$ rpki-client -vvf rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft File: cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft (raw, json) Hash identifier: ao4CmkMxcD3KUO8utFpG8l/W1IaZZzSUZUD1349Ljkc= Subject key identifier: BC:43:AD:E5:EB:65:CC:80:24:A4:67:93:94:A1:A5:4F:46:D4:FB:DA Authority key identifier: 70:2F:A1:AE:96:82:B2:B2:2E:CD:D9:A5:30:12:F0:E6:F1:BA:1B:9C Certificate issuer: /CN=A917B540/serialNumber=702FA1AE9682B2B22ECDD9A53012F0E6F1BA1B9C Certificate serial: 0173 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft Manifest number: 016F Signing time: Sun 27 Apr 2025 02:50:48 +0000 Manifest this update: Sun 27 Apr 2025 02:50:48 +0000 Manifest next update: Sun 04 May 2025 02:50:48 +0000 Files and hashes: 1: cC-hrpaCsrIuzdmlMBLw5vG6G5w.crl (hash: cCbq8Ty05XQMhfqWxnr+kStFKQ6ZrGHZN7P6DR1y8iY=) 2: 1966C856FB9E11ED8309FC1DC4F9AE02.roa (hash: jsmEuKgoeYiJY/PhkO97a7NHRngriTFFOmRBgoLfjbw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.crl rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 371 (0x173) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B540, serialNumber=702FA1AE9682B2B22ECDD9A53012F0E6F1BA1B9C Validity Not Before: Apr 27 02:50:48 2025 GMT Not After : May 4 02:50:48 2025 GMT Subject: CN=680d9b88-2293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fd:8f:5e:29:80:6a:16:6e:80:1a:7e:9c:67: 23:1e:a9:fb:d6:81:11:df:9d:97:f0:b6:1a:3d:32: 7f:4b:4b:31:c3:c0:28:b3:2c:c5:ce:d3:1d:d6:ab: 69:35:a5:4c:40:a4:a3:fd:ea:45:0b:f9:da:52:03: cb:72:3b:dc:45:08:67:98:97:06:ee:9b:2f:09:87: a0:3e:ec:88:e0:f8:f8:e0:01:a7:b6:17:39:d6:01: 5c:3c:ac:93:2a:cd:93:f0:38:8a:c5:c3:c4:b6:05: 25:a2:94:e5:c4:d5:9f:8e:61:97:b8:e4:01:79:60: 78:05:15:86:44:2a:dc:14:8e:e7:c4:7c:cf:9a:12: d9:c2:b3:41:86:4b:b3:2d:53:51:15:fd:46:cc:2d: 21:c0:f4:7b:82:9f:4c:a2:9b:8a:56:14:ce:a3:b8: 2d:52:d9:6d:e5:be:fa:3c:9d:f4:04:27:9e:3e:c3: 3c:55:59:f7:a6:e6:b4:cf:8f:06:f5:b2:cb:c8:87: 2e:f1:72:38:ca:7d:04:5b:d0:14:b0:f6:8f:19:e1: 96:b6:07:c9:b9:af:4e:9c:c8:d0:1f:38:e8:51:63: 32:04:06:18:27:b6:6c:db:36:ae:1c:e1:8b:06:47: 8d:b4:a6:03:bd:38:c1:93:61:19:66:d5:3b:f3:d9: 59:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:43:AD:E5:EB:65:CC:80:24:A4:67:93:94:A1:A5:4F:46:D4:FB:DA X509v3 Authority Key Identifier: keyid:70:2F:A1:AE:96:82:B2:B2:2E:CD:D9:A5:30:12:F0:E6:F1:BA:1B:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:e9:78:74:e7:d4:a6:3a:28:38:df:f5:89:08:c2:c6:3c:06: