$ rpki-client -vvf rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft File: -6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft (raw, json) Hash identifier: b/3ike6oBY+R546lhiCzLtnSDtrbEZOUxq4a8M7de3s= Subject key identifier: D7:83:B6:A1:2A:49:85:B8:7A:93:0F:39:A4:65:E1:AB:D5:37:50:7D Authority key identifier: FB:A7:C3:AD:F0:7F:80:B3:56:C1:13:B8:52:56:F5:7A:40:69:EA:E6 Certificate issuer: /CN=A918FD87/serialNumber=FBA7C3ADF07F80B356C113B85256F57A4069EAE6 Certificate serial: 0801 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft Manifest number: 07F9 Signing time: Sat 26 Apr 2025 20:40:00 +0000 Manifest this update: Sat 26 Apr 2025 20:40:00 +0000 Manifest next update: Sat 03 May 2025 20:40:00 +0000 Files and hashes: 1: -6fDrfB_gLNWwRO4Ulb1ekBp6uY.crl (hash: k5lBrU3e9meefq51AnIBf6Azb1pCtHjGqdfSY/zazRI=) 2: 35167F34DE0911EAA8F7452CC4F9AE02.roa (hash: 5iBEu4/lxuKcsTngGzKrbQO6HIpjDKLahJSiNgvhi+k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.crl rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2049 (0x801) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FD87, serialNumber=FBA7C3ADF07F80B356C113B85256F57A4069EAE6 Validity Not Before: Apr 26 20:40:00 2025 GMT Not After : May 3 20:40:00 2025 GMT Subject: CN=680d44a0-ebc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ad:48:20:bb:d4:a9:e6:b3:cf:6f:42:2b:0c: f2:03:31:1e:f5:74:12:a6:14:7e:98:a3:a9:21:8d: 71:76:b1:46:eb:2f:f3:ae:a2:d9:9d:28:4e:0a:6e: cd:38:6a:e4:43:9c:5b:5f:47:d6:65:18:93:70:58: db:12:74:93:89:69:79:c8:31:1d:9f:d4:6a:4d:65: fe:40:5b:90:88:fb:52:15:d6:e9:2e:00:1e:3e:0b: d8:80:2d:e8:40:27:44:4b:0a:27:5f:1a:bf:63:a4: 09:35:f5:8e:e0:db:dd:07:26:e4:c4:69:42:34:85: e6:9c:08:ef:60:e5:f6:51:14:c6:ba:01:02:08:bb: 42:39:1c:da:b6:d7:3e:7d:e7:eb:63:45:1b:55:e9: b3:36:e0:e1:c4:8b:20:9e:e2:75:ba:8f:18:63:59: 3b:8d:7c:b8:0e:d5:28:e3:33:4a:ae:b5:0f:59:3a: 4d:ef:d7:36:7c:c5:7c:38:88:21:af:b0:a7:8b:59: 20:f5:6e:d2:ab:8c:ef:00:a5:b0:22:55:65:5a:a5: 3e:5b:b5:86:b1:1e:01:69:3f:bb:bc:25:b7:38:a3: 29:62:f6:96:3f:e1:55:10:09:ef:1e:94:3b:d5:77: 3b:e2:bf:41:9c:bb:a2:50:83:1a:4c:4c:85:d4:e4: 5f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:83:B6:A1:2A:49:85:B8:7A:93:0F:39:A4:65:E1:AB:D5:37:50:7D X509v3 Authority Key Identifier: keyid:FB:A7:C3:AD:F0:7F:80:B3:56:C1:13:B8:52:56:F5:7A:40:69:EA:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:24:96:0d:15:af:2a:c7:9a:1c:0a:73:0f:6d:0e:c8:24:c6: 