$ rpki-client -vvf rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft File: EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft (raw, json) Hash identifier: ETntyLfOTdWA5eO7VgTz+0t11UqWJKlGDT05YNYYbpQ= Subject key identifier: FD:89:C8:45:1D:6E:E9:A4:E7:5F:7E:68:E2:D4:F5:47:82:F0:FE:D6 Authority key identifier: 12:C4:89:72:F2:6D:06:7A:9F:21:B4:C4:FA:0C:86:63:3E:02:C0:19 Certificate issuer: /CN=A917E00F/serialNumber=12C48972F26D067A9F21B4C4FA0C86633E02C019 Certificate serial: F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EsSJcvJtBnqfIbTE-gyGYz4CwBk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft Manifest number: 0633 Signing time: Sat 26 Apr 2025 23:06:46 +0000 Manifest this update: Sat 26 Apr 2025 23:06:46 +0000 Manifest next update: Sat 03 May 2025 23:06:46 +0000 Files and hashes: 1: EsSJcvJtBnqfIbTE-gyGYz4CwBk.crl (hash: ZhrlRgxPldanXuht//ARZAP1o6PVZFo2SkGmXgfzf1Y=) 2: E10C2796B42D11EEBCE04D61C4F9AE02.roa (hash: dJfXhzg8XYwoUOs2sQdFfnXRTK5+51aUZ+Zq8zrXhMs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.crl rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EsSJcvJtBnqfIbTE-gyGYz4CwBk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 23:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 245 (0xf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E00F, serialNumber=12C48972F26D067A9F21B4C4FA0C86633E02C019 Validity Not Before: Apr 26 23:06:46 2025 GMT Not After : May 3 23:06:46 2025 GMT Subject: CN=680d6706-7fc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2e:bd:48:11:34:ea:9a:04:b9:49:2e:ee:e5: 27:5a:5c:4b:f1:2c:02:09:59:14:a8:94:dc:b6:74: 65:5b:74:85:80:e1:92:e6:08:39:22:f5:b6:61:4c: 5e:a3:14:5b:8b:44:43:df:aa:6b:50:0c:60:95:cb: 36:ee:61:d9:6c:5f:72:ff:74:b4:ea:50:53:18:72: 01:17:6a:30:54:eb:c7:41:56:97:33:61:3f:87:ea: 72:a0:9a:e4:14:9d:85:26:51:3c:20:43:03:84:90: 6f:6e:bd:1b:f3:23:1d:44:04:f7:76:b7:94:d6:3c: 15:29:1b:ea:b7:8c:ed:60:d2:31:a2:16:48:1d:cf: 1f:45:54:2a:c4:c2:d8:df:30:cd:03:97:8e:b7:23: 85:66:59:9d:3b:37:f3:9e:2b:33:75:e9:eb:da:62: 6c:48:c8:fd:93:36:02:a8:af:a9:c6:4e:a7:e9:55: 0e:ea:e2:1a:cb:08:67:28:7c:5d:d2:0c:a1:1d:a7: fa:85:62:17:e6:80:ce:a4:bc:d1:21:ed:bc:78:46: 22:1a:37:62:03:9c:fe:11:f3:93:f8:56:b4:09:b0: ee:74:7a:c6:1c:cd:6d:95:eb:28:0b:88:24:ef:e8: d6:74:7e:68:31:5c:a0:91:ab:73:1a:5a:11:15:b9: 0d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:89:C8:45:1D:6E:E9:A4:E7:5F:7E:68:E2:D4:F5:47:82:F0:FE:D6 X509v3 Authority Key Identifier: