$ rpki-client -vvf rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.mft File: 7ITWD3lr9Bb4-B0Yutov_4fBXyY.mft (raw, json) Hash identifier: hzW90t+IBuwUPBggFoYG/7tV/vUVh52bJb9yA+9XXGI= Subject key identifier: DB:D5:72:7D:46:C4:38:09:C4:BE:A6:E4:35:55:87:8A:74:41:4A:78 Authority key identifier: EC:84:D6:0F:79:6B:F4:16:F8:F8:1D:18:BA:DA:2F:FF:87:C1:5F:26 Certificate issuer: /CN=A917ACF1/serialNumber=EC84D60F796BF416F8F81D18BADA2FFF87C15F26 Certificate serial: 0387 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ITWD3lr9Bb4-B0Yutov_4fBXyY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.mft Manifest number: 0380 Signing time: Sun 27 Apr 2025 00:32:41 +0000 Manifest this update: Sun 27 Apr 2025 00:32:40 +0000 Manifest next update: Sun 04 May 2025 00:32:40 +0000 Files and hashes: 1: 7ITWD3lr9Bb4-B0Yutov_4fBXyY.crl (hash: AYwxjQs8y24wkXE9MRirJBFqqHVqwStMfncr2sgREUU=) 2: 5895821AB62611ECB410C81DC4F9AE02.roa (hash: hC/jX3h+m4kRJTL+3r4qE/OapWO5r8a4N2e8hzVBff0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.crl rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ITWD3lr9Bb4-B0Yutov_4fBXyY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 00:32:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 903 (0x387) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ACF1, serialNumber=EC84D60F796BF416F8F81D18BADA2FFF87C15F26 Validity Not Before: Apr 27 00:32:40 2025 GMT Not After : May 4 00:32:40 2025 GMT Subject: CN=680d7b28-5180 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c9:e2:90:de:62:8a:b6:8d:14:6f:29:c9:ca: b8:d4:ba:05:02:24:d4:c8:a5:fd:97:b3:ed:b5:82: 95:94:8d:4b:9f:bb:6e:a6:b8:80:cb:14:6d:66:c4: c6:26:48:31:cc:6a:59:74:a3:4f:8a:0d:96:fe:f8: d2:e5:5f:3f:9d:20:da:27:94:01:71:22:1c:38:44: c2:9e:3c:35:df:2b:12:8f:03:66:c1:01:4a:c1:f1: 7c:40:d6:d5:52:e5:ae:13:65:67:2c:46:dd:da:12: 0e:22:fd:e5:64:47:7d:d5:19:b8:82:c1:c5:fc:25: ee:26:e5:ea:c2:cc:bd:dc:16:38:c5:98:53:06:d8: 68:f3:f2:3d:09:f2:e6:e7:a7:f9:78:cb:04:6e:ec: a3:6d:e1:e0:c2:f6:00:b4:ab:17:a2:76:f4:0c:90: 9b:56:a2:48:98:2d:67:66:14:a3:ba:79:43:8b:29: 80:1f:88:79:16:9e:f6:9f:6b:1f:6f:ad:47:c9:fc: a9:d0:fc:6e:e8:ba:48:ee:84:b0:33:78:0f:7a:d1: dc:8c:03:87:b0:2f:27:3a:a1:73:5c:79:85:0f:a8: 24:7d:8c:8e:d0:ef:44:8f:1c:d2:19:29:3c:33:a9: 8f:e4:75:05:4d:7e:f6:ce:d3:f0:68:3b:69:71:cf: 1f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:D5:72:7D:46:C4:38:09:C4:BE:A6:E4:35:55:87:8A:74:41:4A:78 X509v3 Authority Key Identifier: keyid:EC:84:D6:0F:79:6B:F4:16:F8:F8:1D:18:BA:DA:2F:FF:87:C1:5F:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ITWD3lr9Bb4-B0Yutov_4fBXyY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:4f:d8:8b:09:24:aa:6c:51:a1:e1:6c:20:39:1d:76:dc:4e: 14:dd:f6:fc:80:6e:5b:16:0b:ae:a1:49:b0:04:58:a3:59:7d: a0:52:9b:2f:8d:00:b9:fe:b7:2e:d3:0b:16:86:f7:af:b6:71: 86:18:2b:eb:e1:14:c2:6b:c8:be:6f:63:78:ae:c5:08:d8:d8: 31:f3:f8:7e:21:6e:bc:90:d6:83:8b:14:05:97:a3:3e:a7:4d: 13:eb:59:e2:2f:6d:31:5e:96:bf:4f:a1:dd:74:cf:b2:75:95: 61:48:f8:c7:bc:17:6c:34:8d:5e:85:4c:15:fd:72:8e:a9:7d: 8e:40:db:3e:70:24:9f:36:72:e1:8f:80:ad:43:b4:f2:a3:84: 67:71:77:ac:05:27:4d:0c:0e:5c:e7:7a:d6:d6:8b:c7:af:ff: a3:43:fd:43:d8:7e:cc:ef:d5:a9:03:30:8e:45:0a:d7:da:60: 22:3a:4a:ec:84:83:71:72:63:26:e9:ed:63:77:49:f2:08:f3: 53:84:52:ca:b4:57:b8:b7:4c:55:90:88:ee:50:2c:4b:d0:15: 58:c9:5a:8d:be:9d:3f:99:49:23:cd:46:0f:d6:3d:f8:d1:a6: 89:cd:93:cb:5b:c6:a8:0b:28:36:ea:56:ca:02:df:2a:fb:88: d1:97:10:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FDRjExMTAvBgNVBAUTKEVDODRENjBGNzk2QkY0MTZGOEY4MUQxOEJBREEyRkZG ODdDMTVGMjYwHhcNMjUwNDI3MDAzMjQwWhcNMjUwNTA0MDAzMjQwWjAYMRYwFAYD VQQDEw02ODBkN2IyOC01MTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxcnikN5iiraNFG8pycq41LoFAiTUyKX9l7PttYKVlI1Ln7tupriAyxRtZsTG JkgxzGpZdKNPig2W/vjS5V8/nSDaJ5QBcSIcOETCnjw13ysSjwNmwQFKwfF8QNbV UuWuE2VnLEbd2hIOIv3lZEd91Rm4gsHF/CXuJuXqwsy93BY4xZhTBtho8/I9CfLm 56f5eMsEbuyjbeHgwvYAtKsXonb0DJCbVqJImC1nZhSjunlDiymAH4h5Fp72n2sf b61Hyfyp0Pxu6LpI7oSwM3gPetHcjAOHsC8nOqFzXHmFD6gkfYyO0O9EjxzSGSk8 M6mP5HUFTX72ztPwaDtpcc8ftQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNvVcn1G xDgJxL6m5DVVh4p0QUp4MB8GA1UdIwQYMBaAFOyE1g95a/QW+PgdGLraL/+HwV8m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUNGMS84NjgzNTUwNkEw MzkxMUVDOEExRjFDMjNDNEY5QUUwMi83SVRXRDNscjlCYjQtQjBZdXRvdl80ZkJY eVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdJVFdEM2xyOUJiNC1CMFl1dG92XzRmQlh5WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUNGMS84NjgzNTUwNkEwMzkxMUVDOEExRjFDMjNDNEY5QUUwMi83SVRXRDNscjlC YjQtQjBZdXRvdl80ZkJYeVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFT9iLCSSqbFGh4WwgOR123E4U3fb8gG5bFguuoUmwBFijWX2gUpsv jQC5/rcu0wsWhvevtnGGGCvr4RTCa8i+b2N4rsUI2Ngx8/h+IW68kNaDixQFl6M+ p00T61niL20xXpa/T6HddM+ydZVhSPjHvBdsNI1ehUwV/XKOqX2OQNs+cCSfNnLh j4CtQ7Tyo4RncXesBSdNDA5c53rW1ovHr/+jQ/1D2H7M79WpAzCORQrX2mAiOkrs hINxcmMm6e1jd0nyCPNThFLKtFe4t0xVkIjuUCxL0BVYyVqNvp0/mUkjzUYP1j34 0aaJzZPLW8aoCyg26lbKAt8q+4jRlxCv -----END CERTIFICATE-----Generated at Sun Apr 27 05:42:09 2025 by rpki-client on console.sobornost.net