$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0A8/6EFC0BEE984C11EB8A41FA20C4F9AE02/dNRNlor0Y--xfAgNX60BDErAl6o.mft File: dNRNlor0Y--xfAgNX60BDErAl6o.mft (raw, json) Hash identifier: CaKbw2OgP2uKXoh9g6+BmM34WrmpZm/neaCpG0UuUkU= Subject key identifier: F6:D9:1E:85:4B:5E:A2:E5:F5:76:40:A4:6B:0A:A9:B9:15:E4:93:A1 Authority key identifier: 74:D4:4D:96:8A:F4:63:EF:B1:7C:08:0D:5F:AD:01:0C:4A:C0:97:AA Certificate issuer: /CN=A917E0A8/serialNumber=74D44D968AF463EFB17C080D5FAD010C4AC097AA Certificate serial: 063B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dNRNlor0Y--xfAgNX60BDErAl6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E0A8/6EFC0BEE984C11EB8A41FA20C4F9AE02/dNRNlor0Y--xfAgNX60BDErAl6o.mft Manifest number: 0630 Signing time: Sat 26 Apr 2025 19:29:09 +0000 Manifest this update: Sat 26 Apr 2025 19:29:08 +0000 Manifest next update: Sat 03 May 2025 19:29:08 +0000 Files and hashes: 1: dNRNlor0Y--xfAgNX60BDErAl6o.crl (hash: gLvCLJkcFiaH5ModlEz+1PzmZXaFj09CyDLxZNF8gSQ=) 2: 11C0D5DA9B4011EB9C1BFC4EC4F9AE02.roa (hash: W590cMYjFz6FF4sW9oqplqFnjP+zPSYVDh+Je0kzPIE=) 3: F9C23E2A3ACB11EC9FEBB367C4F9AE02.roa (hash: eFxwV6TYZjxk4/Ekn5nyzAgAfEQn65e+4zP6/WFsXnw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E0A8/6EFC0BEE984C11EB8A41FA20C4F9AE02/dNRNlor0Y--xfAgNX60BDErAl6o.crl rsync://rpki.apnic.net/member_repository/A917E0A8/6EFC0BEE984C11EB8A41FA20C4F9AE02/dNRNlor0Y--xfAgNX60BDErAl6o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dNRNlor0Y--xfAgNX60BDErAl6o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:11:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1595 (0x63b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E0A8, serialNumber=74D44D968AF463EFB17C080D5FAD010C4AC097AA Validity Not Before: Apr 26 19:29:08 2025 GMT Not After : May 3 19:29:08 2025 GMT Subject: CN=680d3404-9663 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:d9:90:89:2d:46:44:6f:33:a6:31:78:7c:73: 06:d4:99:17:21:b3:60:7d:16:78:d9:b2:be:06:62: 41:1c:9b:49:06:d5:b1:51:0f:49:6e:3a:a9:75:b9: d1:5b:67:18:f4:5d:b6:df:88:d8:48:02:fe:52:0b: d8:cb:1d:19:76:3c:3d:d5:b0:02:fa:4e:56:9b:16: 29:eb:a2:3a:71:bd:7b:58:7c:1e:f5:cf:f0:0f:c6: b9:1d:24:51:db:bf:b2:cc:21:a0:b8:fa:04:4e:83: d9:0f:48:27:2c:2b:e7:4a:59:64:0e:29:9c:a9:ae: 9f:cb:35:f4:7d:e5:72:44:ab:2d:98:c1:a2:0c:b0: 3b:36:de:97:84:bd:3e:f9:19:41:6f:8a:8c:48:24: 3a:6d:11:8f:80:cc:8f:ea:a1:f3:fd:2c:0a:cc:ef: 0c:e1:a1:d5:02:c9:b5:e3:b2:c9:65:18:0d:d3:01: 37:e2:ab:f5:e8:a1:e7:2a:fa:48:51:c1:d4:15:bc: ad:ad:ce:19:c1:34:a9:23:57:c8:d2:c5:83:61:19: 2a:d3:f6:df:1a:1f:55:8b:20:97:ad:6f:d3:14:65: dd:20:5a:d5:8b:89:60:99:9e:48:42:48:20:4c:a9: 97:d0:9d:c6:6f:8a:d2:c4:18:39:83:63:c8:c8:17: e1:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:D9:1E:85:4B:5E:A2:E5:F5:76:40:A4:6B:0A:A9:B9:15:E4:93:A1 X509v3 Authority Key