$ rpki-client -vvf rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft File: bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft (raw, json) Hash identifier: TDfpKqamjtGSFrx6lK/JQltXL42TtmCA+88fS/B4i6M= Subject key identifier: 8F:DB:0D:68:B5:88:CB:B6:1D:E0:7B:2A:25:95:E4:10:D5:DB:12:5F Authority key identifier: 6C:49:B9:53:7C:26:70:1E:DA:7C:03:B5:36:AD:7F:52:E6:C9:D5:1A Certificate issuer: /CN=A9111F72/serialNumber=6C49B9537C26701EDA7C03B536AD7F52E6C9D51A Certificate serial: 1187 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft Manifest number: 1183 Signing time: Mon 28 Apr 2025 17:25:53 +0000 Manifest this update: Mon 28 Apr 2025 17:25:52 +0000 Manifest next update: Mon 05 May 2025 17:25:52 +0000 Files and hashes: 1: bEm5U3wmcB7afAO1Nq1_UubJ1Ro.crl (hash: CgADJ0zITPkRKDf3E+V/nn33Y12F4rLPCNabNG3zkMw=) 2: FEA22F60A5F111EF9C230280C4F9AE02.roa (hash: Jbt7n2ZRFDuS80TPLIamwTYwNZ2fv7lYVuWS7NZ1xLU=) 3: 113E8FC0A5F111EFABB09F7DC4F9AE02.roa (hash: jK4kVBYkhuumATZBB1rJMfMRjn7ETtAHz010Y63PbKw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.crl rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 17:25:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4487 (0x1187) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111F72, serialNumber=6C49B9537C26701EDA7C03B536AD7F52E6C9D51A Validity Not Before: Apr 28 17:25:52 2025 GMT Not After : May 5 17:25:52 2025 GMT Subject: CN=680fba21-abab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a4:7d:9f:0a:b4:12:11:36:57:1b:1f:68:bd: 26:6b:52:1f:b4:06:f9:77:9f:87:c7:9c:4e:32:71: 71:b1:19:dc:a1:31:66:29:cf:bd:9c:1c:09:0e:27: 83:a6:0a:67:2d:e6:1c:c1:e7:e6:19:c1:aa:90:91: 9b:d8:d4:94:ce:d6:a2:67:8e:2b:27:60:2a:8c:20: 53:44:3f:09:dc:d4:d2:03:58:aa:d4:69:b3:36:b5: 51:a2:a1:75:78:83:02:36:e0:31:1a:d0:4d:00:84: 8d:10:90:9d:cc:04:41:c4:bf:24:49:ee:4f:a5:e2: 8f:dd:93:51:c5:ac:8c:b7:50:fe:c7:31:b3:c6:7b: 81:33:30:71:65:8b:19:89:47:c4:98:e7:8f:7d:f5: bc:66:8d:66:24:c5:2f:11:93:7c:eb:50:70:c6:f4: eb:9e:70:4f:47:7e:74:df:76:70:14:60:a0:54:fd: fa:c7:1d:77:10:8e:6b:04:d1:71:ff:a2:72:4b:d8: 20:b6:2f:ca:58:02:8a:82:5c:a6:02:27:49:7b:4c: 8a:f6:d9:53:f3:59:4d:5c:45:49:c2:ac:38:9d:ec: e7:0d:ae:89:a4:b1:bf:cb:b1:55:26:65:cb:65:31: 51:88:7c:41:7f:e4:ba:b9:5b:1c:b2:8e:a9:95:88: 44:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:DB:0D:68:B5:88:CB:B6:1D:E0:7B:2A:25:95:E4:10:D5:DB:12:5F X509v3 Authority Key Identifier: keyid:6C:49:B9:53:7C:26:70:1E:DA:7C:03:B5:36:AD:7F:52:E6:C9:D5:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:3e:e4:3d:eb:cb:0c:d8:9b:79:88:0b:49:42:ea:bd:5f:3e: 20:c8:dc:ec:f0:33:99:89:bf:77:21:74:c7:30:5e:ac:81:40: d1:4f:46:42:d6:4e:91:d1:c6:d1:c4:d6:9b:bc:5f:bd:e6:ae: 21:94:b3:a0:60:80:69:3c:99:39:37:31:99:99:4c:26:43:7b: 4f:9e:fc:3f:95:77:56:81:07:e2:53:2b:cc:0a:5a:87:64:2e: be:17:43:a8:41:d0:a6:a0:73:df:a5:05:53:b4:40:9a:eb:bb: 0a:7f:9f:b0:ed:b6:8c:9f:77:7f:f6:3f:2c:f5:5b:05:29:41: d7:a3:99:8f:72:2f:18:ab:81:53:2a:af:81:43:fb:81:cc:be: 45:88:66:0f:95:68:96:27:98:b1:66:d6:f8:ed:85:08:02:1f: b8:a7:da:12:80:ba:09:b8:83:ec:69:9f:2c:93:30:50:ef:40: 29:2b:8d:3d:d7:b9:90:fc:cb:33:02:29:1d:96:97:02:c5:d2: cb:ab:93:98:d2:e9:9b:e7:a8:f3:7a:ed:05:a2:50:42:38:fe: 35:3d:e7:bc:0b:c1:94:dc:ca:51:fc:a5:8b:a1:9d:b4:e5:26: f0:85:4c:91:fe:66:68:a4:b6:4e:b1:3c:b8:68:b9:b8:e8:91: 04:b2:d7:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFGNzIxMTAvBgNVBAUTKDZDNDlCOTUzN0MyNjcwMUVEQTdDMDNCNTM2QUQ3RjUy RTZDOUQ1MUEwHhcNMjUwNDI4MTcyNTUyWhcNMjUwNTA1MTcyNTUyWjAYMRYwFAYD VQQDEw02ODBmYmEyMS1hYmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxKR9nwq0EhE2VxsfaL0ma1IftAb5d5+Hx5xOMnFxsRncoTFmKc+9nBwJDieD pgpnLeYcwefmGcGqkJGb2NSUztaiZ44rJ2AqjCBTRD8J3NTSA1iq1GmzNrVRoqF1 eIMCNuAxGtBNAISNEJCdzARBxL8kSe5PpeKP3ZNRxayMt1D+xzGzxnuBMzBxZYsZ iUfEmOePffW8Zo1mJMUvEZN861BwxvTrnnBPR35033ZwFGCgVP36xx13EI5rBNFx /6JyS9ggti/KWAKKglymAidJe0yK9tlT81lNXEVJwqw4neznDa6JpLG/y7FVJmXL ZTFRiHxBf+S6uVscso6plYhE5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI/bDWi1 iMu2HeB7KiWV5BDV2xJfMB8GA1UdIwQYMBaAFGxJuVN8JnAe2nwDtTatf1LmydUa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUY3Mi82RjQyOTNENEY4 RDUxMUU4ODM2MzFEN0FDNEY5QUUwMi9iRW01VTN3bWNCN2FmQU8xTnExX1V1Ykox Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JFbTVVM3dtY0I3YWZBTzFOcTFfVXViSjFSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MUY3Mi82RjQyOTNENEY4RDUxMUU4ODM2MzFEN0FDNEY5QUUwMi9iRW01VTN3bWNC N2FmQU8xTnExX1V1YkoxUm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYPuQ968sM2Jt5iAtJQuq9Xz4gyNzs8DOZib93IXTHMF6sgUDRT0ZC 1k6R0cbRxNabvF+95q4hlLOgYIBpPJk5NzGZmUwmQ3tPnvw/lXdWgQfiUyvMClqH ZC6+F0OoQdCmoHPfpQVTtECa67sKf5+w7baMn3d/9j8s9VsFKUHXo5mPci8Yq4FT Kq+BQ/uBzL5FiGYPlWiWJ5ixZtb47YUIAh+4p9oSgLoJuIPsaZ8skzBQ70ApK409 17mQ/MszAikdlpcCxdLLq5OY0umb56jzeu0FolBCOP41Pee8C8GU3MpR/KWLoZ20 5SbwhUyR/mZopLZOsTy4aLm46JEEstcn -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:21 2025 by rpki-client on console.sobornost.net