$ rpki-client -vvf rpki.apnic.net/member_repository/A918D0AA/365BCCEC7A3C11ED861B2933C4F9AE02/ChYfF3ryrIp11Br-R61A0quRh8o.mft File: ChYfF3ryrIp11Br-R61A0quRh8o.mft (raw, json) Hash identifier: HG9mUHhUmK9nG588JzPDIf6wxio3eH2LsBzJFGgEaAU= Subject key identifier: 9D:1C:E3:9B:B9:4C:59:47:DB:C3:86:F5:A4:4A:DB:8B:DB:6A:5D:7C Authority key identifier: 0A:16:1F:17:7A:F2:AC:8A:75:D4:1A:FE:47:AD:40:D2:AB:91:87:CA Certificate issuer: /CN=A918D0AA/serialNumber=0A161F177AF2AC8A75D41AFE47AD40D2AB9187CA Certificate serial: 01D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChYfF3ryrIp11Br-R61A0quRh8o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D0AA/365BCCEC7A3C11ED861B2933C4F9AE02/ChYfF3ryrIp11Br-R61A0quRh8o.mft Manifest number: 01CC Signing time: Sun 27 Apr 2025 02:05:23 +0000 Manifest this update: Sun 27 Apr 2025 02:05:22 +0000 Manifest next update: Sun 04 May 2025 02:05:22 +0000 Files and hashes: 1: ChYfF3ryrIp11Br-R61A0quRh8o.crl (hash: CxAhv1mvlWnpnIuVe9cfq00h5RQ7pMkfuWxPcuQ8qHE=) 2: 7817D2327A5C11EDA0156D76C4F9AE02.roa (hash: /aLZRZnVDc3gbgHvgjjTVhimEYu2WCp9inOhdZerK9k=) 3: 1376B9341FAE11F0B3E41E84C4F9AE02.roa (hash: 046Nkak/mvU2MIy/D/sQyHF4+9Nf/OVFcgvY3OIqwCQ=) 4: 130A89761FAE11F0B3E41E84C4F9AE02.roa (hash: 7uR7mk8CLJJlZZvBz+Qm2/sDak7TWidIc0rXMu5Xnkk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D0AA/365BCCEC7A3C11ED861B2933C4F9AE02/ChYfF3ryrIp11Br-R61A0quRh8o.crl rsync://rpki.apnic.net/member_repository/A918D0AA/365BCCEC7A3C11ED861B2933C4F9AE02/ChYfF3ryrIp11Br-R61A0quRh8o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChYfF3ryrIp11Br-R61A0quRh8o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:05:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 468 (0x1d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D0AA, serialNumber=0A161F177AF2AC8A75D41AFE47AD40D2AB9187CA Validity Not Before: Apr 27 02:05:22 2025 GMT Not After : May 4 02:05:22 2025 GMT Subject: CN=680d90e2-55b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8b:13:0d:42:4f:05:26:20:7f:09:6a:02:a1: 16:78:e5:74:94:11:d6:89:bc:67:66:81:2b:7e:21: 6b:79:c7:af:b5:20:69:55:9d:e6:a9:bb:43:be:c9: d0:71:c3:12:cb:1b:41:27:ba:d7:df:48:42:5f:8c: 93:af:8f:9b:d7:53:59:d5:df:1e:3b:14:ae:02:da: ef:9d:be:39:83:fe:cb:f0:77:77:88:2a:f6:d8:07: 28:45:e8:91:6d:21:4f:ad:9b:9c:89:52:af:b5:cb: 49:9b:48:c4:50:4e:f4:53:97:0d:b2:08:f8:c7:72: d4:3a:25:68:41:c1:f2:ee:77:14:a4:12:a7:11:7e: 31:2a:7a:3a:4f:44:03:58:e3:17:6b:f3:05:28:33: 7b:bb:03:66:56:61:8c:b9:c0:3e:40:9a:e7:c4:ff: d2:26:be:e5:8c:68:b6:48:9c:fa:25:6f:95:d2:94: 1f:d5:29:45:a3:71:27:ee:19:1c:8e:83:ec:78:1c: 8b:da:7c:ba:22:84:f7:d9:75:64:1b:33:13:9e:35: 75:04:a7:52:43:6f:e7:6b:4b:28:f1:9b:88:0c:97: ca:17:78:b1:92:bf:c9:96:69:31:7d:a3:60:2e:c1: fa:d8:55:0c:0c:a4:69:a1:40:76:93:ba:2d:e2:c3: b3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:1C:E3:9B:B9:4C:59:47:DB:C3:86:F5:A4:4A:DB:8B:DB:6A:5D:7C