$ rpki-client -vvf rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft File: 4QiBh_ZAlCY92mdJqV9zqmwasGM.mft (raw, json) Hash identifier: xvAOWnHTNCVmm6UHMk5h4/7T5vagp71pI5eLMtfqhSQ= Subject key identifier: E5:C8:EE:55:32:B2:3B:0E:68:65:A3:09:3E:3C:35:FD:CA:6C:98:AC Authority key identifier: E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63 Certificate issuer: /CN=A917BAC5/serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063 Certificate serial: 02A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft Manifest number: 027A Signing time: Sun 27 Apr 2025 01:26:36 +0000 Manifest this update: Sun 27 Apr 2025 01:26:36 +0000 Manifest next update: Sun 04 May 2025 01:26:36 +0000 Files and hashes: 1: 4QiBh_ZAlCY92mdJqV9zqmwasGM.crl (hash: S/7NWuB2pFFPotJBDDYxpQtPiVSZKbWcdHbNYzJ3ywY=) 2: CC647BDECAC711EF80553A61C4F9AE02.roa (hash: JjvbSqdanHSpYIcMXGp+ZgcFpNIRiyjhFnX93ubLPo8=) 3: 4C7C3EA8E8F511EDBC11CF6BC4F9AE02.roa (hash: voNhvFt+rl48+RXxjQWaNEIjDq7tMEczadZRVwJF374=) 4: 78BC7D28A87E11ED9AE70779C4F9AE02.roa (hash: J3Ksm9WsEr0TXjLLhaQloclJKmSPXVrqrAzTlf/eKtU=) 5: 3632957E441311EE8A03A472C4F9AE02.roa (hash: hc0GUtEKKEGW9gMZlTO39H3fWKoJ6wdGBAjVqIVrLxQ=) 6: 780136B63D1211EEBB0A0C5AC4F9AE02.roa (hash: SMaX3aa/UFh43gcKCcEgmT4cm/dWEuQesSH3aBzRpfE=) 7: CCEE4F76CAC711EF80553A61C4F9AE02.roa (hash: 74i29heKayX8ulpi57w5YoL9mLrlBcexKja8YJG8ecM=) 8: 9DC49A2449A011EEB3DFDD0DC4F9AE02.roa (hash: I/sFHc7XYiJ8eT0AIMA2+7XdYKHUvmlkXtbK7T+Me2I=) 9: 3D34A750A88111ED80831318C4F9AE02.roa (hash: a76JQF1qiEmLZKSWyiAc52KnTZOIYMAyGXRjtxdQkfY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 01:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 673 (0x2a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BAC5, serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063 Validity Not Before: Apr 27 01:26:36 2025 GMT Not After : May 4 01:26:36 2025 GMT Subject: CN=680d87cc-0b3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:44:2b:e4:89:29:73:69:6b:cf:26:d5:93:af: 94:44:fc:cc:38:8e:6f:ca:cc:be:9e:74:20:65:0c: 8e:4a:0d:d9:e6:ae:c5:e5:25:4e:0e:4d:91:c0:08: 8b:7c:48:ce:e3:c4:64:d8:0b:be:56:1f:4e:96:69: 5f:42:f5:6f:f7:05:bd:98:88:aa:3f:6d:f7:c9:23: 4f:41:4b:14:8b:46:16:b8:18:f2:75:85:56:41:96: 5f:00:7b:ff:99:f1:33:d0:fa:38:24:2f:1a:d1:14: 08:43:70:a1:28:89:a4:61:5b:b2:cc:0d:3a:19:48: 31:cb:f9:68:cc:ee:e8:f4:56:a4:fa:bb:24:e1:6b: fc:68:51:0b:6d:32:a0:3c:28:cf:82:bc:c7:65:e9: f4:64:7f:1e:8d:26:32:ba:1c:a4:f6:5a:14:36:32: e5:88:71:53:5f:42:79:53:7d:4a:19:ae:39:b5:50: d1:9c:33:52:58:87:56:1c:8a:c4:ce:b2:fa:dc:ed: 73:c9:d7:78:d0:71:03:45:ce:e4:1d:46:47:8f:4b: b4:47:9a:fb:b4:12:91:d2:64:11:e9:fa:15:32:08: 