$ rpki-client -vvf rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.mft File: 9Avota0WsYR_wNT0cI-dQUkxq6Y.mft (raw, json) Hash identifier: WS9kAPoxPUiW+DIB/6Th99FyjAqCbkWd2gLAUE2hyO4= Subject key identifier: 6B:E5:73:6D:4F:F0:12:05:F6:E3:6A:88:08:61:3E:8C:36:E2:DA:27 Authority key identifier: F4:0B:E8:B5:AD:16:B1:84:7F:C0:D4:F4:70:8F:9D:41:49:31:AB:A6 Certificate issuer: /CN=A918BCEE/serialNumber=F40BE8B5AD16B1847FC0D4F4708F9D414931ABA6 Certificate serial: 02B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Avota0WsYR_wNT0cI-dQUkxq6Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.mft Manifest number: 028A Signing time: Sun 27 Apr 2025 01:25:49 +0000 Manifest this update: Sun 27 Apr 2025 01:25:49 +0000 Manifest next update: Sun 04 May 2025 01:25:49 +0000 Files and hashes: 1: 9Avota0WsYR_wNT0cI-dQUkxq6Y.crl (hash: W5cYVZ18uesYQXTuN974qBJupO4ew9MKWDs1Ou5KUmc=) 2: 214E67EA1EF911EDAAC3AE62C4F9AE02.roa (hash: a4uhbXD/6QpvqZpvGb3TRBkEFO6veICTLlQsVLL56TI=) 3: 36660EAE679E11EFBAD37686C4F9AE02.roa (hash: AxabGlp0IamL1AOMbCgBi5Y/mrLVivTXD8uMAD10h7U=) 4: E6E564502DD811EF8471C475C4F9AE02.roa (hash: Tr9asl+9bdm0TeSvn9r/O8sCMPe6OQ4Bqr4X3WrBuL8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.crl rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Avota0WsYR_wNT0cI-dQUkxq6Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 01:25:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 692 (0x2b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BCEE, serialNumber=F40BE8B5AD16B1847FC0D4F4708F9D414931ABA6 Validity Not Before: Apr 27 01:25:49 2025 GMT Not After : May 4 01:25:49 2025 GMT Subject: CN=680d879d-0e2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e9:70:2c:7d:2c:63:78:bc:d6:10:23:4a:41: 53:d6:1d:e2:17:58:41:89:62:87:5f:60:57:40:b6: 3b:96:8a:d2:0b:f9:9e:11:8d:9f:df:08:a2:36:87: 0f:a4:46:a8:3f:77:24:14:af:ea:06:bc:3c:15:a4: 23:07:3a:96:15:35:92:e4:ab:b4:14:05:6e:6a:9c: 57:b2:0e:14:1e:0f:ee:00:17:56:cd:88:fe:74:08: e1:1e:01:9f:c0:a0:f2:17:f2:27:2c:94:df:21:d3: 85:d4:df:0f:ae:42:55:9d:a0:50:b3:00:6f:e1:ff: 08:a9:1d:56:52:71:9d:1e:a8:15:b6:7f:09:af:73: 8c:85:a5:f1:ef:72:b1:ad:db:28:d7:f0:3a:71:82: 01:1d:42:86:9c:21:41:17:df:b6:d5:04:ac:1d:5e: 7e:99:a8:a9:8a:3e:b7:74:5b:a3:9f:6c:71:fb:6b: 84:2b:8a:6b:d4:d4:4e:c2:68:67:c7:e1:2d:4d:fd: ba:1e:ab:a2:5e:6b:97:53:81:aa:d0:b3:66:26:bd: ba:f7:ff:f2:3a:83:97:e1:97:1b:4b:cd:a2:18:8c: a9:6d:16:85:ad:dc:e6:3d:1e:12:d5:d6:06:6d:40: 1e:cd:24:b3:ae:b0:45:68:c6:87:25:91:50:3f:38: ce:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:E5:73:6D:4F:F0:12:05:F6:E3:6A:88:08:61:3E:8C:36:E2:DA:27 X509v3 