$ rpki-client -vvf rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.mft File: 8bA7xYd_4tpPRGoGM9prjh93x9s.mft (raw, json) Hash identifier: hAv3u75KktM0AJhXfNoCirSnECoXtZfSio2UN7iZD3c= Subject key identifier: 84:F5:9D:17:70:1E:19:15:46:AF:4B:AE:B3:02:AE:32:EE:F5:92:65 Authority key identifier: F1:B0:3B:C5:87:7F:E2:DA:4F:44:6A:06:33:DA:6B:8E:1F:77:C7:DB Certificate issuer: /CN=A918E881/serialNumber=F1B03BC5877FE2DA4F446A0633DA6B8E1F77C7DB Certificate serial: 059B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bA7xYd_4tpPRGoGM9prjh93x9s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.mft Manifest number: 0595 Signing time: Sat 26 Apr 2025 22:53:28 +0000 Manifest this update: Sat 26 Apr 2025 22:53:28 +0000 Manifest next update: Sat 03 May 2025 22:53:28 +0000 Files and hashes: 1: 8bA7xYd_4tpPRGoGM9prjh93x9s.crl (hash: 7WMyDZMEp7n3DnIMEnTDIuV46f6SKH6UPXw4I3323h4=) 2: F908A568CD1711EB84E11B24C4F9AE02.roa (hash: RN+WuKj4+pEbBe+8XBpVSE8Eibjnma2NtmAKtaqSc2M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.crl rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bA7xYd_4tpPRGoGM9prjh93x9s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 22:53:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1435 (0x59b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E881, serialNumber=F1B03BC5877FE2DA4F446A0633DA6B8E1F77C7DB Validity Not Before: Apr 26 22:53:28 2025 GMT Not After : May 3 22:53:28 2025 GMT Subject: CN=680d63e8-52b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:36:a4:71:27:fd:95:71:fe:b3:56:c0:f6:16: 8c:42:7b:74:fd:9e:8e:9b:6d:b0:52:01:08:50:16: ea:c9:fc:a7:80:86:a1:48:b8:2a:29:d3:d0:13:97: 3c:22:97:4b:3a:3c:9a:84:58:c2:e7:20:df:dd:ff: 83:3e:9e:ba:cc:47:cf:50:7d:27:ea:9b:fd:92:21: 21:bd:76:25:40:3b:4e:33:b0:be:24:dc:bb:35:93: d3:80:36:19:18:40:95:7e:29:d7:24:18:5a:ad:13: a3:7a:df:87:fb:1b:7d:c1:94:6c:9f:2e:bb:9b:b2: d9:98:f1:cc:0c:31:d1:43:32:c2:32:79:98:f2:88: 49:68:58:b4:36:fb:d3:dd:7a:d0:0e:d8:3c:2b:19: 80:9c:e9:c6:87:ea:bc:14:03:2a:33:c3:fb:10:cb: 06:da:01:86:ba:bf:43:f6:59:b6:9a:90:d4:cd:ea: e8:b9:da:4d:a5:2b:15:6d:be:9f:18:13:00:17:e1: 59:57:b4:8e:f8:e9:9f:b3:68:b1:4f:c6:15:97:4d: 9b:33:46:fc:f5:d8:9c:be:0c:e3:4b:fa:45:bc:08: ae:69:f2:cf:ac:09:3a:c8:30:0b:33:e2:45:d8:65: 91:9a:05:90:6a:70:81:52:6c:f8:9f:6d:59:40:d2: cc:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:F5:9D:17:70:1E:19:15:46:AF:4B:AE:B3:02:AE:32:EE:F5:92:65 X509v3 Authority Key Identifier: keyid:F1:B0:3B:C5:87:7F:E2:DA:4F:44:6A:06:33:DA:6B:8E:1F:77:C7:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bA7xYd_4tpPRGoGM9prjh93x9s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:b5:de:aa:41:00:cd:04:15:4a:dc:e7:e4:97:57:02:c1:74: c6:5b:28:34:c8:45:9f:ff:37:98:79:30:db:ef:fc:dd:54:fc: 31:fb:b5:b0:05:76:8a:2a:b2:fa:38:39:f3:a1:57:d0:07:e3: 6e:69:61:71:f3:ba:b1:db:5d:71:f1:d6:ba:bb:7d:85:01:c4: 68:a0:69:70:69:ce:84:4b:54:cf:72:9f:44:9a:b3:59:16:34: 4f:97:22:f0:02:6e:e9:89:af:ea:bd:e7:de:0c:03:26:70:3e: fd:b5:0b:42:0f:19:da:a6:fa:5b:c8:07:9b:d3:fc:49:32:2c: 14:1a:66:cf:35:dd:5a:21:68:1a:18:73:97:f5:33:ef:c7:74: 94:95:16:74:8c:ac:1f:ec:46:ba:31:84:ae:3f:6e:a7:c1:97: c1:3e:41:32:af:d2:ee:32:99:40:37:be:d0:2f:b7:1b:05:00: bb:22:e5:5d:1c:4f:d2:d2:09:36:3f:c3:8d:c3:91:cc:fe:50: 2a:c6:5a:73:8e:25:2b:6c:19:13:2a:f0:14:0c:e0:4f:3a:6e: f2:20:ae:cd:e6:04:96:02:cd:49:fa:47:98:70:69:3b:de:8c: fa:f7:ad:f4:4c:df:b9:0d:2c:6d:8d:aa:79:6d:db:3f:cd:9c: e3:d0:2a:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU4ODExMTAvBgNVBAUTKEYxQjAzQkM1ODc3RkUyREE0RjQ0NkEwNjMzREE2QjhF MUY3N0M3REIwHhcNMjUwNDI2MjI1MzI4WhcNMjUwNTAzMjI1MzI4WjAYMRYwFAYD VQQDEw02ODBkNjNlOC01MmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0DakcSf9lXH+s1bA9haMQnt0/Z6Om22wUgEIUBbqyfyngIahSLgqKdPQE5c8 IpdLOjyahFjC5yDf3f+DPp66zEfPUH0n6pv9kiEhvXYlQDtOM7C+JNy7NZPTgDYZ GECVfinXJBharROjet+H+xt9wZRsny67m7LZmPHMDDHRQzLCMnmY8ohJaFi0NvvT 3XrQDtg8KxmAnOnGh+q8FAMqM8P7EMsG2gGGur9D9lm2mpDUzeroudpNpSsVbb6f GBMAF+FZV7SO+Omfs2ixT8YVl02bM0b89dicvgzjS/pFvAiuafLPrAk6yDALM+JF 2GWRmgWQanCBUmz4n21ZQNLM8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIT1nRdw HhkVRq9LrrMCrjLu9ZJlMB8GA1UdIwQYMBaAFPGwO8WHf+LaT0RqBjPaa44fd8fb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTg4MS9DREQ2MEFFQUNE MTUxMUVCQjNGNzhFMjNDNEY5QUUwMi84YkE3eFlkXzR0cFBSR29HTTlwcmpoOTN4 OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhiQTd4WWRfNHRwUFJHb0dNOXByamg5M3g5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTg4MS9DREQ2MEFFQUNEMTUxMUVCQjNGNzhFMjNDNEY5QUUwMi84YkE3eFlkXzR0 cFBSR29HTTlwcmpoOTN4OXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCStd6qQQDNBBVK3Ofkl1cCwXTGWyg0yEWf/zeYeTDb7/zdVPwx+7Ww BXaKKrL6ODnzoVfQB+NuaWFx87qx211x8da6u32FAcRooGlwac6ES1TPcp9EmrNZ FjRPlyLwAm7pia/qvefeDAMmcD79tQtCDxnapvpbyAeb0/xJMiwUGmbPNd1aIWga GHOX9TPvx3SUlRZ0jKwf7Ea6MYSuP26nwZfBPkEyr9LuMplAN77QL7cbBQC7IuVd HE/S0gk2P8ONw5HM/lAqxlpzjiUrbBkTKvAUDOBPOm7yIK7N5gSWAs1J+keYcGk7 3oz69630TN+5DSxtjap5bds/zZzj0CoC -----END CERTIFICATE-----Generated at Sun Apr 27 05:42:14 2025 by rpki-client on console.sobornost.net