$ rpki-client -vvf rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.mft File: 4MiSj5RRUg5k0d7VjwcZa1hhsoY.mft (raw, json) Hash identifier: bjY5vsLxlhBpbMyMUa8S6lOU8moGIuksGf2IQwmvDbg= Subject key identifier: 2A:C1:12:DD:60:DB:BA:6E:0E:D0:F4:C8:1C:3D:23:0C:9A:7D:E4:C7 Authority key identifier: E0:C8:92:8F:94:51:52:0E:64:D1:DE:D5:8F:07:19:6B:58:61:B2:86 Certificate issuer: /CN=A917D4C4/serialNumber=E0C8928F9451520E64D1DED58F07196B5861B286 Certificate serial: 0648 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MiSj5RRUg5k0d7VjwcZa1hhsoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.mft Manifest number: 0644 Signing time: Mon 28 Apr 2025 14:54:25 +0000 Manifest this update: Mon 28 Apr 2025 14:54:24 +0000 Manifest next update: Mon 05 May 2025 14:54:24 +0000 Files and hashes: 1: 4MiSj5RRUg5k0d7VjwcZa1hhsoY.crl (hash: YYM5f100NxOidqr+jlakrvupezg279aDZG0pZjcetoM=) 2: 6E325DBC0E2F11EDB4659653C4F9AE02.roa (hash: NS8IXL+/osy1aonTB1YcjpMFwDzkEpu3g9yC5lM136w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.crl rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MiSj5RRUg5k0d7VjwcZa1hhsoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 14:54:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1608 (0x648) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D4C4, serialNumber=E0C8928F9451520E64D1DED58F07196B5861B286 Validity Not Before: Apr 28 14:54:24 2025 GMT Not After : May 5 14:54:24 2025 GMT Subject: CN=680f96a0-fd3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:81:f8:e7:c2:54:a3:b6:2d:53:b4:90:ca:cb: 87:b2:74:bc:56:33:cd:19:7f:c9:e2:14:62:47:7f: 6d:7c:79:bd:35:5b:d1:80:07:6d:8a:23:c8:b0:a5: 67:d4:88:35:52:d6:c1:62:9f:c0:8f:0b:bb:c4:79: 11:a5:12:21:4a:35:f3:2b:06:68:17:9a:f8:c0:f6: 72:28:f4:da:f5:bb:8d:88:99:70:1a:95:2b:cc:62: c2:54:98:1d:66:a8:62:b0:4e:ec:65:76:1e:78:eb: 3b:07:6a:04:56:26:b8:b4:9d:b1:24:cc:c0:0e:6d: 68:82:86:0d:fe:06:c2:fb:25:d6:58:4c:44:45:dd: de:bf:b1:f1:04:48:05:2d:8c:ae:2e:20:94:74:86: 2d:01:97:6c:0b:2a:27:38:95:f9:04:7b:d7:34:58: e4:9e:61:ff:54:1e:13:30:11:bd:d9:e6:2a:94:c3: 13:96:c6:07:f2:f8:da:da:1a:bc:8f:4e:51:ae:1a: b4:26:bb:d2:78:51:6a:e5:ae:c9:78:25:c2:76:6e: b9:a0:2f:63:1b:e9:7c:7f:bd:1a:ec:4d:2e:41:f0: 7b:82:ad:31:7e:e1:7d:95:cc:03:ca:f3:42:8c:41: 00:99:bd:e1:5f:80:8f:fd:30:26:c1:2b:13:99:2c: 29:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:C1:12:DD:60:DB:BA:6E:0E:D0:F4:C8:1C:3D:23:0C:9A:7D:E4:C7 X509v3 Authority Key Identifier: keyid:E0:C8:92:8F:94:51:52:0E:64:D1:DE:D5:8F:07:19:6B:58:61:B2:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MiSj5RRUg5k0d7VjwcZa1hhsoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:9a:40:08:97:31:3e:10:97:47:88:2e:6c:06:f3:cc:8f:27: d6:3b:e1:8a:0c:01:8a:f1:f3:20:d6:5a:18:45:09:da:3b:17: b7:29:aa:00:3c:57:a9:71:f7:5f:02:26:19:43:e8:9f:13:a0: 39:d1:f8:d1:1d:cf:a3:13:45:78:27:7d:f2:99:05:69:f7:5a: 0b:52:d5:0d:10:fc:f6:81:4d:80:89:37:fd:15:64:23:97:84: c2:78:7a:07:76:31:0a:8a:c5:01:a6:b5:26:e9:ba:81:06:3b: 33:ec:93:02:60:a4:46:58:d3:b6:3d:db:7b:82:66:b4:0a:5a: 09:34:c4:96:71:79:ab:76:0d:07:82:3e:29:43:fc:c0:e7:80: 43:b2:6c:4b:d5:d3:e3:81:63:dd:05:c5:9c:92:8b:47:ec:d3: f8:a7:1e:d6:71:bd:fc:d2:6f:3a:75:8f:bf:63:5c:00:4e:e7: c6:ff:86:cc:af:81:75:ca:4c:6d:22:e3:a6:7e:be:45:0e:4a: aa:d6:53:9e:31:fb:e7:87:51:4f:24:1f:de:43:b2:7a:8f:b4: 2b:56:2f:9d:22:25:fe:5b:b4:a0:2b:1c:ab:c0:a9:28:93:85: 8f:ea:e6:07:c5:e9:e3:66:04:97:56:79:70:2e:ac:09:7a:c7: f1:b9:17:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q0QzQxMTAvBgNVBAUTKEUwQzg5MjhGOTQ1MTUyMEU2NEQxREVENThGMDcxOTZC NTg2MUIyODYwHhcNMjUwNDI4MTQ1NDI0WhcNMjUwNTA1MTQ1NDI0WjAYMRYwFAYD VQQDEw02ODBmOTZhMC1mZDNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt4H458JUo7YtU7SQysuHsnS8VjPNGX/J4hRiR39tfHm9NVvRgAdtiiPIsKVn 1Ig1UtbBYp/Ajwu7xHkRpRIhSjXzKwZoF5r4wPZyKPTa9buNiJlwGpUrzGLCVJgd ZqhisE7sZXYeeOs7B2oEVia4tJ2xJMzADm1ogoYN/gbC+yXWWExERd3ev7HxBEgF LYyuLiCUdIYtAZdsCyonOJX5BHvXNFjknmH/VB4TMBG92eYqlMMTlsYH8vja2hq8 j05Rrhq0JrvSeFFq5a7JeCXCdm65oC9jG+l8f70a7E0uQfB7gq0xfuF9lcwDyvNC jEEAmb3hX4CP/TAmwSsTmSwpPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCrBEt1g 27puDtD0yBw9IwyafeTHMB8GA1UdIwQYMBaAFODIko+UUVIOZNHe1Y8HGWtYYbKG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDRDNC80MzlDRjg3QzhE N0IxMUVCOEQ4QkQ2MEJDNEY5QUUwMi80TWlTajVSUlVnNWswZDdWandjWmExaGhz b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRNaVNqNVJSVWc1azBkN1Zqd2NaYTFoaHNvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDRDNC80MzlDRjg3QzhEN0IxMUVCOEQ4QkQ2MEJDNEY5QUUwMi80TWlTajVSUlVn NWswZDdWandjWmExaGhzb1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUmkAIlzE+EJdHiC5sBvPMjyfWO+GKDAGK8fMg1loYRQnaOxe3KaoA PFepcfdfAiYZQ+ifE6A50fjRHc+jE0V4J33ymQVp91oLUtUNEPz2gU2AiTf9FWQj l4TCeHoHdjEKisUBprUm6bqBBjsz7JMCYKRGWNO2Pdt7gma0CloJNMSWcXmrdg0H gj4pQ/zA54BDsmxL1dPjgWPdBcWckotH7NP4px7Wcb380m86dY+/Y1wATufG/4bM r4F1ykxtIuOmfr5FDkqq1lOeMfvnh1FPJB/eQ7J6j7QrVi+dIiX+W7SgKxyrwKko k4WP6uYHxenjZgSXVnlwLqwJesfxuRcB -----END CERTIFICATE-----Generated at Mon Apr 28 17:45:11 2025 by rpki-client on console.sobornost.net