f3:c3:75:31:a7:30:d5:e4:ea:1f:6e:6f:0d:50:07:3c:6f:09: 0e:27:f6:59:25:2b:bf:5f:87:72:e3:a4:54:c3:81:54:d3:81: 8a:f1:c4:a0:28:09:a7:5d:1a:dd:4d:13:c7:32:3b:82:86:75: 6e:6c:88:13:a6:69:20:ee:b5:8a:f6:47:25:cc:ff:6a:7c:03: 83:80:9f:88:8b:77:73:04:ef:05:3d:bb:e3:0e:eb:27:a8:70: b6:43:43:24:8c:53:b9:e9:00:05:99:08:e6:5c:b0:cf:82:1f: 64:17:31:e9:77:e2:2f:f1:d6:ed:75:52:ec:4b:dc:3a:64:18: b5:36:63:f4:67:f6:c8:18:dd:39:98:e0:10:b9:58:26:c5:05: e8:e8:98:1d:ce:41:56:28:68:5c:44:3d:52:28:5b:ad:5e:78: 29:14:57:27:50:c1:f9:fa:f1:c9:a0:78:29:86:6d:48:75:7b: 38:64:2b:60:39:ce:63:27:7f:79:17:9d:46:a3:bc:da:e7:36: 99:75:94:23:f1:ca:3c:96:1b:7a:da:ca:d4:cf:be:ec:1c:89: 1b:33:a0:ea:ab:3f:7d:fa:9c:23:7a:2d:94:d6:8d:41:42:d8: 7a:df:90:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1NDAxMTAvBgNVBAUTKDcwMkZBMUFFOTY4MkIyQjIyRUNERDlBNTMwMTJGMEU2 RjFCQTFCOUMwHhcNMjUwNDI3MDI1MDQ4WhcNMjUwNTA0MDI1MDQ4WjAYMRYwFAYD VQQDEw02ODBkOWI4OC0yMjkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuv2PXimAahZugBp+nGcjHqn71oER352X8LYaPTJ/S0sxw8AosyzFztMd1qtp NaVMQKSj/epFC/naUgPLcjvcRQhnmJcG7psvCYegPuyI4Pj44AGnthc51gFcPKyT Ks2T8DiKxcPEtgUlopTlxNWfjmGXuOQBeWB4BRWGRCrcFI7nxHzPmhLZwrNBhkuz LVNRFf1GzC0hwPR7gp9MopuKVhTOo7gtUtlt5b76PJ30BCeePsM8VVn3pua0z48G 9bLLyIcu8XI4yn0EW9AUsPaPGeGWtgfJua9OnMjQHzjoUWMyBAYYJ7Zs2zauHOGL BkeNtKYDvTjBk2EZZtU789lZEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLxDreXr ZcyAJKRnk5ShpU9G1PvaMB8GA1UdIwQYMBaAFHAvoa6WgrKyLs3ZpTAS8Obxuhuc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjU0MC9EOTdBOTVCQ0Y4 ODAxMUVEQjlBQkZDNTZDNEY5QUUwMi9jQy1ocnBhQ3NySXV6ZG1sTUJMdzV2RzZH NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NDLWhycGFDc3JJdXpkbWxNQkx3NXZHNkc1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjU0MC9EOTdBOTVCQ0Y4ODAxMUVEQjlBQkZDNTZDNEY5QUUwMi9jQy1ocnBhQ3Ny SXV6ZG1sTUJMdzV2RzZHNXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB06Xh059SmOig43/WJCMLGPAbzw3UxpzDV5Oofbm8NUAc8bwkOJ/ZZ JSu/X4dy46RUw4FU04GK8cSgKAmnXRrdTRPHMjuChnVubIgTpmkg7rWK9kclzP9q fAODgJ+Ii3dzBO8FPbvjDusnqHC2Q0MkjFO56QAFmQjmXLDPgh9kFzHpd+Iv8dbt dVLsS9w6ZBi1NmP0Z/bIGN05mOAQuVgmxQXo6JgdzkFWKGhcRD1SKFutXngpFFcn UMH5+vHJoHgphm1IdXs4ZCtgOc5jJ395F51Go7za5zaZdZQj8co8lht62srUz77s HIkbM6Dqqz99+pwjei2U1o1BQth635B9 -----END CERTIFICATE-----Generated at Sun Apr 27 05:42:10 2025 by rpki-client on console.sobornost.net