$ rpki-client -vvf rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft File: sQG1q1GcKuZKv61qVvhD3AmQqFM.mft (raw, json) Hash identifier: GGix+2Wo1rvjVzSq0BB52KDuWGvt5Lkj+FpAHd7Koes= Subject key identifier: 96:A9:D1:79:7F:CA:0C:3A:1A:D8:5F:BC:B4:3F:26:AE:D9:99:82:1C Authority key identifier: B1:01:B5:AB:51:9C:2A:E6:4A:BF:AD:6A:56:F8:43:DC:09:90:A8:53 Certificate issuer: /CN=A919B06C/serialNumber=B101B5AB519C2AE64ABFAD6A56F843DC0990A853 Certificate serial: 116B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQG1q1GcKuZKv61qVvhD3AmQqFM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft Manifest number: 1F5F Signing time: Mon 28 Apr 2025 17:27:38 +0000 Manifest this update: Mon 28 Apr 2025 17:27:38 +0000 Manifest next update: Mon 05 May 2025 17:27:38 +0000 Files and hashes: 1: sQG1q1GcKuZKv61qVvhD3AmQqFM.crl (hash: Ab3nipcCPBvC+Acw/KTHfWIhbNl6fyCyjBufLaV0NLQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.crl rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQG1q1GcKuZKv61qVvhD3AmQqFM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 17:27:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4459 (0x116b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B06C, serialNumber=B101B5AB519C2AE64ABFAD6A56F843DC0990A853 Validity Not Before: Apr 28 17:27:38 2025 GMT Not After : May 5 17:27:38 2025 GMT Subject: CN=680fba8a-cd7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:08:7c:4d:61:2e:70:6f:9c:db:03:6f:97:63: 1a:d0:2c:84:9a:e7:74:da:5d:3f:40:ed:91:82:16: b6:a0:62:e1:c9:1f:1c:ef:a3:b0:70:78:f5:db:9f: 37:26:0f:df:7f:4d:48:7e:ee:bb:b3:13:d3:43:f6: 7e:85:52:11:3d:7f:a2:76:f4:3d:a9:d2:e9:2f:8a: de:ea:bf:3d:59:a1:d8:a1:8d:f8:7f:bc:3d:73:f6: 8f:1f:90:33:24:95:1f:9c:29:d8:3f:5b:3f:f5:ed: 47:9d:2d:fb:0f:60:db:d8:db:67:3f:6f:2a:37:30: aa:cf:25:63:9a:16:cc:7a:29:40:1a:5f:f9:90:53: ff:0b:3b:e7:39:55:43:54:85:c2:73:34:b2:ce:a7: c6:e2:f6:3a:27:88:94:44:08:7e:ce:fd:eb:a8:e1: 59:b3:d0:b7:86:81:db:1c:fa:e9:ce:f9:c7:9d:01: c1:3b:20:07:ff:1e:01:7a:36:85:96:ad:3a:ff:e2: cb:58:88:91:5a:61:2d:7d:0e:e1:32:af:ef:b1:24: 61:cf:45:df:3b:d2:64:8e:56:63:72:ed:5b:46:59: bb:8c:d2:6e:57:a1:4f:64:22:b2:74:e0:e4:26:8a: d1:50:5f:61:a3:71:cb:0a:2f:a3:f2:2f:1e:48:8f: 51:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:A9:D1:79:7F:CA:0C:3A:1A:D8:5F:BC:B4:3F:26:AE:D9:99:82:1C X509v3 Authority Key Identifier: keyid:B1:01:B5:AB:51:9C:2A:E6:4A:BF:AD:6A:56:F8:43:DC:09:90:A8:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQG1q1GcKuZKv61qVvhD3AmQqFM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:c7:e8:d0:70:43:a2:6e:3b:4f:92:00:b6:ce:bd:a1:62:95: 6c:06:a1:2f:db:cf:13:8f:8a:c0:fe:0f:13:4a:84:f6:46:0f: 75:80:f0:23:e7:a5:9b:77:05:2a:c2:83:06:f4:36:9d:07:81: 18:6f:37:84:10:41:78:b2:92:92:2b:f6:41:d7:1d:f7:50:6b: 74:03:0d:a0:f9:4c:fb:d5:c5:11:04:11:09:7d:dd:2d:b9:61: a6:00:84:13:9f:95:66:5e:e0:51:4a:bc:6f:58:a9:5a:31:67: d5:b4:7f:f5:42:da:fe:53:3d:d8:d9:a3:42:9a:f7:62:35:f0: e4:4d:93:3d:3d:11:bd:79:47:41:92:ec:6e:1d:3b:dd:1b:ae: 60:a8:fd:ca:38:ac:18:83:05:94:9d:bd:7b:b5:a7:11:45:44: 80:6f:56:cb:ec:f9:ff:8b:07:08:d6:c7:6d:76:7e:b2:74:73: 83:56:7c:de:fb:ce:53:50:31:0e:52:64:66:86:53:65:f3:46: 12:2c:90:df:38:1d:f8:b8:da:7b:0d:9d:b8:87:18:77:7d:6f: 07:70:81:12:71:6f:07:11:66:c4:4a:1e:0a:c4:43:bb:2c:57: 80:8b:e4:47:c1:b0:7e:fa:30:55:59:93:50:e4:a6:6d:42:a9: 09:a8:0f:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUIwNkMxMTAvBgNVBAUTKEIxMDFCNUFCNTE5QzJBRTY0QUJGQUQ2QTU2Rjg0M0RD MDk5MEE4NTMwHhcNMjUwNDI4MTcyNzM4WhcNMjUwNTA1MTcyNzM4WjAYMRYwFAYD VQQDEw02ODBmYmE4YS1jZDdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzgh8TWEucG+c2wNvl2Ma0CyEmud02l0/QO2Rgha2oGLhyR8c76OwcHj12583 Jg/ff01Ifu67sxPTQ/Z+hVIRPX+idvQ9qdLpL4re6r89WaHYoY34f7w9c/aPH5Az JJUfnCnYP1s/9e1HnS37D2Db2NtnP28qNzCqzyVjmhbMeilAGl/5kFP/CzvnOVVD VIXCczSyzqfG4vY6J4iURAh+zv3rqOFZs9C3hoHbHPrpzvnHnQHBOyAH/x4BejaF lq06/+LLWIiRWmEtfQ7hMq/vsSRhz0XfO9JkjlZjcu1bRlm7jNJuV6FPZCKydODk JorRUF9ho3HLCi+j8i8eSI9RQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJap0Xl/ ygw6GthfvLQ/Jq7ZmYIcMB8GA1UdIwQYMBaAFLEBtatRnCrmSr+talb4Q9wJkKhT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjA2Qy9FOUQ2MkU3NEZF QUUxMUU4OTEwRDRENjZDNEY5QUUwMi9zUUcxcTFHY0t1Wkt2NjFxVnZoRDNBbVFx Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NRRzFxMUdjS3VaS3Y2MXFWdmhEM0FtUXFGTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjA2Qy9FOUQ2MkU3NEZFQUUxMUU4OTEwRDRENjZDNEY5QUUwMi9zUUcxcTFHY0t1 Wkt2NjFxVnZoRDNBbVFxRk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/x+jQcEOibjtPkgC2zr2hYpVsBqEv288Tj4rA/g8TSoT2Rg91gPAj 56WbdwUqwoMG9DadB4EYbzeEEEF4spKSK/ZB1x33UGt0Aw2g+Uz71cURBBEJfd0t uWGmAIQTn5VmXuBRSrxvWKlaMWfVtH/1Qtr+Uz3Y2aNCmvdiNfDkTZM9PRG9eUdB kuxuHTvdG65gqP3KOKwYgwWUnb17tacRRUSAb1bL7Pn/iwcI1sdtdn6ydHODVnze +85TUDEOUmRmhlNl80YSLJDfOB34uNp7DZ24hxh3fW8HcIEScW8HEWbESh4KxEO7 LFeAi+RHwbB++jBVWZNQ5KZtQqkJqA9O -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:50 2025 by rpki-client on console.sobornost.net