9d:00:1f:ea:e3:30:43:ae:0a:5b:d4:9e:2e:7c:46: f8:2b:fe:aa:3b:97:7c:42:57:cf:f7:37:d8:34:aa: 4d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:C8:EE:55:32:B2:3B:0E:68:65:A3:09:3E:3C:35:FD:CA:6C:98:AC X509v3 Authority Key Identifier: keyid:E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:5b:5c:f2:ad:4c:be:2d:43:e0:87:e9:55:6e:e0:d2:dc:64: c8:99:3d:86:27:a4:81:47:85:48:6b:66:54:c6:96:5b:3f:0b: 19:84:a3:ee:b2:e3:f2:33:23:e6:ef:3f:ca:71:b5:b7:3d:a1: 1c:d7:31:1a:d2:1c:9e:86:8f:9f:0f:40:64:d9:a4:37:33:f0: 56:e2:d4:c8:f3:c5:1f:33:05:1b:48:fe:6d:3a:e0:3f:b7:eb: 11:f5:57:84:db:30:fb:44:fe:de:c4:8e:83:e2:89:ba:18:08: 4b:01:3e:72:34:ad:ff:84:c8:76:1b:16:99:58:c4:31:1c:1a: fc:6f:02:92:67:b5:1c:c0:59:c3:83:18:02:17:1a:17:0b:76: 0d:7f:45:6d:e3:78:83:ee:89:ec:22:5f:88:aa:30:c0:c5:51: 9a:f4:ee:b5:2b:0d:c7:32:88:d7:0f:e0:be:bb:26:1d:a0:da: 61:56:de:3d:d3:85:0e:f2:70:21:a1:c8:d6:48:6f:6a:2b:71: b0:b8:63:98:61:21:ca:50:c6:3e:b9:a1:ee:48:36:cf:90:a1: 61:49:9c:c9:19:4a:3f:32:aa:94:e3:32:32:87:ac:5b:19:c5: 33:c6:da:bd:66:1f:57:27:9a:fc:9c:97:8d:0d:6c:df:f7:36: fa:f1:9d:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JBQzUxMTAvBgNVBAUTKEUxMDg4MTg3RjY0MDk0MjYzRERBNjc0OUE5NUY3M0FB NkMxQUIwNjMwHhcNMjUwNDI3MDEyNjM2WhcNMjUwNTA0MDEyNjM2WjAYMRYwFAYD VQQDEw02ODBkODdjYy0wYjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvkQr5Ikpc2lrzybVk6+URPzMOI5vysy+nnQgZQyOSg3Z5q7F5SVODk2RwAiL fEjO48Rk2Au+Vh9OlmlfQvVv9wW9mIiqP233ySNPQUsUi0YWuBjydYVWQZZfAHv/ mfEz0Po4JC8a0RQIQ3ChKImkYVuyzA06GUgxy/lozO7o9Fak+rsk4Wv8aFELbTKg PCjPgrzHZen0ZH8ejSYyuhyk9loUNjLliHFTX0J5U31KGa45tVDRnDNSWIdWHIrE zrL63O1zydd40HEDRc7kHUZHj0u0R5r7tBKR0mQR6foVMgidAB/q4zBDrgpb1J4u fEb4K/6qO5d8QlfP9zfYNKpN1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOXI7lUy sjsOaGWjCT48Nf3KbJisMB8GA1UdIwQYMBaAFOEIgYf2QJQmPdpnSalfc6psGrBj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkFDNS80NzBBNjIwNDE1 MzAxMUVEQkFBM0QwMjdDNEY5QUUwMi80UWlCaF9aQWxDWTkybWRKcVY5enFtd2Fz R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRRaUJoX1pBbENZOTJtZEpxVjl6cW13YXNHTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkFDNS80NzBBNjIwNDE1MzAxMUVEQkFBM0QwMjdDNEY5QUUwMi80UWlCaF9aQWxD WTkybWRKcVY5enFtd2FzR00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRW1zyrUy+LUPgh+lVbuDS3GTImT2GJ6SBR4VIa2ZUxpZbPwsZhKPu suPyMyPm7z/KcbW3PaEc1zEa0hyeho+fD0Bk2aQ3M/BW4tTI88UfMwUbSP5tOuA/ t+sR9VeE2zD7RP7exI6D4om6GAhLAT5yNK3/hMh2GxaZWMQxHBr8bwKSZ7UcwFnD gxgCFxoXC3YNf0Vt43iD7onsIl+IqjDAxVGa9O61Kw3HMojXD+C+uyYdoNphVt49 04UO8nAhocjWSG9qK3GwuGOYYSHKUMY+uaHuSDbPkKFhSZzJGUo/MqqU4zIyh6xb GcUzxtq9Zh9XJ5r8nJeNDWzf9zb68Z3d -----END CERTIFICATE-----Generated at Sun Apr 27 05:42:10 2025 by rpki-client on console.sobornost.net