5f:d6:43:7d:03:58:57:68:8b:eb:ff:77:14:0b:73:7e:6d:23: eb:84:8d:de:6c:a5:19:24:0c:f7:b6:55:cc:c7:13:c8:cd:e8: 8a:1f:18:09:f1:47:dc:bf:a6:ec:ae:82:b5:3a:0a:4e:7d:b3: a5:c1:d4:b2:45:71:6f:7e:29:f0:ed:b2:ff:e3:e6:42:67:c7: e4:93:2a:9a:c3:5f:94:d4:22:33:a2:8a:68:c6:f2:ff:04:cf: d8:83:e8:b2:93:d2:ca:6f:29:24:a7:3d:09:7a:74:b9:53:47: 30:ae:ba:b6:32:8c:bd:5d:38:1b:f1:9f:2f:f7:ce:55:5e:ef: 4e:c1:e4:55:d5:e0:74:09:4d:cb:79:97:b6:d7:b2:19:df:d8: b8:0d:87:07:74:ec:93:5d:c5:c7:2f:96:df:56:73:bf:da:d2: a7:86:ed:f7:14:46:98:c2:fd:b1:47:84:98:9f:4b:77:cd:18: b6:56:83:9e:5d:30:eb:5b:26:5e:b0:4a:79:b7:cf:22:e6:d6: 2d:d2:f1:a6:0e:a7:1a:31:d1:6b:0e:25:27:63:6d:ee:18:23: b8:49:f5:54:fa:2c:60:6e:25:f5:61:c5:0a:8b:ca:f9:d3:b0: 91:34:25:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZEODcxMTAvBgNVBAUTKEZCQTdDM0FERjA3RjgwQjM1NkMxMTNCODUyNTZGNTdB NDA2OUVBRTYwHhcNMjUwNDI2MjA0MDAwWhcNMjUwNTAzMjA0MDAwWjAYMRYwFAYD VQQDEw02ODBkNDRhMC1lYmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsa1IILvUqeazz29CKwzyAzEe9XQSphR+mKOpIY1xdrFG6y/zrqLZnShOCm7N OGrkQ5xbX0fWZRiTcFjbEnSTiWl5yDEdn9RqTWX+QFuQiPtSFdbpLgAePgvYgC3o QCdESwonXxq/Y6QJNfWO4NvdBybkxGlCNIXmnAjvYOX2URTGugECCLtCORzattc+ fefrY0UbVemzNuDhxIsgnuJ1uo8YY1k7jXy4DtUo4zNKrrUPWTpN79c2fMV8OIgh r7Cni1kg9W7Sq4zvAKWwIlVlWqU+W7WGsR4BaT+7vCW3OKMpYvaWP+FVEAnvHpQ7 1Xc74r9BnLuiUIMaTEyF1ORfLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNeDtqEq SYW4epMPOaRl4avVN1B9MB8GA1UdIwQYMBaAFPunw63wf4CzVsETuFJW9XpAaerm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkQ4Ny8yOUFBOTk1NkRF MDgxMUVBQTEwNkI2MkJDNEY5QUUwMi8tNmZEcmZCX2dMTld3Uk80VWxiMWVrQnA2 dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy02ZkRyZkJfZ0xOV3dSTzRVbGIxZWtCcDZ1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkQ4Ny8yOUFBOTk1NkRFMDgxMUVBQTEwNkI2MkJDNEY5QUUwMi8tNmZEcmZCX2dM Tld3Uk80VWxiMWVrQnA2dVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTJJYNFa8qx5ocCnMPbQ7IJMZf1kN9A1hXaIvr/3cUC3N+bSPrhI3e bKUZJAz3tlXMxxPIzeiKHxgJ8Ufcv6bsroK1OgpOfbOlwdSyRXFvfinw7bL/4+ZC Z8fkkyqaw1+U1CIzoopoxvL/BM/Yg+iyk9LKbykkpz0JenS5U0cwrrq2Moy9XTgb 8Z8v985VXu9OweRV1eB0CU3LeZe217IZ39i4DYcHdOyTXcXHL5bfVnO/2tKnhu33 FEaYwv2xR4SYn0t3zRi2VoOeXTDrWyZesEp5t88i5tYt0vGmDqcaMdFrDiUnY23u GCO4SfVU+ixgbiX1YcUKi8r507CRNCWz -----END CERTIFICATE-----Generated at Sun Apr 27 00:14:06 2025 by rpki-client on console.sobornost.net