$ rpki-client -vvf rpki.apnic.net/member_repository/A918AB7E/F759796E088111F0BAC3413EC4F9AE02/KmvwVK0j6tLbOVMbZGcmypRaxJI.mft File: KmvwVK0j6tLbOVMbZGcmypRaxJI.mft (raw, json) Hash identifier: M/YThvmliMBceM7zWRhgUNAYZVGRcW91X9v0j+zA7Gk= Subject key identifier: 20:A7:F8:14:3F:22:61:74:25:6D:69:DF:55:8A:A8:B6:97:C4:B2:92 Authority key identifier: 2A:6B:F0:54:AD:23:EA:D2:DB:39:53:1B:64:67:26:CA:94:5A:C4:92 Certificate issuer: /CN=A918AB7E/serialNumber=2A6BF054AD23EAD2DB39531B646726CA945AC492 Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KmvwVK0j6tLbOVMbZGcmypRaxJI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918AB7E/F759796E088111F0BAC3413EC4F9AE02/KmvwVK0j6tLbOVMbZGcmypRaxJI.mft Manifest number: 14 Signing time: Sun 27 Apr 2025 06:50:53 +0000 Manifest this update: Sun 27 Apr 2025 06:50:53 +0000 Manifest next update: Sun 04 May 2025 06:50:53 +0000 Files and hashes: 1: KmvwVK0j6tLbOVMbZGcmypRaxJI.crl (hash: /L4NmiHTSfVYEJYBPGa26Sm5rlhKQk3L9Ers1oSzsZY=) 2: 3CF5A86C088211F0BB90C23EC4F9AE02.roa (hash: WjhNkxKHghzjWbpSoIkFccSDxcFZFh5y2Re0ypkmeM8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918AB7E/F759796E088111F0BAC3413EC4F9AE02/KmvwVK0j6tLbOVMbZGcmypRaxJI.crl rsync://rpki.apnic.net/member_repository/A918AB7E/F759796E088111F0BAC3413EC4F9AE02/KmvwVK0j6tLbOVMbZGcmypRaxJI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KmvwVK0j6tLbOVMbZGcmypRaxJI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918AB7E, serialNumber=2A6BF054AD23EAD2DB39531B646726CA945AC492 Validity Not Before: Apr 27 06:50:53 2025 GMT Not After : May 4 06:50:53 2025 GMT Subject: CN=680dd3cd-52f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4a:50:7d:c0:f4:67:f5:51:b2:de:6f:8f:29: e1:05:5d:8a:42:99:73:3a:3e:73:e4:b7:d9:90:d7: 95:b2:bb:de:63:ea:e8:fd:40:0f:23:d4:ac:d6:fe: 4a:dc:51:e7:1d:57:bb:a0:7e:86:f2:9f:f2:f1:56: 85:21:89:40:0d:5e:ae:cc:b7:16:49:be:79:9f:06: 2e:88:6a:be:a1:ec:a4:d9:06:a9:f6:df:a9:21:cf: e7:3e:a7:2c:10:f2:e3:6f:ad:e5:1d:ab:b3:49:4a: af:2e:c2:bf:7d:b0:e9:d8:8c:0e:0f:38:17:5b:04: a3:6b:99:ee:52:5d:af:22:4f:85:1f:8c:d7:bc:a6: 01:1b:a4:b6:54:7e:8b:5c:8f:26:a2:22:54:5c:da: 8e:38:e3:fb:7c:45:a3:0b:56:45:85:ce:43:03:c0: 23:af:7a:68:62:df:d0:7b:71:8a:4a:35:06:71:c2: 76:81:9c:d1:16:95:73:02:34:bd:5c:ac:04:45:1e: 31:9c:e7:fe:45:74:6c:18:ba:6f:03:52:ce:8e:86: 62:ba:d6:a9:79:11:4b:50:ff:aa:16:5d:da:9d:ca: 79:02:10:ba:5b:7f:12:c7:9a:2c:1c:40:87:80:ac: 52:2b:96:c9:e2:a6:d1:ca:96:01:cb:6c:a6:a9:f6: 2b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:A7:F8:14:3F:22:61:74:25:6D:69:DF:55:8A:A8:B6:97:C4:B2:92 X509v3 Authority Key Identifier: keyid:2A:6B:F0:54:AD:23:EA:D2:DB:39:53:1B:64:67:26:CA:94:5A:C4:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918AB7E/F759796E088111F0BAC3413EC4F9AE02/KmvwVK0j6tLbOVMbZGcmypRaxJI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KmvwVK0j6tLbOVMbZGcmypRaxJI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AB7E/F759796E088111F0BAC3413EC4F9AE02/KmvwVK0j6tLbOVMbZGcmypRaxJI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:7e:9d:aa:06:a5:7d:93:ef:e4:fa:af:ad:af:6d:a6:a7:6e: 7c:e1:1d:72:61:9a:7a:3e:be:07:61:6a:01:ca:e9:f5:05:69: 9f:6b:4d:7c:78:45:5e:96:ec:59:d2:21:9f:a4:6c:59:69:ad: 06:3c:14:20:df:d3:7a:4b:54:72:31:25:ae:e2:78:73:e9:93: e4:5f:92:15:6d:2b:6e:47:5d:0f:a7:db:30:25:c3:a1:05:9a: 34:62:35:47:4d:94:a0:37:8d:f8:7d:53:03:79:43:24:d3:36: 63:b9:e8:f5:bd:bb:8b:69:4d:73:22:c6:36:6f:2d:f0:a8:14: 48:7e:24:4e:31:53:5c:fd:46:bd:e1:3e:7f:2b:ec:0d:d1:2d: 7b:41:7f:bd:52:ba:60:f0:87:16:18:21:71:b8:2f:33:db:9c: 5b:c9:b5:67:aa:d8:84:0c:1f:5d:2f:1e:86:9a:a9:fb:ce:17: 02:c4:9f:4e:2a:6b:d8:c1:aa:a8:e5:ae:d9:30:4f:01:fe:97: 48:87:55:44:7a:dd:7b:bc:e6:d1:a2:d5:5a:d7:1f:46:e6:08: a6:9d:56:9d:bf:37:7d:93:06:ea:38:43:95:db:e8:f0:fe:a8: 7b:49:ee:5f:f6:35:47:9b:9c:94:b5:2a:d6:22:95:c8:d2:f5: 80:c2:cf:44 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QUI3RTExMC8GA1UEBRMoMkE2QkYwNTRBRDIzRUFEMkRCMzk1MzFCNjQ2NzI2Q0E5 NDVBQzQ5MjAeFw0yNTA0MjcwNjUwNTNaFw0yNTA1MDQwNjUwNTNaMBgxFjAUBgNV BAMTDTY4MGRkM2NkLTUyZjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/SlB9wPRn9VGy3m+PKeEFXYpCmXM6PnPkt9mQ15Wyu95j6uj9QA8j1KzW/krc UecdV7ugfobyn/LxVoUhiUANXq7MtxZJvnmfBi6Iar6h7KTZBqn236khz+c+pywQ 8uNvreUdq7NJSq8uwr99sOnYjA4POBdbBKNrme5SXa8iT4UfjNe8pgEbpLZUfotc jyaiIlRc2o444/t8RaMLVkWFzkMDwCOvemhi39B7cYpKNQZxwnaBnNEWlXMCNL1c rARFHjGc5/5FdGwYum8DUs6OhmK61ql5EUtQ/6oWXdqdynkCELpbfxLHmiwcQIeA rFIrlsniptHKlgHLbKap9iutAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIKf4FD8i YXQlbWnfVYqotpfEspIwHwYDVR0jBBgwFoAUKmvwVK0j6tLbOVMbZGcmypRaxJIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThBQjdFL0Y3NTk3OTZFMDg4 MTExRjBCQUMzNDEzRUM0RjlBRTAyL0ttdndWSzBqNnRMYk9WTWJaR2NteXBSYXhK SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvS212d1ZLMGo2dExiT1ZNYlpHY215cFJheEpJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThB QjdFL0Y3NTk3OTZFMDg4MTExRjBCQUMzNDEzRUM0RjlBRTAyL0ttdndWSzBqNnRM Yk9WTWJaR2NteXBSYXhKSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADV+naoGpX2T7+T6r62vbaanbnzhHXJhmno+vgdhagHK6fUFaZ9rTXx4 RV6W7FnSIZ+kbFlprQY8FCDf03pLVHIxJa7ieHPpk+RfkhVtK25HXQ+n2zAlw6EF mjRiNUdNlKA3jfh9UwN5QyTTNmO56PW9u4tpTXMixjZvLfCoFEh+JE4xU1z9Rr3h Pn8r7A3RLXtBf71SumDwhxYYIXG4LzPbnFvJtWeq2IQMH10vHoaaqfvOFwLEn04q a9jBqqjlrtkwTwH+l0iHVUR63Xu85tGi1VrXH0bmCKadVp2/N32TBuo4Q5Xb6PD+ qHtJ7l/2NUebnJS1KtYilcjS9YDCz0Q= -----END CERTIFICATE-----Generated at Sun Apr 27 10:27:18 2025 by rpki-client on console.sobornost.net