$ rpki-client -vvf rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.mft File: PG7AmwlfpfUTYVEIpUR8rLcasaE.mft (raw, json) Hash identifier: 6+XZeVv4DPiol8HkkSeFCUt//r+YJpH9Bt1l1x07cDQ= Subject key identifier: C4:37:F4:69:87:59:CC:BB:E8:56:91:50:2B:AD:4F:61:B5:F3:2E:35 Authority key identifier: 3C:6E:C0:9B:09:5F:A5:F5:13:61:51:08:A5:44:7C:AC:B7:1A:B1:A1 Certificate issuer: /CN=A917E4BA/serialNumber=3C6EC09B095FA5F513615108A5447CACB71AB1A1 Certificate serial: 0AAA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PG7AmwlfpfUTYVEIpUR8rLcasaE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.mft Manifest number: 0AA5 Signing time: Mon 28 Apr 2025 19:53:58 +0000 Manifest this update: Mon 28 Apr 2025 19:53:58 +0000 Manifest next update: Mon 05 May 2025 19:53:58 +0000 Files and hashes: 1: PG7AmwlfpfUTYVEIpUR8rLcasaE.crl (hash: DOPXAtuM+pZvmMQJlMmlCJGuBf1lgGf//zMfQi2ittE=) 2: 66F91334ED4911ED9A90391BC4F9AE02.roa (hash: 4M2o1uWpD8HZNRKume3UqAzLmAnLuLXQtM8OeJIWFiY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.crl rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PG7AmwlfpfUTYVEIpUR8rLcasaE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 19:53:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2730 (0xaaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E4BA, serialNumber=3C6EC09B095FA5F513615108A5447CACB71AB1A1 Validity Not Before: Apr 28 19:53:58 2025 GMT Not After : May 5 19:53:58 2025 GMT Subject: CN=680fdcd6-a4fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:47:ce:da:0c:6d:b9:de:bd:f2:7c:c0:37:69: 21:99:f8:cf:d3:9b:cf:1e:92:b0:b9:b1:2d:8f:c0: 2c:eb:db:ac:38:f9:2d:95:52:8d:16:4b:19:30:8d: 03:d5:8d:f1:7f:ee:b4:fb:3f:27:f6:28:38:01:1b: c6:64:99:82:a8:e3:5e:c5:39:73:95:c6:62:22:24: 64:f2:77:8c:ec:71:d0:db:ef:ce:db:62:25:2d:6f: 7e:8b:fd:78:a6:85:a1:45:26:68:75:54:2b:73:9e: 91:93:3f:da:06:28:1f:5a:88:b3:30:bb:ad:a8:a3: d2:2a:d9:02:f5:93:02:b8:c7:4b:37:57:66:ac:d4: b5:26:e3:d7:09:76:37:f4:27:3d:a5:e7:4b:0b:de: 37:57:5e:2c:69:35:b3:2d:36:cf:fd:e9:75:f1:b9: bd:a4:8a:ab:4d:c2:ca:f4:69:69:ba:de:a1:17:b7: 04:a2:4e:70:9b:b3:1c:8e:43:59:57:d4:ee:af:60: ec:60:7d:d7:cf:fa:99:56:e1:f0:ab:86:47:2f:89: e7:b0:7e:cc:59:2a:52:ae:6c:ea:7d:4d:6b:01:7a: ed:ac:53:9c:6a:67:ce:27:f1:a9:6f:2a:8e:65:e0: e8:e4:3e:bb:6f:c1:da:17:65:db:ac:d3:8b:f8:18: 7b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:37:F4:69:87:59:CC:BB:E8:56:91:50:2B:AD:4F:61:B5:F3:2E:35 X509v3 Authority Key Identifier: keyid:3C:6E:C0:9B:09:5F:A5:F5:13:61:51:08:A5:44:7C:AC:B7:1A:B1:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PG7AmwlfpfUTYVEIpUR8rLcasaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:be:62:34:db:f2:63:38:27:aa:a3:84:ea:b7:ee:d1:55:b4: d1:60:28:cb:3e:9b:22:c0:46:b9:07:ae:2c:52:c6:c5:0a:e7: a3:55:ba:9a:74:01:5d:b5:2b:3c:24:bd:f2:8b:b5:f9:0b:17: 15:79:f2:d9:46:7a:b5:c5:88:86:11:dc:20:d3:c9:97:34:ab: 9e:53:36:7a:77:ab:a0:0e:8b:c6:d9:ae:bb:8a:e3:56:39:cb: e7:fa:13:89:f9:6a:b4:f4:44:f4:12:ee:bf:38:e9:d3:b1:7d: a2:d7:4c:f3:3a:89:d7:bf:e7:c2:42:d8:48:35:8f:65:3e:91: e6:66:97:a5:8d:d2:19:aa:9c:0b:52:12:af:55:64:ff:0a:85: f8:82:7a:fc:dd:7e:c5:00:ec:a5:3d:78:24:09:4c:f4:62:c1: 13:89:32:9e:f8:85:01:7c:90:41:9d:fc:37:54:f0:dc:c8:6c: 5b:28:32:58:02:a0:8a:30:e8:15:eb:6f:b1:e8:24:88:85:ee: 6c:c3:3e:13:65:c3:cf:64:ba:cd:09:a9:65:35:c1:27:89:27: 63:04:a5:7f:9c:62:c8:1c:77:08:ac:f0:30:f5:1c:9f:25:1f: 51:d3:7b:2c:25:fe:7c:af:ec:be:d2:4b:0d:9f:b4:d0:74:b0: 11:ed:5f:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U0QkExMTAvBgNVBAUTKDNDNkVDMDlCMDk1RkE1RjUxMzYxNTEwOEE1NDQ3Q0FD QjcxQUIxQTEwHhcNMjUwNDI4MTk1MzU4WhcNMjUwNTA1MTk1MzU4WjAYMRYwFAYD VQQDEw02ODBmZGNkNi1hNGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsUfO2gxtud698nzAN2khmfjP05vPHpKwubEtj8As69usOPktlVKNFksZMI0D 1Y3xf+60+z8n9ig4ARvGZJmCqONexTlzlcZiIiRk8neM7HHQ2+/O22IlLW9+i/14 poWhRSZodVQrc56Rkz/aBigfWoizMLutqKPSKtkC9ZMCuMdLN1dmrNS1JuPXCXY3 9Cc9pedLC943V14saTWzLTbP/el18bm9pIqrTcLK9Glput6hF7cEok5wm7McjkNZ V9Tur2DsYH3Xz/qZVuHwq4ZHL4nnsH7MWSpSrmzqfU1rAXrtrFOcamfOJ/GpbyqO ZeDo5D67b8HaF2XbrNOL+Bh7jQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMQ39GmH Wcy76FaRUCutT2G18y41MB8GA1UdIwQYMBaAFDxuwJsJX6X1E2FRCKVEfKy3GrGh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTRCQS9DOTUyQUM5RTUy REMxMUVBODI2MDFCMEZDNEY5QUUwMi9QRzdBbXdsZnBmVVRZVkVJcFVSOHJMY2Fz YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BHN0Ftd2xmcGZVVFlWRUlwVVI4ckxjYXNhRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTRCQS9DOTUyQUM5RTUyREMxMUVBODI2MDFCMEZDNEY5QUUwMi9QRzdBbXdsZnBm VVRZVkVJcFVSOHJMY2FzYUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlvmI02/JjOCeqo4Tqt+7RVbTRYCjLPpsiwEa5B64sUsbFCuejVbqa dAFdtSs8JL3yi7X5CxcVefLZRnq1xYiGEdwg08mXNKueUzZ6d6ugDovG2a67iuNW Ocvn+hOJ+Wq09ET0Eu6/OOnTsX2i10zzOonXv+fCQthINY9lPpHmZpeljdIZqpwL UhKvVWT/CoX4gnr83X7FAOylPXgkCUz0YsETiTKe+IUBfJBBnfw3VPDcyGxbKDJY AqCKMOgV62+x6CSIhe5swz4TZcPPZLrNCallNcEniSdjBKV/nGLIHHcIrPAw9Ryf JR9R03ssJf58r+y+0ksNn7TQdLAR7V+d -----END CERTIFICATE-----Generated at Mon Apr 28 23:05:32 2025 by rpki-client on console.sobornost.net