$ rpki-client -vvf rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.mft File: XiM50eqvU0mhOKR5fagtDrTfqew.mft (raw, json) Hash identifier: QGG6P3vifaYM1eVVsIJCCSim76bU6aavPMCzVb4HSmA= Subject key identifier: 1A:32:D7:C1:28:00:26:BA:6D:E3:D8:E7:0D:95:18:53:63:8D:CC:FE Authority key identifier: 5E:23:39:D1:EA:AF:53:49:A1:38:A4:79:7D:A8:2D:0E:B4:DF:A9:EC Certificate issuer: /CN=A918CFAD/serialNumber=5E2339D1EAAF5349A138A4797DA82D0EB4DFA9EC Certificate serial: CE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XiM50eqvU0mhOKR5fagtDrTfqew.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.mft Manifest number: CC Signing time: Sun 27 Apr 2025 04:42:00 +0000 Manifest this update: Sun 27 Apr 2025 04:41:59 +0000 Manifest next update: Sun 04 May 2025 04:41:59 +0000 Files and hashes: 1: XiM50eqvU0mhOKR5fagtDrTfqew.crl (hash: 12Yy3eW5pE86M1Hd3ntWhuXGakHYJ0I+SRlK+E25hFs=) 2: D161B1F0EA0411EE98A86A13C4F9AE02.roa (hash: +NOhwE6m6lpwH5XuFy8HqU1ULWBp+YrGh21v4UoRt+M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.crl rsync://rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XiM50eqvU0mhOKR5fagtDrTfqew.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 206 (0xce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CFAD, serialNumber=5E2339D1EAAF5349A138A4797DA82D0EB4DFA9EC Validity Not Before: Apr 27 04:41:59 2025 GMT Not After : May 4 04:41:59 2025 GMT Subject: CN=680db598-5b60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:31:a0:2e:e5:8a:e4:ac:d0:ef:68:7c:fc:8f: 62:d5:49:ad:a4:da:c3:5a:7f:7b:cb:12:1d:b5:36: 33:bd:b6:02:f5:8e:17:1b:b0:87:10:0f:82:01:14: 53:ef:4d:cc:af:23:9e:d2:7f:c1:23:c8:51:ea:cc: cb:59:d8:84:39:c6:d4:f5:5d:d8:db:77:e7:b3:78: 0e:4c:e1:89:2c:98:d9:11:40:10:87:f8:c1:d8:8a: 2d:9f:c3:74:e5:03:41:3c:c9:aa:dc:9a:05:18:d5: 91:f3:2d:14:c2:ef:61:4d:3f:37:c8:be:40:b8:3d: e5:20:ed:80:7f:47:1f:66:90:d5:17:43:d7:46:89: a9:40:8a:0f:e9:bf:9b:03:9f:56:26:8a:ff:6d:4a: 31:39:1f:4a:53:1b:e0:5c:50:78:f1:3d:72:f9:72: 83:84:0f:7d:ab:e8:37:53:22:73:80:fe:20:9a:12: 5a:2f:b4:66:28:ca:78:58:b8:d9:4f:a3:ed:7f:c9: 82:f9:10:b8:d5:9d:5e:c9:5a:a5:32:20:14:81:59: 79:39:3e:9d:c6:65:40:30:81:29:5a:39:d2:f7:ac: 15:86:1a:d9:86:10:d7:32:9e:4a:b7:e5:df:15:cd: 75:b0:5b:11:b9:5a:24:bf:63:34:9e:96:6c:c8:96: 37:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:32:D7:C1:28:00:26:BA:6D:E3:D8:E7:0D:95:18:53:63:8D:CC:FE X509v3 Authority Key Identifier: keyid:5E:23:39:D1:EA:AF:53:49:A1:38:A4:79:7D:A8:2D:0E:B4:DF:A9:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XiM50eqvU0mhOKR5fagtDrTfqew.