keyid:12:C4:89:72:F2:6D:06:7A:9F:21:B4:C4:FA:0C:86:63:3E:02:C0:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EsSJcvJtBnqfIbTE-gyGYz4CwBk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:30:8e:15:2a:33:3d:f2:d5:7e:e4:9e:21:a0:32:4b:10:c5: 28:fd:3e:0b:c4:22:60:a3:bc:0a:d1:46:d3:a2:76:ab:8f:16: 04:b3:c4:fc:d7:52:df:c7:de:e0:a8:f4:44:2d:66:85:95:49: 82:00:d1:99:b9:d5:3b:98:3d:fc:f6:e1:36:56:14:65:c2:02: b7:96:50:ac:9b:08:cb:31:87:82:42:25:f6:ff:79:41:4f:b3: ed:2f:98:20:7f:f4:48:84:88:fd:7d:11:f3:24:23:9f:a5:78: a6:3d:95:61:48:4f:7d:2f:d6:5b:7c:23:fb:b6:a0:7a:4b:d2: da:89:f6:30:36:10:a3:a2:c9:00:af:bb:97:47:dc:44:47:af: d0:cb:95:5e:a8:50:6d:c8:c1:22:0a:17:ed:6d:41:fc:61:f9: e4:81:83:85:ea:87:85:e4:88:04:27:cd:fe:b5:72:49:b8:2b: 75:82:56:5e:5c:40:de:0f:95:c6:b9:fd:e1:83:6a:70:7a:5f: 87:b7:01:65:a3:79:a7:5b:46:71:3d:2d:c6:89:90:66:7a:b7: 64:04:cf:35:b3:2e:b4:32:aa:f7:f5:e9:1c:16:a8:29:33:71: 3d:b0:30:69:0a:ae:40:f6:3e:4a:4b:6b:1a:99:bd:92:75:a5: 44:45:f9:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwMEYxMTAvBgNVBAUTKDEyQzQ4OTcyRjI2RDA2N0E5RjIxQjRDNEZBMEM4NjYz M0UwMkMwMTkwHhcNMjUwNDI2MjMwNjQ2WhcNMjUwNTAzMjMwNjQ2WjAYMRYwFAYD VQQDEw02ODBkNjcwNi03ZmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwy69SBE06poEuUku7uUnWlxL8SwCCVkUqJTctnRlW3SFgOGS5gg5IvW2YUxe oxRbi0RD36prUAxglcs27mHZbF9y/3S06lBTGHIBF2owVOvHQVaXM2E/h+pyoJrk FJ2FJlE8IEMDhJBvbr0b8yMdRAT3dreU1jwVKRvqt4ztYNIxohZIHc8fRVQqxMLY 3zDNA5eOtyOFZlmdOzfzniszdenr2mJsSMj9kzYCqK+pxk6n6VUO6uIaywhnKHxd 0gyhHaf6hWIX5oDOpLzRIe28eEYiGjdiA5z+EfOT+Fa0CbDudHrGHM1tlesoC4gk 7+jWdH5oMVygkatzGloRFbkNEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP2JyEUd bumk519+aOLU9UeC8P7WMB8GA1UdIwQYMBaAFBLEiXLybQZ6nyG0xPoMhmM+AsAZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTAwRi9FREU0OEI5Q0VF MjkxMUVCODA4NEI2MzhDNEY5QUUwMi9Fc1NKY3ZKdEJucWZJYlRFLWd5R1l6NEN3 QmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VzU0pjdkp0Qm5xZkliVEUtZ3lHWXo0Q3dCay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTAwRi9FREU0OEI5Q0VFMjkxMUVCODA4NEI2MzhDNEY5QUUwMi9Fc1NKY3ZKdEJu cWZJYlRFLWd5R1l6NEN3QmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWMI4VKjM98tV+5J4hoDJLEMUo/T4LxCJgo7wK0UbTonarjxYEs8T8 11Lfx97gqPRELWaFlUmCANGZudU7mD389uE2VhRlwgK3llCsmwjLMYeCQiX2/3lB T7PtL5ggf/RIhIj9fRHzJCOfpXimPZVhSE99L9ZbfCP7tqB6S9LaifYwNhCjoskA r7uXR9xER6/Qy5VeqFBtyMEiChftbUH8YfnkgYOF6oeF5IgEJ83+tXJJuCt1glZe XEDeD5XGuf3hg2pwel+HtwFlo3mnW0ZxPS3GiZBmerdkBM81sy60Mqr39ekcFqgp M3E9sDBpCq5A9j5KS2samb2SdaVERfks -----END CERTIFICATE-----Generated at Sun Apr 27 05:42:10 2025 by rpki-client on console.sobornost.net