$ rpki-client -vvf rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft File: Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft (raw, json) Hash identifier: P9x+J6j4ycrmj4FIEejgpHuFLst11fegYmcRyRDtqNs= Subject key identifier: C1:E5:E4:E6:2E:80:3A:B8:67:54:C2:C3:3F:A7:A8:38:3D:F7:08:0E Authority key identifier: 17:1E:DD:3F:77:85:E0:F5:38:55:6F:9E:F2:6B:ED:71:66:9E:8D:8C Certificate issuer: /CN=A9186363/serialNumber=171EDD3F7785E0F538556F9EF26BED71669E8D8C Certificate serial: 4E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fx7dP3eF4PU4VW-e8mvtcWaejYw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft Manifest number: 4D Signing time: Sun 27 Apr 2025 06:08:28 +0000 Manifest this update: Sun 27 Apr 2025 06:08:28 +0000 Manifest next update: Sun 04 May 2025 06:08:28 +0000 Files and hashes: 1: Fx7dP3eF4PU4VW-e8mvtcWaejYw.crl (hash: F1JDt1+SR9DTkOf6iQn+tnma/KHjdyVR4uEVVZGb7Us=) 2: 0FFCC5E8AFAE11EFAC818674C4F9AE02.roa (hash: P+H7fb6sxOYzaDyJFH2WCrqrlvTjPog92898KvwjrwQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.crl rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fx7dP3eF4PU4VW-e8mvtcWaejYw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186363, serialNumber=171EDD3F7785E0F538556F9EF26BED71669E8D8C Validity Not Before: Apr 27 06:08:28 2025 GMT Not After : May 4 06:08:28 2025 GMT Subject: CN=680dc9dc-de04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:5d:43:e8:77:3e:a7:2e:37:f3:ee:b1:22:b1: 25:80:8f:d0:39:a0:3d:d6:8e:f0:68:be:8e:78:b4: 54:62:c1:81:42:f9:1c:5c:67:f5:71:73:b7:73:f6: a6:aa:c9:65:c9:f7:ca:75:82:9f:94:43:68:93:93: cf:93:0a:3d:5d:23:39:ae:e4:93:b1:44:d4:85:38: 36:27:a0:5c:78:46:0f:80:47:3b:90:73:b1:ae:24: 5b:90:99:43:43:58:b9:b6:b6:8c:e0:43:16:df:c6: 52:65:93:54:1e:fe:7d:f9:d6:d0:7d:ab:58:05:7e: 25:47:4f:69:d7:c2:54:a8:4e:5d:5d:35:86:75:55: c8:7e:74:7f:54:e8:0f:c0:de:3f:b6:2c:a9:56:6e: 04:b3:68:6c:a0:61:0e:fb:b6:21:0c:0a:20:af:cf: 6e:73:d8:8e:10:6c:38:b6:89:48:4f:9b:75:02:75: 72:fe:5c:dc:f3:33:c0:d9:d8:2b:79:90:96:ab:12: a7:b2:d3:6c:6d:6e:4f:ce:ab:31:eb:46:1c:4e:fa: 5b:60:1d:02:35:b5:ee:92:f4:33:48:f2:e0:ae:83: 68:6a:45:da:d8:9c:53:08:00:13:18:f1:34:04:14: 13:99:9b:53:46:d6:86:11:89:23:8d:f1:80:3c:cd: bb:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:E5:E4:E6:2E:80:3A:B8:67:54:C2:C3:3F:A7:A8:38:3D:F7:08:0E X509v3 Authority Key Identifier: keyid:17:1E:DD:3F:77:85:E0:F5:38:55:6F:9E:F2:6B:ED:71:66:9E:8D:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fx7dP3eF4PU4VW-e8mvtcWaejYw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:79:d2:1f:96:ed:36:6d:a9:06:5f:6a:d2:39:2d:5f:f3:ae: 