$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft File: gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft (raw, json) Hash identifier: 8WBLCsJt3FSFCdqYgpURy4/Vw5RoY/xNeiIyvUsMuvQ= Subject key identifier: 78:A6:A9:98:D4:5D:6F:05:05:25:E4:88:BF:82:86:FB:AF:70:07:70 Authority key identifier: 80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB Certificate issuer: /CN=A917B4BF/serialNumber=8035090A057327E1200593C20C88C519A45C9ECB Certificate serial: 0406 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft Manifest number: 03DD Signing time: Fri 25 Apr 2025 00:25:34 +0000 Manifest this update: Fri 25 Apr 2025 00:25:34 +0000 Manifest next update: Fri 02 May 2025 00:25:34 +0000 Files and hashes: 1: gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl (hash: aUAbFt5W2AIeTO8Y9m40V+UTi2wAHIu6NKpOav14Nn4=) 2: 44B11A52CAEE11ECBC0B2B7EC4F9AE02.roa (hash: nTBaw0rGVih7H0eMNeUxYSZWJEjBLwFwXSTskNS1M34=) 3: 8F9CB4448F3511ECB2182782C4F9AE02.roa (hash: dOvAjf7RAVetavYFS5Luk51Mj5sbART3WqfDlwnlFcs=) 4: 609BCC763D9311EE9B7BB945C4F9AE02.roa (hash: 4nZdHogouXv845c2l3vfkGTuWxNMa8pAfMwGWm9kiHw=) 5: F255CD0A5EC411ED810B8584C4F9AE02.roa (hash: auW4UnHxJ31+muxSOzUSAXH6xyqbP7eemMf3Mu9GQdY=) 6: 6873616CCAE811ECBB89015FC4F9AE02.roa (hash: lojbrXlAbJoktTwfX33XLdufJ12kkKQ5GKXYlfuRCPs=) 7: A5D75708E07111ED9601E941C4F9AE02.roa (hash: T8SCzZDhPByBJIpznoraQVY/oHtUVPl/FFL0kEBzTiU=) 8: 21ECD84A856011EC924B3E58C4F9AE02.roa (hash: vx+toULPOCZ0nASP5Ye7Mi6PO9RJnf/5+aW7CpW+qSo=) 9: 64782D1E607E11ED9CD7EF0FC4F9AE02.roa (hash: OgDcSpfZCaRldmBrtsqxGYkV57RYdOEs5Zd3oOYd/XU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:25:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1030 (0x406) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B4BF, serialNumber=8035090A057327E1200593C20C88C519A45C9ECB Validity Not Before: Apr 25 00:25:34 2025 GMT Not After : May 2 00:25:34 2025 GMT Subject: CN=680ad67e-c299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:37:88:a6:22:05:fa:5a:19:3b:d1:7d:3e:3d: 7c:34:24:ab:24:4d:16:fa:c4:af:8e:a6:5e:26:9a: ef:88:83:73:7f:bf:c6:96:4a:66:94:0d:82:af:e4: 20:14:0c:e1:3e:bf:41:50:53:dc:a5:ba:a5:d1:14: 82:73:d5:f7:c0:8d:ee:da:c2:4c:1e:7d:29:c1:57: 71:b1:f1:0c:c1:87:2a:bf:1b:52:7d:b2:de:15:17: bf:02:b8:dc:1c:71:a4:dc:a2:20:22:cd:87:f6:a6: c0:b5:18:f7:5f:33:9d:e2:3b:a0:14:ae:8d:13:f6: 67:c5:36:cd:8f:7d:6c:03:ab:7f:a1:c0:6a:c2:dd: 68:df:ed:ad:5b:a5:f7:e0:af:e7:6b:af:c2:fa:c3: 77:44:6d:bb:c8:36:54:58:1e:1f:7a:fd:c2:2e:65: b7:72:8e:37:01:ee:52:3f:44:66:95:8d:3f:f4:b6: 85:1a:62:06:04:e4:03:8d:1a:f2:df:4f:4e:7a:f9: 38:0b:c5:ef:6b:1b:70:4c:85:55:cb:fe:3a:c5:d3: 59:be:0e:1f:30:36:d4:8d:a8:50:b4:96:c8:b4:5f: 