Identifier: keyid:74:D4:4D:96:8A:F4:63:EF:B1:7C:08:0D:5F:AD:01:0C:4A:C0:97:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E0A8/6EFC0BEE984C11EB8A41FA20C4F9AE02/dNRNlor0Y--xfAgNX60BDErAl6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dNRNlor0Y--xfAgNX60BDErAl6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0A8/6EFC0BEE984C11EB8A41FA20C4F9AE02/dNRNlor0Y--xfAgNX60BDErAl6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:13:8f:2f:ec:63:90:6f:4b:f0:3a:6c:c6:b0:66:f2:00:bc: 9a:57:e8:cc:f9:59:53:28:61:b8:31:3b:30:e3:e8:0a:93:74: e8:bb:e6:dc:86:51:e5:d6:23:93:9a:22:33:a6:82:25:f3:ff: 3e:3e:67:10:15:7d:66:1d:b7:cf:84:cb:83:ef:38:f5:f8:22: ec:cc:1c:e0:f8:4e:77:6d:a1:a9:79:78:30:c4:b1:43:c1:c2: e9:69:49:e5:7e:14:e0:a7:2f:b6:4e:de:18:96:d5:3b:67:ae: f4:13:c6:ef:3f:b6:44:f8:66:1c:00:db:fc:b8:bb:5b:c7:93: 8d:60:28:13:75:84:20:37:7f:cb:83:07:a1:f4:8b:af:c1:1a: de:9c:59:be:52:79:33:ec:e7:e3:17:68:e4:e4:9e:e9:db:78: 0e:c2:6b:a6:01:dc:69:7b:c2:35:ff:6c:7d:2d:e8:ff:e3:00: 7f:ba:72:7a:bb:09:dd:e2:c5:05:73:ee:24:5a:a7:7b:2d:86: 55:68:6f:16:01:be:5e:04:44:1a:6c:18:fc:14:fd:58:0a:1a: 0b:8d:0d:ee:59:fa:1e:98:db:c6:50:d4:73:fd:aa:a7:5d:f4: b2:83:ed:0c:95:43:7d:78:b0:50:5c:b8:e5:85:0a:f7:43:20: 95:a1:e8:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwQTgxMTAvBgNVBAUTKDc0RDQ0RDk2OEFGNDYzRUZCMTdDMDgwRDVGQUQwMTBD NEFDMDk3QUEwHhcNMjUwNDI2MTkyOTA4WhcNMjUwNTAzMTkyOTA4WjAYMRYwFAYD VQQDEw02ODBkMzQwNC05NjYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4tmQiS1GRG8zpjF4fHMG1JkXIbNgfRZ42bK+BmJBHJtJBtWxUQ9JbjqpdbnR W2cY9F2234jYSAL+UgvYyx0Zdjw91bAC+k5WmxYp66I6cb17WHwe9c/wD8a5HSRR 27+yzCGguPoEToPZD0gnLCvnSllkDimcqa6fyzX0feVyRKstmMGiDLA7Nt6XhL0+ +RlBb4qMSCQ6bRGPgMyP6qHz/SwKzO8M4aHVAsm147LJZRgN0wE34qv16KHnKvpI UcHUFbytrc4ZwTSpI1fI0sWDYRkq0/bfGh9ViyCXrW/TFGXdIFrVi4lgmZ5IQkgg TKmX0J3Gb4rSxBg5g2PIyBfhQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPbZHoVL XqLl9XZApGsKqbkV5JOhMB8GA1UdIwQYMBaAFHTUTZaK9GPvsXwIDV+tAQxKwJeq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBBOC82RUZDMEJFRTk4 NEMxMUVCOEE0MUZBMjBDNEY5QUUwMi9kTlJObG9yMFktLXhmQWdOWDYwQkRFckFs Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ROUk5sb3IwWS0teGZBZ05YNjBCREVyQWw2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTBBOC82RUZDMEJFRTk4NEMxMUVCOEE0MUZBMjBDNEY5QUUwMi9kTlJObG9yMFkt LXhmQWdOWDYwQkRFckFsNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLE48v7GOQb0vwOmzGsGbyALyaV+jM+VlTKGG4MTsw4+gKk3Tou+bc hlHl1iOTmiIzpoIl8/8+PmcQFX1mHbfPhMuD7zj1+CLszBzg+E53baGpeXgwxLFD wcLpaUnlfhTgpy+2Tt4YltU7Z670E8bvP7ZE+GYcANv8uLtbx5ONYCgTdYQgN3/L gweh9IuvwRrenFm+Unkz7OfjF2jk5J7p23gOwmumAdxpe8I1/2x9Lej/4wB/unJ6 uwnd4sUFc+4kWqd7LYZVaG8WAb5eBEQabBj8FP1YChoLjQ3uWfoemNvGUNRz/aqn XfSyg+0MlUN9eLBQXLjlhQr3QyCVoegT -----END CERTIFICATE-----Generated at Sun Apr 27 00:14:01 2025 by rpki-client on console.sobornost.net