$ rpki-client -vvf rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft File: r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft (raw, json) Hash identifier: zUJ0UytcAjr0YkbUsTobIsKHOZ+XspAjpWdfUxCprbI= Subject key identifier: 74:78:D3:34:87:9F:10:00:B9:6D:8F:E9:06:6B:9A:6E:CE:C3:AC:04 Authority key identifier: AF:41:C9:D0:44:6A:7F:A9:14:C6:C1:6E:78:8C:D2:C3:F8:0A:F5:02 Certificate issuer: /CN=A918EC82/serialNumber=AF41C9D0446A7FA914C6C16E788CD2C3F80AF502 Certificate serial: 0800 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft Manifest number: 07F3 Signing time: Sat 26 Apr 2025 20:41:16 +0000 Manifest this update: Sat 26 Apr 2025 20:41:15 +0000 Manifest next update: Sat 03 May 2025 20:41:15 +0000 Files and hashes: 1: r0HJ0ERqf6kUxsFueIzSw_gK9QI.crl (hash: DNvwjjdRS8yK1Ky8z79JiCmarkwIpS31khWAu4DdjUE=) 2: 2A0CFF60000811EC9CB70449C4F9AE02.roa (hash: NCc9hJCBXOq0YAm+ILP4RcqXk9/Ipks9AopJvqBxvro=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.crl rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2048 (0x800) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EC82, serialNumber=AF41C9D0446A7FA914C6C16E788CD2C3F80AF502 Validity Not Before: Apr 26 20:41:15 2025 GMT Not After : May 3 20:41:15 2025 GMT Subject: CN=680d44eb-566f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:36:3a:d7:1d:cc:ee:89:cd:1d:17:fd:53:03: 13:c3:8a:73:5e:1e:44:82:9e:e2:75:e3:63:43:84: 75:91:a5:82:4b:ef:9f:08:ce:30:94:8f:e8:79:14: 00:5a:db:bd:cd:01:3d:03:93:8f:eb:8e:49:d5:e0: 13:98:9b:9d:1b:c0:fe:0e:f2:1a:1e:0b:fa:6d:cf: d7:2d:f3:f1:59:4a:8b:a6:a5:b5:59:ae:a7:f6:ae: 64:30:b4:35:35:1a:b2:45:e9:7f:82:ee:4c:6c:91: 41:6f:e8:6f:b4:8c:ce:9d:9e:ed:ad:4b:00:c4:26: 5a:e8:2a:bd:41:9b:f9:7c:e5:0f:0b:57:7d:af:10: f3:49:f4:30:58:8d:86:a9:10:94:3c:86:9b:fe:9c: b4:87:47:24:7d:27:ab:2a:c6:c0:f0:4c:fc:0d:3e: 0f:e3:13:33:81:56:44:d3:71:18:1e:d6:7a:fb:e0: d6:17:eb:95:ac:fd:a5:b9:3f:ad:99:d3:19:24:76: fb:ff:2f:e3:4b:e9:0c:dd:5d:e4:03:2c:ca:a1:05: bb:15:21:70:e8:54:90:ed:1f:07:5a:86:97:ac:15: 49:ca:6c:ba:1a:ce:78:06:01:1f:6c:c5:9c:a5:87: 0e:a5:ef:03:ce:6b:23:14:87:38:e6:5b:bc:89:2b: 25:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:78:D3:34:87:9F:10:00:B9:6D:8F:E9:06:6B:9A:6E:CE:C3:AC:04 X509v3 Authority Key Identifier: keyid:AF:41:C9:D0:44:6A:7F:A9:14:C6:C1:6E:78:8C:D2:C3:F8:0A:F5:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:9a:13:15:15:e2:92:03:e5:97:9d:f7:a0:d2:a2:d3:43:41: 