$ rpki-client -vvf rpki.apnic.net/member_repository/A918BB4D/C07E1CD0652211EB80F6E94BC4F9AE02/FjMp9XBd6bwiNaxX11T5gHjH9Ss.mft File: FjMp9XBd6bwiNaxX11T5gHjH9Ss.mft (raw, json) Hash identifier: Ah24a7Wa79/6wu0Apsfvew1LdBunBEQNMn4jJ5xNAQA= Subject key identifier: 1F:C3:43:34:0E:FC:A3:8C:6C:F0:35:90:2E:56:72:8C:71:47:01:AB Authority key identifier: 16:33:29:F5:70:5D:E9:BC:22:35:AC:57:D7:54:F9:80:78:C7:F5:2B Certificate issuer: /CN=A918BB4D/serialNumber=163329F5705DE9BC2235AC57D754F98078C7F52B Certificate serial: 0695 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FjMp9XBd6bwiNaxX11T5gHjH9Ss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BB4D/C07E1CD0652211EB80F6E94BC4F9AE02/FjMp9XBd6bwiNaxX11T5gHjH9Ss.mft Manifest number: 0695 Signing time: Thu 24 Apr 2025 22:01:15 +0000 Manifest this update: Thu 24 Apr 2025 22:01:14 +0000 Manifest next update: Thu 01 May 2025 22:01:14 +0000 Files and hashes: 1: FjMp9XBd6bwiNaxX11T5gHjH9Ss.crl (hash: dbz07C2XGKbu3M9qN7VkpXxyIucl19EmypM7b+8z4T8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BB4D/C07E1CD0652211EB80F6E94BC4F9AE02/FjMp9XBd6bwiNaxX11T5gHjH9Ss.crl rsync://rpki.apnic.net/member_repository/A918BB4D/C07E1CD0652211EB80F6E94BC4F9AE02/FjMp9XBd6bwiNaxX11T5gHjH9Ss.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FjMp9XBd6bwiNaxX11T5gHjH9Ss.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1685 (0x695) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BB4D, serialNumber=163329F5705DE9BC2235AC57D754F98078C7F52B Validity Not Before: Apr 24 22:01:14 2025 GMT Not After : May 1 22:01:14 2025 GMT Subject: CN=680ab4ab-3192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6e:5b:9c:98:83:e7:3b:2a:a1:9d:d7:20:e1: 42:40:8c:35:bc:6d:1f:da:5d:47:47:6e:1a:42:5f: dc:37:ba:9b:d6:32:e6:2c:68:c9:be:46:f3:d6:33: cc:92:9c:03:84:8c:bc:53:6f:63:6f:fb:1f:29:3c: 44:50:f8:f2:92:be:a0:e8:97:de:e2:52:09:24:7d: b7:30:91:93:85:86:86:d2:91:99:9d:f1:46:eb:a8: 6c:cf:d5:5f:3c:19:1b:2d:f3:22:1f:34:3e:60:07: 5c:15:de:a6:66:b7:ab:8e:6f:2f:1a:dd:80:ea:ff: fe:34:df:45:09:ee:fb:22:40:06:f0:51:1a:52:ad: 53:e5:0b:62:57:75:0e:2c:59:0c:43:ca:b7:50:5c: 94:30:4b:e9:0e:c4:e4:bd:8c:58:61:c9:f2:15:77: ea:21:a0:98:8e:ef:0f:a8:98:7f:ce:f6:76:68:2f: 20:13:22:98:9d:66:69:81:91:c2:6b:35:76:ad:7b: 47:4a:68:81:cf:a3:65:ca:b7:59:74:a9:ea:81:00: 93:b5:07:ab:f6:1b:49:df:24:94:bd:be:ea:62:aa: 6c:b8:bc:19:1c:66:f5:6b:a6:d0:62:f3:a4:4f:01: 8b:e2:92:d2:1e:74:1c:8e:d1:bf:37:eb:e5:9c:14: cb:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:C3:43:34:0E:FC:A3:8C:6C:F0:35:90:2E:56:72:8C:71:47:01:AB X509v3 Authority Key Identifier: keyid:16:33:29:F5:70:5D:E9:BC:22:35:AC:57:D7:54:F9:80:78:C7:F5:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BB4D/C07E1CD0652211EB80F6E94BC4F9AE02/FjMp9XBd6bwiNaxX11T5gHjH9Ss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FjMp9XBd6bwiNaxX11T5gHjH9Ss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BB4D/C07E1CD0652211EB80F6E94BC4F9AE02/FjMp9XBd6bwiNaxX11T5gHjH9Ss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:17:01:86:f4:1c:22:02:c8:bb:c9:29:00:85:82:0a:72:fb: 95:b2:56:4a:7b:2c:f7:0a:8c:01:21:27:e9:b1:fa:e2:cc:45: 9a:e4:a2:67:62:76:e8:0e:b7:df:82:29:65:2f:38:3e:53:ad: 04:16:d6:4a:84:ea:24:13:aa:5b:c1:4b:da:c3:8a:a3:55:be: b6:fd:ee:91:14:b3:7e:16:dd:20:45:ae:c5:d3:53:58:39:5b: 29:5e:51:14:11:a1:70:3d:b0:a4:6a:b2:ca:85:69:01:33:a8: 35:9e:e1:70:3d:b3:fc:99:a4:f1:e1:15:f9:1d:4e:b2:8a:25: a3:0d:6e:58:dc:af:18:aa:79:e7:22:4e:df:e2:43:33:9d:07: 59:de:7e:2d:99:b4:81:36:74:c8:38:22:2d:7b:8f:1b:f5:63: da:ad:bf:41:c1:d1:7c:ae:62:2c:8c:5e:84:8f:e5:3e:dd:48: 26:41:fc:13:9b:ef:12:af:1b:2e:62:cf:ad:5e:32:54:86:28: 9d:b0:c6:40:a2:5e:6a:e3:33:3d:2d:cf:17:a1:cc:05:98:61: 23:c4:47:80:be:85:2d:f3:95:0a:55:fb:a2:2d:18:39:01:8f: ae:cc:60:d1:07:41:53:00:9c:09:c4:39:2c:17:2a:95:81:50: ce:72:f0:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJCNEQxMTAvBgNVBAUTKDE2MzMyOUY1NzA1REU5QkMyMjM1QUM1N0Q3NTRGOTgw NzhDN0Y1MkIwHhcNMjUwNDI0MjIwMTE0WhcNMjUwNTAxMjIwMTE0WjAYMRYwFAYD VQQDEw02ODBhYjRhYi0zMTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvW5bnJiD5zsqoZ3XIOFCQIw1vG0f2l1HR24aQl/cN7qb1jLmLGjJvkbz1jPM kpwDhIy8U29jb/sfKTxEUPjykr6g6Jfe4lIJJH23MJGThYaG0pGZnfFG66hsz9Vf PBkbLfMiHzQ+YAdcFd6mZrerjm8vGt2A6v/+NN9FCe77IkAG8FEaUq1T5QtiV3UO LFkMQ8q3UFyUMEvpDsTkvYxYYcnyFXfqIaCYju8PqJh/zvZ2aC8gEyKYnWZpgZHC azV2rXtHSmiBz6NlyrdZdKnqgQCTtQer9htJ3ySUvb7qYqpsuLwZHGb1a6bQYvOk TwGL4pLSHnQcjtG/N+vlnBTLjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB/DQzQO /KOMbPA1kC5WcoxxRwGrMB8GA1UdIwQYMBaAFBYzKfVwXem8IjWsV9dU+YB4x/Ur MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkI0RC9DMDdFMUNEMDY1 MjIxMUVCODBGNkU5NEJDNEY5QUUwMi9Gak1wOVhCZDZid2lOYXhYMTFUNWdIakg5 U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0ZqTXA5WEJkNmJ3aU5heFgxMVQ1Z0hqSDlTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkI0RC9DMDdFMUNEMDY1MjIxMUVCODBGNkU5NEJDNEY5QUUwMi9Gak1wOVhCZDZi d2lOYXhYMTFUNWdIakg5U3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7FwGG9BwiAsi7ySkAhYIKcvuVslZKeyz3CowBISfpsfrizEWa5KJn YnboDrffgillLzg+U60EFtZKhOokE6pbwUvaw4qjVb62/e6RFLN+Ft0gRa7F01NY OVspXlEUEaFwPbCkarLKhWkBM6g1nuFwPbP8maTx4RX5HU6yiiWjDW5Y3K8Yqnnn Ik7f4kMznQdZ3n4tmbSBNnTIOCIte48b9WParb9BwdF8rmIsjF6Ej+U+3UgmQfwT m+8SrxsuYs+tXjJUhiidsMZAol5q4zM9Lc8XocwFmGEjxEeAvoUt85UKVfuiLRg5 AY+uzGDRB0FTAJwJxDksFyqVgVDOcvBU -----END CERTIFICATE-----Generated at Fri Apr 25 08:24:05 2025 by rpki-client on console.sobornost.net