$ rpki-client -vvf rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft File: d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft (raw, json) Hash identifier: 4cC6jKEUU5hKx5W3jIjN9eOOk+h6S9OQuEzfZiwW9do= Subject key identifier: AC:B5:9D:BB:A1:66:16:D7:2D:35:63:8E:65:4E:97:A1:56:F0:22:E3 Authority key identifier: 77:EC:48:69:2D:04:27:02:97:8D:CD:0B:68:E9:40:B8:D7:72:3E:52 Certificate issuer: /CN=A9112320/serialNumber=77EC48692D042702978DCD0B68E940B8D7723E52 Certificate serial: FD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d-xIaS0EJwKXjc0LaOlAuNdyPlI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft Manifest number: FA Signing time: Sat 26 Apr 2025 23:14:44 +0000 Manifest this update: Sat 26 Apr 2025 23:14:44 +0000 Manifest next update: Sat 03 May 2025 23:14:44 +0000 Files and hashes: 1: d-xIaS0EJwKXjc0LaOlAuNdyPlI.crl (hash: r9Ru3pI6R5Rx1sjmiyS/6y+porVdwCPKoR37qv0Odks=) 2: 7EE26732EB2411EEBDA7715FC4F9AE02.roa (hash: tvLrXzmWLi+yYUfuM7mTXsSMiwGKfb5ZJS93I35M4zg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.crl rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d-xIaS0EJwKXjc0LaOlAuNdyPlI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 23:14:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 253 (0xfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112320, serialNumber=77EC48692D042702978DCD0B68E940B8D7723E52 Validity Not Before: Apr 26 23:14:44 2025 GMT Not After : May 3 23:14:44 2025 GMT Subject: CN=680d68e4-9555 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:73:59:74:8b:9e:6d:1c:eb:d2:1b:86:61:cb: 8b:06:72:68:28:2f:05:71:c9:ca:8e:6f:98:5d:2f: 6d:a1:a1:ca:7b:c2:9e:27:cd:03:df:42:4e:27:b6: a0:b0:ba:3a:4d:69:cb:63:9a:27:ca:9f:06:46:d8: 8d:52:af:2f:0c:cb:61:b3:1e:1f:7a:df:f1:59:f1: fe:60:84:41:7f:cd:fd:17:50:d6:2d:d0:73:27:a4: af:ed:39:e7:b5:70:47:13:13:9e:38:2b:98:36:ef: 29:92:ee:73:ee:98:db:94:e7:35:da:43:da:74:a4: d7:dd:26:4e:58:19:93:a5:1d:e0:10:25:85:3c:9c: fa:f8:39:49:6a:bb:7e:de:f6:31:f9:2c:ca:f8:cc: a1:6a:b3:73:cf:bc:f5:d5:3d:31:c9:48:97:00:08: 6d:12:c8:d0:60:0a:53:ec:fe:3c:c3:a5:7d:76:39: 4e:ca:a2:46:11:ea:28:b9:7e:8f:2c:76:0a:01:96: 5c:b7:74:20:f5:7b:65:94:40:b6:75:cf:39:14:f9: 29:35:47:04:b4:0c:2e:de:64:24:57:9b:79:9e:30: ff:0c:00:cd:9c:8f:4b:85:a4:b6:46:35:da:8e:a1: b9:8a:0c:0c:b4:11:e8:f7:e9:18:26:db:e4:69:0a: 7f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:B5:9D:BB:A1:66:16:D7:2D:35:63:8E:65:4E:97:A1:56:F0:22:E3 X509v3 Authority Key Identifier: keyid:77:EC:48:69:2D:04:27:02:97:8D:CD:0B:68:E9:40:B8:D7:72:3E:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d-xIaS0EJwKXjc0LaOlAuNdyPlI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:d9:36:c2:5c:57:60:02:d5:63:14:c2:a5:33:e4:07:56:94: 9e:34:cf:d1:2e:f4:7f:9d:4a:76:81:10:72:ae:42:54:48:eb: 6e:19:ba:9d:a1:75:47:c0:3b:58:83:d0:45:8d:d9:fc:58:e6: ff:f0:c9:a0:94:c3:3b:16:e2:20:34:5a:24:3b:cb:69:0d:f1: 60:83:46:59:8f:0d:92:c6:b7:66:6e:40:34:fa:98:95:8b:06: b5:11:56:49:a4:ce:bd:78:90:52:27:57:ed:b4:09:7e:52:8a: a3:0e:ea:6e:20:71:b9:e3:a5:59:e5:90:70:af:6d:e6:e6:ae: b9:75:ed:e3:24:db:f6:ac:62:be:26:9c:6d:d5:09:f8:00:bd: e4:a5:d9:87:da:ff:79:e9:23:d0:41:5c:98:fd:bf:7a:35:2f: 06:ef:36:f9:5e:6c:b7:9c:f2:3a:2a:86:37:86:60:f5:8c:54: 57:50:eb:27:30:0b:83:f1:d7:1e:1e:71:88:5d:e2:3e:01:b0: 53:56:41:30:25:08:fb:56:7a:ab:44:4a:af:85:67:21:d8:3d: ff:d0:e4:8b:9d:de:cc:62:4d:ea:05:26:1d:df:b9:c0:78:c9: 41:6c:61:86:e4:a6:4c:5e:c7:38:58:dd:8f:71:68:df:39:ff: 83:03:6d:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTIzMjAxMTAvBgNVBAUTKDc3RUM0ODY5MkQwNDI3MDI5NzhEQ0QwQjY4RTk0MEI4 RDc3MjNFNTIwHhcNMjUwNDI2MjMxNDQ0WhcNMjUwNTAzMjMxNDQ0WjAYMRYwFAYD VQQDEw02ODBkNjhlNC05NTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqXNZdIuebRzr0huGYcuLBnJoKC8FccnKjm+YXS9toaHKe8KeJ80D30JOJ7ag sLo6TWnLY5onyp8GRtiNUq8vDMthsx4fet/xWfH+YIRBf839F1DWLdBzJ6Sv7Tnn tXBHExOeOCuYNu8pku5z7pjblOc12kPadKTX3SZOWBmTpR3gECWFPJz6+DlJart+ 3vYx+SzK+MyharNzz7z11T0xyUiXAAhtEsjQYApT7P48w6V9djlOyqJGEeoouX6P LHYKAZZct3Qg9XtllEC2dc85FPkpNUcEtAwu3mQkV5t5njD/DADNnI9LhaS2RjXa jqG5igwMtBHo9+kYJtvkaQp/IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKy1nbuh ZhbXLTVjjmVOl6FW8CLjMB8GA1UdIwQYMBaAFHfsSGktBCcCl43NC2jpQLjXcj5S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjMyMC8yOEM2Q0NFNkE5 RjAxMUVFOTMxNUVENkNDNEY5QUUwMi9kLXhJYVMwRUp3S1hqYzBMYU9sQXVOZHlQ bEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2QteElhUzBFSndLWGpjMExhT2xBdU5keVBsSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjMyMC8yOEM2Q0NFNkE5RjAxMUVFOTMxNUVENkNDNEY5QUUwMi9kLXhJYVMwRUp3 S1hqYzBMYU9sQXVOZHlQbEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB12TbCXFdgAtVjFMKlM+QHVpSeNM/RLvR/nUp2gRByrkJUSOtuGbqd oXVHwDtYg9BFjdn8WOb/8MmglMM7FuIgNFokO8tpDfFgg0ZZjw2SxrdmbkA0+piV iwa1EVZJpM69eJBSJ1fttAl+UoqjDupuIHG546VZ5ZBwr23m5q65de3jJNv2rGK+ Jpxt1Qn4AL3kpdmH2v956SPQQVyY/b96NS8G7zb5Xmy3nPI6KoY3hmD1jFRXUOsn MAuD8dceHnGIXeI+AbBTVkEwJQj7VnqrREqvhWch2D3/0OSLnd7MYk3qBSYd37nA eMlBbGGG5KZMXsc4WN2PcWjfOf+DA22S -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:14 2025 by rpki-client on console.sobornost.net