a:fe:bb:3e:31: cb:9d:8c:5e:bb:b3:e7:8b:2a:93:85:e7:40:15:ce: 61:c8:96:5e:da:3c:4a:d7:d8:74:5c:0d:eb:8f:26: b8:2c:02:5e:0a:b7:eb:41:fc:d1:48:fc:eb:2e:22: c5:ff:dd:e7:d1:9c:c1:b3:9f:dc:4a:35:19:8d:42: 6c:0f:b4:3e:b9:53:30:68:1f:f7:f5:d1:ab:b9:3d: 2e:b1:cd:18:1e:98:06:3c:2c:b5:53:f9:04:b9:30: 5a:db:83:77:6e:d7:58:31:30:6f:30:74:51:66:88: f2:0b:e3:8b:11:ed:cd:db:f7:1f:18:50:59:47:2a: fe:33:04:d7:2f:eb:b2:77:5f:bd:a3:77:da:19:d0: a5:7c:80:49:e2:50:5e:d9:a1:ee:60:9b:c8:89:84: 42:64:0f:59:90:3d:56:0e:79:2b:42:2f:6c:c6:e6: 8b:18:57:1e:9f:08:b4:da:6b:2d:3b:d9:5f:72:fc: 42:f8:5a:98:ce:d9:84:3f:fc:f9:bd:e9:3a:89:9f: 54:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:CB:F8:AD:25:F4:8F:90:73:9F:6F:E6:F5:E8:D4:72:69:46:0F:7E X509v3 Authority Key Identifier: keyid:F1:89:CD:F0:FB:9F:9C:69:12:91:A1:46:68:19:D1:3C:4E:8C:96:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D750/0FA7C6B62A1911EB9CAF267EC4F9AE02/8YnN8PufnGkSkaFGaBnRPE6MlgA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YnN8PufnGkSkaFGaBnRPE6MlgA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D750/0FA7C6B62A1911EB9CAF267EC4F9AE02/8YnN8PufnGkSkaFGaBnRPE6MlgA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:25:98:44:a6:4c:08:6c:ca:7b:50:a0:b5:bc:56:be:41:36: d9:5a:f4:3a:d7:0f:30:51:4f:6e:12:ae:d3:e1:9f:c0:ce:f2: cb:14:3a:c1:ef:89:cc:9b:16:e0:eb:81:e1:47:39:a9:c4:b5: ea:35:f6:a5:6e:5c:28:e2:fe:3c:18:9a:2b:c3:e3:8e:28:11: fa:56:08:f9:c0:24:29:37:2d:c1:de:6f:66:a5:8a:3b:e7:fe: 95:85:d0:a8:20:03:b0:c7:50:1c:78:80:d8:ca:48:4c:0e:a7: be:52:86:9f:a6:a7:3c:2b:93:d4:a4:73:97:5c:f3:f0:5d:1d: c0:88:0b:f3:91:43:44:85:73:78:c9:d1:2e:49:64:c4:cb:63: b2:1a:8c:15:29:8a:c9:2b:e8:3e:a1:b5:f4:4a:73:cc:8b:59: 5f:a3:ae:f8:39:56:e9:e7:ae:6f:3b:75:ce:a5:64:75:45:b3: eb:70:c3:63:96:78:30:f0:d9:87:e1:ae:a8:6c:15:bf:8e:09: 4a:f7:bd:44:7a:08:d6:10:1b:89:2b:43:62:db:76:9a:96:ec: 71:90:fd:03:4b:67:d5:fa:c8:be:76:79:8f:f5:26:f8:98:51: 02:0a:6f:22:a3:96:b7:c6:0b:cb:58:6c:52:37:a7:6e:d2:2e: 3d:18:ee:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQ3NTAxMTAvBgNVBAUTKEYxODlDREYwRkI5RjlDNjkxMjkxQTE0NjY4MTlEMTND NEU4Qzk2MDAwHhcNMjUwNDI2MjEyNjE3WhcNMjUwNTAzMjEyNjE3WjAYMRYwFAYD VQQDEw02ODBkNGY3OS1hOTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy2hRICKrUP4CaSTgbRlMXwktjlr8NQvYFt8WjOBgmKfDXKJab7uVh6I8fQjN ZUcjvyJuerwICv67PjHLnYxeu7PniyqThedAFc5hyJZe2jxK19h0XA3rjya4LAJe CrfrQfzRSPzrLiLF/93n0ZzBs5/cSjUZjUJsD7Q+uVMwaB/39dGruT0usc0YHpgG PCy1U/kEuTBa24N3btdYMTBvMHRRZojyC+OLEe3N2/cfGFBZRyr+MwTXL+uyd1+9 o3faGdClfIBJ4lBe2aHuYJvIiYRCZA9ZkD1WDnkrQi9sxuaLGFcenwi02mstO9lf cvxC+FqYztmEP/z5vek6iZ9UwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLPL+K0l 9I+Qc59v5vXo1HJpRg9+MB8GA1UdIwQYMBaAFPGJzfD7n5xpEpGhRmgZ0TxOjJYA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDc1MC8wRkE3QzZCNjJB MTkxMUVCOUNBRjI2N0VDNEY5QUUwMi84WW5OOFB1Zm5Ha1NrYUZHYUJuUlBFNk1s Z0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhZbk44UHVmbkdrU2thRkdhQm5SUEU2TWxnQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDc1MC8wRkE3QzZCNjJBMTkxMUVCOUNBRjI2N0VDNEY5QUUwMi84WW5OOFB1Zm5H a1NrYUZHYUJuUlBFNk1sZ0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1JZhEpkwIbMp7UKC1vFa+QTbZWvQ61w8wUU9uEq7T4Z/AzvLLFDrB 74nMmxbg64HhRzmpxLXqNfalblwo4v48GJorw+OOKBH6Vgj5wCQpNy3B3m9mpYo7 5/6VhdCoIAOwx1AceIDYykhMDqe+Uoafpqc8K5PUpHOXXPPwXR3AiAvzkUNEhXN4 ydEuSWTEy2OyGowVKYrJK+g+obX0SnPMi1lfo674OVbp565vO3XOpWR1RbPrcMNj lngw8NmH4a6obBW/jglK971EegjWEBuJK0Ni23aaluxxkP0DS2fV+si+dnmP9Sb4 mFECCm8io5a3xgvLWGxSN6du0i49GO4p -----END CERTIFICATE-----Generated at Sun Apr 27 00:14:00 2025 by rpki-client on console.sobornost.net