$ rpki-client -vvf rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft File: -DbdMLYEJjYg0GHRBYTI8wEWAIc.mft (raw, json) Hash identifier: uMU6zag7LNEVLZ9B56eh1H/ZpQZs16ZzQl8uJTXe+VU= Subject key identifier: 74:3F:1F:E1:BF:85:F4:3C:A4:8A:C1:1D:11:78:D1:A7:3B:4F:6C:B6 Authority key identifier: F8:36:DD:30:B6:04:26:36:20:D0:61:D1:05:84:C8:F3:01:16:00:87 Certificate issuer: /CN=A918EB49/serialNumber=F836DD30B604263620D061D10584C8F301160087 Certificate serial: 029E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft Manifest number: 0293 Signing time: Sun 27 Apr 2025 01:12:14 +0000 Manifest this update: Sun 27 Apr 2025 01:12:14 +0000 Manifest next update: Sun 04 May 2025 01:12:14 +0000 Files and hashes: 1: -DbdMLYEJjYg0GHRBYTI8wEWAIc.crl (hash: H/MHzfqCwj4A0th9gPVGEUHMs62wLiXOHuNKsRzdv9w=) 2: C79B240C249811EFABD23253C4F9AE02.roa (hash: vxN5ELpDSKeuKP/1PWPd9uK2hQBdf3IJCeKh68BuUKw=) 3: AA314EC8249811EF971CED52C4F9AE02.roa (hash: 6c0Jw3077JWhUg1z+ONRU+S6jEOJ+qb2QR7rvXgZlpo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.crl rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 01:12:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 670 (0x29e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EB49, serialNumber=F836DD30B604263620D061D10584C8F301160087 Validity Not Before: Apr 27 01:12:14 2025 GMT Not After : May 4 01:12:14 2025 GMT Subject: CN=680d846e-c6bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:52:15:af:55:7b:07:94:81:0c:ab:6d:60:f0: 13:81:ed:62:54:2d:21:f5:bf:cc:79:20:57:96:ed: e7:aa:77:f1:28:7e:12:4c:aa:92:aa:df:31:00:39: 0a:ab:b2:18:4f:99:95:d4:e0:1a:c0:a9:5c:b6:95: 7b:f9:6b:18:0d:16:a8:5c:a2:be:18:c4:fe:5a:d7: 5e:76:de:d5:fe:93:b6:cf:76:92:4a:1b:9e:c3:20: 64:61:70:64:34:d3:67:19:8f:cc:82:d8:30:4f:ce: f5:db:b6:1e:0f:56:3d:83:4a:fc:ba:ee:cc:66:c9: ab:47:07:fa:ca:d9:3d:7a:96:7e:f1:77:6e:0d:81: 99:8e:5e:bf:41:76:61:b2:66:bf:5f:8b:4e:2c:49: 6b:2e:90:b3:cf:d3:53:ef:16:7b:23:4f:6f:4d:67: 82:28:cd:65:b4:ea:f1:10:77:5c:3b:02:85:12:85: 32:18:df:43:71:c3:3d:e9:70:1b:d2:d7:9b:e7:cd: 06:d0:48:e0:24:8b:ec:fa:dd:36:c1:d0:83:4b:c4: 37:46:7b:59:ca:88:54:09:1d:df:fc:4f:77:aa:87: 07:04:6a:6e:c9:ed:66:ef:1e:08:5d:c7:0e:e4:eb: de:1c:fd:b2:8e:31:62:eb:bb:44:2b:7c:b4:2f:ea: 3f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:3F:1F:E1:BF:85:F4:3C:A4:8A:C1:1D:11:78:D1:A7:3B:4F:6C:B6 X509v3 Authority Key Identifier: keyid:F8:36:DD:30:B6:04:26:36:20:D0:61:D1:05:84:C8:F3:01:16:00:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:7e:a4:57:67:df:3a:9c:77:a5:67:53:5c:3d:ce:28:58:81: 