$ rpki-client -vvf rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.mft File: f83sMfr6flJ9p6lwOTIED4RVgVk.mft (raw, json) Hash identifier: nMV5Asy1DchZBji9nQLlhPbWr7ZjAuQFPAozPNNcxHY= Subject key identifier: 5E:CB:94:13:48:A9:B1:51:1E:36:8C:60:A1:E5:D2:37:94:1F:61:A9 Authority key identifier: 7F:CD:EC:31:FA:FA:7E:52:7D:A7:A9:70:39:32:04:0F:84:55:81:59 Certificate issuer: /CN=A9179BF7/serialNumber=7FCDEC31FAFA7E527DA7A9703932040F84558159 Certificate serial: 02F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f83sMfr6flJ9p6lwOTIED4RVgVk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.mft Manifest number: 02D8 Signing time: Sun 27 Apr 2025 01:07:25 +0000 Manifest this update: Sun 27 Apr 2025 01:07:24 +0000 Manifest next update: Sun 04 May 2025 01:07:24 +0000 Files and hashes: 1: f83sMfr6flJ9p6lwOTIED4RVgVk.crl (hash: bU47qRMGaS/sIcNKddcRLmkJ25HrJdTdmpi5ADDpBns=) 2: 81EEF49E801711EF8566D481C4F9AE02.roa (hash: WMqw6puvAMI/KOIEmj7+KVGtQT9V3R2V9xclcYWsYsg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.crl rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f83sMfr6flJ9p6lwOTIED4RVgVk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 01:07:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 760 (0x2f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179BF7, serialNumber=7FCDEC31FAFA7E527DA7A9703932040F84558159 Validity Not Before: Apr 27 01:07:24 2025 GMT Not After : May 4 01:07:24 2025 GMT Subject: CN=680d834c-b61f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ba:20:f8:89:51:73:ec:ff:71:ed:67:f0:0e: 12:f1:db:98:d4:6c:05:51:eb:0b:51:4d:57:f7:83: 53:2e:fb:cf:cd:10:6b:dd:ba:8f:06:02:be:bd:0f: 89:c6:ab:3b:5a:5c:b9:85:de:d5:7f:bd:89:8a:fd: 41:45:92:fc:9e:65:d5:a7:73:31:e9:6b:a8:16:4e: d9:56:b1:24:19:42:b9:91:5b:c7:02:0a:f6:b1:58: f4:a9:03:d9:bc:3e:8d:ee:ce:70:c7:fd:0a:d2:97: d0:ca:01:d7:d1:3f:65:6a:47:e7:84:65:ec:50:88: db:0c:33:63:30:6e:b4:91:a0:6f:50:d6:d2:50:3c: bf:42:dd:75:76:c2:22:18:1c:b1:1c:ae:72:22:3a: f5:89:32:06:38:f6:9e:ef:30:c7:e2:71:dd:0d:c5: b3:fe:d6:e5:d7:a0:ae:14:b1:23:0c:e1:3c:c3:06: 71:60:4a:cd:2f:65:93:34:1b:f9:0e:d9:c0:bb:d3: 25:41:f6:23:eb:80:f3:72:ff:23:98:0d:ea:69:d8: 84:1b:d8:7e:02:7a:de:c8:5b:61:38:5c:a0:e9:7b: 04:9a:d0:ac:ac:7b:4a:bf:26:ab:69:eb:e6:3f:5f: 5a:67:ec:2b:2c:f9:de:58:74:40:49:cd:f3:c2:fb: cd:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:CB:94:13:48:A9:B1:51:1E:36:8C:60:A1:E5:D2:37:94:1F:61:A9 X509v3 Authority Key Identifier: