$ rpki-client -vvf rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.mft File: iU_hE5i2ea6xsRixveZz4Yz26TQ.mft (raw, json) Hash identifier: xPeeFwRDKTB3py6gQ6H1r9rzsUeoODzgG+3AmhF3vzo= Subject key identifier: 83:23:9F:AF:6B:61:7B:6E:D5:38:56:5E:42:2B:E4:CC:EB:41:97:DD Authority key identifier: 89:4F:E1:13:98:B6:79:AE:B1:B1:18:B1:BD:E6:73:E1:8C:F6:E9:34 Certificate issuer: /CN=A919C47E/serialNumber=894FE11398B679AEB1B118B1BDE673E18CF6E934 Certificate serial: 1357 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iU_hE5i2ea6xsRixveZz4Yz26TQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.mft Manifest number: 132B Signing time: Mon 28 Apr 2025 17:16:28 +0000 Manifest this update: Mon 28 Apr 2025 17:16:28 +0000 Manifest next update: Mon 05 May 2025 17:16:28 +0000 Files and hashes: 1: iU_hE5i2ea6xsRixveZz4Yz26TQ.crl (hash: 3L25ql7q1f1cIFc7nb3Pf/ta4qlyd1qHsws8vsWEQ00=) 2: 354FE56C6C5111EC9FF8F481C4F9AE02.roa (hash: yLsbLNfO8+GYafdqIv83Nfi6PSWJ/614Kmn3tZCnkTY=) 3: 02BFF64EE6A811EFB5943878C4F9AE02.roa (hash: 2CAgcrLv4JGzDGMPlAonDkbaG+eLBXz0G6EKid4bHfs=) 4: B2E4A482E4D611EDB15EDE36C4F9AE02.roa (hash: d1W5JywmHjLqObvdK9tSNHN2RsDjV33NPPuORYy/wG0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.crl rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iU_hE5i2ea6xsRixveZz4Yz26TQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 17:16:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4951 (0x1357) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C47E, serialNumber=894FE11398B679AEB1B118B1BDE673E18CF6E934 Validity Not Before: Apr 28 17:16:28 2025 GMT Not After : May 5 17:16:28 2025 GMT Subject: CN=680fb7ec-dca6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c8:57:da:c1:cb:b1:98:f5:f9:fe:13:6e:71: 9d:2e:54:22:a8:48:44:0c:5e:6f:ee:87:35:f0:70: c3:bb:1d:48:a4:32:17:6b:25:b1:43:09:2c:4a:cb: bd:bb:37:1a:38:68:52:9e:44:b1:b1:80:60:7d:af: 1f:78:1d:db:db:a9:44:ae:15:57:b1:43:27:91:89: ec:e0:f2:09:92:40:a3:a6:81:89:74:22:e6:94:ff: 09:94:bb:4f:a1:d0:bb:1f:82:6b:3a:66:b3:26:1c: 6d:d1:1c:32:2d:ed:e6:8d:ec:bf:38:9a:49:0a:b6: 62:bd:ab:af:d4:82:69:e6:4b:fb:49:24:34:4d:8d: 46:7a:ca:d8:2c:81:18:6d:99:1f:85:21:8f:d3:8d: f6:6d:5f:5f:19:8f:40:d0:34:33:a9:07:1d:76:2b: 50:6d:8f:fa:29:d0:26:bc:bb:34:3e:df:3a:1e:ac: b3:8a:9c:07:cb:c3:2d:a9:45:b2:5d:df:b2:36:9a: 9c:53:ee:c2:c8:a6:d1:4e:77:99:62:a8:ce:4a:02: 45:ca:86:d8:4f:9a:23:8a:d3:58:99:cf:3e:bb:30: 94:f2:a5:ac:4a:ef:3e:29:5c:ef:05:7c:54:e8:59: 97:1e:97:b9:21:ad:cb:86:19:e4:0e:97:66:2f:b2: db:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:23:9F:AF:6B:61:7B:6E:D5:38:56:5E:42:2B:E4:CC:EB:41:97:DD X509v3 Authority Key Identifier: keyid:89:4F:E1:13:98:B6:79:AE:B1:B1:18:B1:BD:E6:73:E1:8C:F6:E9:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iU_hE5i2ea6xsRixveZz4Yz26TQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:01:a8:fc:25:d9:9f:0b:48:ee:79:08:c4:ba:b2:75:fd:93: a4:63:62:32:f9:ee:10:5c:b9:a0:f1:f4:b7:a4:7b:86:52:2b: e3:b5:f5:c6:c6:0b:b2:d4:9b:5f:4f:cf:a7:5b:c5:6b:c3:b9: 26:32:52:94:eb:1b:f9:1a:41:c1:f7:59:2c:dc:cc:f0:a8:62: b1:bd:d6:df:d6:40:ba:c7:d7:f7:59:04:6f:a3:b4:e0:c5:04: 7e:d2:99:a7:5d:50:99:14:41:ed:ef:31:b7:37:6a:bb:6d:c0: c6:81:53:3c:14:00:69:b6:df:8c:fd:5b:d8:18:4c:97:2f:4f: 24:82:38:5c:5e:27:4f:b0:a1:70:b1:3b:28:79:0a:c8:d8:71: d3:d9:d4:90:c0:d2:65:b1:44:f5:35:8f:b5:51:99:f4:7b:21: 0a:65:ab:70:93:b6:11:bf:2a:5a:88:87:61:47:de:5e:81:60: 64:20:5c:15:89:92:9d:d4:31:c7:51:7f:8a:6c:18:73:38:b1: e6:20:d2:3f:5f:59:15:66:91:59:9f:93:52:b3:cb:0d:d8:ca: 5f:9e:26:fe:c7:3e:d8:75:db:4f:2c:df:38:b0:18:ef:c4:1f: 25:2b:f3:a4:32:1a:52:ff:64:3a:ec:60:b9:48:80:58:da:fd: 1c:db:2e:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE1cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM0N0UxMTAvBgNVBAUTKDg5NEZFMTEzOThCNjc5QUVCMUIxMThCMUJERTY3M0Ux OENGNkU5MzQwHhcNMjUwNDI4MTcxNjI4WhcNMjUwNTA1MTcxNjI4WjAYMRYwFAYD VQQDEw02ODBmYjdlYy1kY2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAschX2sHLsZj1+f4TbnGdLlQiqEhEDF5v7oc18HDDux1IpDIXayWxQwksSsu9 uzcaOGhSnkSxsYBgfa8feB3b26lErhVXsUMnkYns4PIJkkCjpoGJdCLmlP8JlLtP odC7H4JrOmazJhxt0RwyLe3mjey/OJpJCrZivauv1IJp5kv7SSQ0TY1GesrYLIEY bZkfhSGP0432bV9fGY9A0DQzqQcdditQbY/6KdAmvLs0Pt86HqyzipwHy8MtqUWy Xd+yNpqcU+7CyKbRTneZYqjOSgJFyobYT5ojitNYmc8+uzCU8qWsSu8+KVzvBXxU 6FmXHpe5Ia3LhhnkDpdmL7LbqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIMjn69r YXtu1ThWXkIr5MzrQZfdMB8GA1UdIwQYMBaAFIlP4ROYtnmusbEYsb3mc+GM9uk0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzQ3RS9CQ0VERjQ0MkIw QkYxMUU4ODYzOTIyMzdDNEY5QUUwMi9pVV9oRTVpMmVhNnhzUml4dmVaejRZejI2 VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lVX2hFNWkyZWE2eHNSaXh2ZVp6NFl6MjZUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzQ3RS9CQ0VERjQ0MkIwQkYxMUU4ODYzOTIyMzdDNEY5QUUwMi9pVV9oRTVpMmVh NnhzUml4dmVaejRZejI2VFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiAaj8JdmfC0jueQjEurJ1/ZOkY2Iy+e4QXLmg8fS3pHuGUivjtfXG xguy1JtfT8+nW8Vrw7kmMlKU6xv5GkHB91ks3MzwqGKxvdbf1kC6x9f3WQRvo7Tg xQR+0pmnXVCZFEHt7zG3N2q7bcDGgVM8FABptt+M/VvYGEyXL08kgjhcXidPsKFw sTsoeQrI2HHT2dSQwNJlsUT1NY+1UZn0eyEKZatwk7YRvypaiIdhR95egWBkIFwV iZKd1DHHUX+KbBhzOLHmINI/X1kVZpFZn5NSs8sN2Mpfnib+xz7YddtPLN84sBjv xB8lK/OkMhpS/2Q67GC5SIBY2v0c2y4G -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:50 2025 by rpki-client on console.sobornost.net