2c:f1:36:2a:78:6b:ec:f1:29:6e:3b:9a:aa:b7:4a:24:9b:1d: 16:76:ae:40:c0:79:71:80:f2:4a:06:21:aa:17:79:68:24:2d: f7:4c:18:d2:ef:83:ba:c7:48:dc:62:ea:f7:c0:6e:c2:79:5f: c6:40:03:8b:c3:b7:28:2b:f8:e7:f7:32:26:6f:2e:a6:2d:2a: 8e:b1:72:cd:44:9f:63:2b:5d:f8:e3:22:c0:3d:1d:a5:71:7c: e5:29:87:78:fc:6a:4e:f8:da:08:b1:4a:7b:d9:fe:eb:2e:52: 8e:dd:d6:d7:96:0d:5c:b1:d0:c5:13:c9:ea:55:93:c4:5a:01: 7f:21:0f:a8:3e:3c:4e:e5:14:64:54:4c:1d:56:59:f2:40:e0: 18:72:aa:6d:58:f4:65:09:4e:71:4a:b6:b5:60:25:48:a3:d7: 82:a3:84:27:66:1e:02:24:f6:cd:e8:2f:72:6b:73:ae:12:2b: 8b:70:82:16:63:56:d1:0f:24:95:71:24:ea:17:f5:be:0c:da: e6:10:f9:d0:a3:d3:87:81:97:9a:97:20:e0:00:1e:7b:53:87: 84:13:aa:73:b6:10:fc:2c:07:eb:3e:93:39:64:0a:2e:16:fb: ce:3a:7e:d4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NjM2MzExMC8GA1UEBRMoMTcxRUREM0Y3Nzg1RTBGNTM4NTU2RjlFRjI2QkVENzE2 NjlFOEQ4QzAeFw0yNTA0MjcwNjA4MjhaFw0yNTA1MDQwNjA4MjhaMBgxFjAUBgNV BAMTDTY4MGRjOWRjLWRlMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVXUPodz6nLjfz7rEisSWAj9A5oD3WjvBovo54tFRiwYFC+RxcZ/Vxc7dz9qaq yWXJ98p1gp+UQ2iTk8+TCj1dIzmu5JOxRNSFODYnoFx4Rg+ARzuQc7GuJFuQmUND WLm2tozgQxbfxlJlk1Qe/n351tB9q1gFfiVHT2nXwlSoTl1dNYZ1Vch+dH9U6A/A 3j+2LKlWbgSzaGygYQ77tiEMCiCvz25z2I4QbDi2iUhPm3UCdXL+XNzzM8DZ2Ct5 kJarEqey02xtbk/OqzHrRhxO+ltgHQI1te6S9DNI8uCug2hqRdrYnFMIABMY8TQE FBOZm1NG1oYRiSON8YA8zbuZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUweXk5i6A OrhnVMLDP6eoOD33CA4wHwYDVR0jBBgwFoAUFx7dP3eF4PU4VW+e8mvtcWaejYww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg2MzYzL0I1NjAwQUVDQUZB QzExRUZCODg2RDY1MUM0RjlBRTAyL0Z4N2RQM2VGNFBVNFZXLWU4bXZ0Y1dhZWpZ dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRng3ZFAzZUY0UFU0VlctZThtdnRjV2Flall3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg2 MzYzL0I1NjAwQUVDQUZBQzExRUZCODg2RDY1MUM0RjlBRTAyL0Z4N2RQM2VGNFBV NFZXLWU4bXZ0Y1dhZWpZdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABd50h+W7TZtqQZfatI5LV/zrizxNip4a+zxKW47mqq3SiSbHRZ2rkDA eXGA8koGIaoXeWgkLfdMGNLvg7rHSNxi6vfAbsJ5X8ZAA4vDtygr+Of3MiZvLqYt Ko6xcs1En2MrXfjjIsA9HaVxfOUph3j8ak742gixSnvZ/usuUo7d1teWDVyx0MUT yepVk8RaAX8hD6g+PE7lFGRUTB1WWfJA4Bhyqm1Y9GUJTnFKtrVgJUij14KjhCdm HgIk9s3oL3Jrc64SK4twghZjVtEPJJVxJOoX9b4M2uYQ+dCj04eBl5qXIOAAHntT h4QTqnO2EPwsB+s+kzlkCi4W+846ftQ= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:50 2025 by rpki-client on console.sobornost.net