$ rpki-client -vvf rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft File: Iu3562YIf9DpgXrnNsADnRiAiNU.mft (raw, json) Hash identifier: 8mFSxmK3ozfJOUYsAV9XmQum/v1mCVQSwt5P6GUtZFY= Subject key identifier: 62:4D:73:8E:F9:4F:87:CC:05:70:B6:81:25:23:88:52:67:57:BD:B4 Authority key identifier: 22:ED:F9:EB:66:08:7F:D0:E9:81:7A:E7:36:C0:03:9D:18:80:88:D5 Certificate issuer: /CN=A9112DB1/serialNumber=22EDF9EB66087FD0E9817AE736C0039D188088D5 Certificate serial: 0438 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft Manifest number: 0407 Signing time: Fri 25 Apr 2025 00:23:48 +0000 Manifest this update: Fri 25 Apr 2025 00:23:48 +0000 Manifest next update: Fri 02 May 2025 00:23:48 +0000 Files and hashes: 1: Iu3562YIf9DpgXrnNsADnRiAiNU.crl (hash: A0kNVCf1T3qJQGNg2w4K+oB7GsTPUuTfGzjCqEXTcDE=) 2: 8276BFA60BB811EFB091FD1CC4F9AE02.roa (hash: tHlnHTM42fIgrOKj6B5mEiDlxGJ8PU+aATIjcWUbfzQ=) 3: 642A8EA2887911ECAFCDDE1FC4F9AE02.roa (hash: G91/+5P90Gbi5PgxXduUuTfOqPoMJhhodtxKYVTEQhU=) 4: 15E884EAF73311ED8E92F45DC4F9AE02.roa (hash: dDUwPb8yT4c7h8uvXZN4RSXgwF3JJh0qprW0Nf2AMic=) 5: 20519AFE346111EFB91EA738C4F9AE02.roa (hash: OW2gDSL6apVk21WPZdNUp4voxwL3co7ZVV/LZN2sPnI=) 6: E5AC554A897211EEA179DA5DC4F9AE02.roa (hash: 6FWLxJ0tuemCPYBLnFeCXc6fNxB9xk/e0IXfBTmtzAk=) 7: 818F58F0EAF411EC9A14E22EC4F9AE02.roa (hash: rr7JwL3aP2xt22xpI8m2scwwvBMRgYndiZXBSENrUYA=) 8: EB0EA48C8AD411ECB9E15216C4F9AE02.roa (hash: P6m9Y8fkMm3GUB3vWCGhg/CMVh26A+E6bYvQlekbBbQ=) 9: BEF172F4BD1311EDAB02753EC4F9AE02.roa (hash: onTCqXS9qZGzhIeTCRHgBXLlG0kEyR1ncJjeY60B73A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.crl rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:23:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1080 (0x438) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112DB1, serialNumber=22EDF9EB66087FD0E9817AE736C0039D188088D5 Validity Not Before: Apr 25 00:23:48 2025 GMT Not After : May 2 00:23:48 2025 GMT Subject: CN=680ad614-142e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:97:de:e1:81:19:6f:82:f1:d3:25:40:61:c2: 30:33:ce:47:20:09:1d:0a:68:dc:25:b8:12:b4:38: 24:47:d9:66:00:50:8a:28:89:8a:8d:fb:c9:4f:20: b0:00:3d:0e:25:a8:6d:40:e6:39:b4:1c:81:63:f5: bb:5c:19:c0:dc:7f:ec:e9:47:72:f6:20:06:d7:bd: 62:33:c8:a0:84:c7:49:5d:44:2c:a4:5d:56:91:c1: 35:fb:99:54:71:90:5d:7f:36:f2:6b:e8:e1:aa:d1: d1:fd:0a:43:3b:3d:b4:de:2e:9a:e4:48:8e:8c:70: 9f:11:7a:2b:eb:b6:ab:77:2c:0c:ba:b2:b2:e3:a1: 63:0b:42:83:e9:8c:57:e6:64:70:9e:0e:97:34:ad: 66:74:72:6d:d5:22:99:a0:93:78:f5:bc:f8:59:c7: e8:cc:96:bd:cb:43:80:0e:14:73:18:a7:29:ea:dc: 44:49:53:07:10:cc:fd:c4:d4:da:e7:b9:11:49:0b: 10:6a:00:3e:5f:b9:75:88:52:6f:9f:34:e1:fb:f2: 2a:e0:b0:4a:b2:8d:f4:4c:bd:25:95:78:d4:f1:71: 