$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.mft File: H2-6P798TnUQgNZ0Pi_OANKU20E.mft (raw, json) Hash identifier: boJxU8UFw1U1WqBlAo8ILG4fZ10zV0ddwqJLQTXaOhU= Subject key identifier: 4A:57:9B:D8:F4:03:C1:D2:C1:B9:94:35:6B:40:0D:A1:1D:9E:F5:F6 Authority key identifier: 1F:6F:BA:3F:BF:7C:4E:75:10:80:D6:74:3E:2F:CE:00:D2:94:DB:41 Certificate issuer: /CN=A91A6204/serialNumber=1F6FBA3FBF7C4E751080D6743E2FCE00D294DB41 Certificate serial: 04F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2-6P798TnUQgNZ0Pi_OANKU20E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.mft Manifest number: 04EC Signing time: Sat 26 Apr 2025 23:24:04 +0000 Manifest this update: Sat 26 Apr 2025 23:24:03 +0000 Manifest next update: Sat 03 May 2025 23:24:03 +0000 Files and hashes: 1: H2-6P798TnUQgNZ0Pi_OANKU20E.crl (hash: s4OFGYhs/HKNe8q1qOWRSnCRmOcMGQZe1vJhjrpJT5I=) 2: 81A9AA2A30A011EC9613A82FC4F9AE02.roa (hash: sdwmDbTL9d6N7lKxS/YB/i6htv88Z1LDyZ9CwaUF42o=) 3: F8F09AC071BC11EF98EE3652C4F9AE02.roa (hash: OmOKCpnNGxuTgnm/3ZUNP0n4Wl3zYcoWkWZk3CIh3c8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.crl rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2-6P798TnUQgNZ0Pi_OANKU20E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 23:24:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1272 (0x4f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6204, serialNumber=1F6FBA3FBF7C4E751080D6743E2FCE00D294DB41 Validity Not Before: Apr 26 23:24:03 2025 GMT Not After : May 3 23:24:03 2025 GMT Subject: CN=680d6b14-5854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:de:ef:b4:4f:a5:b2:ee:20:ac:0d:c3:ed:ae: 54:07:a9:9c:bb:4f:f3:ed:e3:28:ab:c4:81:d2:9f: ac:cc:89:2f:73:b0:d5:ac:3e:4a:95:63:f1:1c:71: 58:84:00:bf:f8:29:4c:7a:7e:72:90:59:5f:7e:9e: b5:db:00:1e:9a:18:f6:d3:f3:c9:88:69:c2:73:48: 66:7e:64:49:35:8e:02:3f:60:d9:28:17:1b:5c:2d: b2:87:c7:6b:56:0d:09:b7:21:6b:1a:09:87:fa:e4: 52:00:b6:4d:e1:c3:58:4b:59:78:f9:fb:ce:55:a1: d7:bd:a1:fd:aa:5e:6f:16:4c:9f:3b:e3:fb:a0:0b: 0f:0f:ec:14:0e:7c:0b:e5:ca:9b:18:68:22:91:c8: e5:fa:34:3d:a7:e6:cf:79:16:cc:81:0a:11:24:6b: 1d:7f:c3:44:5c:c2:44:fd:60:80:a9:2d:a0:6e:72: 33:b9:14:4e:ca:07:d3:ac:ff:d8:1f:f0:25:4f:3b: ee:32:92:b8:f2:47:6d:27:de:97:d9:7b:52:ad:c7: ea:59:07:32:99:7d:88:a4:12:99:42:c7:1c:c5:e3: ad:e8:aa:00:be:ca:f1:57:b3:8f:c9:df:1e:81:ff: f6:55:86:24:58:c9:e4:15:21:fc:f3:2d:28:1c:a5: 95:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:57:9B:D8:F4:03:C1:D2:C1:B9:94:35:6B:40:0D:A1:1D:9E:F5:F6 X509v3 Authority Key Identifier: keyid:1F:6F:BA:3F:BF:7C:4E:75:10:80:D6:74:3E:2F:CE:00:D2:94:DB:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2-6P798TnUQgNZ0Pi_OANKU20E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dc:08:c8:d3:92:58:12:99:03:00:3e:04:19:e4:24:4f:ac:29: c9:d0:f6:89:7d:25:f4:0e:13:11:e2:1b:24:b5:fe:7e:0b:2c: 90:a6:87:91:e2:87:4b:37:3f:0e:85:89:2b:f5:dc:46:f4:e8: a8:80:cd:fb:c7:35:8c:8c:46:95:d2:2a:0e:a6:5d:f6:e5:3d: 57:78:6b:9c:94:cf:4b:06:3e:ed:80:45:20:2c:bb:76:a5:d5: 7e:a7:b5:5a:a6:5a:fc:ac:b8:90:db:aa:62:f6:35:fb:bf:78: 8b:af:ad:0a:13:29:5b:77:64:dc:dc:85:81:df:a1:4c:07:dd: e1:fe:42:d5:4b:f4:8a:8c:c8:9f:ef:38:e5:ca:bd:66:63:de: 3e:8f:be:bc:e4:4b:f3:fd:d5:2e:ff:eb:89:45:91:4c:a6:e4: b8:de:9e:81:c7:74:d0:59:2c:45:3c:5f:99:99:9d:dd:b3:7d: dd:ec:06:a3:9e:00:a0:8e:72:0d:c8:4a:63:4d:1f:ea:b4:64: 4c:d1:c3:7c:76:a6:7c:13:50:b0:8a:55:29:91:2c:eb:ff:c4: ae:89:9c:4c:cc:78:4a:b9:07:e4:d7:e0:51:23:7e:48:f5:84: ec:d5:8a:67:3f:ff:32:43:f4:95:24:dd:6d:87:46:19:90:97: af:a9:57:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTYyMDQxMTAvBgNVBAUTKDFGNkZCQTNGQkY3QzRFNzUxMDgwRDY3NDNFMkZDRTAw RDI5NERCNDEwHhcNMjUwNDI2MjMyNDAzWhcNMjUwNTAzMjMyNDAzWjAYMRYwFAYD VQQDEw02ODBkNmIxNC01ODU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0t7vtE+lsu4grA3D7a5UB6mcu0/z7eMoq8SB0p+szIkvc7DVrD5KlWPxHHFY hAC/+ClMen5ykFlffp612wAemhj20/PJiGnCc0hmfmRJNY4CP2DZKBcbXC2yh8dr Vg0JtyFrGgmH+uRSALZN4cNYS1l4+fvOVaHXvaH9ql5vFkyfO+P7oAsPD+wUDnwL 5cqbGGgikcjl+jQ9p+bPeRbMgQoRJGsdf8NEXMJE/WCAqS2gbnIzuRROygfTrP/Y H/AlTzvuMpK48kdtJ96X2XtSrcfqWQcymX2IpBKZQsccxeOt6KoAvsrxV7OPyd8e gf/2VYYkWMnkFSH88y0oHKWV/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEpXm9j0 A8HSwbmUNWtADaEdnvX2MB8GA1UdIwQYMBaAFB9vuj+/fE51EIDWdD4vzgDSlNtB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjIwNC84MzBBM0EyODEy MDYxMUVDQUVDRUQ0NzdDNEY5QUUwMi9IMi02UDc5OFRuVVFnTlowUGlfT0FOS1Uy MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0gyLTZQNzk4VG5VUWdOWjBQaV9PQU5LVTIwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjIwNC84MzBBM0EyODEyMDYxMUVDQUVDRUQ0NzdDNEY5QUUwMi9IMi02UDc5OFRu VVFnTlowUGlfT0FOS1UyMEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDcCMjTklgSmQMAPgQZ5CRPrCnJ0PaJfSX0DhMR4hsktf5+CyyQpoeR 4odLNz8OhYkr9dxG9OiogM37xzWMjEaV0ioOpl325T1XeGuclM9LBj7tgEUgLLt2 pdV+p7Vaplr8rLiQ26pi9jX7v3iLr60KEylbd2Tc3IWB36FMB93h/kLVS/SKjMif 7zjlyr1mY94+j7685Evz/dUu/+uJRZFMpuS43p6Bx3TQWSxFPF+ZmZ3ds33d7Aaj ngCgjnINyEpjTR/qtGRM0cN8dqZ8E1CwilUpkSzr/8SuiZxMzHhKuQfk1+BRI35I 9YTs1YpnP/8yQ/SVJN1th0YZkJevqVc1 -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:02 2025 by rpki-client on console.sobornost.net