$ rpki-client -vvf rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.mft File: 556bUhJjfjPKXcthdpCc4ZYhumQ.mft (raw, json) Hash identifier: FrHn3D0+ndmVAAGO/7BaSK4Uw3xHmq3E5K7uBxLN5yo= Subject key identifier: D8:AD:3E:68:DA:87:8A:F1:39:3E:65:DA:70:51:53:D1:EB:BD:0F:45 Authority key identifier: E7:9E:9B:52:12:63:7E:33:CA:5D:CB:61:76:90:9C:E1:96:21:BA:64 Certificate issuer: /CN=A919C47E/serialNumber=E79E9B5212637E33CA5DCB6176909CE19621BA64 Certificate serial: 0446 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/556bUhJjfjPKXcthdpCc4ZYhumQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.mft Manifest number: 0440 Signing time: Mon 28 Apr 2025 17:16:26 +0000 Manifest this update: Mon 28 Apr 2025 17:16:26 +0000 Manifest next update: Mon 05 May 2025 17:16:26 +0000 Files and hashes: 1: 556bUhJjfjPKXcthdpCc4ZYhumQ.crl (hash: AkKPgT45aAOfRraLL+2qtBf1yf6YYnuzGc+aTmQWnrc=) 2: B7E86B40595311EC9ECF510BC4F9AE02.roa (hash: I3AqCAvryjVR50FDwOB2eOkU4GLBFJs3HZ3gb9KEimo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.crl rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/556bUhJjfjPKXcthdpCc4ZYhumQ.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 14:50:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1094 (0x446) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C47E, serialNumber=E79E9B5212637E33CA5DCB6176909CE19621BA64 Validity Not Before: Apr 28 17:16:26 2025 GMT Not After : May 5 17:16:26 2025 GMT Subject: CN=680fb7ea-936d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:cc:b3:a2:2e:0e:ad:1b:e2:c6:05:f1:66:a2: 69:79:28:b6:d2:b1:55:4f:06:6c:8b:30:25:dc:cd: 29:ae:b4:4a:96:5a:e8:58:f0:4e:4d:85:ad:9f:59: be:d4:3c:19:62:03:0f:a5:2b:e5:b6:e6:4e:77:3b: 05:19:df:05:99:63:10:96:d6:17:d6:23:d0:a0:07: 2a:f1:91:1d:9f:0e:3e:9a:f1:93:f9:2e:c7:37:b9: 1c:af:7c:07:61:88:ce:13:74:f4:81:e6:2b:bb:58: 00:51:5b:e2:a7:ee:64:20:20:c4:93:30:65:06:d1: 39:24:75:5b:33:a1:eb:d4:a5:e5:27:c6:b4:4b:60: de:89:6c:e6:bc:33:88:b0:09:2e:f1:0b:25:3e:9a: d3:61:a0:d7:b9:de:63:35:32:62:11:fb:48:e6:ed: 96:90:76:4a:64:1e:5b:46:3a:9d:70:e7:6c:8f:49: 99:7e:08:3f:32:7c:c1:40:bc:22:96:19:ab:e2:18: 48:9f:e0:f3:8e:26:da:5c:df:4d:a8:9f:35:e3:df: a9:d1:3a:9e:71:b4:00:13:f3:71:f6:0b:9c:4c:fe: b1:2b:91:d9:a2:95:26:73:76:f7:e9:32:9e:43:8e: ad:37:59:9f:92:e9:c3:ca:ce:d8:20:70:63:0c:7e: 5d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:AD:3E:68:DA:87:8A:F1:39:3E:65:DA:70:51:53:D1:EB:BD:0F:45 X509v3 Authority Key Identifier: keyid:E7:9E:9B:52:12:63:7E:33:CA:5D:CB:61:76:90:9C:E1:96:21:BA:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/556bUhJjfjPKXcthdpCc4ZYhumQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:7e:32:20:e1:4e:b0:17:37:f1:a7:4c:6f:a3:8f:ab:48:ea: f9:13:3c:74:b9:be:77:1e:03:1e:ed:7d:65:41:44:be:c1:e1: 96:5e:99:14:bc:67:d0:19:d5:5b:06:63:99:6e:4e:aa:4b:99: 61:32:4d:56:71:ce:f4:25:69:b0:47:5c:69:44:43:3f:cf:6c: 41:74:d5:df:c8:1a:d6:0c:f1:fd:75:73:66:8a:ac:2a:2f:cd: 98:0d:76:5f:a4:ef:33:71:27:90:40:20:2d:e7:c2:70:6d:ed: bd:c6:8a:72:17:a2:32:86:6c:59:3b:1f:37:cb:b8:72:60:18: 22:47:bd:5b:57:3d:d6:0e:d0:45:a3:d9:2c:f3:e8:2b:06:e3: 18:4d:30:bb:86:04:3f:a3:e9:9d:e6:e1:49:4e:1a:1f:65:f6: b4:0c:8d:ef:f2:ac:a8:c6:e5:52:e7:e1:65:d4:6f:3b:8e:07: 87:8e:c1:d0:67:26:cb:43:93:44:80:1b:f1:3a:51:27:57:4f: eb:4c:bb:31:b0:0e:b8:c3:ce:41:66:49:29:95:ef:56:ab:16: f7:a0:62:05:d2:2e:76:5a:93:4b:6f:5d:98:76:f2:a6:4b:f7: d1:04:90:5b:1c:3c:4f:2b:3a:47:40:dd:ca:21:85:a3:7b:5e: 36:47:98:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM0N0UxMTAvBgNVBAUTKEU3OUU5QjUyMTI2MzdFMzNDQTVEQ0I2MTc2OTA5Q0Ux OTYyMUJBNjQwHhcNMjUwNDI4MTcxNjI2WhcNMjUwNTA1MTcxNjI2WjAYMRYwFAYD VQQDEw02ODBmYjdlYS05MzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqsyzoi4OrRvixgXxZqJpeSi20rFVTwZsizAl3M0prrRKllroWPBOTYWtn1m+ 1DwZYgMPpSvltuZOdzsFGd8FmWMQltYX1iPQoAcq8ZEdnw4+mvGT+S7HN7kcr3wH YYjOE3T0geYru1gAUVvip+5kICDEkzBlBtE5JHVbM6Hr1KXlJ8a0S2DeiWzmvDOI sAku8QslPprTYaDXud5jNTJiEftI5u2WkHZKZB5bRjqdcOdsj0mZfgg/MnzBQLwi lhmr4hhIn+DzjibaXN9NqJ8149+p0TqecbQAE/Nx9gucTP6xK5HZopUmc3b36TKe Q46tN1mfkunDys7YIHBjDH5dWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNitPmja h4rxOT5l2nBRU9HrvQ9FMB8GA1UdIwQYMBaAFOeem1ISY34zyl3LYXaQnOGWIbpk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzQ3RS8xRTc1MzY1MDU5 NEUxMUVDQTA2MjkyNTZDNEY5QUUwMi81NTZiVWhKamZqUEtYY3RoZHBDYzRaWWh1 bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzU1NmJVaEpqZmpQS1hjdGhkcENjNFpZaHVtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzQ3RS8xRTc1MzY1MDU5NEUxMUVDQTA2MjkyNTZDNEY5QUUwMi81NTZiVWhKamZq UEtYY3RoZHBDYzRaWWh1bVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnfjIg4U6wFzfxp0xvo4+rSOr5Ezx0ub53HgMe7X1lQUS+weGWXpkU vGfQGdVbBmOZbk6qS5lhMk1Wcc70JWmwR1xpREM/z2xBdNXfyBrWDPH9dXNmiqwq L82YDXZfpO8zcSeQQCAt58Jwbe29xopyF6IyhmxZOx83y7hyYBgiR71bVz3WDtBF o9ks8+grBuMYTTC7hgQ/o+md5uFJThofZfa0DI3v8qyoxuVS5+Fl1G87jgeHjsHQ ZybLQ5NEgBvxOlEnV0/rTLsxsA64w85BZkkple9Wqxb3oGIF0i52WpNLb12YdvKm S/fRBJBbHDxPKzpHQN3KIYWje142R5jL -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:50 2025 by rpki-client on console.sobornost.net