$ rpki-client -vvf rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.mft File: RkhU-1CpkDxSU0GMWD0PMbhB1Zc.mft (raw, json) Hash identifier: T++BwXV3a/iVr4g3VQnnVu6MjwNZpbZtBaSBlPZNnks= Subject key identifier: 1A:05:61:D7:25:EF:AF:46:9A:DD:C4:A7:5C:3E:2F:C1:74:EB:06:40 Authority key identifier: 46:48:54:FB:50:A9:90:3C:52:53:41:8C:58:3D:0F:31:B8:41:D5:97 Certificate issuer: /CN=A91964B3/serialNumber=464854FB50A9903C5253418C583D0F31B841D597 Certificate serial: 1010 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.mft Manifest number: 1000 Signing time: Mon 28 Apr 2025 14:25:39 +0000 Manifest this update: Mon 28 Apr 2025 14:25:38 +0000 Manifest next update: Mon 05 May 2025 14:25:38 +0000 Files and hashes: 1: RkhU-1CpkDxSU0GMWD0PMbhB1Zc.crl (hash: xExoYQvF7jKebnhJeZy7bOjZ7enrt6K2sSqLSYfyta4=) 2: 23B68638C5DD11EABC58FD24C4F9AE02.roa (hash: 7YuoX9OkBSRUQiHpsiuHEMGmDB7ygNEWHmpkRA4QfgE=) 3: 5D563164AF3411EFB5B51A57C4F9AE02.roa (hash: Mjf+9MFV/8wopOF7hLs3Tt14yZvRKLf5RcXcRhi35uI=) 4: 1396434EC90A11EF8577744AC4F9AE02.roa (hash: vv5/sNroDyn31EV1FuwDRkKZ1Ky/CQIEoorZo83v9h8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.crl rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 14:25:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4112 (0x1010) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91964B3, serialNumber=464854FB50A9903C5253418C583D0F31B841D597 Validity Not Before: Apr 28 14:25:38 2025 GMT Not After : May 5 14:25:38 2025 GMT Subject: CN=680f8fe2-a044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:8f:3c:be:60:db:59:65:bc:cb:0e:60:a2:42: 10:d6:5f:ad:65:51:0c:d4:14:ad:d3:5a:9f:bd:1c: 33:8c:c6:e6:93:e0:36:35:50:01:07:ad:59:da:54: 72:39:eb:6e:cb:bf:2a:7f:f2:5e:fc:ef:6b:04:c6: 08:51:88:76:f4:43:a5:19:51:fb:03:4f:e9:91:68: 66:8f:ca:68:d7:30:bd:1a:f2:5c:da:39:dc:d4:eb: 52:c2:5b:97:bc:c4:c8:a0:ed:da:9e:8a:b6:2e:b4: 3f:25:f0:49:bf:08:95:f6:26:3f:ac:17:a3:ac:cf: ba:cb:a5:45:05:af:88:c4:29:b9:52:56:cf:1d:32: 87:dd:94:4d:d5:a3:2e:79:bf:c2:e5:24:20:76:c7: 9d:a6:a0:bc:c0:c6:2d:ee:87:cb:f3:1f:f9:78:4c: 6c:0e:57:15:73:c2:14:ae:07:ba:1c:b4:bb:d3:a1: 2f:c6:bb:33:14:bc:b6:f7:86:c5:6e:12:d0:01:3a: c8:83:4d:0e:bc:00:30:d2:12:92:28:a5:cd:5d:48: 7c:d2:d9:6e:c4:24:d2:88:ad:29:37:6c:87:44:66: c4:10:52:29:df:d6:e0:6f:7f:70:47:f6:ca:b8:fc: 8a:a6:7c:28:52:fb:e2:7d:08:fc:03:98:02:88:3c: 73:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:05:61:D7:25:EF:AF:46:9A:DD:C4:A7:5C:3E:2F:C1:74:EB:06:40 X509v3 Authority Key Identifier: keyid:46:48:54:FB:50:A9:90:3C:52:53:41:8C:58:3D:0F:31:B8:41:D5:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:cd:a0:ea:a3:7e:93:21:53:9a:97:83:20:63:d0:fd:bd:4e: b5:2a:3a:bb:21:f9:90:5c:15:6d:5d:c5:d1:c9:21:12:43:c7: ed:ad:cf:4c:c6:48:f0:66:36:37:61:cf:cc:5c:6b:2a:a5:9e: 49:85:7e:6c:d8:f3:74:56:52:5c:62:fc:d2:ce:80:dd:b3:82: 8c:77:bf:cf:5e:60:fe:71:c0:83:81:df:f0:0b:cb:ca:01:fd: e8:d1:1a:06:96:12:e0:11:aa:55:28:37:15:3c:99:75:5a:90: d2:1a:67:5a:78:30:7d:87:5a:f8:93:fb:16:e6:51:e2:1b:7f: 2b:30:1e:21:3a:36:d8:ff:87:9a:4f:70:2d:63:c3:fe:ac:cb: e8:8a:67:c1:92:41:d1:d4:15:19:20:d6:7b:de:3d:5f:09:ce: ee:3c:cc:54:22:a3:44:54:26:f1:52:86:53:ae:27:1e:50:ab: d6:72:cc:9e:06:1e:38:05:24:c1:b6:d2:e2:a8:07:e2:d1:1c: ce:49:36:a2:2e:a9:df:14:ac:bb:4f:1a:d2:2d:2e:65:a8:32: 1e:55:9e:c7:93:83:b2:77:95:e1:c2:b4:00:5a:f1:b0:42:e7: 87:ab:ec:88:03:77:9e:c2:b5:bb:55:01:9c:1a:eb:52:89:12: 5c:11:3f:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEBAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTY0QjMxMTAvBgNVBAUTKDQ2NDg1NEZCNTBBOTkwM0M1MjUzNDE4QzU4M0QwRjMx Qjg0MUQ1OTcwHhcNMjUwNDI4MTQyNTM4WhcNMjUwNTA1MTQyNTM4WjAYMRYwFAYD VQQDEw02ODBmOGZlMi1hMDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2488vmDbWWW8yw5gokIQ1l+tZVEM1BSt01qfvRwzjMbmk+A2NVABB61Z2lRy Oetuy78qf/Je/O9rBMYIUYh29EOlGVH7A0/pkWhmj8po1zC9GvJc2jnc1OtSwluX vMTIoO3anoq2LrQ/JfBJvwiV9iY/rBejrM+6y6VFBa+IxCm5UlbPHTKH3ZRN1aMu eb/C5SQgdsedpqC8wMYt7ofL8x/5eExsDlcVc8IUrge6HLS706EvxrszFLy294bF bhLQATrIg00OvAAw0hKSKKXNXUh80tluxCTSiK0pN2yHRGbEEFIp39bgb39wR/bK uPyKpnwoUvvifQj8A5gCiDxzHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBoFYdcl 769Gmt3Ep1w+L8F06wZAMB8GA1UdIwQYMBaAFEZIVPtQqZA8UlNBjFg9DzG4QdWX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjRCMy8yQTU5NDBGMjRC QjMxMUU5QUIxNTFDMTdDNEY5QUUwMi9Sa2hVLTFDcGtEeFNVMEdNV0QwUE1iaEIx WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1JraFUtMUNwa0R4U1UwR01XRDBQTWJoQjFaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NjRCMy8yQTU5NDBGMjRCQjMxMUU5QUIxNTFDMTdDNEY5QUUwMi9Sa2hVLTFDcGtE eFNVMEdNV0QwUE1iaEIxWmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLzaDqo36TIVOal4MgY9D9vU61Kjq7IfmQXBVtXcXRySESQ8ftrc9M xkjwZjY3Yc/MXGsqpZ5JhX5s2PN0VlJcYvzSzoDds4KMd7/PXmD+ccCDgd/wC8vK Af3o0RoGlhLgEapVKDcVPJl1WpDSGmdaeDB9h1r4k/sW5lHiG38rMB4hOjbY/4ea T3AtY8P+rMvoimfBkkHR1BUZINZ73j1fCc7uPMxUIqNEVCbxUoZTriceUKvWcsye Bh44BSTBttLiqAfi0RzOSTaiLqnfFKy7TxrSLS5lqDIeVZ7Hk4Oyd5XhwrQAWvGw QueHq+yIA3eewrW7VQGcGutSiRJcET/7 -----END CERTIFICATE-----Generated at Mon Apr 28 17:45:59 2025 by rpki-client on console.sobornost.net