$ rpki-client -vvf rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.mft File: -r7TJg0sVSvpFdAj4YnWEopkX0s.mft (raw, json) Hash identifier: /iEgldvVErlA0k0gBpHEWBBORnlWXiTMH4GDbWvMTDo= Subject key identifier: 5E:B2:07:CE:2C:49:C8:20:1B:6F:F4:F0:D3:9E:D6:D8:D7:47:93:AA Authority key identifier: FA:BE:D3:26:0D:2C:55:2B:E9:15:D0:23:E1:89:D6:12:8A:64:5F:4B Certificate issuer: /CN=A919FF79/serialNumber=FABED3260D2C552BE915D023E189D6128A645F4B Certificate serial: 127B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r7TJg0sVSvpFdAj4YnWEopkX0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.mft Manifest number: 1271 Signing time: Mon 28 Apr 2025 17:19:34 +0000 Manifest this update: Mon 28 Apr 2025 17:19:34 +0000 Manifest next update: Mon 05 May 2025 17:19:34 +0000 Files and hashes: 1: -r7TJg0sVSvpFdAj4YnWEopkX0s.crl (hash: kLq11k23n6qFbrtj+KAiw9ojVGsNYg8YSTLBEvH5/xs=) 2: A87EED5A7AF111EB86DC9F6CC4F9AE02.roa (hash: n5O4+xpqurpdXo1l2y1SKOgBDTyWDYNQaGaHjqKBMU8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.crl rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r7TJg0sVSvpFdAj4YnWEopkX0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 17:19:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4731 (0x127b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919FF79, serialNumber=FABED3260D2C552BE915D023E189D6128A645F4B Validity Not Before: Apr 28 17:19:34 2025 GMT Not After : May 5 17:19:34 2025 GMT Subject: CN=680fb8a6-955e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f2:fd:fe:01:37:de:6f:a7:18:21:f9:13:5d: 7e:f5:40:e2:3e:62:94:85:21:12:ef:68:71:96:60: 88:56:21:9e:1c:a0:05:2f:d8:3b:dd:8e:74:d0:2c: ec:93:e3:5c:d8:aa:6b:06:c5:51:6d:06:fa:cd:5f: d5:21:60:41:3d:0c:b0:0d:f8:2f:4b:aa:c1:1b:06: 96:b0:4c:54:c7:45:72:f4:10:a9:78:99:9a:78:47: 8f:3f:86:a9:ee:9a:7f:6a:5b:89:8a:13:bb:cf:28: b0:25:de:87:71:81:bb:d4:4d:ac:d9:26:14:47:4f: 08:49:5e:32:80:76:3f:31:75:2d:75:42:14:ad:5b: 97:bb:a3:e4:a4:1e:0e:c3:23:ff:f6:93:c4:5f:3a: a7:bc:bc:f5:7c:ba:ac:82:92:3e:1f:6b:e6:2b:bd: c1:9c:34:1b:03:bb:61:95:73:5b:41:33:db:82:d8: b7:21:98:b2:40:6e:9c:2b:ee:eb:a7:bc:53:ba:fd: ec:7e:74:82:aa:25:9a:65:9c:ba:4e:2e:05:59:d1: 40:c1:5b:aa:8b:66:40:78:14:f5:4f:42:ce:3b:25: c1:cd:ea:fb:98:af:56:c2:04:af:08:94:48:23:a1: d3:54:02:81:11:7e:ab:fd:a6:d6:e4:36:25:8e:7f: be:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:B2:07:CE:2C:49:C8:20:1B:6F:F4:F0:D3:9E:D6:D8:D7:47:93:AA X509v3 Authority Key Identifier: keyid:FA:BE:D3:26:0D:2C:55:2B:E9:15:D0:23:E1:89:D6:12:8A:64:5F:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r7TJg0sVSvpFdAj4YnWEopkX0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:ca:1b:54:62:c7:a3:5b:37:1d:41:c6:a7:50:a3:31:74:93: 44:24:86:17:4c:8c:ae:9c:ff:2e:65:5c:ee:f8:dc:2a:f8:23: 07:b0:e8:d9:1d:ac:79:7f:36:3a:1d:7d:e4:ab:82:a9:ee:b6: ad:fd:05:25:34:50:4d:ad:0e:b5:1b:bc:0b:4a:ca:23:ed:1d: 53:94:8e:de:75:00:51:55:70:48:e1:1a:f6:38:05:d5:1a:8d: 25:93:df:43:97:a5:3c:6c:3b:92:48:4e:20:1a:52:65:a3:37: 6d:f8:a4:6d:11:bc:4d:df:35:c0:99:9c:bd:63:24:5b:9c:b9: d9:73:77:e5:24:5a:66:45:d5:a7:19:7b:f8:d9:ea:c5:37:bc: 61:ea:19:36:6f:ae:03:33:01:04:f9:4f:68:b9:00:5e:97:9d: 6c:77:15:db:d1:ec:59:b0:f7:7c:7b:66:e9:ec:51:dc:22:e1: 55:a2:cd:e3:12:e7:9a:a8:8f:1a:75:f8:22:20:d7:d2:fb:f8: 5a:13:b1:11:d9:fc:9d:d2:0f:b1:5b:fe:ec:46:5b:cd:94:c8: d8:62:ad:2f:91:22:97:93:9b:e9:67:d9:d7:1e:a3:73:74:e0: 23:91:9a:86:aa:17:db:bb:1b:b5:64:34:d9:30:a9:fe:28:f7: 20:f3:f6:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEnswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUZGNzkxMTAvBgNVBAUTKEZBQkVEMzI2MEQyQzU1MkJFOTE1RDAyM0UxODlENjEy OEE2NDVGNEIwHhcNMjUwNDI4MTcxOTM0WhcNMjUwNTA1MTcxOTM0WjAYMRYwFAYD VQQDEw02ODBmYjhhNi05NTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApPL9/gE33m+nGCH5E11+9UDiPmKUhSES72hxlmCIViGeHKAFL9g73Y500Czs k+Nc2KprBsVRbQb6zV/VIWBBPQywDfgvS6rBGwaWsExUx0Vy9BCpeJmaeEePP4ap 7pp/aluJihO7zyiwJd6HcYG71E2s2SYUR08ISV4ygHY/MXUtdUIUrVuXu6PkpB4O wyP/9pPEXzqnvLz1fLqsgpI+H2vmK73BnDQbA7thlXNbQTPbgti3IZiyQG6cK+7r p7xTuv3sfnSCqiWaZZy6Ti4FWdFAwVuqi2ZAeBT1T0LOOyXBzer7mK9WwgSvCJRI I6HTVAKBEX6r/abW5DYljn++3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF6yB84s ScggG2/08NOe1tjXR5OqMB8GA1UdIwQYMBaAFPq+0yYNLFUr6RXQI+GJ1hKKZF9L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RkY3OS9BM0MwOEEyRUNB OTcxMUU4QUFFODA3NUZDNEY5QUUwMi8tcjdUSmcwc1ZTdnBGZEFqNFluV0VvcGtY MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1yN1RKZzBzVlN2cEZkQWo0WW5XRW9wa1gwcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RkY3OS9BM0MwOEEyRUNBOTcxMUU4QUFFODA3NUZDNEY5QUUwMi8tcjdUSmcwc1ZT dnBGZEFqNFluV0VvcGtYMHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpyhtUYsejWzcdQcanUKMxdJNEJIYXTIyunP8uZVzu+Nwq+CMHsOjZ Hax5fzY6HX3kq4Kp7rat/QUlNFBNrQ61G7wLSsoj7R1TlI7edQBRVXBI4Rr2OAXV Go0lk99Dl6U8bDuSSE4gGlJlozdt+KRtEbxN3zXAmZy9YyRbnLnZc3flJFpmRdWn GXv42erFN7xh6hk2b64DMwEE+U9ouQBel51sdxXb0exZsPd8e2bp7FHcIuFVos3j EueaqI8adfgiINfS+/haE7ER2fyd0g+xW/7sRlvNlMjYYq0vkSKXk5vpZ9nXHqNz dOAjkZqGqhfbuxu1ZDTZMKn+KPcg8/Yy -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:51 2025 by rpki-client on console.sobornost.net