1f:91:a0:48:6a:e5:3f:44:be:3b:86:66:b4:00:fa: 5b:fc:5c:f3:62:d0:73:69:3b:ac:dd:97:49:95:01: eb:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:4D:73:8E:F9:4F:87:CC:05:70:B6:81:25:23:88:52:67:57:BD:B4 X509v3 Authority Key Identifier: keyid:22:ED:F9:EB:66:08:7F:D0:E9:81:7A:E7:36:C0:03:9D:18:80:88:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:6e:67:7b:ad:62:a3:9f:81:8e:b6:00:10:b7:f9:75:b8:90: f4:3b:7f:4f:c8:1a:b7:34:b5:94:1e:21:49:76:b8:36:e1:f1: e6:b6:8e:8f:5a:59:ea:4e:cc:32:fa:6f:09:ce:c1:62:11:86: 13:3f:93:bf:a0:10:d7:d2:89:08:ad:8d:e0:10:bb:ce:44:e7: a1:6b:7c:c8:5f:03:2d:29:c6:03:a4:81:1d:6c:09:9e:74:d9: 63:34:95:a7:5d:17:50:0f:14:8b:c7:3b:16:09:5f:6f:15:0f: d9:6d:c6:3a:65:81:d6:19:92:f0:dd:64:92:b7:7e:f5:7c:ae: 83:e3:93:59:21:aa:4c:bc:49:03:cc:73:2a:02:58:1d:6c:9b: 93:ee:cd:7b:01:43:65:5b:dc:86:7e:65:f3:cf:af:aa:fc:ec: 8a:22:df:e3:1a:75:68:b0:88:97:24:b6:e3:75:de:1d:e6:4a: bd:fc:4a:3b:59:e7:34:d5:33:42:cb:2a:6b:16:5c:3c:07:8f: 16:bd:2c:1b:bd:14:64:ff:c4:dd:b5:58:6c:6b:11:9a:44:ed: 6b:da:e2:3b:1b:83:68:2a:a9:5d:1c:77:3b:03:90:2d:eb:c4: fb:4e:7c:9a:e5:5d:f1:32:04:90:84:e4:42:4a:67:3c:86:13: 63:ae:58:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJEQjExMTAvBgNVBAUTKDIyRURGOUVCNjYwODdGRDBFOTgxN0FFNzM2QzAwMzlE MTg4MDg4RDUwHhcNMjUwNDI1MDAyMzQ4WhcNMjUwNTAyMDAyMzQ4WjAYMRYwFAYD VQQDEw02ODBhZDYxNC0xNDJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy5fe4YEZb4Lx0yVAYcIwM85HIAkdCmjcJbgStDgkR9lmAFCKKImKjfvJTyCw AD0OJahtQOY5tByBY/W7XBnA3H/s6Udy9iAG171iM8ighMdJXUQspF1WkcE1+5lU cZBdfzbya+jhqtHR/QpDOz203i6a5EiOjHCfEXor67ardywMurKy46FjC0KD6YxX 5mRwng6XNK1mdHJt1SKZoJN49bz4WcfozJa9y0OADhRzGKcp6txESVMHEMz9xNTa 57kRSQsQagA+X7l1iFJvnzTh+/Iq4LBKso30TL0llXjU8XEfkaBIauU/RL47hma0 APpb/FzzYtBzaTus3ZdJlQHrjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGJNc475 T4fMBXC2gSUjiFJnV720MB8GA1UdIwQYMBaAFCLt+etmCH/Q6YF65zbAA50YgIjV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkRCMS8zRkE2OTIwMDgz QzAxMUVDQjU0QjM5N0ZDNEY5QUUwMi9JdTM1NjJZSWY5RHBnWHJuTnNBRG5SaUFp TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l1MzU2MllJZjlEcGdYcm5Oc0FEblJpQWlOVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkRCMS8zRkE2OTIwMDgzQzAxMUVDQjU0QjM5N0ZDNEY5QUUwMi9JdTM1NjJZSWY5 RHBnWHJuTnNBRG5SaUFpTlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUbmd7rWKjn4GOtgAQt/l1uJD0O39PyBq3NLWUHiFJdrg24fHmto6P WlnqTswy+m8JzsFiEYYTP5O/oBDX0okIrY3gELvOROeha3zIXwMtKcYDpIEdbAme dNljNJWnXRdQDxSLxzsWCV9vFQ/ZbcY6ZYHWGZLw3WSSt371fK6D45NZIapMvEkD zHMqAlgdbJuT7s17AUNlW9yGfmXzz6+q/OyKIt/jGnVosIiXJLbjdd4d5kq9/Eo7 Wec01TNCyyprFlw8B48WvSwbvRRk/8TdtVhsaxGaRO1r2uI7G4NoKqldHHc7A5At 68T7Tnya5V3xMgSQhORCSmc8hhNjrlgz -----END CERTIFICATE-----Generated at Fri Apr 25 08:23:30 2025 by rpki-client on console.sobornost.net