$ rpki-client -vvf rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft File: qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft (raw, json) Hash identifier: FFfCCP2fu16DLU+lbswzDGgMIJmEhyvYRq5x/pKRDPs= Subject key identifier: 22:3D:A5:6F:D8:A4:A8:D5:B9:31:AB:84:AB:BA:2F:7D:4C:0C:D3:FA Authority key identifier: A8:56:8F:52:79:3C:C3:48:57:85:0C:4F:2E:D3:8A:E0:B1:89:70:F8 Certificate issuer: /CN=A9184324/serialNumber=A8568F52793CC34857850C4F2ED38AE0B18970F8 Certificate serial: 79 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qFaPUnk8w0hXhQxPLtOK4LGJcPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft Manifest number: 74 Signing time: Sun 27 Apr 2025 05:40:30 +0000 Manifest this update: Sun 27 Apr 2025 05:40:29 +0000 Manifest next update: Sun 04 May 2025 05:40:29 +0000 Files and hashes: 1: qFaPUnk8w0hXhQxPLtOK4LGJcPg.crl (hash: hUDNiIr1vFDJ2h7Kb0nL+txE+3mttKgfaI7ZGXFatFQ=) 2: 4C575EBA7C4911EF8E4FFA2CC4F9AE02.roa (hash: 98w4yl1iX/DBuRnZm4wgf0B6PYVS6iqXA6ulWZHNh70=) 3: 5C8F63FE7C4911EF81434A2DC4F9AE02.roa (hash: xISmEUj+M4vxMbA55xtFZk8Qasu4uZXOcEk4pXZEXDI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.crl rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qFaPUnk8w0hXhQxPLtOK4LGJcPg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184324, serialNumber=A8568F52793CC34857850C4F2ED38AE0B18970F8 Validity Not Before: Apr 27 05:40:29 2025 GMT Not After : May 4 05:40:29 2025 GMT Subject: CN=680dc34d-01bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:80:bd:e2:8a:29:ba:e0:92:fe:c3:74:cd:53: 0f:9d:96:ca:a9:52:92:0a:7e:21:61:6a:d1:a4:00: a8:ad:24:db:bb:52:1f:2c:da:d8:95:69:05:77:e5: 6f:5b:87:4a:9d:ad:31:f5:e4:1c:a3:74:75:e6:37: 90:58:ef:0a:0a:bc:29:63:7e:76:ea:d9:ad:28:94: 78:fe:db:87:de:4d:41:37:2a:1d:14:4e:ef:03:f5: 03:87:7e:17:f6:58:9f:60:bb:aa:26:ca:5b:c6:e9: 6e:a3:d0:f4:2a:b7:cf:5d:2f:5d:9b:4f:a5:47:b2: 4b:a6:0b:15:68:80:69:53:c1:dd:6e:da:5b:31:df: 26:46:fd:b5:87:3b:f2:59:7c:c7:90:cd:fb:51:24: 53:60:d9:2f:bd:77:fd:3e:67:6d:e1:2d:5c:fc:86: e7:62:f1:ef:8c:e0:af:14:02:db:eb:c7:fb:fc:e2: b7:b5:da:9f:3d:2e:24:46:d8:35:24:15:92:03:f8: 74:84:fd:6c:cc:8e:e5:40:34:f9:9c:d8:70:11:00: 91:cb:fc:e2:3d:2b:55:ec:69:5d:68:ff:7f:66:a9: 8e:aa:1d:bd:21:cd:78:86:b3:54:5e:d5:40:a6:0b: 4c:e5:38:12:42:08:ab:9f:68:11:2d:2c:65:fb:ab: 1c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:3D:A5:6F:D8:A4:A8:D5:B9:31:AB:84:AB:BA:2F:7D:4C:0C:D3:FA X509v3 Authority Key Identifier: keyid:A8:56:8F:52:79:3C:C3:48:57:85:0C:4F:2E:D3:8A:E0:B1:89:70:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qFaPUnk8w0hXhQxPLtOK4LGJcPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:ee:36:7e:83:a1:8d:d6:81:9d:8a:6c:da:f6:b1:37:98:06: 51:94:c1:84:7c:5f:4f:33:9b:2b:29:4a:49:df:26:5c:4b:2a: 44:04:0f:0c:97:5c:54:75:62:62:59:ef:f8:70:fd:14:51:ec: d3:8e:64:3c:fe:1c:50:e0:4a:d7:26:9d:20:07:c2:89:1f:2a: a8:d9:6f:b9:54:93:74:49:8a:e4:02:6a:c3:8a:3e:20:45:e0: ad:67:47:2e:ee:43:a7:53:6f:37:c7:e6:e0:30:7d:c8:11:b5: 3c:0d:00:3b:76:bc:28:80:dd:bc:d7:8c:99:5f:47:dc:8a:ff: d6:76:36:ab:d1:4f:2c:49:c5:bf:b5:ef:f1:bd:1a:1e:f0:9f: a8:83:9c:77:63:d9:3b:b0:88:6f:c0:ce:b1:ee:ff:7e:ca:2b: 0a:70:ff:aa:ea:59:92:51:a6:b4:eb:81:10:ed:19:95:88:89: 60:e9:dc:44:56:09:fc:f8:d8:e4:91:77:20:60:6b:0b:5b:1d: 98:6f:4a:8e:0d:e8:37:9a:3e:8c:87:c5:b1:b1:2f:6d:c4:14: 9e:60:85:e4:83:62:c6:85:3e:ce:e6:07:fe:42:8e:46:0a:88: f1:e9:2b:cd:02:b4:f2:e2:da:fd:56:2e:b5:e3:7c:f8:b8:cc: 71:80:f3:f7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NDMyNDExMC8GA1UEBRMoQTg1NjhGNTI3OTNDQzM0ODU3ODUwQzRGMkVEMzhBRTBC MTg5NzBGODAeFw0yNTA0MjcwNTQwMjlaFw0yNTA1MDQwNTQwMjlaMBgxFjAUBgNV BAMTDTY4MGRjMzRkLTAxYmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJgL3iiim64JL+w3TNUw+dlsqpUpIKfiFhatGkAKitJNu7Uh8s2tiVaQV35W9b h0qdrTH15ByjdHXmN5BY7woKvCljfnbq2a0olHj+24feTUE3Kh0UTu8D9QOHfhf2 WJ9gu6omylvG6W6j0PQqt89dL12bT6VHskumCxVogGlTwd1u2lsx3yZG/bWHO/JZ fMeQzftRJFNg2S+9d/0+Z23hLVz8hudi8e+M4K8UAtvrx/v84re12p89LiRG2DUk FZID+HSE/WzMjuVANPmc2HARAJHL/OI9K1XsaV1o/39mqY6qHb0hzXiGs1Re1UCm C0zlOBJCCKufaBEtLGX7qxx7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIj2lb9ik qNW5MauEq7ovfUwM0/owHwYDVR0jBBgwFoAUqFaPUnk8w0hXhQxPLtOK4LGJcPgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0MzI0L0VBQTlDQ0Q0N0Ix QzExRUZBQzEwOTQxNkM0RjlBRTAyL3FGYVBVbms4dzBoWGhReFBMdE9LNExHSmNQ Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcUZhUFVuazh3MGhYaFF4UEx0T0s0TEdKY1BnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0 MzI0L0VBQTlDQ0Q0N0IxQzExRUZBQzEwOTQxNkM0RjlBRTAyL3FGYVBVbms4dzBo WGhReFBMdE9LNExHSmNQZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEPuNn6DoY3WgZ2KbNr2sTeYBlGUwYR8X08zmyspSknfJlxLKkQEDwyX XFR1YmJZ7/hw/RRR7NOOZDz+HFDgStcmnSAHwokfKqjZb7lUk3RJiuQCasOKPiBF 4K1nRy7uQ6dTbzfH5uAwfcgRtTwNADt2vCiA3bzXjJlfR9yK/9Z2NqvRTyxJxb+1 7/G9Gh7wn6iDnHdj2TuwiG/AzrHu/37KKwpw/6rqWZJRprTrgRDtGZWIiWDp3ERW Cfz42OSRdyBgawtbHZhvSo4N6DeaPoyHxbGxL23EFJ5gheSDYsaFPs7mB/5CjkYK iPHpK80CtPLi2v1WLrXjfPi4zHGA8/c= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:50 2025 by rpki-client on console.sobornost.net