$ rpki-client -vvf rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft File: PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft (raw, json) Hash identifier: DZJiuuWfyCcqfiVw8mIV49yJgX8w39p5CBkxsQN/bSY= Subject key identifier: 0E:ED:38:39:AA:27:C5:EF:25:6F:7C:BB:40:32:26:AC:BC:D1:2C:11 Authority key identifier: 3C:AA:EA:F1:B0:D4:BF:63:17:AE:4F:1E:54:63:79:BF:F3:46:CF:D3 Certificate issuer: /CN=A918D663/serialNumber=3CAAEAF1B0D4BF6317AE4F1E546379BFF346CFD3 Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PKrq8bDUv2MXrk8eVGN5v_NGz9M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft Manifest number: 0B Signing time: Sun 27 Apr 2025 06:57:29 +0000 Manifest this update: Sun 27 Apr 2025 06:57:29 +0000 Manifest next update: Sun 04 May 2025 06:57:29 +0000 Files and hashes: 1: PKrq8bDUv2MXrk8eVGN5v_NGz9M.crl (hash: AplsUbYad81tes+VsUvx6B+YYRfZHGuwvULulbAv8DQ=) 2: 8BACF000172811F0B074151EC4F9AE02.roa (hash: ZKoMpxvl06JDEHPwPvY04s64aILLwwH0kpQN+XzmWw8=) 3: 8C215ED6172811F0B074151EC4F9AE02.roa (hash: QaVxitn1fI1JNxNdOxFRN5URfiNEZoLOemGjg0zo0Tg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.crl rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PKrq8bDUv2MXrk8eVGN5v_NGz9M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D663, serialNumber=3CAAEAF1B0D4BF6317AE4F1E546379BFF346CFD3 Validity Not Before: Apr 27 06:57:29 2025 GMT Not After : May 4 06:57:29 2025 GMT Subject: CN=680dd559-175f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1b:51:77:74:42:48:a2:17:1b:72:c2:99:a8: 63:7a:f5:bc:8a:3a:b2:08:81:db:fa:6f:89:0a:cf: 08:85:de:55:bd:11:9d:8b:17:72:d3:e3:fe:b9:8b: 69:67:51:ce:a9:ec:a3:4d:00:17:27:36:d5:42:23: 11:ae:c0:19:0c:7e:92:4b:6d:3c:a7:23:03:85:d9: ec:c5:18:7f:5d:a3:05:8e:05:d7:5e:ef:bb:62:bf: 88:f2:2f:25:bd:0e:8d:46:1b:ca:eb:51:8a:04:a4: 49:c3:ad:6f:62:e3:bb:b0:13:29:d2:09:e0:48:1b: b4:74:43:98:65:d6:e2:ca:ab:32:fb:25:cd:af:51: 32:3c:12:cc:1c:3e:f6:de:6e:ff:0b:55:a5:b4:ab: bf:b6:6c:36:fb:07:41:c2:50:90:5a:26:37:21:52: f5:51:3f:a0:13:a8:f9:8e:aa:19:d0:56:3f:e8:44: f3:0d:1b:95:55:b7:14:ec:9f:46:4d:5d:e9:2b:a9: 74:dc:1a:96:f3:e3:e0:8c:bd:7b:c8:41:30:00:2c: 9c:75:26:97:ad:13:de:84:af:d6:8b:1e:f6:5d:bf: 5f:4a:0c:2f:de:ec:bc:45:dd:f1:85:d1:40:e0:c8: 4f:6c:4b:be:20:87:c3:7d:7c:4c:ec:89:73:81:f2: 40:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:ED:38:39:AA:27:C5:EF:25:6F:7C:BB:40:32:26:AC:BC:D1:2C:11 X509v3 Authority Key Identifier: keyid:3C:AA:EA:F1:B0:D4:BF:63:17:AE:4F:1E:54:63:79:BF:F3:46:CF:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PKrq8bDUv2MXrk8eVGN5v_NGz9M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:a9:6d:7d:f1:e9:22:62:8b:72:4d:74:9a:b1:53:8c:08:f6: 26:29:dd:74:58:26:f0:ad:36:68:48:3a:17:9a:e2:3c:da:8d: 72:23:36:b4:f9:34:63:e8:14:62:48:41:76:68:0e:c7:bc:05: ab:fc:06:c6:5c:6a:56:ef:83:6b:e3:3b:aa:0e:af:60:21:d1: 88:59:62:58:a8:23:d4:c1:81:0a:60:11:a5:e5:78:af:50:06: ca:4c:f3:c6:30:41:6b:a6:41:b8:a1:49:7b:3d:ad:7f:6e:a1: 9d:3b:83:3b:d2:1d:5b:29:40:71:4e:d5:e6:7d:25:62:d5:ac: f3:0c:b2:b1:82:53:67:a4:31:9f:82:60:69:1d:b2:ca:72:2c: c0:f0:e7:c8:e5:d8:70:20:19:7a:6d:49:93:c4:e6:be:d9:6e: 3c:a1:2b:8a:67:f7:bb:49:f5:be:b3:c0:9b:52:12:32:f5:51: 29:4f:ce:0e:2a:a7:6a:f0:38:d9:4d:42:bf:40:d3:fb:56:f8: 8b:d0:65:a2:b8:23:b9:94:39:93:1b:61:39:78:0c:ab:b9:44: 46:f6:75:69:b0:c0:34:0a:9c:c0:65:b7:a8:89:ba:96:04:71: 7a:a3:cb:40:80:70:66:41:37:2f:4b:70:6c:a6:53:17:b2:e3: 61:eb:5d:e6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RDY2MzExMC8GA1UEBRMoM0NBQUVBRjFCMEQ0QkY2MzE3QUU0RjFFNTQ2Mzc5QkZG MzQ2Q0ZEMzAeFw0yNTA0MjcwNjU3MjlaFw0yNTA1MDQwNjU3MjlaMBgxFjAUBgNV BAMTDTY4MGRkNTU5LTE3NWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJG1F3dEJIohcbcsKZqGN69byKOrIIgdv6b4kKzwiF3lW9EZ2LF3LT4/65i2ln Uc6p7KNNABcnNtVCIxGuwBkMfpJLbTynIwOF2ezFGH9dowWOBdde77tiv4jyLyW9 Do1GG8rrUYoEpEnDrW9i47uwEynSCeBIG7R0Q5hl1uLKqzL7Jc2vUTI8EswcPvbe bv8LVaW0q7+2bDb7B0HCUJBaJjchUvVRP6ATqPmOqhnQVj/oRPMNG5VVtxTsn0ZN XekrqXTcGpbz4+CMvXvIQTAALJx1JpetE96Er9aLHvZdv19KDC/e7LxF3fGF0UDg yE9sS74gh8N9fEzsiXOB8kCfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDu04Oaon xe8lb3y7QDImrLzRLBEwHwYDVR0jBBgwFoAUPKrq8bDUv2MXrk8eVGN5v/NGz9Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThENjYzLzdBQzk2NzlFMTcy MDExRjBCNzQyMjM0RUM0RjlBRTAyL1BLcnE4YkRVdjJNWHJrOGVWR041dl9OR3o5 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUEtycThiRFV2Mk1Ycms4ZVZHTjV2X05HejlNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThE NjYzLzdBQzk2NzlFMTcyMDExRjBCNzQyMjM0RUM0RjlBRTAyL1BLcnE4YkRVdjJN WHJrOGVWR041dl9OR3o5TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJipbX3x6SJii3JNdJqxU4wI9iYp3XRYJvCtNmhIOhea4jzajXIjNrT5 NGPoFGJIQXZoDse8Bav8BsZcalbvg2vjO6oOr2Ah0YhZYlioI9TBgQpgEaXleK9Q BspM88YwQWumQbihSXs9rX9uoZ07gzvSHVspQHFO1eZ9JWLVrPMMsrGCU2ekMZ+C YGkdsspyLMDw58jl2HAgGXptSZPE5r7ZbjyhK4pn97tJ9b6zwJtSEjL1USlPzg4q p2rwONlNQr9A0/tW+IvQZaK4I7mUOZMbYTl4DKu5REb2dWmwwDQKnMBlt6iJupYE cXqjy0CAcGZBNy9LcGymUxey42HrXeY= -----END CERTIFICATE-----Generated at Sun Apr 27 10:27:18 2025 by rpki-client on console.sobornost.net