62:53:f8:c3:e0:85:72:b1:13:67:64:b1:cf:af:75:31:53:1c: 5b:d2:bb:67:b4:d3:f3:4b:a5:c4:38:25:be:93:fd:79:71:1e: f4:d3:b7:a0:1f:16:4f:68:91:05:d8:d6:d2:ec:54:a1:49:7d: 39:be:96:12:70:a1:19:2f:c6:70:62:bd:bf:c9:06:4e:19:95: 98:7c:f3:90:52:91:39:e9:d7:de:4a:85:79:44:3d:fe:3f:a2: d6:cc:52:b7:72:a8:10:35:b2:0b:24:e9:b3:72:ed:4b:04:d6: ec:e1:ab:c2:fb:99:0a:d8:4e:d1:26:e3:b3:6f:2d:14:54:07: 23:d0:ac:65:7f:e3:d3:d1:89:1e:69:8a:b9:6b:5b:9c:5e:d8: 6a:6a:9e:13:82:e1:62:c7:60:34:51:eb:f3:3e:33:6e:0b:d2: de:d9:11:42:fd:f0:98:d7:31:67:f7:80:8b:6e:be:39:6d:79: 1f:f7:b2:d4:d0:74:85:36:bd:7c:4c:be:45:65:4d:92:82:9b: 5e:1b:4b:0c:4a:6c:40:14:38:c6:8f:7a:aa:2b:b1:af:46:01: 74:67:86:23:c3:13:ed:ff:e5:9c:b2:c8:d0:ae:8b:bf:57:ef: 22:0d:aa:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAp4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVCNDkxMTAvBgNVBAUTKEY4MzZERDMwQjYwNDI2MzYyMEQwNjFEMTA1ODRDOEYz MDExNjAwODcwHhcNMjUwNDI3MDExMjE0WhcNMjUwNTA0MDExMjE0WjAYMRYwFAYD VQQDEw02ODBkODQ2ZS1jNmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAslIVr1V7B5SBDKttYPATge1iVC0h9b/MeSBXlu3nqnfxKH4STKqSqt8xADkK q7IYT5mV1OAawKlctpV7+WsYDRaoXKK+GMT+Wtdedt7V/pO2z3aSShuewyBkYXBk NNNnGY/MgtgwT87127YeD1Y9g0r8uu7MZsmrRwf6ytk9epZ+8XduDYGZjl6/QXZh sma/X4tOLElrLpCzz9NT7xZ7I09vTWeCKM1ltOrxEHdcOwKFEoUyGN9DccM96XAb 0teb580G0EjgJIvs+t02wdCDS8Q3RntZyohUCR3f/E93qocHBGpuye1m7x4IXccO 5OveHP2yjjFi67tEK3y0L+o/bQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHQ/H+G/ hfQ8pIrBHRF40ac7T2y2MB8GA1UdIwQYMBaAFPg23TC2BCY2INBh0QWEyPMBFgCH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUI0OS81NTMyQjk2MEZG NUMxMUVDOERBRUE1NTNDNEY5QUUwMi8tRGJkTUxZRUpqWWcwR0hSQllUSTh3RVdB SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1EYmRNTFlFSmpZZzBHSFJCWVRJOHdFV0FJYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUI0OS81NTMyQjk2MEZGNUMxMUVDOERBRUE1NTNDNEY5QUUwMi8tRGJkTUxZRUpq WWcwR0hSQllUSTh3RVdBSWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlfqRXZ986nHelZ1NcPc4oWIFiU/jD4IVysRNnZLHPr3UxUxxb0rtn tNPzS6XEOCW+k/15cR7007egHxZPaJEF2NbS7FShSX05vpYScKEZL8ZwYr2/yQZO GZWYfPOQUpE56dfeSoV5RD3+P6LWzFK3cqgQNbILJOmzcu1LBNbs4avC+5kK2E7R JuOzby0UVAcj0Kxlf+PT0YkeaYq5a1ucXthqap4TguFix2A0UevzPjNuC9Le2RFC /fCY1zFn94CLbr45bXkf97LU0HSFNr18TL5FZU2SgpteG0sMSmxAFDjGj3qqK7Gv RgF0Z4YjwxPt/+WcssjQrou/V+8iDapP -----END CERTIFICATE-----Generated at Sun Apr 27 05:42:14 2025 by rpki-client on console.sobornost.net