$ rpki-client -vvf rpki.apnic.net/member_repository/A917D4C4/3A07E0BA8D7B11EB8D8BD60BC4F9AE02/V88585q2G1OO6nyy1Wo0vle4mvs.mft File: V88585q2G1OO6nyy1Wo0vle4mvs.mft (raw, json) Hash identifier: 7+MfOzXTxJq2m0QQM6SPw+/D5w4FgGPxM1uJ7aTC2SA= Subject key identifier: 5C:C0:8B:DB:59:A1:E7:20:EF:94:BD:C4:22:1C:15:A6:18:7B:FE:1D Authority key identifier: 57:CF:39:F3:9A:B6:1B:53:8E:EA:7C:B2:D5:6A:34:BE:57:B8:9A:FB Certificate issuer: /CN=A917D4C4/serialNumber=57CF39F39AB61B538EEA7CB2D56A34BE57B89AFB Certificate serial: 0649 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V88585q2G1OO6nyy1Wo0vle4mvs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D4C4/3A07E0BA8D7B11EB8D8BD60BC4F9AE02/V88585q2G1OO6nyy1Wo0vle4mvs.mft Manifest number: 0644 Signing time: Sat 26 Apr 2025 14:47:27 +0000 Manifest this update: Sat 26 Apr 2025 14:47:26 +0000 Manifest next update: Sat 03 May 2025 14:47:26 +0000 Files and hashes: 1: V88585q2G1OO6nyy1Wo0vle4mvs.crl (hash: cB5KptLiAlpLz41JdcHwv2a3/OHH/g0dZrvC6vJRucc=) 2: 6DB6146E0E2F11EDB4659653C4F9AE02.roa (hash: jVO5wSX7TJcWYZD+VE2YuDs8rKtO7MY++7pypycZONE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D4C4/3A07E0BA8D7B11EB8D8BD60BC4F9AE02/V88585q2G1OO6nyy1Wo0vle4mvs.crl rsync://rpki.apnic.net/member_repository/A917D4C4/3A07E0BA8D7B11EB8D8BD60BC4F9AE02/V88585q2G1OO6nyy1Wo0vle4mvs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V88585q2G1OO6nyy1Wo0vle4mvs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 14:47:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1609 (0x649) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D4C4, serialNumber=57CF39F39AB61B538EEA7CB2D56A34BE57B89AFB Validity Not Before: Apr 26 14:47:26 2025 GMT Not After : May 3 14:47:26 2025 GMT Subject: CN=680cf1fe-f71f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:49:67:48:24:45:b1:b5:7f:60:ef:e3:fe:a1: be:a6:69:42:c4:a7:f5:43:77:41:9b:8d:83:9e:e1: 1c:d1:d1:4e:d8:14:40:f0:aa:30:e9:25:ae:a0:97: 97:bf:e3:90:bb:ec:0a:37:fe:30:e5:b8:fa:60:1a: 68:1b:a6:74:30:e6:e6:79:a5:91:8b:b6:c2:92:5b: 2c:e9:2d:57:43:db:f4:ed:50:b5:06:d4:43:4a:23: 73:a2:cd:bd:46:32:d3:93:24:25:c4:8c:7a:9f:47: 44:74:b1:a2:8e:cd:81:e2:82:05:6b:89:38:5a:61: f3:e9:ce:5f:3e:db:38:c5:fc:0b:a1:a5:85:83:58: 38:32:a1:f6:5e:2f:80:be:39:c2:af:cb:08:56:b7: aa:20:d0:e4:65:d9:fa:68:2b:82:4b:42:07:3f:6d: 34:ee:96:a5:03:8d:09:92:a0:62:b2:de:7c:83:c4: 3f:a0:cd:97:ff:ed:25:81:24:59:0f:85:8c:a9:bd: 07:8a:4d:b4:01:90:24:41:f5:a1:d2:1d:b7:29:5e: 29:17:e2:66:3d:3d:1d:4c:b0:48:f3:68:8c:5c:2f: 3c:0e:a4:18:2a:4c:50:80:e7:0c:32:0a:a6:07:3d: 98:8b:76:d1:6e:0a:83:5b:52:77:15:4a:65:cf:4c: 92:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:C0:8B:DB:59:A1:E7:20:EF:94:BD:C4:22:1C:15:A6:18:7B:FE:1D X509v3 Authority Key Identifier: