$ rpki-client -vvf rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/QhgvX3GliYTOiFmuYKTKynP-g2E.mft File: QhgvX3GliYTOiFmuYKTKynP-g2E.mft (raw, json) Hash identifier: dtfvwBcqQOQ2lgg364xAXIMK5BC12+EIYRk7g3Zbxjg= Subject key identifier: B8:AC:5D:EF:D9:DB:3C:A2:88:27:83:1F:EF:40:CE:9A:51:50:A8:26 Authority key identifier: 42:18:2F:5F:71:A5:89:84:CE:88:59:AE:60:A4:CA:CA:73:FE:83:61 Certificate issuer: /CN=A916EF5E/serialNumber=42182F5F71A58984CE8859AE60A4CACA73FE8361 Certificate serial: 0FBB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QhgvX3GliYTOiFmuYKTKynP-g2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/QhgvX3GliYTOiFmuYKTKynP-g2E.mft Manifest number: 25C7 Signing time: Mon 28 Apr 2025 16:55:59 +0000 Manifest this update: Mon 28 Apr 2025 16:55:59 +0000 Manifest next update: Mon 05 May 2025 16:55:59 +0000 Files and hashes: 1: QhgvX3GliYTOiFmuYKTKynP-g2E.crl (hash: 5YovNWSNOrNHF3KPw1uXyw59fZOvwwORUWJI1MGNQ6I=) 2: 258F8662BBDF11ED8CE89144C4F9AE02.roa (hash: gR4VIke3wzcLlwcHX1MfRQDB5DCCZYAeVJopuxrfT0I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/QhgvX3GliYTOiFmuYKTKynP-g2E.crl rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/QhgvX3GliYTOiFmuYKTKynP-g2E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QhgvX3GliYTOiFmuYKTKynP-g2E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 16:55:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4027 (0xfbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EF5E, serialNumber=42182F5F71A58984CE8859AE60A4CACA73FE8361 Validity Not Before: Apr 28 16:55:59 2025 GMT Not After : May 5 16:55:59 2025 GMT Subject: CN=680fb31f-43c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ea:8a:7b:00:1b:c3:4b:b3:e2:5f:44:fe:da: be:77:3c:79:03:ef:a0:e9:bb:5f:d1:68:b6:65:36: ce:47:e8:aa:cc:d9:fd:2f:ec:15:07:e8:8b:6b:07: c8:b3:26:67:3c:cc:9a:e2:e5:3b:8b:87:b2:b7:21: 20:3f:82:c3:99:5e:9b:39:dd:f3:00:a0:97:2e:a1: 14:cf:18:3e:45:88:fd:28:ef:34:35:af:b1:67:23: 82:17:2e:ab:21:8f:35:f4:4c:ac:43:94:3c:41:d8: ef:91:ac:7b:d9:cc:c9:0c:d5:6e:44:ec:73:26:f2: bf:9d:21:54:0d:57:c4:8e:f9:2b:54:d3:6b:12:ae: a6:52:70:fd:c4:e6:1e:3f:ae:1c:7d:4e:a5:47:95: d6:a1:87:5b:89:88:c4:74:e6:ba:a7:55:83:ea:88: 08:b3:79:85:18:27:a4:81:42:92:bd:17:47:2b:25: 6b:bc:c6:22:33:ef:8f:a0:57:21:23:c5:bf:68:c1: dd:8f:33:cd:45:97:66:97:e1:aa:a2:12:22:c6:d2: c4:ba:93:56:42:32:3d:c4:ca:a2:73:73:a6:59:b8: 09:58:c2:ea:83:02:08:31:39:f8:93:2c:2f:0a:3f: 99:16:14:c3:cc:43:2b:d0:11:80:1a:aa:f8:ba:1e: 98:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:AC:5D:EF:D9:DB:3C:A2:88:27:83:1F:EF:40:CE:9A:51:50:A8:26 X509v3 Authority Key Identifier: keyid:42:18:2F:5F:71:A5:89:84:CE:88:59:AE:60:A4:CA:CA:73:FE:83:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/QhgvX3GliYTOiFmuYKTKynP-g2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QhgvX3GliYTOiFmuYKTKynP-g2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/QhgvX3GliYTOiFmuYKTKynP-g2E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:09:f9:5c:58:10:0e:a1:c8:6b:62:ea:a0:f2:4c:02:6c:ef: 99:7f:ef:12:1c:5d:66:48:38:3d:43:39:a5:bb:c2:8d:df:8e: b4:1a:10:15:33:ad:08:20:30:af:ee:e3:0e:0c:15:fd:c1:c0: 46:cb:5a:43:27:1e:1a:0d:c2:81:84:a8:e5:ef:e7:3c:3f:81: 62:22:79:a9:fe:e7:22:aa:e6:00:f7:b1:4f:7e:55:83:0e:bb: f7:7e:83:c5:0e:af:db:1d:7f:14:4a:e5:ea:a1:8f:d0:a6:25: 43:68:a3:4c:2a:f5:7f:7f:82:45:25:f3:61:e6:74:45:0d:76: e5:f1:50:55:2e:5a:8c:d9:3c:8b:b4:a2:d5:d1:4c:74:57:14: 01:3d:4f:1e:d4:7b:43:0b:bc:b4:e6:a9:fc:12:b4:4d:29:18: fc:c5:56:e8:49:04:ab:45:f5:09:12:a7:9f:35:ff:3c:3c:6d: b1:59:7a:7e:cb:78:c3:46:f5:0c:13:63:9e:24:61:d5:9c:04: b6:f3:d3:b8:01:a8:c0:eb:9b:50:93:27:d7:cf:2a:a4:cd:e2: e9:ff:f9:67:20:d8:e4:4a:06:bf:79:2f:df:c1:e2:1c:bb:4d: 3d:99:77:b2:6f:d8:b8:2c:b4:38:f6:08:d3:0b:de:e7:ff:0e: 74:be:1c:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD7swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVGNUUxMTAvBgNVBAUTKDQyMTgyRjVGNzFBNTg5ODRDRTg4NTlBRTYwQTRDQUNB NzNGRTgzNjEwHhcNMjUwNDI4MTY1NTU5WhcNMjUwNTA1MTY1NTU5WjAYMRYwFAYD VQQDEw02ODBmYjMxZi00M2MxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw+qKewAbw0uz4l9E/tq+dzx5A++g6btf0Wi2ZTbOR+iqzNn9L+wVB+iLawfI syZnPMya4uU7i4eytyEgP4LDmV6bOd3zAKCXLqEUzxg+RYj9KO80Na+xZyOCFy6r IY819EysQ5Q8Qdjvkax72czJDNVuROxzJvK/nSFUDVfEjvkrVNNrEq6mUnD9xOYe P64cfU6lR5XWoYdbiYjEdOa6p1WD6ogIs3mFGCekgUKSvRdHKyVrvMYiM++PoFch I8W/aMHdjzPNRZdml+GqohIixtLEupNWQjI9xMqic3OmWbgJWMLqgwIIMTn4kywv Cj+ZFhTDzEMr0BGAGqr4uh6YUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLisXe/Z 2zyiiCeDH+9AzppRUKgmMB8GA1UdIwQYMBaAFEIYL19xpYmEzohZrmCkyspz/oNh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUY1RS9GMzhEQ0Y4QTEw NkIxMUU4QjhDQTAyMEJDNEY5QUUwMi9RaGd2WDNHbGlZVE9pRm11WUtUS3luUC1n MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FoZ3ZYM0dsaVlUT2lGbXVZS1RLeW5QLWcyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUY1RS9GMzhEQ0Y4QTEwNkIxMUU4QjhDQTAyMEJDNEY5QUUwMi9RaGd2WDNHbGlZ VE9pRm11WUtUS3luUC1nMkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcCflcWBAOochrYuqg8kwCbO+Zf+8SHF1mSDg9Qzmlu8KN3460GhAV M60IIDCv7uMODBX9wcBGy1pDJx4aDcKBhKjl7+c8P4FiInmp/uciquYA97FPflWD Drv3foPFDq/bHX8USuXqoY/QpiVDaKNMKvV/f4JFJfNh5nRFDXbl8VBVLlqM2TyL tKLV0Ux0VxQBPU8e1HtDC7y05qn8ErRNKRj8xVboSQSrRfUJEqefNf88PG2xWXp+ y3jDRvUME2OeJGHVnAS289O4AajA65tQkyfXzyqkzeLp//lnINjkSga/eS/fweIc u009mXeyb9i4LLQ49gjTC97n/w50vhy6 -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:41 2025 by rpki-client on console.sobornost.net