keyid:7F:CD:EC:31:FA:FA:7E:52:7D:A7:A9:70:39:32:04:0F:84:55:81:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f83sMfr6flJ9p6lwOTIED4RVgVk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:0f:d3:c6:a6:13:99:c5:43:ca:64:3d:84:e8:a3:ae:54:d2: 19:cd:1b:af:25:5b:99:a0:72:a1:bc:5c:0b:e7:44:07:6d:0d: 66:30:66:15:db:23:79:c6:0d:47:34:c1:8d:b9:81:0d:e7:b8: 25:5e:22:ae:ca:3e:52:86:64:d1:98:fe:e5:b5:3e:62:91:54: 59:18:8d:57:9b:36:17:cf:32:63:28:d2:c4:d5:3d:a5:88:f6: 2b:75:af:46:02:6c:44:9e:67:f1:88:41:d3:6c:63:24:4f:d2: 15:83:60:4b:a7:43:b8:cd:16:3d:ca:64:b5:3b:74:1b:f6:b0: 81:5b:d6:bb:97:16:a0:05:dc:f6:ff:41:f7:6d:cc:cc:f4:bc: ea:f1:7b:b8:70:58:1f:ce:66:b5:45:a8:49:f7:eb:da:32:e3: 1f:fa:27:9a:b3:b3:69:58:ec:c4:c7:5d:fd:e3:3c:c3:f5:03: 9a:4d:a6:3f:ba:6d:ef:46:c9:ce:ef:7f:d5:46:f8:3d:6a:cb: 97:39:97:d9:6a:14:65:8b:3d:27:5e:75:77:d6:ee:c2:a8:8e: c4:1a:a4:74:a0:ac:48:c4:8b:c9:b0:c8:46:66:d7:9f:a4:b3: 8a:bf:fd:7a:dd:99:e4:60:0e:61:18:27:85:06:cd:e8:30:97: 51:ac:25:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlCRjcxMTAvBgNVBAUTKDdGQ0RFQzMxRkFGQTdFNTI3REE3QTk3MDM5MzIwNDBG ODQ1NTgxNTkwHhcNMjUwNDI3MDEwNzI0WhcNMjUwNTA0MDEwNzI0WjAYMRYwFAYD VQQDEw02ODBkODM0Yy1iNjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Log+IlRc+z/ce1n8A4S8duY1GwFUesLUU1X94NTLvvPzRBr3bqPBgK+vQ+J xqs7Wly5hd7Vf72Jiv1BRZL8nmXVp3Mx6WuoFk7ZVrEkGUK5kVvHAgr2sVj0qQPZ vD6N7s5wx/0K0pfQygHX0T9lakfnhGXsUIjbDDNjMG60kaBvUNbSUDy/Qt11dsIi GByxHK5yIjr1iTIGOPae7zDH4nHdDcWz/tbl16CuFLEjDOE8wwZxYErNL2WTNBv5 DtnAu9MlQfYj64Dzcv8jmA3qadiEG9h+AnreyFthOFyg6XsEmtCsrHtKvyaraevm P19aZ+wrLPneWHRASc3zwvvNawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF7LlBNI qbFRHjaMYKHl0jeUH2GpMB8GA1UdIwQYMBaAFH/N7DH6+n5SfaepcDkyBA+EVYFZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUJGNy80QjY2RjEyQ0Yy QzcxMUVDOEI4MTk2ODdDNEY5QUUwMi9mODNzTWZyNmZsSjlwNmx3T1RJRUQ0UlZn VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y4M3NNZnI2ZmxKOXA2bHdPVElFRDRSVmdWay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUJGNy80QjY2RjEyQ0YyQzcxMUVDOEI4MTk2ODdDNEY5QUUwMi9mODNzTWZyNmZs SjlwNmx3T1RJRUQ0UlZnVmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfD9PGphOZxUPKZD2E6KOuVNIZzRuvJVuZoHKhvFwL50QHbQ1mMGYV 2yN5xg1HNMGNuYEN57glXiKuyj5ShmTRmP7ltT5ikVRZGI1XmzYXzzJjKNLE1T2l iPYrda9GAmxEnmfxiEHTbGMkT9IVg2BLp0O4zRY9ymS1O3Qb9rCBW9a7lxagBdz2 /0H3bczM9Lzq8Xu4cFgfzma1RahJ9+vaMuMf+ieas7NpWOzEx1394zzD9QOaTaY/ um3vRsnO73/VRvg9asuXOZfZahRliz0nXnV31u7CqI7EGqR0oKxIxIvJsMhGZtef pLOKv/163ZnkYA5hGCeFBs3oMJdRrCXV -----END CERTIFICATE-----Generated at Sun Apr 27 05:42:09 2025 by rpki-client on console.sobornost.net