$ rpki-client -vvf rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft File: tLhVi-xUNiD-bqkv68XoqSchTDk.mft (raw, json) Hash identifier: STad+TmBeCTn6aW1FUdgKgJijbPMmLmsAHbizefzQ/E= Subject key identifier: 39:D8:7A:EE:E6:F5:AF:25:E9:D5:00:36:93:C8:9C:BA:A3:6C:80:44 Authority key identifier: B4:B8:55:8B:EC:54:36:20:FE:6E:A9:2F:EB:C5:E8:A9:27:21:4C:39 Certificate issuer: /CN=A9110BA6/serialNumber=B4B8558BEC543620FE6EA92FEBC5E8A927214C39 Certificate serial: 0A12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLhVi-xUNiD-bqkv68XoqSchTDk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft Manifest number: 0A0A Signing time: Mon 28 Apr 2025 20:15:17 +0000 Manifest this update: Mon 28 Apr 2025 20:15:17 +0000 Manifest next update: Mon 05 May 2025 20:15:17 +0000 Files and hashes: 1: tLhVi-xUNiD-bqkv68XoqSchTDk.crl (hash: 9nx4FN9PmAxaaR/8V0UREEmbw8PJyefxzCUiB9q6gGI=) 2: 2AFC632E458511EE8566F97AC4F9AE02.roa (hash: NWOEkiwK2HZWYeANTytTEoCMF7Sk6idGr2hPPPV7240=) 3: 7BF0DB503ECF11EEA6759B55C4F9AE02.roa (hash: CrfveQoqOhRCPxQazR6Rs3pm4eRMhY2PEiNU6IjJdl8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.crl rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLhVi-xUNiD-bqkv68XoqSchTDk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:15:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2578 (0xa12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110BA6, serialNumber=B4B8558BEC543620FE6EA92FEBC5E8A927214C39 Validity Not Before: Apr 28 20:15:17 2025 GMT Not After : May 5 20:15:17 2025 GMT Subject: CN=680fe1d5-345b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:de:83:06:83:0e:61:0c:ec:e6:2e:1d:2f:82: 51:11:ba:2e:0b:5c:24:42:a5:8c:f3:4c:7a:04:a0: 8a:b1:55:f0:70:1c:39:f2:1c:38:c9:8a:72:15:87: 55:93:29:5d:09:bb:46:6d:4e:4a:54:f1:bb:46:9c: 44:20:92:ba:c9:83:dc:03:f9:74:76:f2:56:a5:27: ec:14:ee:e0:6b:56:15:85:6e:f7:a3:76:62:5c:d3: c4:a8:f0:fb:cb:7c:90:45:09:ed:c9:8d:e6:d0:c2: fe:91:dc:c0:3a:7b:01:97:be:b1:87:0a:58:06:5d: b6:ea:09:af:0c:a1:bf:2d:19:eb:58:dc:da:f0:da: 08:25:4e:14:9a:28:ce:4c:55:02:7c:59:a7:6f:76: 06:72:5e:aa:e2:9c:47:6b:20:aa:ee:49:18:1e:08: 45:c4:24:3b:5e:cb:67:47:bd:57:c3:4f:df:a3:b4: d3:64:6e:75:c2:aa:de:3c:14:72:bc:6f:df:46:fb: 53:08:40:1b:5d:22:43:39:56:33:64:f8:4b:43:b3: fd:60:98:6b:93:fd:12:cb:2f:f2:0d:1f:71:a8:f2: f8:26:e4:30:54:ab:3f:7d:65:80:e9:f9:09:67:6c: b2:56:32:e9:24:53:2e:5e:7b:cf:aa:7a:ca:02:c9: d1:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:D8:7A:EE:E6:F5:AF:25:E9:D5:00:36:93:C8:9C:BA:A3:6C:80:44 X509v3 Authority Key Identifier: keyid:B4:B8:55:8B:EC:54:36:20:FE:6E:A9:2F:EB:C5:E8:A9:27:21:4C:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLhVi-xUNiD-bqkv68XoqSchTDk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:00:ca:6c:2c:de:2d:4a:77:f0:80:99:ee:b3:a3:24:27:33: 03:51:16:3e:66:a4:a0:f1:cd:9d:3b:4c:cb:51:2a:97:64:14: 0f:15:d1:06:2c:4c:93:5d:d2:7e:57:1b:3e:f2:dc:fe:fb:1d: 8d:55:84:39:39:26:62:7d:3f:c9:ad:34:a6:ef:6e:b2:6f:07: ad:0f:6f:96:80:2b:39:34:f7:25:e9:9e:0d:ed:59:8e:c5:a1: 0e:a6:46:c6:9f:d7:32:6e:70:ec:72:fe:7c:3d:be:0b:80:3c: e1:8e:40:a9:0c:35:7d:38:ff:32:29:5c:76:c7:c7:e6:4f:20: dd:ed:c6:48:f5:aa:55:7a:9a:2c:71:dd:5e:e0:d3:32:b8:20: e6:a1:86:6a:f8:61:53:1a:f3:70:35:a7:c4:2f:21:6f:4d:61: ad:31:ff:a1:0c:3b:5a:29:97:07:cb:3d:66:5f:19:1f:ad:22: b7:77:12:ad:8c:91:56:d3:01:89:6b:b7:c9:41:7e:1f:af:8b: cb:80:be:17:73:28:3e:b5:80:f6:14:43:3f:d8:11:17:6d:cf: a4:79:31:c3:31:8a:6f:98:35:58:a9:32:f8:c9:57:7f:35:86: 55:5c:91:98:1f:5d:06:e4:ce:9f:54:45:81:ca:09:0d:2f:aa: 5d:aa:14:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICChIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBCQTYxMTAvBgNVBAUTKEI0Qjg1NThCRUM1NDM2MjBGRTZFQTkyRkVCQzVFOEE5 MjcyMTRDMzkwHhcNMjUwNDI4MjAxNTE3WhcNMjUwNTA1MjAxNTE3WjAYMRYwFAYD VQQDEw02ODBmZTFkNS0zNDViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxt6DBoMOYQzs5i4dL4JREbouC1wkQqWM80x6BKCKsVXwcBw58hw4yYpyFYdV kyldCbtGbU5KVPG7RpxEIJK6yYPcA/l0dvJWpSfsFO7ga1YVhW73o3ZiXNPEqPD7 y3yQRQntyY3m0ML+kdzAOnsBl76xhwpYBl226gmvDKG/LRnrWNza8NoIJU4UmijO TFUCfFmnb3YGcl6q4pxHayCq7kkYHghFxCQ7XstnR71Xw0/fo7TTZG51wqrePBRy vG/fRvtTCEAbXSJDOVYzZPhLQ7P9YJhrk/0Syy/yDR9xqPL4JuQwVKs/fWWA6fkJ Z2yyVjLpJFMuXnvPqnrKAsnRRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDnYeu7m 9a8l6dUANpPInLqjbIBEMB8GA1UdIwQYMBaAFLS4VYvsVDYg/m6pL+vF6KknIUw5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEJBNi8wRjNERjQyODcx NTcxMUVBODY1NTlEMkRDNEY5QUUwMi90TGhWaS14VU5pRC1icWt2NjhYb3FTY2hU RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RMaFZpLXhVTmlELWJxa3Y2OFhvcVNjaFREay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEJBNi8wRjNERjQyODcxNTcxMUVBODY1NTlEMkRDNEY5QUUwMi90TGhWaS14VU5p RC1icWt2NjhYb3FTY2hURGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsAMpsLN4tSnfwgJnus6MkJzMDURY+ZqSg8c2dO0zLUSqXZBQPFdEG LEyTXdJ+Vxs+8tz++x2NVYQ5OSZifT/JrTSm726ybwetD2+WgCs5NPcl6Z4N7VmO xaEOpkbGn9cybnDscv58Pb4LgDzhjkCpDDV9OP8yKVx2x8fmTyDd7cZI9apVepos cd1e4NMyuCDmoYZq+GFTGvNwNafELyFvTWGtMf+hDDtaKZcHyz1mXxkfrSK3dxKt jJFW0wGJa7fJQX4fr4vLgL4Xcyg+tYD2FEM/2BEXbc+keTHDMYpvmDVYqTL4yVd/ NYZVXJGYH10G5M6fVEWBygkNL6pdqhT1 -----END CERTIFICATE-----Generated at Mon Apr 28 23:04:45 2025 by rpki-client on console.sobornost.net