$ rpki-client -vvf rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.mft File: 6FKljehxn4vGvWSUmFS0dEe4nN4.mft (raw, json) Hash identifier: LaZhH+S/iOPYZyoGdtfHFMCezy6K6iYhq7sDSPOs43w= Subject key identifier: 73:E1:A6:A6:1B:9F:0D:3E:FF:56:65:FC:F3:63:5D:15:4F:67:EC:BF Authority key identifier: E8:52:A5:8D:E8:71:9F:8B:C6:BD:64:94:98:54:B4:74:47:B8:9C:DE Certificate issuer: /CN=A918F862/serialNumber=E852A58DE8719F8BC6BD64949854B47447B89CDE Certificate serial: 1126 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6FKljehxn4vGvWSUmFS0dEe4nN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.mft Manifest number: 1119 Signing time: Sat 26 Apr 2025 17:12:41 +0000 Manifest this update: Sat 26 Apr 2025 17:12:40 +0000 Manifest next update: Sat 03 May 2025 17:12:40 +0000 Files and hashes: 1: 6FKljehxn4vGvWSUmFS0dEe4nN4.crl (hash: 6mr6Hpe9iDEd6HcXo8EBFJsebwgRQayEV/L2YHAYosQ=) 2: D1D7F9AE0FF911E9B45E3B10C4F9AE02.roa (hash: 3Wqu6xOv+Yqgn98imVoKo0C/3S3sn8xVZaKt7qUGL5g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.crl rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6FKljehxn4vGvWSUmFS0dEe4nN4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 17:12:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4390 (0x1126) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F862, serialNumber=E852A58DE8719F8BC6BD64949854B47447B89CDE Validity Not Before: Apr 26 17:12:40 2025 GMT Not After : May 3 17:12:40 2025 GMT Subject: CN=680d1408-7bdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c2:f7:1e:2d:e9:b0:2f:4c:5a:22:5d:58:91: 50:15:6b:46:72:40:ba:e4:2b:23:b3:54:ae:60:25: 84:f1:d8:a5:e1:98:d9:07:17:c3:99:ce:1d:64:2c: cd:35:b4:d8:76:b6:28:6d:6f:c7:06:45:ee:01:8a: 3e:9c:34:be:0b:0f:8a:b0:58:dc:04:3e:cc:77:63: d8:bc:29:b1:76:ec:ef:e8:5e:a1:a2:58:bc:dd:f1: 49:96:df:dc:5d:d4:77:38:59:1b:fe:f7:df:67:75: 6d:81:70:7f:1d:6c:24:24:f3:19:2e:d8:49:dc:d8: 09:e8:03:23:e1:dd:8e:bf:e7:e6:73:fa:c4:9f:05: 13:0e:b4:af:4e:bf:46:70:76:f4:55:41:90:4f:e2: 5e:1d:33:5d:c1:6c:a8:9d:13:9e:e0:3b:7e:09:e3: 9b:9c:07:cb:58:42:2a:f7:69:2c:0c:f2:a1:7a:51: dd:a9:6a:df:d5:0d:04:10:0b:c6:87:f6:c7:34:02: 2f:24:af:6b:b2:c9:d3:12:7e:bd:03:df:49:ad:f9: 3b:c3:e4:40:60:6d:71:d9:28:fc:1c:72:46:04:8e: bb:1f:fa:0f:a4:fd:74:5a:27:be:cd:81:a7:b2:36: b5:dc:4a:e3:52:e1:14:cd:36:d1:d6:f6:27:9b:f4: dd:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:E1:A6:A6:1B:9F:0D:3E:FF:56:65:FC:F3:63:5D:15:4F:67:EC:BF X509v3 Authority Key Identifier: keyid:E8:52:A5:8D:E8:71:9F:8B:C6:BD:64:94:98:54:B4:74:47:B8:9C:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6FKljehxn4vGvWSUmFS0dEe4nN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:78:95:0a:3a:97:b7:f3:8d:ce:d0:9c:bd:e6:95:ce:91:fe: 5d:cb:1d:60:9b:10:66:4d:42:6f:b8:66:40:7d:12:23:3a:1f: 55:13:ef:f1:2b:2f:32:5f:7b:b1:00:48:00:ea:a8:a2:92:33: 95:a9:cf:2f:b5:1f:0b:b9:79:e3:87:e8:72:80:1a:e9:bd:36: 85:35:ff:8c:67:c9:d4:92:f9:03:29:5b:6e:a5:f6:36:f4:ed: 3e:97:fa:1f:05:18:76:55:82:ce:fb:64:31:4a:03:f2:10:18: e1:2c:b1:c6:1c:a6:9a:8f:89:bd:de:6a:c7:dc:96:16:f0:40: b9:7f:8d:53:3d:9b:68:d8:72:1e:e8:12:b7:6b:9a:17:96:17: bc:5c:46:e7:1a:c3:b1:cd:5a:87:e9:42:bd:99:f3:f7:d3:ed: 57:65:1c:f9:7b:5a:af:2d:3f:da:b1:40:5d:05:12:88:13:b4: ea:fa:3c:b7:90:d4:7a:09:f8:b0:77:5f:d3:db:de:47:22:62: 13:ee:25:9a:4f:cb:cf:2a:a9:74:4d:4d:d6:95:2f:34:4b:0b: ac:46:a2:d5:01:6e:12:23:6a:6b:9c:63:db:65:89:bc:70:29: 10:0f:56:cb:9b:60:eb:7a:b5:2a:82:27:ec:5b:1a:24:fa:6b: 0e:af:50:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICESYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY4NjIxMTAvBgNVBAUTKEU4NTJBNThERTg3MTlGOEJDNkJENjQ5NDk4NTRCNDc0 NDdCODlDREUwHhcNMjUwNDI2MTcxMjQwWhcNMjUwNTAzMTcxMjQwWjAYMRYwFAYD VQQDEw02ODBkMTQwOC03YmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs8L3Hi3psC9MWiJdWJFQFWtGckC65Csjs1SuYCWE8dil4ZjZBxfDmc4dZCzN NbTYdrYobW/HBkXuAYo+nDS+Cw+KsFjcBD7Md2PYvCmxduzv6F6holi83fFJlt/c XdR3OFkb/vffZ3VtgXB/HWwkJPMZLthJ3NgJ6AMj4d2Ov+fmc/rEnwUTDrSvTr9G cHb0VUGQT+JeHTNdwWyonROe4Dt+CeObnAfLWEIq92ksDPKhelHdqWrf1Q0EEAvG h/bHNAIvJK9rssnTEn69A99Jrfk7w+RAYG1x2Sj8HHJGBI67H/oPpP10Wie+zYGn sja13ErjUuEUzTbR1vYnm/TdVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHPhpqYb nw0+/1Zl/PNjXRVPZ+y/MB8GA1UdIwQYMBaAFOhSpY3ocZ+Lxr1klJhUtHRHuJze MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Rjg2Mi8xRTZGNkMxMjBG RjkxMUU5QTBEOTJCMEZDNEY5QUUwMi82RktsamVoeG40dkd2V1NVbUZTMGRFZTRu TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZGS2xqZWh4bjR2R3ZXU1VtRlMwZEVlNG5ONC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Rjg2Mi8xRTZGNkMxMjBGRjkxMUU5QTBEOTJCMEZDNEY5QUUwMi82RktsamVoeG40 dkd2V1NVbUZTMGRFZTRuTjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPeJUKOpe3843O0Jy95pXOkf5dyx1gmxBmTUJvuGZAfRIjOh9VE+/x Ky8yX3uxAEgA6qiikjOVqc8vtR8LuXnjh+hygBrpvTaFNf+MZ8nUkvkDKVtupfY2 9O0+l/ofBRh2VYLO+2QxSgPyEBjhLLHGHKaaj4m93mrH3JYW8EC5f41TPZto2HIe 6BK3a5oXlhe8XEbnGsOxzVqH6UK9mfP30+1XZRz5e1qvLT/asUBdBRKIE7Tq+jy3 kNR6Cfiwd1/T295HImIT7iWaT8vPKql0TU3WlS80SwusRqLVAW4SI2prnGPbZYm8 cCkQD1bLm2DrerUqgifsWxok+msOr1CU -----END CERTIFICATE-----Generated at Sat Apr 26 21:01:57 2025 by rpki-client on console.sobornost.net