$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft File: FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft (raw, json) Hash identifier: BkkjLT+WxphiXFuCVPuugoVDx/AK+/QDeXf92bRzrfo= Subject key identifier: 8C:68:D7:2A:47:50:52:25:A1:56:27:AB:54:58:25:40:ED:CA:AE:A8 Authority key identifier: 14:47:D4:4B:49:F7:90:6D:C6:37:31:A5:D9:8D:85:2E:C1:0B:77:45 Certificate issuer: /CN=A9173CF2/serialNumber=1447D44B49F7906DC63731A5D98D852EC10B7745 Certificate serial: 0655 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEfUS0n3kG3GNzGl2Y2FLsELd0U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft Manifest number: 0650 Signing time: Sat 26 Apr 2025 22:09:56 +0000 Manifest this update: Sat 26 Apr 2025 22:09:55 +0000 Manifest next update: Sat 03 May 2025 22:09:55 +0000 Files and hashes: 1: FEfUS0n3kG3GNzGl2Y2FLsELd0U.crl (hash: gty8eQgPY6ysdASXp2B/ykrrJS33+0TgQc+eTz+ocKM=) 2: D9E7CFF681EF11EBAEE9D17AC4F9AE02.roa (hash: ZbglDjurwe6qJhjv9yc/alHsSUDwI/+N2E8sYgdY/Mk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.crl rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEfUS0n3kG3GNzGl2Y2FLsELd0U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 22:09:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1621 (0x655) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173CF2, serialNumber=1447D44B49F7906DC63731A5D98D852EC10B7745 Validity Not Before: Apr 26 22:09:55 2025 GMT Not After : May 3 22:09:55 2025 GMT Subject: CN=680d59b3-5500 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e6:14:c5:a5:85:08:69:46:11:84:a9:7c:25: c8:80:af:e5:dd:dd:31:bc:1c:9e:36:c9:08:3e:40: c6:de:d2:53:0c:ad:0c:fb:ad:c7:e0:f5:5b:c7:34: 5b:0f:d5:96:54:a6:4f:51:ef:a7:53:8a:00:57:b2: 4f:59:22:6d:ee:01:ca:90:a5:c9:a9:aa:29:d2:28: 13:e5:3b:7a:f0:2b:07:d6:62:e3:07:a0:9d:98:d6: 7a:c6:09:f0:92:aa:36:3d:a0:4b:97:50:5b:63:d5: 04:2c:2c:8e:ec:ee:9b:27:d6:41:30:07:fb:be:2f: d9:30:10:81:27:d9:6c:08:a5:ee:c8:b8:77:a9:b9: 25:12:13:8b:06:ee:e9:3a:36:ae:4e:dd:04:00:e1: fa:2d:02:cd:db:15:6e:8e:30:14:d9:63:c2:0d:30: 5f:ef:93:71:f2:22:b7:f9:05:f0:58:59:56:f0:2a: eb:74:91:3f:5d:6b:ae:a1:45:ce:a4:b8:ce:63:bb: 87:b8:90:53:02:00:67:a6:35:76:5c:fc:03:e8:69: 77:34:df:88:82:2a:84:ca:66:4d:2f:cf:04:47:5e: 0c:f0:39:a0:80:3e:fd:0d:03:a3:32:d7:25:ca:60: 3c:b7:c6:cc:7f:d8:0b:eb:3a:2a:61:28:63:34:e5: 94:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:68:D7:2A:47:50:52:25:A1:56:27:AB:54:58:25:40:ED:CA:AE:A8 X509v3 Authority Key Identifier: keyid:14:47:D4:4B:49:F7:90:6D:C6:37:31:A5:D9:8D:85:2E:C1:0B:77:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEfUS0n3kG3GNzGl2Y2FLsELd0U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:db:49:65:03:0b:04:b1:cb:00:13:f7:51:e8:33:a9:ad:a9: 56:ad:32:39:6c:98:a1:2c:9d:67:f5:2f:c7:0a:3f:70:54:16: cf:af:1c:a1:a4:19:b3:35:f5:fb:2d:9e:24:10:3b:cf:49:7e: bf:13:c5:a3:2a:68:9e:1e:15:e6:59:cf:0e:b8:15:c9:16:af: 45:5e:dd:b2:5a:24:1f:5c:67:72:9e:20:37:18:3a:a8:05:e9: a2:88:34:70:ce:98:69:e8:e3:ee:f4:e0:09:20:4a:42:6d:13: ea:2d:ad:50:6b:5f:a8:5a:ab:4c:8e:c8:0b:11:d8:4e:6a:73: 01:26:e6:c2:33:86:ff:36:b8:f1:c0:8f:9f:a7:dc:38:00:c0: ea:fc:27:c3:b0:a2:c2:60:a4:56:73:24:38:7c:fd:2b:a8:ef: 36:aa:30:2d:c1:aa:a2:1c:0d:ce:bf:29:00:c1:b1:42:9f:36: a6:d9:c6:36:b1:3e:3f:5a:6e:0d:e9:49:f2:6e:c2:1d:d2:0d: a1:14:ff:28:38:d4:46:3b:48:7b:50:e7:ae:95:58:31:4f:ba: 28:89:1f:4f:46:57:38:28:a8:f3:9c:2a:91:02:85:cc:fd:71: c6:fe:d9:4b:d4:d8:e8:e9:28:2d:83:47:85:fa:b4:87:98:d0: 46:fd:a2:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNDRjIxMTAvBgNVBAUTKDE0NDdENDRCNDlGNzkwNkRDNjM3MzFBNUQ5OEQ4NTJF QzEwQjc3NDUwHhcNMjUwNDI2MjIwOTU1WhcNMjUwNTAzMjIwOTU1WjAYMRYwFAYD VQQDEw02ODBkNTliMy01NTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApuYUxaWFCGlGEYSpfCXIgK/l3d0xvByeNskIPkDG3tJTDK0M+63H4PVbxzRb D9WWVKZPUe+nU4oAV7JPWSJt7gHKkKXJqaop0igT5Tt68CsH1mLjB6CdmNZ6xgnw kqo2PaBLl1BbY9UELCyO7O6bJ9ZBMAf7vi/ZMBCBJ9lsCKXuyLh3qbklEhOLBu7p OjauTt0EAOH6LQLN2xVujjAU2WPCDTBf75Nx8iK3+QXwWFlW8CrrdJE/XWuuoUXO pLjOY7uHuJBTAgBnpjV2XPwD6Gl3NN+IgiqEymZNL88ER14M8DmggD79DQOjMtcl ymA8t8bMf9gL6zoqYShjNOWUxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIxo1ypH UFIloVYnq1RYJUDtyq6oMB8GA1UdIwQYMBaAFBRH1EtJ95BtxjcxpdmNhS7BC3dF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0NGMi8xQUU5MDM0Njgx RUUxMUVCQkUzNTQ5NUZDNEY5QUUwMi9GRWZVUzBuM2tHM0dOekdsMlkyRkxzRUxk MFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZFZlVTMG4za0czR056R2wyWTJGTHNFTGQwVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0NGMi8xQUU5MDM0NjgxRUUxMUVCQkUzNTQ5NUZDNEY5QUUwMi9GRWZVUzBuM2tH M0dOekdsMlkyRkxzRUxkMFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBr20llAwsEscsAE/dR6DOpralWrTI5bJihLJ1n9S/HCj9wVBbPrxyh pBmzNfX7LZ4kEDvPSX6/E8WjKmieHhXmWc8OuBXJFq9FXt2yWiQfXGdyniA3GDqo BemiiDRwzphp6OPu9OAJIEpCbRPqLa1Qa1+oWqtMjsgLEdhOanMBJubCM4b/Nrjx wI+fp9w4AMDq/CfDsKLCYKRWcyQ4fP0rqO82qjAtwaqiHA3OvykAwbFCnzam2cY2 sT4/Wm4N6UnybsId0g2hFP8oONRGO0h7UOeulVgxT7ooiR9PRlc4KKjznCqRAoXM /XHG/tlL1Njo6Sgtg0eF+rSHmNBG/aIH -----END CERTIFICATE-----Generated at Sun Apr 27 05:42:04 2025 by rpki-client on console.sobornost.net