$ rpki-client -vvf rpki.apnic.net/member_repository/A918E85E/5BC1267AEFF311EE977CAC31C4F9AE02/ctH2ecltIFwtRxyUqA3vYNkRJhw.mft File: ctH2ecltIFwtRxyUqA3vYNkRJhw.mft (raw, json) Hash identifier: 8FhRXlQD35RqvbtjjblV2SNjA+7BtLHWPbogSibA2lU= Subject key identifier: 35:5A:D5:31:44:05:33:7B:C2:79:29:4E:57:D4:59:CA:26:7F:D6:6F Authority key identifier: 72:D1:F6:79:C9:6D:20:5C:2D:47:1C:94:A8:0D:EF:60:D9:11:26:1C Certificate issuer: /CN=A918E85E/serialNumber=72D1F679C96D205C2D471C94A80DEF60D911261C Certificate serial: CA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ctH2ecltIFwtRxyUqA3vYNkRJhw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E85E/5BC1267AEFF311EE977CAC31C4F9AE02/ctH2ecltIFwtRxyUqA3vYNkRJhw.mft Manifest number: C8 Signing time: Sun 27 Apr 2025 04:37:33 +0000 Manifest this update: Sun 27 Apr 2025 04:37:32 +0000 Manifest next update: Sun 04 May 2025 04:37:32 +0000 Files and hashes: 1: ctH2ecltIFwtRxyUqA3vYNkRJhw.crl (hash: rgAYVqMJp8pc/ehRghTVdO5IX4rCnlL+j6asDmolotM=) 2: 255842A2EFF411EE853CC833C4F9AE02.roa (hash: 0a/19rU1zoR8HPG3b9KrbOC4Srzy59tAkTtlFRC+aqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E85E/5BC1267AEFF311EE977CAC31C4F9AE02/ctH2ecltIFwtRxyUqA3vYNkRJhw.crl rsync://rpki.apnic.net/member_repository/A918E85E/5BC1267AEFF311EE977CAC31C4F9AE02/ctH2ecltIFwtRxyUqA3vYNkRJhw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ctH2ecltIFwtRxyUqA3vYNkRJhw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E85E, serialNumber=72D1F679C96D205C2D471C94A80DEF60D911261C Validity Not Before: Apr 27 04:37:32 2025 GMT Not After : May 4 04:37:32 2025 GMT Subject: CN=680db48d-f1e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e5:24:42:67:6c:67:e8:27:58:04:ac:b5:82: ab:f3:e6:de:d6:a2:c1:28:9f:e5:f5:c1:ca:1f:08: 9e:a1:c5:da:28:cf:cb:ad:3a:6d:c0:32:d5:e5:9a: 45:54:2e:52:a8:d7:e2:47:f9:9d:70:19:0c:d4:65: 63:48:88:6f:6c:f9:73:4b:8f:71:01:18:85:81:62: 2a:16:41:c9:58:0b:0a:6e:52:4e:7d:1c:6a:c7:a7: af:56:57:98:c0:a4:cb:7a:90:e4:a6:8e:19:c4:76: 53:0f:e6:5f:76:0f:00:8c:e8:ad:65:b4:c9:20:07: d0:bf:e0:b2:b1:19:f4:3b:4b:89:b4:6d:df:01:54: 8d:50:e1:e9:a2:93:20:d3:d0:2e:26:b6:4e:7e:3c: 45:02:ac:93:1f:e6:5d:19:9d:f1:46:97:c1:48:b3: ff:e8:cb:92:5d:50:07:ef:0d:fb:f8:45:7d:b9:0a: 7a:85:b0:c0:85:b9:b8:8f:11:21:36:d4:b4:d6:a1: 02:5b:82:dc:64:7a:9d:72:a6:e4:ed:f5:4b:4f:b6: f5:c2:27:8a:ed:8e:8d:8e:ce:28:82:56:00:d0:15: 57:23:cd:f9:c5:25:26:12:b8:9d:f1:38:6b:37:f6: 9f:99:ce:99:9b:9b:a8:36:4e:7d:e7:47:7f:d0:c5: fe:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:5A:D5:31:44:05:33:7B:C2:79:29:4E:57:D4:59:CA:26:7F:D6:6F X509v3 Authority Key Identifier: keyid:72:D1:F6:79:C9:6D:20:5C:2D:47:1C:94:A8:0D:EF:60:D9:11:26:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E85E/5BC1267AEFF311EE977CAC31C4F9AE02/ctH2ecltIFwtRxyUqA3vYNkRJhw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ctH2ecltIFwtRxyUqA3vYNkRJhw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E85E/5BC1267AEFF311EE977CAC31C4F9AE02/ctH2ecltIFwtRxyUqA3vYNkRJhw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:08:fb:d8:9e:53:16:5e:7b:97:58:05:3c:64:00:a5:1b:85: af:bc:7a:a5:09:ee:c1:40:0c:ed:9b:99:57:f6:03:f2:6f:ca: 40:bc:1f:4f:8b:38:45:15:b9:db:8b:9c:73:1a:6a:c3:56:8f: 97:3c:fe:48:8a:b3:e6:71:ce:57:ea:7c:0b:ce:46:43:b2:47: e5:63:62:cf:dc:87:73:ca:9a:ac:96:12:7f:ba:d4:b8:d3:96: 00:9b:1b:24:23:32:f2:34:2b:5a:ec:7f:6e:56:1d:58:27:b2: 2f:7e:41:be:20:a8:08:f2:8d:06:71:62:a7:8c:71:f1:b6:f4: 48:02:e1:15:d6:d5:8e:39:82:3b:e1:e1:70:d0:bb:cb:3f:b8: 45:31:17:69:f7:0e:37:28:b4:dd:46:d6:e3:3b:f1:76:5c:1d: fc:32:54:29:83:f1:70:4a:30:f1:38:ca:d4:b5:93:18:58:9a: c6:31:47:98:e4:36:b6:12:dc:36:1a:a0:8c:de:5f:49:dd:90: 44:63:29:a6:52:1d:f3:11:ec:7a:ff:bd:31:7d:47:55:31:f5: 7b:d9:ea:57:16:90:d1:03:8c:37:29:49:1b:62:49:3f:9a:28: a6:7e:cf:ef:b0:80:79:c9:9b:3f:b6:6b:e6:c3:93:62:39:89: 03:af:32:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU4NUUxMTAvBgNVBAUTKDcyRDFGNjc5Qzk2RDIwNUMyRDQ3MUM5NEE4MERFRjYw RDkxMTI2MUMwHhcNMjUwNDI3MDQzNzMyWhcNMjUwNTA0MDQzNzMyWjAYMRYwFAYD VQQDEw02ODBkYjQ4ZC1mMWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzuUkQmdsZ+gnWASstYKr8+be1qLBKJ/l9cHKHwieocXaKM/LrTptwDLV5ZpF VC5SqNfiR/mdcBkM1GVjSIhvbPlzS49xARiFgWIqFkHJWAsKblJOfRxqx6evVleY wKTLepDkpo4ZxHZTD+Zfdg8AjOitZbTJIAfQv+CysRn0O0uJtG3fAVSNUOHpopMg 09AuJrZOfjxFAqyTH+ZdGZ3xRpfBSLP/6MuSXVAH7w37+EV9uQp6hbDAhbm4jxEh NtS01qECW4LcZHqdcqbk7fVLT7b1wieK7Y6Njs4oglYA0BVXI835xSUmErid8Thr N/afmc6Zm5uoNk5950d/0MX+EQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDVa1TFE BTN7wnkpTlfUWcomf9ZvMB8GA1UdIwQYMBaAFHLR9nnJbSBcLUcclKgN72DZESYc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTg1RS81QkMxMjY3QUVG RjMxMUVFOTc3Q0FDMzFDNEY5QUUwMi9jdEgyZWNsdElGd3RSeHlVcUEzdllOa1JK aHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2N0SDJlY2x0SUZ3dFJ4eVVxQTN2WU5rUkpody5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTg1RS81QkMxMjY3QUVGRjMxMUVFOTc3Q0FDMzFDNEY5QUUwMi9jdEgyZWNsdElG d3RSeHlVcUEzdllOa1JKaHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/CPvYnlMWXnuXWAU8ZAClG4WvvHqlCe7BQAztm5lX9gPyb8pAvB9P izhFFbnbi5xzGmrDVo+XPP5IirPmcc5X6nwLzkZDskflY2LP3IdzypqslhJ/utS4 05YAmxskIzLyNCta7H9uVh1YJ7IvfkG+IKgI8o0GcWKnjHHxtvRIAuEV1tWOOYI7 4eFw0LvLP7hFMRdp9w43KLTdRtbjO/F2XB38MlQpg/FwSjDxOMrUtZMYWJrGMUeY 5Da2Etw2GqCM3l9J3ZBEYymmUh3zEex6/70xfUdVMfV72epXFpDRA4w3KUkbYkk/ miimfs/vsIB5yZs/tmvmw5NiOYkDrzLd -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:51 2025 by rpki-client on console.sobornost.net