$ rpki-client -vvf rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/se6IcQY6AQgzW9-qPjoT-cnHkN4.mft File: se6IcQY6AQgzW9-qPjoT-cnHkN4.mft (raw, json) Hash identifier: 3tgvR7VTsrgWiw+HFrcHLV+00oJQAexZ3RBxZys9ruM= Subject key identifier: 8E:9F:93:D6:84:1C:26:7A:1D:ED:19:59:6A:A2:C2:69:A2:12:92:02 Authority key identifier: B1:EE:88:71:06:3A:01:08:33:5B:DF:AA:3E:3A:13:F9:C9:C7:90:DE Certificate issuer: /CN=A919EC2D/serialNumber=B1EE8871063A0108335BDFAA3E3A13F9C9C790DE Certificate serial: 019A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/se6IcQY6AQgzW9-qPjoT-cnHkN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/se6IcQY6AQgzW9-qPjoT-cnHkN4.mft Manifest number: 030A Signing time: Sun 27 Apr 2025 02:28:29 +0000 Manifest this update: Sun 27 Apr 2025 02:28:28 +0000 Manifest next update: Sun 04 May 2025 02:28:28 +0000 Files and hashes: 1: se6IcQY6AQgzW9-qPjoT-cnHkN4.crl (hash: W1b/mTsX2CEKkWEJvVWfV+gn5JOU1V5SGYS/08znoFY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/se6IcQY6AQgzW9-qPjoT-cnHkN4.crl rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/se6IcQY6AQgzW9-qPjoT-cnHkN4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/se6IcQY6AQgzW9-qPjoT-cnHkN4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 410 (0x19a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EC2D, serialNumber=B1EE8871063A0108335BDFAA3E3A13F9C9C790DE Validity Not Before: Apr 27 02:28:28 2025 GMT Not After : May 4 02:28:28 2025 GMT Subject: CN=680d964c-be11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:82:4f:ee:82:ba:ea:f7:b4:e9:21:c6:57:39: 7c:4d:4b:c7:11:15:74:e3:59:1b:95:4b:a8:e7:95: 4f:e7:b6:1e:c7:b5:87:96:b7:47:6a:17:f2:1e:9f: cd:5f:d7:06:2d:50:49:9c:02:a5:45:75:ca:bb:2a: 37:4d:14:0d:a3:1b:81:74:8c:1e:b6:34:bf:99:ca: c5:17:94:15:60:76:eb:43:9e:02:d2:e4:f2:5e:00: 91:83:7c:db:61:0a:5d:28:72:d2:99:74:2b:b3:0b: d3:85:ec:90:49:15:d2:86:17:c8:b0:7d:b1:10:05: 5e:58:1e:ac:eb:8b:00:35:71:63:cc:1b:77:01:1d: ce:28:84:ef:5f:2c:bf:47:cb:c8:4b:0c:51:65:b0: fd:b5:c7:1a:cb:47:6b:c0:bf:26:67:aa:42:14:80: 29:87:32:0d:76:8f:07:fe:92:0d:32:0a:3b:da:f0: ee:df:15:55:45:5d:da:13:88:13:f0:e8:3f:98:95: eb:e6:06:f6:f0:77:37:23:1e:18:22:b2:7a:be:ca: 47:c8:1e:cd:bc:6e:d5:d9:53:eb:c4:3b:cd:2a:33: 20:2e:b1:39:93:96:3b:c9:98:01:2d:2a:db:45:2b: 16:28:c6:e4:cd:8a:cd:af:e4:5e:e0:d2:d7:bb:b4: 73:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:9F:93:D6:84:1C:26:7A:1D:ED:19:59:6A:A2:C2:69:A2:12:92:02 X509v3 Authority Key Identifier: keyid:B1:EE:88:71:06:3A:01:08:33:5B:DF:AA:3E:3A:13:F9:C9:C7:90:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/se6IcQY6AQgzW9-qPjoT-cnHkN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/se6IcQY6AQgzW9-qPjoT-cnHkN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/se6IcQY6AQgzW9-qPjoT-cnHkN4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:6a:94:ee:77:2e:52:9d:94:48:30:b1:36:23:da:b5:49:fd: c8:05:0a:83:ce:4c:db:8a:cd:a3:c6:3b:3d:ce:9e:43:fe:71: 1c:8e:22:cf:fc:05:ad:4d:90:e0:e6:91:71:a9:99:d2:8a:33: 00:c1:f3:60:73:4a:98:63:f4:53:14:f2:dd:b3:d5:4a:fa:3d: aa:93:ef:d6:0c:3f:c2:2a:6b:56:f4:39:fe:1c:75:de:8f:c6: fe:6a:69:6f:3f:c7:2d:ec:3a:76:e9:1b:6c:13:d2:c2:a5:88: eb:61:8f:63:1c:a4:80:f5:89:fe:43:15:06:39:f5:83:f0:0d: ec:06:30:55:d5:a1:d4:13:fa:02:7c:60:30:80:6c:e3:ac:17: e2:ae:34:d1:71:bd:4f:09:7e:5a:df:26:c8:fa:3b:a2:50:da: b7:c4:dc:9d:bc:40:6e:d7:ac:bc:3e:cb:63:2a:32:fa:98:3d: 8d:e2:ff:7b:07:db:37:4a:44:1d:b4:61:d5:eb:ff:28:e5:03: 58:96:4a:68:66:27:80:a1:27:b0:9c:6f:45:20:04:05:5d:8b: c5:e9:17:a9:e4:d2:95:b8:97:ac:ea:79:b6:7d:dd:4d:c5:94: 3f:d1:6b:d0:7a:a8:26:6e:09:93:7d:18:bd:84:ff:5c:74:fd: 39:aa:51:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVDMkQxMTAvBgNVBAUTKEIxRUU4ODcxMDYzQTAxMDgzMzVCREZBQTNFM0ExM0Y5 QzlDNzkwREUwHhcNMjUwNDI3MDIyODI4WhcNMjUwNTA0MDIyODI4WjAYMRYwFAYD VQQDEw02ODBkOTY0Yy1iZTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuIJP7oK66ve06SHGVzl8TUvHERV041kblUuo55VP57Yex7WHlrdHahfyHp/N X9cGLVBJnAKlRXXKuyo3TRQNoxuBdIwetjS/mcrFF5QVYHbrQ54C0uTyXgCRg3zb YQpdKHLSmXQrswvTheyQSRXShhfIsH2xEAVeWB6s64sANXFjzBt3AR3OKITvXyy/ R8vISwxRZbD9tccay0drwL8mZ6pCFIAphzINdo8H/pINMgo72vDu3xVVRV3aE4gT 8Og/mJXr5gb28Hc3Ix4YIrJ6vspHyB7NvG7V2VPrxDvNKjMgLrE5k5Y7yZgBLSrb RSsWKMbkzYrNr+Re4NLXu7RzcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI6fk9aE HCZ6He0ZWWqiwmmiEpICMB8GA1UdIwQYMBaAFLHuiHEGOgEIM1vfqj46E/nJx5De MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUMyRC84MkI3MjVFOEJD RTMxMUVEODQ5RjkzMzFDNEY5QUUwMi9zZTZJY1FZNkFRZ3pXOS1xUGpvVC1jbkhr TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NlNkljUVk2QVFnelc5LXFQam9ULWNuSGtONC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUMyRC84MkI3MjVFOEJDRTMxMUVEODQ5RjkzMzFDNEY5QUUwMi9zZTZJY1FZNkFR Z3pXOS1xUGpvVC1jbkhrTjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACapTudy5SnZRIMLE2I9q1Sf3IBQqDzkzbis2jxjs9zp5D/nEcjiLP /AWtTZDg5pFxqZnSijMAwfNgc0qYY/RTFPLds9VK+j2qk+/WDD/CKmtW9Dn+HHXe j8b+amlvP8ct7Dp26RtsE9LCpYjrYY9jHKSA9Yn+QxUGOfWD8A3sBjBV1aHUE/oC fGAwgGzjrBfirjTRcb1PCX5a3ybI+juiUNq3xNydvEBu16y8PstjKjL6mD2N4v97 B9s3SkQdtGHV6/8o5QNYlkpoZieAoSewnG9FIAQFXYvF6Rep5NKVuJes6nm2fd1N xZQ/0WvQeqgmbgmTfRi9hP9cdP05qlF3 -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:01 2025 by rpki-client on console.sobornost.net