$ rpki-client -vvf rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.mft File: PqQ0fS2f1utqAbROVXH4iwiswls.mft (raw, json) Hash identifier: FlWCFLtIBYHAkmFBbmgU3aQuOhK4CHI1mWhazSDXIuU= Subject key identifier: 6E:4B:A7:9A:D3:57:26:5F:1F:87:1A:D0:B7:9E:DC:57:20:02:D2:26 Authority key identifier: 3E:A4:34:7D:2D:9F:D6:EB:6A:01:B4:4E:55:71:F8:8B:08:AC:C2:5B Certificate issuer: /CN=A917BB51/serialNumber=3EA4347D2D9FD6EB6A01B44E5571F88B08ACC25B Certificate serial: F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqQ0fS2f1utqAbROVXH4iwiswls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.mft Manifest number: EE Signing time: Sun 27 Apr 2025 04:18:41 +0000 Manifest this update: Sun 27 Apr 2025 04:18:41 +0000 Manifest next update: Sun 04 May 2025 04:18:41 +0000 Files and hashes: 1: PqQ0fS2f1utqAbROVXH4iwiswls.crl (hash: 68zawTBGSFWt6uzu+o+AB5KdqNhjuZgyX2hPqWX5qNs=) 2: A9C5C1CAC4B811EE8A03D547C4F9AE02.roa (hash: 3GOqN8PMZ/cxFE5yg/l01rtznIl/3wsy8K8LEuE8lEg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.crl rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqQ0fS2f1utqAbROVXH4iwiswls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 245 (0xf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BB51, serialNumber=3EA4347D2D9FD6EB6A01B44E5571F88B08ACC25B Validity Not Before: Apr 27 04:18:41 2025 GMT Not After : May 4 04:18:41 2025 GMT Subject: CN=680db021-7a24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c6:80:48:b9:4a:7a:01:60:d4:29:5b:57:82: 5e:a5:f9:4e:03:d2:62:dd:38:30:36:ce:8e:47:42: 63:0f:8f:f7:d8:ff:9a:15:15:4e:7c:b9:5c:82:e8: 8c:6d:7d:23:5d:79:13:ac:71:40:fa:e0:85:77:22: 12:ff:91:f1:19:b8:4c:c9:61:b5:83:d8:f4:4c:fe: d4:15:bc:8f:3d:4b:b1:6f:45:4d:c6:d1:4f:2e:ab: 82:b4:95:49:72:85:1a:60:a2:1a:87:92:43:22:ec: 0d:1c:71:d2:7c:1e:08:23:12:12:55:e1:44:3d:63: 16:be:33:72:ad:f8:54:2b:38:8f:93:a9:0d:8a:64: 5f:08:e3:32:ee:41:9b:b7:7a:dc:d7:fa:4f:f8:fd: 47:dd:9f:5a:ba:61:8f:b8:34:10:aa:78:37:6d:14: 56:17:33:14:1f:49:26:ab:1d:99:cd:f3:57:13:f5: ff:c0:00:c8:12:2a:9b:a8:31:5c:1b:c7:c5:52:8a: 8c:a4:5e:12:e3:c3:8d:67:64:43:ef:20:e3:22:f8: 07:0d:f5:b2:1a:5c:21:44:13:ca:7b:3a:7e:3f:9e: b7:83:da:1f:79:19:fe:51:21:d7:b5:3f:fd:15:ea: 91:9b:2a:51:ec:a9:1d:bd:9e:97:f8:a5:5a:7f:64: 17:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:4B:A7:9A:D3:57:26:5F:1F:87:1A:D0:B7:9E:DC:57:20:02:D2:26 X509v3 Authority Key Identifier: keyid:3E:A4:34:7D:2D:9F:D6:EB:6A:01:B4:4E:55:71:F8:8B:08:AC:C2:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqQ0fS2f1utqAbROVXH4iwiswls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:b5:2c:09:ed:50:65:05:57:92:53:e6:00:48:4a:2a:a1:a9: a7:51:49:56:04:91:77:e9:a6:60:3c:d5:49:08:83:e8:0d:0a: 3f:5d:f5:88:d3:7a:55:68:72:d7:c3:bd:bc:04:f3:06:99:83: c8:06:d9:c7:56:1e:27:45:4e:bb:f9:c5:20:39:bc:d1:c9:99: f6:05:e5:e9:e7:19:56:96:5b:26:06:d9:39:b7:6c:58:a7:0b: df:12:1c:80:b4:25:fc:a5:4e:86:74:8d:ff:8c:cb:3a:ee:af: 41:0b:ef:10:88:6b:c8:5d:fa:54:04:e8:ae:a1:f2:5c:fd:05: 48:96:81:c7:0c:9a:87:51:f9:c2:ab:da:45:7f:f7:b2:e6:20: c3:ba:5a:ba:c5:67:f5:c0:11:38:cd:dc:65:0f:7f:b4:04:97: 07:31:9e:1b:25:5b:8f:cf:28:77:f7:ce:02:5b:41:d2:fa:7d: 48:17:4b:a5:29:fc:87:d7:30:e7:99:9a:5b:b6:e4:b3:cc:ca: 09:8b:00:30:58:07:b1:ad:cc:3e:b2:d8:24:1d:7e:7e:51:a3: fb:60:b0:7f:66:aa:7e:38:7c:fc:78:fb:d4:b1:86:84:0a:24: a5:08:8d:08:d4:71:4d:72:c4:20:ed:d6:ed:76:e7:ad:e7:29: cb:a1:44:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JCNTExMTAvBgNVBAUTKDNFQTQzNDdEMkQ5RkQ2RUI2QTAxQjQ0RTU1NzFGODhC MDhBQ0MyNUIwHhcNMjUwNDI3MDQxODQxWhcNMjUwNTA0MDQxODQxWjAYMRYwFAYD VQQDEw02ODBkYjAyMS03YTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtcaASLlKegFg1ClbV4JepflOA9Ji3TgwNs6OR0JjD4/32P+aFRVOfLlcguiM bX0jXXkTrHFA+uCFdyIS/5HxGbhMyWG1g9j0TP7UFbyPPUuxb0VNxtFPLquCtJVJ coUaYKIah5JDIuwNHHHSfB4IIxISVeFEPWMWvjNyrfhUKziPk6kNimRfCOMy7kGb t3rc1/pP+P1H3Z9aumGPuDQQqng3bRRWFzMUH0kmqx2ZzfNXE/X/wADIEiqbqDFc G8fFUoqMpF4S48ONZ2RD7yDjIvgHDfWyGlwhRBPKezp+P563g9ofeRn+USHXtT/9 FeqRmypR7KkdvZ6X+KVaf2QX9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG5Lp5rT VyZfH4ca0Lee3FcgAtImMB8GA1UdIwQYMBaAFD6kNH0tn9bragG0TlVx+IsIrMJb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkI1MS8yNUFDRjVDMEM0 QjgxMUVFQkQ3MUM0NDZDNEY5QUUwMi9QcVEwZlMyZjF1dHFBYlJPVlhINGl3aXN3 bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BxUTBmUzJmMXV0cUFiUk9WWEg0aXdpc3dscy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkI1MS8yNUFDRjVDMEM0QjgxMUVFQkQ3MUM0NDZDNEY5QUUwMi9QcVEwZlMyZjF1 dHFBYlJPVlhINGl3aXN3bHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLtSwJ7VBlBVeSU+YASEoqoamnUUlWBJF36aZgPNVJCIPoDQo/XfWI 03pVaHLXw728BPMGmYPIBtnHVh4nRU67+cUgObzRyZn2BeXp5xlWllsmBtk5t2xY pwvfEhyAtCX8pU6GdI3/jMs67q9BC+8QiGvIXfpUBOiuofJc/QVIloHHDJqHUfnC q9pFf/ey5iDDulq6xWf1wBE4zdxlD3+0BJcHMZ4bJVuPzyh3984CW0HS+n1IF0ul KfyH1zDnmZpbtuSzzMoJiwAwWAexrcw+stgkHX5+UaP7YLB/Zqp+OHz8ePvUsYaE CiSlCI0I1HFNcsQg7dbtduet5ynLoUQZ -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:50 2025 by rpki-client on console.sobornost.net