X509v3 Authority Key Identifier: keyid:0A:16:1F:17:7A:F2:AC:8A:75:D4:1A:FE:47:AD:40:D2:AB:91:87:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D0AA/365BCCEC7A3C11ED861B2933C4F9AE02/ChYfF3ryrIp11Br-R61A0quRh8o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChYfF3ryrIp11Br-R61A0quRh8o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D0AA/365BCCEC7A3C11ED861B2933C4F9AE02/ChYfF3ryrIp11Br-R61A0quRh8o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:99:0c:de:6e:9a:99:13:21:57:c8:56:4c:df:c0:d6:43:0c: 8c:0a:ea:33:fe:88:66:02:1b:f6:7d:9a:f0:e9:03:42:8f:62: 1f:8a:8d:69:1b:34:14:21:36:99:f9:e8:b9:d1:36:26:14:16: cb:72:1f:c3:1b:c0:b7:32:1a:0a:e9:9a:a0:f4:0d:ac:41:91: 9c:d4:9d:8b:9f:bf:d1:4c:ff:09:d2:10:bf:ae:80:ba:a6:f6: 3c:a9:6e:ec:a4:c1:97:a0:2f:a4:5a:af:27:ca:15:0e:c5:a8: e5:ba:d5:61:7b:6d:84:44:59:d6:cf:83:3d:55:b9:dd:6d:81: 1c:46:e6:dd:50:75:2b:b0:a5:fb:55:f9:cc:7c:39:13:54:e4: cb:7b:c5:8c:7c:57:3e:5b:aa:df:fc:85:d9:43:45:1a:b0:5f: da:fc:8e:23:dc:e7:f1:c5:a7:94:8f:75:08:6e:41:2a:24:08: 6a:32:04:2b:7c:45:92:ae:c8:a1:ce:5f:5e:e8:be:95:57:b9: 1f:b9:d8:75:1c:33:35:cc:ae:2d:2f:4c:a4:9f:21:7f:96:4a: d8:5c:5d:b9:ce:eb:d8:69:85:12:dd:76:0b:9d:83:96:dc:3d: 50:69:50:6b:87:d7:1d:7b:a8:87:a3:41:fa:d6:cd:2b:1d:14: 04:12:2d:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQwQUExMTAvBgNVBAUTKDBBMTYxRjE3N0FGMkFDOEE3NUQ0MUFGRTQ3QUQ0MEQy QUI5MTg3Q0EwHhcNMjUwNDI3MDIwNTIyWhcNMjUwNTA0MDIwNTIyWjAYMRYwFAYD VQQDEw02ODBkOTBlMi01NWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2IsTDUJPBSYgfwlqAqEWeOV0lBHWibxnZoErfiFrecevtSBpVZ3mqbtDvsnQ ccMSyxtBJ7rX30hCX4yTr4+b11NZ1d8eOxSuAtrvnb45g/7L8Hd3iCr22AcoReiR bSFPrZuciVKvtctJm0jEUE70U5cNsgj4x3LUOiVoQcHy7ncUpBKnEX4xKno6T0QD WOMXa/MFKDN7uwNmVmGMucA+QJrnxP/SJr7ljGi2SJz6JW+V0pQf1SlFo3En7hkc joPseByL2ny6IoT32XVkGzMTnjV1BKdSQ2/na0so8ZuIDJfKF3ixkr/JlmkxfaNg LsH62FUMDKRpoUB2k7ot4sOzkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ0c45u5 TFlH28OG9aRK24vbal18MB8GA1UdIwQYMBaAFAoWHxd68qyKddQa/ketQNKrkYfK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDBBQS8zNjVCQ0NFQzdB M0MxMUVEODYxQjI5MzNDNEY5QUUwMi9DaFlmRjNyeXJJcDExQnItUjYxQTBxdVJo OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NoWWZGM3J5cklwMTFCci1SNjFBMHF1Umg4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDBBQS8zNjVCQ0NFQzdBM0MxMUVEODYxQjI5MzNDNEY5QUUwMi9DaFlmRjNyeXJJ cDExQnItUjYxQTBxdVJoOG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhmQzebpqZEyFXyFZM38DWQwyMCuoz/ohmAhv2fZrw6QNCj2Ifio1p GzQUITaZ+ei50TYmFBbLch/DG8C3MhoK6Zqg9A2sQZGc1J2Ln7/RTP8J0hC/roC6 pvY8qW7spMGXoC+kWq8nyhUOxajlutVhe22ERFnWz4M9VbndbYEcRubdUHUrsKX7 VfnMfDkTVOTLe8WMfFc+W6rf/IXZQ0UasF/a/I4j3OfxxaeUj3UIbkEqJAhqMgQr fEWSrsihzl9e6L6VV7kfudh1HDM1zK4tL0yknyF/lkrYXF25zuvYaYUS3XYLnYOW 3D1QaVBrh9cde6iHo0H61s0rHRQEEi0Q -----END CERTIFICATE-----Generated at Sun Apr 27 05:42:13 2025 by rpki-client on console.sobornost.net