$ rpki-client -vvf rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.mft File: RwHPLSggCdbG6vRVb7DcGw1VV-8.mft (raw, json) Hash identifier: dGFm/2OOphx/jOqZsvNXGJcG7iPdDPwGQDLhNDYEUug= Subject key identifier: AD:09:A5:F1:37:E2:D0:C9:11:DB:68:65:E1:6C:87:64:BE:C3:9B:39 Authority key identifier: 47:01:CF:2D:28:20:09:D6:C6:EA:F4:55:6F:B0:DC:1B:0D:55:57:EF Certificate issuer: /CN=A918DAC5/serialNumber=4701CF2D282009D6C6EAF4556FB0DC1B0D5557EF Certificate serial: 50 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwHPLSggCdbG6vRVb7DcGw1VV-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.mft Manifest number: 4F Signing time: Fri 25 Apr 2025 06:17:08 +0000 Manifest this update: Fri 25 Apr 2025 06:17:08 +0000 Manifest next update: Fri 02 May 2025 06:17:08 +0000 Files and hashes: 1: RwHPLSggCdbG6vRVb7DcGw1VV-8.crl (hash: 9DB/aBr2U8YAt6WisvkDjZnDXHKQ0EYOs2oA4mD9KUM=) 2: 3C7C5FF8ABDE11EF8DBC8E15C4F9AE02.roa (hash: ewpedKUZb61m1VLcsAn7GYfV7OReNryZEeFprMQVt3Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.crl rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwHPLSggCdbG6vRVb7DcGw1VV-8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 80 (0x50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918DAC5, serialNumber=4701CF2D282009D6C6EAF4556FB0DC1B0D5557EF Validity Not Before: Apr 25 06:17:08 2025 GMT Not After : May 2 06:17:08 2025 GMT Subject: CN=680b28e4-829c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9e:86:0b:32:ae:48:c1:1e:22:54:de:8c:05: b4:d5:a5:a6:4a:21:1f:88:44:4a:6f:ba:fe:1e:64: 32:21:b2:b2:57:82:88:d4:65:a7:c2:09:a9:8f:44: 70:c0:02:c4:1c:72:6f:b0:f3:a8:06:0f:8c:cc:5d: f0:d1:ef:c4:eb:d4:e2:ae:cf:9a:6e:8a:d3:cc:67: 77:3e:3c:65:ca:50:92:8f:63:ed:ca:db:53:d7:0f: a3:e3:e4:ea:68:8a:b1:cb:82:b8:d1:5f:d7:58:cf: e4:0e:20:33:c6:cf:c3:37:88:d7:50:59:79:f7:24: 0a:b9:f1:a5:df:f5:4e:19:5f:07:a2:32:44:c3:84: 83:d5:72:e2:66:9d:a4:4c:43:9f:af:04:27:47:5f: 27:9b:25:c6:43:08:07:1d:16:a7:11:e1:29:89:05: 47:37:43:32:80:e3:b4:56:b3:73:d8:12:38:55:d3: 88:ad:33:62:50:0d:b3:6b:a8:2d:cd:d5:20:d4:3d: b8:1b:ba:50:87:c5:2c:d3:2d:e9:1d:70:7c:3d:29: e3:ed:54:fa:9f:89:15:85:9c:5a:cd:f0:a2:c4:01: 7b:9b:46:0e:20:f5:05:c2:97:16:5e:f1:27:0e:60: c7:38:c1:29:f2:60:25:97:fd:7a:b8:56:56:71:ad: 96:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:09:A5:F1:37:E2:D0:C9:11:DB:68:65:E1:6C:87:64:BE:C3:9B:39 X509v3 Authority Key Identifier: keyid:47:01:CF:2D:28:20:09:D6:C6:EA:F4:55:6F:B0:DC:1B:0D:55:57:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwHPLSggCdbG6vRVb7DcGw1VV-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:4f:47:2d:49:20:8a:d1:0f:f2:a5:67:42:dd:01:12:70:2b: 0e:40:4a:49:c8:8c:00:7c:ff:68:6a:40:09:29:71:81:39:be: 39:fd:5c:8b:9c:c0:ed:13:49:17:d1:ec:3f:11:9d:18:45:6d: 39:76:98:d1:42:9c:c4:59:cd:9e:de:c3:69:da:1b:dd:ee:e9: c0:4e:18:ff:ac:ba:2b:fe:87:ba:43:29:1a:23:c6:8c:72:4a: 4f:d8:c5:cd:7e:67:d7:97:5f:62:b3:d6:47:04:46:0d:94:27: 49:2d:ac:09:4f:bb:04:33:33:5d:0b:39:15:62:9a:23:4d:c1: b6:57:18:53:98:f3:18:94:0f:03:95:04:2c:53:01:72:54:28: 26:57:29:fc:ab:a6:ec:02:10:29:58:c3:42:66:97:7d:15:7c: 0e:ef:1e:34:5c:03:32:8e:2f:79:be:25:bf:8e:b1:ed:80:7f: ee:5d:cc:34:6b:99:52:b0:0e:72:87:04:a5:bb:08:fb:b8:dc: f5:60:dc:8a:9a:be:65:33:17:2a:f3:41:88:03:04:9d:0f:92: 51:5a:e8:29:c8:10:c5:c9:dd:54:dc:1c:eb:60:a8:f5:63:5a: 25:3c:a2:c1:fd:39:29:d9:f4:5b:0d:96:65:65:d8:2c:92:13: c3:73:6f:23 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 REFDNTExMC8GA1UEBRMoNDcwMUNGMkQyODIwMDlENkM2RUFGNDU1NkZCMERDMUIw RDU1NTdFRjAeFw0yNTA0MjUwNjE3MDhaFw0yNTA1MDIwNjE3MDhaMBgxFjAUBgNV BAMTDTY4MGIyOGU0LTgyOWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0noYLMq5IwR4iVN6MBbTVpaZKIR+IREpvuv4eZDIhsrJXgojUZafCCamPRHDA AsQccm+w86gGD4zMXfDR78Tr1OKuz5puitPMZ3c+PGXKUJKPY+3K21PXD6Pj5Opo irHLgrjRX9dYz+QOIDPGz8M3iNdQWXn3JAq58aXf9U4ZXweiMkTDhIPVcuJmnaRM Q5+vBCdHXyebJcZDCAcdFqcR4SmJBUc3QzKA47RWs3PYEjhV04itM2JQDbNrqC3N 1SDUPbgbulCHxSzTLekdcHw9KePtVPqfiRWFnFrN8KLEAXubRg4g9QXClxZe8ScO YMc4wSnyYCWX/Xq4VlZxrZZZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrQml8Tfi 0MkR22hl4WyHZL7DmzkwHwYDVR0jBBgwFoAURwHPLSggCdbG6vRVb7DcGw1VV+8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThEQUM1L0MzOTU4MkMwQUJE QTExRUZBMUMxNEU3NkM0RjlBRTAyL1J3SFBMU2dnQ2RiRzZ2UlZiN0RjR3cxVlYt OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUndIUExTZ2dDZGJHNnZSVmI3RGNHdzFWVi04LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThE QUM1L0MzOTU4MkMwQUJEQTExRUZBMUMxNEU3NkM0RjlBRTAyL1J3SFBMU2dnQ2Ri RzZ2UlZiN0RjR3cxVlYtOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABNPRy1JIIrRD/KlZ0LdARJwKw5ASknIjAB8/2hqQAkpcYE5vjn9XIuc wO0TSRfR7D8RnRhFbTl2mNFCnMRZzZ7ew2naG93u6cBOGP+suiv+h7pDKRojxoxy Sk/Yxc1+Z9eXX2Kz1kcERg2UJ0ktrAlPuwQzM10LORVimiNNwbZXGFOY8xiUDwOV BCxTAXJUKCZXKfyrpuwCEClYw0Jml30VfA7vHjRcAzKOL3m+Jb+Ose2Af+5dzDRr mVKwDnKHBKW7CPu43PVg3IqavmUzFyrzQYgDBJ0PklFa6CnIEMXJ3VTcHOtgqPVj WiU8osH9OSnZ9FsNlmVl2CySE8NzbyM= -----END CERTIFICATE-----Generated at Fri Apr 25 08:24:06 2025 by rpki-client on console.sobornost.net