$ rpki-client -vvf rpki.apnic.net/member_repository/A917AAAD/E3B2B644F7C111EA8275CB66C4F9AE02/1hfUcQSCx_d1dSBX3IaCJZsxnHg.mft File: 1hfUcQSCx_d1dSBX3IaCJZsxnHg.mft (raw, json) Hash identifier: cLH79xltirxLcJ/Ee6uEnOb4Q1hYgbP5ZcVhYmCUL94= Subject key identifier: FC:34:06:B0:24:C4:CD:A8:EE:41:28:A1:A3:0C:E0:71:7E:19:26:4A Authority key identifier: D6:17:D4:71:04:82:C7:F7:75:75:20:57:DC:86:82:25:9B:31:9C:78 Certificate issuer: /CN=A917AAAD/serialNumber=D617D4710482C7F775752057DC8682259B319C78 Certificate serial: 07C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1hfUcQSCx_d1dSBX3IaCJZsxnHg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AAAD/E3B2B644F7C111EA8275CB66C4F9AE02/1hfUcQSCx_d1dSBX3IaCJZsxnHg.mft Manifest number: 07B7 Signing time: Sat 26 Apr 2025 20:52:41 +0000 Manifest this update: Sat 26 Apr 2025 20:52:40 +0000 Manifest next update: Sat 03 May 2025 20:52:40 +0000 Files and hashes: 1: 1hfUcQSCx_d1dSBX3IaCJZsxnHg.crl (hash: taJhYyVf+Ik/Y2WOvl/AEAFujfZTYiHOwx7Va2SPs7M=) 2: CB42F018F7C311EA8A722484C4F9AE02.roa (hash: zKK5aDn+ZrKrGJS54S2NjuDTAktKECh+m0VACrTa5Nk=) 3: CAB0B6B2F7C311EA8A722484C4F9AE02.roa (hash: KDUtG1J4AENbekyCq++mfX0HRm1bug372S4zxJx9wNg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AAAD/E3B2B644F7C111EA8275CB66C4F9AE02/1hfUcQSCx_d1dSBX3IaCJZsxnHg.crl rsync://rpki.apnic.net/member_repository/A917AAAD/E3B2B644F7C111EA8275CB66C4F9AE02/1hfUcQSCx_d1dSBX3IaCJZsxnHg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1hfUcQSCx_d1dSBX3IaCJZsxnHg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1989 (0x7c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AAAD, serialNumber=D617D4710482C7F775752057DC8682259B319C78 Validity Not Before: Apr 26 20:52:40 2025 GMT Not After : May 3 20:52:40 2025 GMT Subject: CN=680d4799-4e60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:7a:b4:d4:c3:02:ff:c5:e6:6a:ee:5a:9e:26: 4f:c9:06:37:54:2e:4b:a2:50:b9:11:89:2f:2c:3f: 72:17:7a:a9:05:d9:5a:c7:bd:11:91:04:1e:d0:cd: 09:6b:ec:54:6b:ec:22:39:e8:0e:af:e5:30:5a:d3: 28:4a:d5:9b:be:ed:e8:7d:d9:01:c5:ce:73:bc:39: 99:b8:08:e5:62:44:50:42:38:18:38:8a:f8:11:ee: 8e:07:ca:d0:13:b7:e2:27:c8:da:1f:2f:c3:e9:7f: e9:80:32:fe:b4:fb:67:42:23:2b:04:bb:d8:80:c0: 5e:e0:9a:e2:49:84:9e:11:89:e4:22:67:82:34:1b: ae:8e:62:24:17:d3:63:81:18:27:ea:2a:27:ce:76: 06:48:34:3e:00:50:55:4b:1c:55:1a:e6:dc:53:23: 82:a2:2d:9e:96:62:af:7c:6c:ac:97:fe:7f:96:1a: 4d:b0:f1:43:76:42:53:c1:fe:83:12:bb:a8:8a:28: c5:bd:99:a1:de:7f:c4:d9:b1:3d:a1:4c:1d:e5:a1: 81:96:63:c1:09:8f:07:1f:ec:3e:b3:89:0e:86:33: 58:76:ab:25:0c:55:73:b0:a2:ff:dd:61:b7:77:b9: 4e:93:ae:1e:43:50:b6:99:e8:62:5f:59:f4:b2:93: f8:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:34:06:B0:24:C4:CD:A8:EE:41:28:A1:A3:0C:E0:71:7E:19:26:4A X509v3 Authority Key Identifier: keyid:D6:17:D4:71:04:82:C7:F7:75:75:20:57:DC:86:82:25:9B:31:9C:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AAAD/E3B2B644F7C111EA8275CB66C4F9AE02/1hfUcQSCx_d1dSBX3IaCJZsxnHg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1hfUcQSCx_d1dSBX3IaCJZsxnHg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AAAD/E3B2B644F7C111EA8275CB66C4F9AE02/1hfUcQSCx_d1dSBX3IaCJZsxnHg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:26:28:54:52:77:ec:ba:16:3b:c4:77:60:af:5e:f7:38:6a: 41:bf:83:3b:7c:f5:98:39:14:02:04:aa:c3:bd:12:90:ea:85: 4c:96:f7:1c:d9:39:7b:37:dd:e5:4a:b5:e3:08:ae:a3:e4:a1: e5:4e:2e:9f:53:9e:ef:89:c9:95:b0:e0:a8:2a:68:f7:3d:5f: 33:f0:bf:74:2e:89:6f:da:31:5d:ab:9c:db:01:1e:dc:db:36: 46:95:18:43:d2:e3:70:fd:1b:2c:06:e7:47:dc:43:c9:83:ae: 45:e4:9d:95:cb:47:46:49:fe:54:63:42:90:63:a1:47:2a:0b: 6d:b1:0f:10:b1:c1:af:6f:a1:be:4b:eb:69:5c:00:80:f8:88: 98:c4:20:cd:a6:76:ff:1b:24:02:e6:e7:ab:d6:26:c1:df:e5: 38:78:f9:e7:31:89:3d:ba:21:74:07:a7:44:97:4b:9d:8d:bd: 4e:83:d7:f5:93:b2:e3:a9:ba:05:bf:c2:35:7a:d2:ed:78:92: 74:7c:99:31:c5:bf:49:07:07:e3:6a:23:23:e0:33:d6:b2:b6: 68:d4:06:be:77:bd:83:f0:14:66:ff:5a:b3:3a:2a:84:58:af: aa:3b:b1:8b:99:f4:ab:2a:ea:4f:29:59:08:53:a9:4d:b2:90: c1:0e:d8:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FBQUQxMTAvBgNVBAUTKEQ2MTdENDcxMDQ4MkM3Rjc3NTc1MjA1N0RDODY4MjI1 OUIzMTlDNzgwHhcNMjUwNDI2MjA1MjQwWhcNMjUwNTAzMjA1MjQwWjAYMRYwFAYD VQQDEw02ODBkNDc5OS00ZTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn3q01MMC/8Xmau5aniZPyQY3VC5LolC5EYkvLD9yF3qpBdlax70RkQQe0M0J a+xUa+wiOegOr+UwWtMoStWbvu3ofdkBxc5zvDmZuAjlYkRQQjgYOIr4Ee6OB8rQ E7fiJ8jaHy/D6X/pgDL+tPtnQiMrBLvYgMBe4JriSYSeEYnkImeCNBuujmIkF9Nj gRgn6ionznYGSDQ+AFBVSxxVGubcUyOCoi2elmKvfGysl/5/lhpNsPFDdkJTwf6D EruoiijFvZmh3n/E2bE9oUwd5aGBlmPBCY8HH+w+s4kOhjNYdqslDFVzsKL/3WG3 d7lOk64eQ1C2mehiX1n0spP4JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPw0BrAk xM2o7kEooaMM4HF+GSZKMB8GA1UdIwQYMBaAFNYX1HEEgsf3dXUgV9yGgiWbMZx4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUFBRC9FM0IyQjY0NEY3 QzExMUVBODI3NUNCNjZDNEY5QUUwMi8xaGZVY1FTQ3hfZDFkU0JYM0lhQ0pac3hu SGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFoZlVjUVNDeF9kMWRTQlgzSWFDSlpzeG5IZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUFBRC9FM0IyQjY0NEY3QzExMUVBODI3NUNCNjZDNEY5QUUwMi8xaGZVY1FTQ3hf ZDFkU0JYM0lhQ0pac3huSGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfJihUUnfsuhY7xHdgr173OGpBv4M7fPWYORQCBKrDvRKQ6oVMlvcc 2Tl7N93lSrXjCK6j5KHlTi6fU57vicmVsOCoKmj3PV8z8L90Lolv2jFdq5zbAR7c 2zZGlRhD0uNw/RssBudH3EPJg65F5J2Vy0dGSf5UY0KQY6FHKgttsQ8QscGvb6G+ S+tpXACA+IiYxCDNpnb/GyQC5uer1ibB3+U4ePnnMYk9uiF0B6dEl0udjb1Og9f1 k7LjqboFv8I1etLteJJ0fJkxxb9JBwfjaiMj4DPWsrZo1Aa+d72D8BRm/1qzOiqE WK+qO7GLmfSrKupPKVkIU6lNspDBDthG -----END CERTIFICATE-----Generated at Sun Apr 27 00:14:01 2025 by rpki-client on console.sobornost.net