28:95:ba:7d:10:a9:aa:7e:df:65:12:5a:58:b5:2d:2a:fb:9a: e6:94:fd:e3:e5:73:c4:5e:35:37:94:14:f0:43:bc:5c:af:14: 4a:15:94:dc:16:d3:4d:f1:57:0f:90:96:e2:25:a4:1d:a6:9d: 4d:b9:25:fe:fb:77:98:3f:bb:fa:c7:53:56:96:47:78:2e:9f: e1:64:a1:80:0a:e8:83:42:52:62:93:4f:da:bd:c3:53:be:07: e1:e6:ce:7d:f5:f8:37:00:c0:77:6e:03:f2:f9:bf:b1:f4:cd: 6d:f3:25:d9:fb:bf:af:8f:ea:8a:2b:63:be:c4:ea:2a:42:5c: 9c:94:be:e2:e0:60:42:63:bd:a7:f7:54:f0:a9:9e:ef:2c:eb: ec:d2:49:37:1f:cb:ad:73:1a:2f:6c:15:d3:be:f8:79:13:29: f8:85:3c:e8:47:0e:05:3f:47:a8:ee:1d:2f:ed:2a:28:51:61: a5:74:1b:86:0e:2b:81:79:4f:73:46:d2:16:3e:4d:87:42:8a: 12:b0:43:14:a4:d5:6e:39:f5:bf:46:68:0d:61:86:60:c0:5f: ef:14:76:b9:39:03:aa:df:7d:32:2a:8f:45:2c:3f:51:69:eb: 29:77:22:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVDODIxMTAvBgNVBAUTKEFGNDFDOUQwNDQ2QTdGQTkxNEM2QzE2RTc4OENEMkMz RjgwQUY1MDIwHhcNMjUwNDI2MjA0MTE1WhcNMjUwNTAzMjA0MTE1WjAYMRYwFAYD VQQDEw02ODBkNDRlYi01NjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApzY61x3M7onNHRf9UwMTw4pzXh5Egp7ideNjQ4R1kaWCS++fCM4wlI/oeRQA Wtu9zQE9A5OP645J1eATmJudG8D+DvIaHgv6bc/XLfPxWUqLpqW1Wa6n9q5kMLQ1 NRqyRel/gu5MbJFBb+hvtIzOnZ7trUsAxCZa6Cq9QZv5fOUPC1d9rxDzSfQwWI2G qRCUPIab/py0h0ckfSerKsbA8Ez8DT4P4xMzgVZE03EYHtZ6++DWF+uVrP2luT+t mdMZJHb7/y/jS+kM3V3kAyzKoQW7FSFw6FSQ7R8HWoaXrBVJymy6Gs54BgEfbMWc pYcOpe8DzmsjFIc45lu8iSslGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHR40zSH nxAAuW2P6QZrmm7Ow6wEMB8GA1UdIwQYMBaAFK9BydBEan+pFMbBbniM0sP4CvUC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUM4Mi80MDI1ODA3Q0Ux RTgxMUVBOUU4MzNBNTNDNEY5QUUwMi9yMEhKMEVScWY2a1V4c0Z1ZUl6U3dfZ0s5 UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IwSEowRVJxZjZrVXhzRnVlSXpTd19nSzlRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUM4Mi80MDI1ODA3Q0UxRTgxMUVBOUU4MzNBNTNDNEY5QUUwMi9yMEhKMEVScWY2 a1V4c0Z1ZUl6U3dfZ0s5UUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdmhMVFeKSA+WXnfeg0qLTQ0Eolbp9EKmqft9lElpYtS0q+5rmlP3j 5XPEXjU3lBTwQ7xcrxRKFZTcFtNN8VcPkJbiJaQdpp1NuSX++3eYP7v6x1NWlkd4 Lp/hZKGACuiDQlJik0/avcNTvgfh5s599fg3AMB3bgPy+b+x9M1t8yXZ+7+vj+qK K2O+xOoqQlyclL7i4GBCY72n91TwqZ7vLOvs0kk3H8utcxovbBXTvvh5Eyn4hTzo Rw4FP0eo7h0v7SooUWGldBuGDiuBeU9zRtIWPk2HQooSsEMUpNVuOfW/RmgNYYZg wF/vFHa5OQOq330yKo9FLD9RaespdyL4 -----END CERTIFICATE-----Generated at Sun Apr 27 00:14:06 2025 by rpki-client on console.sobornost.net