$ rpki-client -vvf rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft File: 2xy4SFQGnkPKG3JdQuprqbU5gVs.mft (raw, json) Hash identifier: bcFYtHgWlApsX/uf1UVBLWzZ+mbD0vV0Eu/hWiVFk+o= Subject key identifier: 73:08:2D:56:B0:EB:4E:07:63:DA:44:ED:88:AA:0B:EE:A3:A3:08:57 Authority key identifier: DB:1C:B8:48:54:06:9E:43:CA:1B:72:5D:42:EA:6B:A9:B5:39:81:5B Certificate issuer: /CN=A918F88D/serialNumber=DB1CB84854069E43CA1B725D42EA6BA9B539815B Certificate serial: 0C7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft Manifest number: 0C6B Signing time: Mon 28 Apr 2025 18:36:16 +0000 Manifest this update: Mon 28 Apr 2025 18:36:16 +0000 Manifest next update: Mon 05 May 2025 18:36:16 +0000 Files and hashes: 1: 2xy4SFQGnkPKG3JdQuprqbU5gVs.crl (hash: LUyORj9qVaqka5+7e8vDd0xeTLy8qhkknopcXe+bBNM=) 2: 4BA5EC4293D911EE86212B1DC4F9AE02.roa (hash: KJiTJQnlya7yc1gVeGhk9f8wqpXCXgsDbpb8Ndl9Q5Q=) 3: 18F7410671F311ECBA5DA710C4F9AE02.roa (hash: tIg3kB0f/wtqp+Q6ik7/n7dKrrQEFLMxhaaJzHV4nr8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.crl rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 18:27:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3199 (0xc7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F88D, serialNumber=DB1CB84854069E43CA1B725D42EA6BA9B539815B Validity Not Before: Apr 28 18:36:16 2025 GMT Not After : May 5 18:36:16 2025 GMT Subject: CN=680fcaa0-c645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:42:80:61:85:bf:a7:87:bc:1d:84:b9:e4:6d: ce:62:09:e5:a6:43:d6:8e:7f:cd:6c:7c:9f:f1:0e: c5:fc:5f:7c:30:dd:39:84:03:c2:28:ed:ed:06:81: d2:48:d5:59:b0:aa:73:b3:79:9b:6c:fc:7a:d4:99: 5f:7c:a8:ef:91:6e:73:11:c2:0f:c7:09:17:7d:57: 35:ca:15:63:6a:b1:94:2c:d4:6b:19:64:f4:3d:03: 77:f2:18:46:a1:87:52:87:48:b4:ab:3a:69:df:81: 3e:61:83:3b:44:39:39:c0:7b:4c:b8:fd:b1:58:4c: 1a:68:aa:06:2c:57:08:d6:ac:1c:61:ed:9c:4b:dc: f3:fc:b9:a6:e3:45:b0:88:49:0a:07:9c:9b:84:12: 1f:47:38:e3:2e:30:59:a1:56:b0:0f:8a:ef:19:a9: c0:1f:6b:0d:da:df:ec:eb:0b:a5:67:f6:46:40:eb: be:a8:db:e3:82:a1:13:92:3d:12:1e:6a:4a:4a:5c: 18:45:c8:38:9e:f5:72:3e:97:79:cd:a5:22:53:54: cf:93:b0:27:55:d1:fc:58:ab:25:3e:c8:a1:f9:37: e0:29:e7:f1:3c:93:36:ad:4d:d6:3e:6b:0d:f6:fa: 61:f5:80:12:94:65:d0:08:af:15:44:89:02:81:6f: 0b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:08:2D:56:B0:EB:4E:07:63:DA:44:ED:88:AA:0B:EE:A3:A3:08:57 X509v3 Authority Key Identifier: keyid:DB:1C:B8:48:54:06:9E:43:CA:1B:72:5D:42:EA:6B:A9:B5:39:81:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:1c:fc:f8:25:06:19:8d:59:4a:8d:9e:f7:e4:e6:c5:cf:61: f1:84:00:cc:67:e8:43:5a:fc:a3:e9:af:bc:74:4a:a0:47:8b: 64:38:15:ee:c7:1d:08:e8:ae:8b:c9:41:16:e8:6c:75:72:bb: 2b:79:a5:3a:15:54:05:d3:15:fe:a1:17:35:e9:1d:8a:3a:61: 23:39:27:d2:87:47:4e:3b:59:b9:76:61:56:29:b3:f1:2c:ec: b4:fd:f1:2b:7f:f8:2e:a9:09:ff:0b:22:28:a1:13:c6:73:4e: a1:c0:18:61:9e:99:ac:ef:34:7d:8e:30:89:5d:a0:42:87:5a: db:86:61:2b:20:3d:bb:80:fb:b5:03:dd:fd:4f:5b:24:a9:b0: 89:e1:c5:aa:bc:45:1d:e0:3f:86:0b:fb:e5:51:86:56:26:b4: 9d:9d:36:d0:1c:0e:4c:09:1a:91:04:79:25:e0:70:cb:e9:e4: 60:58:9e:f3:d5:61:e2:c4:38:16:ce:bf:ab:ac:e1:4d:a6:d6: f0:c6:b7:f9:b1:8a:ff:d7:e8:fb:f5:0c:60:a0:e0:b8:2c:81: 0f:3a:4a:55:93:e4:1d:71:3d:aa:e9:db:73:17:7c:e0:11:9d: 59:71:7b:3e:44:10:37:b1:fe:f2:e1:91:b7:d9:b2:18:88:ef: 80:45:e1:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDH8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY4OEQxMTAvBgNVBAUTKERCMUNCODQ4NTQwNjlFNDNDQTFCNzI1RDQyRUE2QkE5 QjUzOTgxNUIwHhcNMjUwNDI4MTgzNjE2WhcNMjUwNTA1MTgzNjE2WjAYMRYwFAYD VQQDEw02ODBmY2FhMC1jNjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyUKAYYW/p4e8HYS55G3OYgnlpkPWjn/NbHyf8Q7F/F98MN05hAPCKO3tBoHS SNVZsKpzs3mbbPx61JlffKjvkW5zEcIPxwkXfVc1yhVjarGULNRrGWT0PQN38hhG oYdSh0i0qzpp34E+YYM7RDk5wHtMuP2xWEwaaKoGLFcI1qwcYe2cS9zz/Lmm40Ww iEkKB5ybhBIfRzjjLjBZoVawD4rvGanAH2sN2t/s6wulZ/ZGQOu+qNvjgqETkj0S HmpKSlwYRcg4nvVyPpd5zaUiU1TPk7AnVdH8WKslPsih+TfgKefxPJM2rU3WPmsN 9vph9YASlGXQCK8VRIkCgW8LiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHMILVaw 604HY9pE7YiqC+6jowhXMB8GA1UdIwQYMBaAFNscuEhUBp5DyhtyXULqa6m1OYFb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Rjg4RC8yQTE0QkUwODAw NUExMUVBOEZEQ0ExMzBDNEY5QUUwMi8yeHk0U0ZRR25rUEtHM0pkUXVwcnFiVTVn VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ4eTRTRlFHbmtQS0czSmRRdXBycWJVNWdWcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Rjg4RC8yQTE0QkUwODAwNUExMUVBOEZEQ0ExMzBDNEY5QUUwMi8yeHk0U0ZRR25r UEtHM0pkUXVwcnFiVTVnVnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1HPz4JQYZjVlKjZ735ObFz2HxhADMZ+hDWvyj6a+8dEqgR4tkOBXu xx0I6K6LyUEW6Gx1crsreaU6FVQF0xX+oRc16R2KOmEjOSfSh0dOO1m5dmFWKbPx LOy0/fErf/guqQn/CyIooRPGc06hwBhhnpms7zR9jjCJXaBCh1rbhmErID27gPu1 A939T1skqbCJ4cWqvEUd4D+GC/vlUYZWJrSdnTbQHA5MCRqRBHkl4HDL6eRgWJ7z 1WHixDgWzr+rrOFNptbwxrf5sYr/1+j79QxgoOC4LIEPOkpVk+QdcT2q6dtzF3zg EZ1ZcXs+RBA3sf7y4ZG32bIYiO+AReH+ -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:47 2025 by rpki-client on console.sobornost.net