54:db:8e:98:7b:58:1f:ee:a1:93:af:b5:24:2d:55: a8:c5:e1:64:d1:97:10:e8:f1:9a:c0:a0:4c:26:00: 74:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:A6:A9:98:D4:5D:6F:05:05:25:E4:88:BF:82:86:FB:AF:70:07:70 X509v3 Authority Key Identifier: keyid:80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:4b:f6:b2:b7:25:10:5e:4e:f2:97:cb:72:bd:da:fc:8e:cd: 6e:61:77:fe:88:70:b2:98:7f:73:9d:79:95:b0:7f:51:11:a5: a6:c0:35:5a:78:cd:c7:05:c6:4c:ef:3e:75:4f:0b:d6:88:1c: 32:8e:11:d1:23:2d:3c:ea:f8:1a:4e:81:a1:dc:fd:c6:f1:21: dc:d1:b8:41:53:6a:52:b3:9f:21:8f:58:ea:fd:ba:2f:35:09: 55:28:fa:f0:4a:f0:e7:3d:77:ec:06:81:c8:b2:4d:c8:af:35: b8:8f:7b:ee:77:ea:61:7c:17:1d:6c:de:4c:c7:2f:d1:ed:44: 92:18:83:86:27:da:1f:38:6b:2b:29:c2:50:c1:ab:f9:93:af: d7:0d:d8:82:56:d6:fd:ce:0b:23:21:d5:72:dd:61:1b:06:a2: 4a:3b:78:c7:ee:7a:9c:d1:0e:bf:5d:25:44:d9:97:13:1c:92: cc:98:93:04:75:4b:e0:b7:63:af:84:e1:f9:95:bd:7e:db:fe: 39:21:27:f1:0f:12:16:b1:cc:54:ab:93:f1:06:6d:78:5e:3a: 74:6e:26:41:9f:5d:2d:98:25:f1:5c:33:97:90:e1:73:ba:90: f0:39:36:55:81:03:48:a0:ce:04:96:73:a4:1f:66:cc:c3:fc: 1d:74:74:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I0QkYxMTAvBgNVBAUTKDgwMzUwOTBBMDU3MzI3RTEyMDA1OTNDMjBDODhDNTE5 QTQ1QzlFQ0IwHhcNMjUwNDI1MDAyNTM0WhcNMjUwNTAyMDAyNTM0WjAYMRYwFAYD VQQDEw02ODBhZDY3ZS1jMjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqDeIpiIF+loZO9F9Pj18NCSrJE0W+sSvjqZeJprviINzf7/GlkpmlA2Cr+Qg FAzhPr9BUFPcpbql0RSCc9X3wI3u2sJMHn0pwVdxsfEMwYcqvxtSfbLeFRe/Arjc HHGk3KIgIs2H9qbAtRj3XzOd4jugFK6NE/ZnxTbNj31sA6t/ocBqwt1o3+2tW6X3 4K/na6/C+sN3RG27yDZUWB4fev3CLmW3co43Ae5SP0RmlY0/9LaFGmIGBOQDjRry 309Oevk4C8XvaxtwTIVVy/46xdNZvg4fMDbUjahQtJbItF9U246Ye1gf7qGTr7Uk LVWoxeFk0ZcQ6PGawKBMJgB0mQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHimqZjU XW8FBSXkiL+ChvuvcAdwMB8GA1UdIwQYMBaAFIA1CQoFcyfhIAWTwgyIxRmkXJ7L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjRCRi9COENDNjkzQzg1 NUMxMUVDOEUzQ0JCNTFDNEY5QUUwMi9nRFVKQ2dWekotRWdCWlBDRElqRkdhUmNu c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dEVUpDZ1Z6Si1FZ0JaUENESWpGR2FSY25zcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjRCRi9COENDNjkzQzg1NUMxMUVDOEUzQ0JCNTFDNEY5QUUwMi9nRFVKQ2dWekot RWdCWlBDRElqRkdhUmNuc3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClS/aytyUQXk7yl8tyvdr8js1uYXf+iHCymH9znXmVsH9REaWmwDVa eM3HBcZM7z51TwvWiBwyjhHRIy086vgaToGh3P3G8SHc0bhBU2pSs58hj1jq/bov NQlVKPrwSvDnPXfsBoHIsk3IrzW4j3vud+phfBcdbN5Mxy/R7USSGIOGJ9ofOGsr KcJQwav5k6/XDdiCVtb9zgsjIdVy3WEbBqJKO3jH7nqc0Q6/XSVE2ZcTHJLMmJME dUvgt2OvhOH5lb1+2/45ISfxDxIWscxUq5PxBm14Xjp0biZBn10tmCXxXDOXkOFz upDwOTZVgQNIoM4ElnOkH2bMw/wddHSK -----END CERTIFICATE-----Generated at Fri Apr 25 08:24:01 2025 by rpki-client on console.sobornost.net