Authority Key Identifier: keyid:F4:0B:E8:B5:AD:16:B1:84:7F:C0:D4:F4:70:8F:9D:41:49:31:AB:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Avota0WsYR_wNT0cI-dQUkxq6Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:c2:4f:06:98:3a:b9:db:aa:4d:58:dc:9f:d9:3b:ff:45:ad: d1:ad:30:c4:78:6c:cc:49:0d:8b:cc:90:c6:49:68:18:45:f6: 48:1d:23:d1:77:3d:11:d8:2b:26:3c:33:65:74:65:53:e5:2b: 03:de:23:88:94:47:8b:f8:40:dd:20:7e:50:ad:ec:af:f1:5c: ea:e7:c0:d8:7d:bc:43:7b:53:b5:86:2b:e9:8a:5e:07:ba:29: 2b:ef:cd:a4:9b:bf:59:70:90:38:f0:6a:31:42:0d:58:91:11: 65:7e:6d:bf:d7:9a:40:43:52:08:a2:4a:17:6b:16:cb:cc:0f: 09:e3:d6:30:51:dd:fe:da:e6:f7:e3:bd:f1:01:ca:2b:c8:94: 57:a5:02:33:d9:c7:03:65:49:85:21:6b:92:4d:21:d2:a7:ca: f1:ce:20:2d:65:37:4a:96:c6:5b:52:a9:0b:e5:1b:5b:81:b2: 67:64:5b:74:ac:ce:1a:0c:ee:ce:70:fc:ae:4c:b9:ba:7e:4c: 12:0d:9a:df:42:39:12:a9:ff:f6:4d:b1:7a:97:47:ea:91:02: 73:72:e5:d3:90:90:fc:4f:6c:b4:e6:83:b8:df:03:e9:e2:cf: 2c:7d:26:1e:aa:e6:e9:0c:c2:5e:e6:e7:15:76:47:c2:3b:da: 81:60:f2:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJDRUUxMTAvBgNVBAUTKEY0MEJFOEI1QUQxNkIxODQ3RkMwRDRGNDcwOEY5RDQx NDkzMUFCQTYwHhcNMjUwNDI3MDEyNTQ5WhcNMjUwNTA0MDEyNTQ5WjAYMRYwFAYD VQQDEw02ODBkODc5ZC0wZTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3elwLH0sY3i81hAjSkFT1h3iF1hBiWKHX2BXQLY7lorSC/meEY2f3wiiNocP pEaoP3ckFK/qBrw8FaQjBzqWFTWS5Ku0FAVuapxXsg4UHg/uABdWzYj+dAjhHgGf wKDyF/InLJTfIdOF1N8PrkJVnaBQswBv4f8IqR1WUnGdHqgVtn8Jr3OMhaXx73Kx rdso1/A6cYIBHUKGnCFBF9+21QSsHV5+maipij63dFujn2xx+2uEK4pr1NROwmhn x+EtTf26HquiXmuXU4Gq0LNmJr269//yOoOX4ZcbS82iGIypbRaFrdzmPR4S1dYG bUAezSSzrrBFaMaHJZFQPzjOUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGvlc21P 8BIF9uNqiAhhPow24tonMB8GA1UdIwQYMBaAFPQL6LWtFrGEf8DU9HCPnUFJMaum MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkNFRS82OEMzNTYzMDEz RkYxMUVEQTNGMzM5NDFDNEY5QUUwMi85QXZvdGEwV3NZUl93TlQwY0ktZFFVa3hx NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlBdm90YTBXc1lSX3dOVDBjSS1kUVVreHE2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkNFRS82OEMzNTYzMDEzRkYxMUVEQTNGMzM5NDFDNEY5QUUwMi85QXZvdGEwV3NZ Ul93TlQwY0ktZFFVa3hxNlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBawk8GmDq526pNWNyf2Tv/Ra3RrTDEeGzMSQ2LzJDGSWgYRfZIHSPR dz0R2CsmPDNldGVT5SsD3iOIlEeL+EDdIH5Qreyv8Vzq58DYfbxDe1O1hivpil4H uikr782km79ZcJA48GoxQg1YkRFlfm2/15pAQ1IIokoXaxbLzA8J49YwUd3+2ub3 473xAcoryJRXpQIz2ccDZUmFIWuSTSHSp8rxziAtZTdKlsZbUqkL5RtbgbJnZFt0 rM4aDO7OcPyuTLm6fkwSDZrfQjkSqf/2TbF6l0fqkQJzcuXTkJD8T2y05oO43wPp 4s8sfSYequbpDMJe5ucVdkfCO9qBYPJK -----END CERTIFICATE-----Generated at Sun Apr 27 05:42:13 2025 by rpki-client on console.sobornost.net