$ rpki-client -vvf rpki.apnic.net/member_repository/A918681B/C43FBD061A3A11EC8FBF417BC4F9AE02/0fxphnCiQetFTVXFZ6paY1rwoGM.mft File: 0fxphnCiQetFTVXFZ6paY1rwoGM.mft (raw, json) Hash identifier: AVOusPzJdwKXbw6BIqOhHTHmVdOA1IHi+qjdPKrwZjY= Subject key identifier: 69:F6:0F:C1:06:26:54:E5:44:AE:56:01:74:3D:B2:1B:CB:B9:70:AD Authority key identifier: D1:FC:69:86:70:A2:41:EB:45:4D:55:C5:67:AA:5A:63:5A:F0:A0:63 Certificate issuer: /CN=A918681B/serialNumber=D1FC698670A241EB454D55C567AA5A635AF0A063 Certificate serial: 04EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fxphnCiQetFTVXFZ6paY1rwoGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918681B/C43FBD061A3A11EC8FBF417BC4F9AE02/0fxphnCiQetFTVXFZ6paY1rwoGM.mft Manifest number: 04E3 Signing time: Sat 26 Apr 2025 23:27:05 +0000 Manifest this update: Sat 26 Apr 2025 23:27:04 +0000 Manifest next update: Sat 03 May 2025 23:27:04 +0000 Files and hashes: 1: 0fxphnCiQetFTVXFZ6paY1rwoGM.crl (hash: zt2B8xMeggCXRhFa/HP1LIsmAOPz5WRBhs04lS450kY=) 2: 5D4D3E261A3E11ECB42D0B80C4F9AE02.roa (hash: Am0tyv0SW/vQBy5lGTGy4TYfxwQ9Lc6UrqhzC51ywy4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918681B/C43FBD061A3A11EC8FBF417BC4F9AE02/0fxphnCiQetFTVXFZ6paY1rwoGM.crl rsync://rpki.apnic.net/member_repository/A918681B/C43FBD061A3A11EC8FBF417BC4F9AE02/0fxphnCiQetFTVXFZ6paY1rwoGM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fxphnCiQetFTVXFZ6paY1rwoGM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 23:27:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1263 (0x4ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918681B, serialNumber=D1FC698670A241EB454D55C567AA5A635AF0A063 Validity Not Before: Apr 26 23:27:04 2025 GMT Not After : May 3 23:27:04 2025 GMT Subject: CN=680d6bc9-e97f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ca:2c:cb:7b:a3:03:fb:09:a2:89:17:fd:38: 2a:9d:80:2e:d5:ac:13:45:fd:e2:fc:83:73:34:53: d9:42:6b:45:0b:35:e0:9d:aa:42:57:3f:10:f7:7c: 32:bb:7a:d0:3d:4d:84:6e:42:f2:fb:4d:ae:39:cf: 75:10:c7:35:54:73:00:94:0f:3b:2f:11:a8:cc:55: b2:e2:70:9b:34:3b:e6:44:a4:1e:12:d6:54:d3:a3: cc:18:92:62:28:d9:95:ba:3a:a1:a9:65:3e:c1:98: 80:ac:68:d8:d7:69:13:39:8c:07:39:0f:d9:52:f5: 58:3c:7e:5e:c7:f6:7f:d7:73:66:f8:11:40:1c:ea: 6d:04:ec:d4:a4:98:36:a7:47:e5:b7:25:94:b7:53: f2:9a:0d:7e:e2:8c:dd:6b:5e:67:91:8a:29:d6:a4: 36:0e:bf:73:cb:f0:3a:bc:f7:50:aa:9c:e7:a9:73: a9:29:c0:99:00:24:a5:cb:41:3f:50:9c:53:28:a3: 1c:39:f5:02:b5:6a:41:6a:40:24:fc:a4:ec:b8:23: 7e:89:59:f1:98:fa:ac:bb:49:7c:c6:0d:f9:83:a7: 58:af:2d:9f:7a:5b:a5:06:ef:8e:89:88:d3:a5:00: 54:99:fc:af:11:2d:97:4c:c2:96:3a:b9:7f:5d:e5: 7b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:F6:0F:C1:06:26:54:E5:44:AE:56:01:74:3D:B2:1B:CB:B9:70:AD X509v3 Authority Key Identifier: keyid:D1:FC:69:86:70:A2:41:EB:45:4D:55:C5:67:AA:5A:63:5A:F0:A0:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918681B/C43FBD061A3A11EC8FBF417BC4F9AE02/0fxphnCiQetFTVXFZ6paY1rwoGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fxphnCiQetFTVXFZ6paY1rwoGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918681B/C43FBD061A3A11EC8FBF417BC4F9AE02/0fxphnCiQetFTVXFZ6paY1rwoGM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:2e:cc:85:b1:b3:86:87:d8:bc:21:55:1d:14:bf:0c:1f:21: 97:6e:41:0c:c3:01:28:88:17:f4:d3:53:6d:25:52:51:41:96: 74:85:10:26:a1:13:70:34:8e:29:9f:f3:27:15:69:0a:c4:77: 86:cc:37:78:13:c6:36:d3:b0:33:e8:0f:e8:7d:fd:49:23:52: f0:f9:07:82:6e:5e:f1:95:53:fe:89:a7:8b:56:74:a9:2f:bb: b9:73:e0:6c:9d:c6:8c:1c:34:f5:33:e6:59:c3:a7:2e:cd:90: b4:e9:5d:01:92:a2:7e:e6:53:ad:7c:22:53:0b:58:27:68:1e: 04:74:d9:0c:63:06:44:ae:d7:1f:cb:7b:d2:1f:a6:97:b7:a1: 72:ac:13:b1:52:5d:d8:af:7a:c0:8c:3e:c6:4e:20:c1:19:ec: 2d:e1:7b:85:20:de:ce:a5:97:9f:0a:df:85:ab:7c:be:18:5a: 1e:fe:d0:34:b9:6b:99:fa:0d:62:df:0e:77:03:51:c6:90:84: d4:ae:48:b5:c0:f5:1e:69:31:f0:c7:9d:3d:7b:a7:c6:32:b6: 96:97:c8:09:3f:5c:2a:95:86:1b:72:7e:d4:60:57:47:67:95: 4c:09:0f:cb:2f:03:ab:ff:bb:87:b5:62:5f:f9:ff:23:bd:03: e5:39:d7:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY4MUIxMTAvBgNVBAUTKEQxRkM2OTg2NzBBMjQxRUI0NTRENTVDNTY3QUE1QTYz NUFGMEEwNjMwHhcNMjUwNDI2MjMyNzA0WhcNMjUwNTAzMjMyNzA0WjAYMRYwFAYD VQQDEw02ODBkNmJjOS1lOTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvsosy3ujA/sJookX/TgqnYAu1awTRf3i/INzNFPZQmtFCzXgnapCVz8Q93wy u3rQPU2EbkLy+02uOc91EMc1VHMAlA87LxGozFWy4nCbNDvmRKQeEtZU06PMGJJi KNmVujqhqWU+wZiArGjY12kTOYwHOQ/ZUvVYPH5ex/Z/13Nm+BFAHOptBOzUpJg2 p0fltyWUt1Pymg1+4ozda15nkYop1qQ2Dr9zy/A6vPdQqpznqXOpKcCZACSly0E/ UJxTKKMcOfUCtWpBakAk/KTsuCN+iVnxmPqsu0l8xg35g6dYry2felulBu+OiYjT pQBUmfyvES2XTMKWOrl/XeV7uQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGn2D8EG JlTlRK5WAXQ9shvLuXCtMB8GA1UdIwQYMBaAFNH8aYZwokHrRU1VxWeqWmNa8KBj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjgxQi9DNDNGQkQwNjFB M0ExMUVDOEZCRjQxN0JDNEY5QUUwMi8wZnhwaG5DaVFldEZUVlhGWjZwYVkxcndv R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBmeHBobkNpUWV0RlRWWEZaNnBhWTFyd29HTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjgxQi9DNDNGQkQwNjFBM0ExMUVDOEZCRjQxN0JDNEY5QUUwMi8wZnhwaG5DaVFl dEZUVlhGWjZwYVkxcndvR00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuLsyFsbOGh9i8IVUdFL8MHyGXbkEMwwEoiBf001NtJVJRQZZ0hRAm oRNwNI4pn/MnFWkKxHeGzDd4E8Y207Az6A/off1JI1Lw+QeCbl7xlVP+iaeLVnSp L7u5c+BsncaMHDT1M+ZZw6cuzZC06V0BkqJ+5lOtfCJTC1gnaB4EdNkMYwZErtcf y3vSH6aXt6FyrBOxUl3Yr3rAjD7GTiDBGewt4XuFIN7OpZefCt+Fq3y+GFoe/tA0 uWuZ+g1i3w53A1HGkITUrki1wPUeaTHwx509e6fGMraWl8gJP1wqlYYbcn7UYFdH Z5VMCQ/LLwOr/7uHtWJf+f8jvQPlOdd+ -----END CERTIFICATE-----Generated at Sun Apr 27 05:42:12 2025 by rpki-client on console.sobornost.net