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:dd:ca:33:ed:5c:39:1f:6e:cb:1b:1d:d5:36:2d:10:50:13: 7c:88:be:72:ab:29:3c:51:32:1e:69:95:b8:c3:4a:3c:e7:b4: 48:ad:fa:74:e3:d1:a3:a4:44:f4:17:02:b7:5c:c8:b9:f0:26: f1:b8:49:c5:cc:1a:c5:d4:3a:9f:8a:cc:ef:b9:9f:4f:e7:43: ae:58:41:87:ce:58:ae:6c:59:fb:b2:8e:4c:09:c5:54:78:ab: ba:ab:02:6a:c4:d5:0a:28:d6:37:90:fc:2e:3c:c7:ef:c0:8f: cb:f7:48:1a:e0:ca:10:b2:22:51:46:c2:1c:5c:e3:02:5d:eb: 49:5f:67:f3:1f:3f:8d:01:6a:de:ad:82:90:11:fe:f5:11:e2: bb:2c:a9:87:28:8d:47:3f:e9:7b:33:43:16:f7:c9:b0:96:d1: 4e:16:35:18:fc:3c:cb:f6:47:0b:04:d0:fe:63:6f:05:9c:a8: 22:aa:75:d4:8e:98:6c:8b:58:ee:2a:d1:66:46:30:1c:21:ee: f8:a3:1f:a3:e2:41:ed:15:34:8d:eb:21:b6:19:dd:81:ed:19: d4:61:f8:10:cc:bb:26:64:bb:4c:12:a7:f6:65:bf:a6:26:93: 48:01:62:4c:46:aa:b3:9c:ee:bd:3f:ce:75:c8:cd:d5:64:fe: be:cd:db:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENGQUQxMTAvBgNVBAUTKDVFMjMzOUQxRUFBRjUzNDlBMTM4QTQ3OTdEQTgyRDBF QjRERkE5RUMwHhcNMjUwNDI3MDQ0MTU5WhcNMjUwNTA0MDQ0MTU5WjAYMRYwFAYD VQQDEw02ODBkYjU5OC01YjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwjGgLuWK5KzQ72h8/I9i1UmtpNrDWn97yxIdtTYzvbYC9Y4XG7CHEA+CARRT 703MryOe0n/BI8hR6szLWdiEOcbU9V3Y23fns3gOTOGJLJjZEUAQh/jB2Iotn8N0 5QNBPMmq3JoFGNWR8y0Uwu9hTT83yL5AuD3lIO2Af0cfZpDVF0PXRompQIoP6b+b A59WJor/bUoxOR9KUxvgXFB48T1y+XKDhA99q+g3UyJzgP4gmhJaL7RmKMp4WLjZ T6Ptf8mC+RC41Z1eyVqlMiAUgVl5OT6dxmVAMIEpWjnS96wVhhrZhhDXMp5Kt+Xf Fc11sFsRuVokv2M0npZsyJY3UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBoy18Eo ACa6bePY5w2VGFNjjcz+MB8GA1UdIwQYMBaAFF4jOdHqr1NJoTikeX2oLQ6036ns MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0ZBRC80QzkwMEYxQ0VB MDQxMUVFOTJEMTA2MTFDNEY5QUUwMi9YaU01MGVxdlUwbWhPS1I1ZmFndERyVGZx ZXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1hpTTUwZXF2VTBtaE9LUjVmYWd0RHJUZnFldy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0ZBRC80QzkwMEYxQ0VBMDQxMUVFOTJEMTA2MTFDNEY5QUUwMi9YaU01MGVxdlUw bWhPS1I1ZmFndERyVGZxZXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA13coz7Vw5H27LGx3VNi0QUBN8iL5yqyk8UTIeaZW4w0o857RIrfp0 49GjpET0FwK3XMi58CbxuEnFzBrF1DqfiszvuZ9P50OuWEGHzliubFn7so5MCcVU eKu6qwJqxNUKKNY3kPwuPMfvwI/L90ga4MoQsiJRRsIcXOMCXetJX2fzHz+NAWre rYKQEf71EeK7LKmHKI1HP+l7M0MW98mwltFOFjUY/DzL9kcLBND+Y28FnKgiqnXU jphsi1juKtFmRjAcIe74ox+j4kHtFTSN6yG2Gd2B7RnUYfgQzLsmZLtMEqf2Zb+m JpNIAWJMRqqznO69P851yM3VZP6+zdsb -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:51 2025 by rpki-client on console.sobornost.net