keyid:57:CF:39:F3:9A:B6:1B:53:8E:EA:7C:B2:D5:6A:34:BE:57:B8:9A:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D4C4/3A07E0BA8D7B11EB8D8BD60BC4F9AE02/V88585q2G1OO6nyy1Wo0vle4mvs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V88585q2G1OO6nyy1Wo0vle4mvs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D4C4/3A07E0BA8D7B11EB8D8BD60BC4F9AE02/V88585q2G1OO6nyy1Wo0vle4mvs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:07:af:11:7f:ec:3b:cb:d8:c5:2e:4e:79:73:79:2c:95:d8: ad:66:14:e2:ab:b0:58:73:17:58:70:93:37:68:88:d8:a0:d8: e3:2f:6b:57:c4:da:11:04:06:e4:f4:a9:00:33:95:d2:00:a3: 2c:6f:93:cd:2c:0b:14:bf:6a:3c:2e:49:17:ed:86:44:04:6f: ee:c6:e3:5c:38:6a:02:3a:89:18:5c:33:b0:dd:a6:0d:c6:a4: da:4f:8e:29:49:44:e9:97:e9:b1:e4:24:0c:60:fd:f9:89:6e: 7d:16:1b:87:ee:14:d4:45:fc:2d:de:00:70:c4:ce:58:44:18: 63:27:b7:c8:48:74:e9:d2:e9:4d:13:bc:68:fb:74:93:66:89: c0:ea:ee:c7:97:a6:f1:93:84:f6:fe:aa:3e:11:4f:0b:51:9e: 5a:5f:4c:41:fa:f2:1c:93:14:13:44:a9:de:a5:e7:00:cb:bb: 78:1a:28:a8:8b:21:eb:15:44:6c:2f:5b:27:e3:ea:a9:5f:70: 43:5e:11:a6:2f:58:2c:96:82:1e:81:28:0e:5e:7e:d8:4c:0e: 3f:60:85:10:e2:ae:b2:ab:2d:b3:38:ba:84:40:ed:64:b1:14: 47:aa:e4:a4:20:46:8d:1e:0f:9e:a9:89:a6:5c:c4:a9:64:9e: 38:5f:8b:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q0QzQxMTAvBgNVBAUTKDU3Q0YzOUYzOUFCNjFCNTM4RUVBN0NCMkQ1NkEzNEJF NTdCODlBRkIwHhcNMjUwNDI2MTQ0NzI2WhcNMjUwNTAzMTQ0NzI2WjAYMRYwFAYD VQQDEw02ODBjZjFmZS1mNzFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0UlnSCRFsbV/YO/j/qG+pmlCxKf1Q3dBm42DnuEc0dFO2BRA8Kow6SWuoJeX v+OQu+wKN/4w5bj6YBpoG6Z0MObmeaWRi7bCklss6S1XQ9v07VC1BtRDSiNzos29 RjLTkyQlxIx6n0dEdLGijs2B4oIFa4k4WmHz6c5fPts4xfwLoaWFg1g4MqH2Xi+A vjnCr8sIVreqINDkZdn6aCuCS0IHP2007palA40JkqBist58g8Q/oM2X/+0lgSRZ D4WMqb0Hik20AZAkQfWh0h23KV4pF+JmPT0dTLBI82iMXC88DqQYKkxQgOcMMgqm Bz2Yi3bRbgqDW1J3FUplz0yStwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFzAi9tZ oecg75S9xCIcFaYYe/4dMB8GA1UdIwQYMBaAFFfPOfOathtTjup8stVqNL5XuJr7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDRDNC8zQTA3RTBCQThE N0IxMUVCOEQ4QkQ2MEJDNEY5QUUwMi9WODg1ODVxMkcxT082bnl5MVdvMHZsZTRt dnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1Y4ODU4NXEyRzFPTzZueXkxV28wdmxlNG12cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDRDNC8zQTA3RTBCQThEN0IxMUVCOEQ4QkQ2MEJDNEY5QUUwMi9WODg1ODVxMkcx T082bnl5MVdvMHZsZTRtdnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqB68Rf+w7y9jFLk55c3kslditZhTiq7BYcxdYcJM3aIjYoNjjL2tX xNoRBAbk9KkAM5XSAKMsb5PNLAsUv2o8LkkX7YZEBG/uxuNcOGoCOokYXDOw3aYN xqTaT44pSUTpl+mx5CQMYP35iW59FhuH7hTURfwt3gBwxM5YRBhjJ7fISHTp0ulN E7xo+3STZonA6u7Hl6bxk4T2/qo+EU8LUZ5aX0xB+vIckxQTRKnepecAy7t4Giio iyHrFURsL1sn4+qpX3BDXhGmL1gsloIegSgOXn7YTA4/YIUQ4q6yqy2zOLqEQO1k sRRHquSkIEaNHg+eqYmmXMSpZJ44X4s6 -----END CERTIFICATE-----Generated at Sat Apr 26 18:19:42 2025 by rpki-client on console.sobornost.net