$ rpki-client -vvf rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.mft File: r2cTLYN9V2__d3Ino3JdYB7ZEF0.mft (raw, json) Hash identifier: VSBDCWTat82V9IWPAaeNEI2/WeoSX5B2htCyCLb8bv8= Subject key identifier: B5:61:D4:98:91:E5:E5:C8:D7:1C:E1:F9:77:4B:2B:91:47:2E:46:12 Authority key identifier: AF:67:13:2D:83:7D:57:6F:FF:77:72:27:A3:72:5D:60:1E:D9:10:5D Certificate issuer: /CN=A917414E/serialNumber=AF67132D837D576FFF777227A3725D601ED9105D Certificate serial: 02E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2cTLYN9V2__d3Ino3JdYB7ZEF0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.mft Manifest number: 02D9 Signing time: Sun 27 Apr 2025 01:01:22 +0000 Manifest this update: Sun 27 Apr 2025 01:01:21 +0000 Manifest next update: Sun 04 May 2025 01:01:21 +0000 Files and hashes: 1: r2cTLYN9V2__d3Ino3JdYB7ZEF0.crl (hash: gasVBqGZIWYvK4P2UunS/JG1mvbJ27xTw/XQT71jP48=) 2: 41C460BE1BE911ED81DB667EC4F9AE02.roa (hash: F2rD9DTyJO/8KZY6J1+Hne/amu0UrQKM61Lrb0l7cz8=) 3: 67E15AC4E40611EC8410A53CC4F9AE02.roa (hash: VQEy4E57oyCsilPS/N4eVIUrZJ0xe1SQnIjV1RgzS+k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.crl rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2cTLYN9V2__d3Ino3JdYB7ZEF0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 01:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 742 (0x2e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917414E, serialNumber=AF67132D837D576FFF777227A3725D601ED9105D Validity Not Before: Apr 27 01:01:21 2025 GMT Not After : May 4 01:01:21 2025 GMT Subject: CN=680d81e2-7d55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2d:a9:0b:97:e7:5d:da:a2:08:fd:cd:ae:92: eb:26:74:f3:7b:73:eb:43:b8:d6:4d:14:46:3b:13: 40:4c:a7:2f:88:99:53:80:ec:8a:4b:42:28:d5:1c: 3e:b2:4c:ec:52:d4:9e:36:a4:66:ee:6c:e0:76:d7: ff:5b:ed:7d:3a:94:83:bd:1b:f0:cd:13:85:a1:8a: 24:ef:fb:d0:39:84:87:89:eb:61:2d:00:e2:28:e9: d7:45:51:8d:e5:d8:0d:63:96:f4:d5:5d:f9:e4:ec: 2d:89:0a:2b:bf:a8:7e:0a:e5:ae:8b:65:d1:42:43: 5e:52:eb:b5:61:84:31:85:58:0d:d9:e0:44:5c:4a: ad:09:7e:71:71:bf:2b:05:39:e1:ef:b6:61:97:a3: 80:0e:3e:12:9e:1c:59:ab:12:47:1e:85:e2:d1:9f: 97:b9:5a:99:0a:23:5d:0b:98:8b:5c:50:f5:b3:6f: 2a:4e:14:5a:0e:4b:e9:32:33:85:f8:44:eb:55:5f: a3:0f:09:cb:59:ac:5c:5b:91:33:a6:be:35:05:ba: 61:90:58:c4:3c:ee:87:7a:12:33:53:6c:40:cd:8f: 03:b7:d2:68:36:1a:97:b0:04:2a:88:d9:e5:0d:57: eb:13:ec:ff:ec:70:6e:a0:7c:01:ad:d8:fa:24:91: 54:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:61:D4:98:91:E5:E5:C8:D7:1C:E1:F9:77:4B:2B:91:47:2E:46:12 X509v3 Authority Key Identifier: keyid:AF:67:13:2D:83:7D:57:6F:FF:77:72:27:A3:72:5D:60:1E:D9:10:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2cTLYN9V2__d3Ino3JdYB7ZEF0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:e6:8f:a1:69:17:64:9d:e1:37:af:eb:c0:8e:89:29:7f:35: 20:af:d4:97:49:ed:31:88:35:8f:b0:35:06:d8:e9:ce:92:eb: 1a:85:f4:d6:a8:ae:10:68:9c:2f:15:7d:c3:eb:05:db:a0:9d: 43:5a:14:b0:ce:c7:8c:24:19:78:47:74:f5:ad:db:f5:94:20: 05:70:0b:9d:25:dd:40:2b:b1:53:a6:23:c7:73:b2:b9:83:bb: 35:9f:92:59:c6:99:61:bb:95:b0:b5:bd:f3:f2:85:9c:b1:27: 34:90:c3:bc:70:85:0c:f4:65:71:31:81:88:41:79:72:dd:fb: c7:1d:4c:11:ee:af:5f:5b:70:57:ec:52:0c:fd:84:01:bd:45: c2:c3:46:cd:a5:41:cf:76:25:73:a6:7c:b3:ea:60:3d:66:aa: 53:1c:00:25:46:db:f4:af:50:40:ff:df:0f:93:3d:f8:34:a4: 7f:d4:c7:f4:05:43:df:73:fb:7c:af:a5:e4:a9:c7:a2:e6:48: ed:f7:2c:96:8f:5b:00:9b:5d:af:bb:a6:c4:3c:a4:e5:ac:d6: 0d:c2:dd:a7:18:c8:75:28:28:86:a1:e6:7c:a3:51:86:5d:38: 30:66:dc:cd:4c:09:9b:5f:a9:41:f9:40:7f:c2:cb:24:9b:3a: 7f:e2:aa:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAuYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQxNEUxMTAvBgNVBAUTKEFGNjcxMzJEODM3RDU3NkZGRjc3NzIyN0EzNzI1RDYw MUVEOTEwNUQwHhcNMjUwNDI3MDEwMTIxWhcNMjUwNTA0MDEwMTIxWjAYMRYwFAYD VQQDEw02ODBkODFlMi03ZDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1y2pC5fnXdqiCP3NrpLrJnTze3PrQ7jWTRRGOxNATKcviJlTgOyKS0Io1Rw+ skzsUtSeNqRm7mzgdtf/W+19OpSDvRvwzROFoYok7/vQOYSHiethLQDiKOnXRVGN 5dgNY5b01V355OwtiQorv6h+CuWui2XRQkNeUuu1YYQxhVgN2eBEXEqtCX5xcb8r BTnh77Zhl6OADj4SnhxZqxJHHoXi0Z+XuVqZCiNdC5iLXFD1s28qThRaDkvpMjOF +ETrVV+jDwnLWaxcW5Ezpr41BbphkFjEPO6HehIzU2xAzY8Dt9JoNhqXsAQqiNnl DVfrE+z/7HBuoHwBrdj6JJFUjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLVh1JiR 5eXI1xzh+XdLK5FHLkYSMB8GA1UdIwQYMBaAFK9nEy2DfVdv/3dyJ6NyXWAe2RBd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDE0RS80QzVFMkZCOEUz RkYxMUVDQUMyMTA1NzJDNEY5QUUwMi9yMmNUTFlOOVYyX19kM0lubzNKZFlCN1pF RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IyY1RMWU45VjJfX2QzSW5vM0pkWUI3WkVGMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDE0RS80QzVFMkZCOEUzRkYxMUVDQUMyMTA1NzJDNEY5QUUwMi9yMmNUTFlOOVYy X19kM0lubzNKZFlCN1pFRjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDK5o+haRdkneE3r+vAjokpfzUgr9SXSe0xiDWPsDUG2OnOkusahfTW qK4QaJwvFX3D6wXboJ1DWhSwzseMJBl4R3T1rdv1lCAFcAudJd1AK7FTpiPHc7K5 g7s1n5JZxplhu5Wwtb3z8oWcsSc0kMO8cIUM9GVxMYGIQXly3fvHHUwR7q9fW3BX 7FIM/YQBvUXCw0bNpUHPdiVzpnyz6mA9ZqpTHAAlRtv0r1BA/98Pkz34NKR/1Mf0 BUPfc/t8r6Xkqcei5kjt9yyWj1sAm12vu6bEPKTlrNYNwt2nGMh1KCiGoeZ8o1GG XTgwZtzNTAmbX6lB+UB/wsskmzp/4qqq -----END CERTIFICATE-----Generated at Sun Apr 27 05:42:04 2025 by rpki-client on console.sobornost.net