$ rpki-client -vvf rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft File: IffNCqAWhDVSmHRj5kIpcu8DnOg.mft (raw, json) Hash identifier: vghf/xuuBAzNbyz83XahpbwLTolBb+vs7NXwzagogG4= Subject key identifier: 0A:42:F8:23:CB:8E:0A:ED:0B:54:52:9C:98:2D:1E:54:FD:37:9F:E6 Authority key identifier: 21:F7:CD:0A:A0:16:84:35:52:98:74:63:E6:42:29:72:EF:03:9C:E8 Certificate issuer: /CN=A919710C/serialNumber=21F7CD0AA016843552987463E6422972EF039CE8 Certificate serial: 0461 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IffNCqAWhDVSmHRj5kIpcu8DnOg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft Manifest number: 045A Signing time: Sat 26 Apr 2025 23:49:34 +0000 Manifest this update: Sat 26 Apr 2025 23:49:33 +0000 Manifest next update: Sat 03 May 2025 23:49:33 +0000 Files and hashes: 1: IffNCqAWhDVSmHRj5kIpcu8DnOg.crl (hash: vZsBp02Rk+SaZf6vKH/vwkHZuPWMvflz9UZmzzpAZg8=) 2: F47ED252878B11EEA8C62644C4F9AE02.roa (hash: qTXBNw7mfhaErKZnovnNFuD402t8u0aLC3Cx70bCvCg=) 3: E097013E910C11EFB994E187C4F9AE02.roa (hash: 6iwr6VYb5feSdMcufjsCe6jPARf4GSvhQnloLGq2csk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.crl rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IffNCqAWhDVSmHRj5kIpcu8DnOg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 23:49:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1121 (0x461) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919710C, serialNumber=21F7CD0AA016843552987463E6422972EF039CE8 Validity Not Before: Apr 26 23:49:33 2025 GMT Not After : May 3 23:49:33 2025 GMT Subject: CN=680d710e-d21c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:27:9a:5b:e2:6c:cf:6f:79:4f:25:2f:7e:b6: ee:c6:27:af:cf:95:e2:8f:a8:1e:9a:aa:2e:97:52: 6f:ba:80:e5:72:d0:f6:8a:e9:6a:f2:bc:8a:77:d6: 31:3d:f3:9a:a1:ba:9d:d2:a0:39:f5:32:0b:72:7f: 93:10:97:a2:32:1e:05:3b:73:2d:8c:be:fe:92:97: 62:59:cb:f7:5c:93:68:2d:f0:4a:2d:8a:86:a7:28: bf:29:75:62:fc:bb:01:4f:4d:55:89:35:28:4b:6e: f5:0a:1a:37:3a:6e:23:90:74:20:10:28:cc:ad:54: 10:4d:b4:01:6f:59:b2:14:e0:e3:86:d6:85:32:61: 79:e7:8a:a9:83:1f:5c:07:b0:c2:54:46:21:5a:7b: 92:9c:36:7d:d0:dc:87:c1:a2:6b:40:3e:f2:8b:5a: 84:6e:e2:ff:da:f7:28:61:1d:9b:2e:17:8a:a8:59: fc:78:a6:5f:f7:ef:f4:fd:51:c9:ac:6b:fd:82:f5: 75:57:b2:83:e8:46:f6:f6:7a:25:11:41:4b:d4:a0: d5:77:35:bc:db:09:32:36:b1:47:7e:59:32:b2:64: 7f:40:4f:bd:ab:a8:f9:ab:d6:04:6e:69:ea:b7:86: be:68:57:8c:5d:d5:61:e7:e9:41:18:6d:c8:4d:35: 56:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:42:F8:23:CB:8E:0A:ED:0B:54:52:9C:98:2D:1E:54:FD:37:9F:E6 X509v3 Authority Key Identifier: keyid:21:F7:CD:0A:A0:16:84:35:52:98:74:63:E6:42:29:72:EF:03:9C:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IffNCqAWhDVSmHRj5kIpcu8DnOg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:fa:52:7a:3b:db:73:e9:c1:00:31:57:73:68:5d:8f:5f:c0: c6:ee:34:5c:f0:dd:52:8c:47:3d:6a:49:09:93:99:69:7c:66: e9:3d:d5:41:05:80:b8:64:f5:14:c7:d2:54:18:9b:c6:53:d9: c7:2e:12:97:69:8c:57:5f:c5:47:22:f8:b6:b2:39:cd:57:91: fb:98:a6:8b:82:9e:10:b0:30:51:9d:44:3b:ef:0b:00:e2:54: cb:3c:09:0f:77:a4:e0:89:a6:e5:63:d6:98:25:ba:fa:e9:4c: c7:2a:98:75:b4:62:4f:02:c7:8e:b1:e4:41:9e:21:95:d1:f4: 65:d3:fb:33:3c:b9:78:aa:4e:05:39:95:6a:60:f7:c2:45:40: 45:8d:75:8d:6c:b4:72:0a:74:c6:b8:78:61:ee:60:a0:a7:25: 5f:12:7d:03:00:f8:b2:b8:e8:59:0d:94:5e:18:fe:0f:18:a8: 7a:ea:fc:c5:54:1a:6f:42:ce:99:8d:f8:f1:07:89:ba:f3:ac: 58:98:17:b4:95:91:b0:93:8e:56:ab:86:dc:7a:70:c3:c4:5b: c2:c4:b2:2e:0a:ae:34:0a:93:67:38:68:b2:a0:b6:ab:10:f7: a1:8f:76:8f:d2:ff:82:2e:d1:56:bf:14:1d:cc:91:81:25:80: 80:c9:f3:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcxMEMxMTAvBgNVBAUTKDIxRjdDRDBBQTAxNjg0MzU1Mjk4NzQ2M0U2NDIyOTcy RUYwMzlDRTgwHhcNMjUwNDI2MjM0OTMzWhcNMjUwNTAzMjM0OTMzWjAYMRYwFAYD VQQDEw02ODBkNzEwZS1kMjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsCeaW+Jsz295TyUvfrbuxievz5Xij6gemqoul1JvuoDlctD2iulq8ryKd9Yx PfOaobqd0qA59TILcn+TEJeiMh4FO3MtjL7+kpdiWcv3XJNoLfBKLYqGpyi/KXVi /LsBT01ViTUoS271Cho3Om4jkHQgECjMrVQQTbQBb1myFODjhtaFMmF554qpgx9c B7DCVEYhWnuSnDZ90NyHwaJrQD7yi1qEbuL/2vcoYR2bLheKqFn8eKZf9+/0/VHJ rGv9gvV1V7KD6Eb29nolEUFL1KDVdzW82wkyNrFHflkysmR/QE+9q6j5q9YEbmnq t4a+aFeMXdVh5+lBGG3ITTVWGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFApC+CPL jgrtC1RSnJgtHlT9N5/mMB8GA1UdIwQYMBaAFCH3zQqgFoQ1Uph0Y+ZCKXLvA5zo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzEwQy8yRjM2NzYxMjRC NjAxMUVDOTU1NERDNTBDNEY5QUUwMi9JZmZOQ3FBV2hEVlNtSFJqNWtJcGN1OERu T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lmZk5DcUFXaERWU21IUmo1a0lwY3U4RG5PZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzEwQy8yRjM2NzYxMjRCNjAxMUVDOTU1NERDNTBDNEY5QUUwMi9JZmZOQ3FBV2hE VlNtSFJqNWtJcGN1OERuT2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBc+lJ6O9tz6cEAMVdzaF2PX8DG7jRc8N1SjEc9akkJk5lpfGbpPdVB BYC4ZPUUx9JUGJvGU9nHLhKXaYxXX8VHIvi2sjnNV5H7mKaLgp4QsDBRnUQ77wsA 4lTLPAkPd6TgiablY9aYJbr66UzHKph1tGJPAseOseRBniGV0fRl0/szPLl4qk4F OZVqYPfCRUBFjXWNbLRyCnTGuHhh7mCgpyVfEn0DAPiyuOhZDZReGP4PGKh66vzF VBpvQs6ZjfjxB4m686xYmBe0lZGwk45Wq4bcenDDxFvCxLIuCq40CpNnOGiyoLar EPehj3aP0v+CLtFWvxQdzJGBJYCAyfML -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:00 2025 by rpki-client on console.sobornost.net