$ rpki-client -vvf rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft File: aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft (raw, json) Hash identifier: CsbV+OyugoTz3bUJPuruX46JKMTmp8zGh4eqVRpGcpM= Subject key identifier: 13:A6:E5:94:C4:39:36:60:62:2B:6C:EE:2F:3B:1B:4C:BE:26:0F:D6 Authority key identifier: 68:77:41:DE:15:CD:88:3C:10:DD:BC:4F:C3:A2:DC:F5:48:5E:7D:F3 Certificate issuer: /CN=A9114D4F/serialNumber=687741DE15CD883C10DDBC4FC3A2DCF5485E7DF3 Certificate serial: 88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft Manifest number: 86 Signing time: Sun 27 Apr 2025 05:24:44 +0000 Manifest this update: Sun 27 Apr 2025 05:24:43 +0000 Manifest next update: Sun 04 May 2025 05:24:43 +0000 Files and hashes: 1: aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl (hash: 6+EmwVmz3yj4TR48p9uZ4G3XX9Xm1eTB1SgNdA4hC6w=) 2: 444375E25B9C11EFA181A044C4F9AE02.roa (hash: Yhh6V+gIv+Ld1DK0VM67Fxc3c5mvFHS895j33+/A8nE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 136 (0x88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114D4F, serialNumber=687741DE15CD883C10DDBC4FC3A2DCF5485E7DF3 Validity Not Before: Apr 27 05:24:43 2025 GMT Not After : May 4 05:24:43 2025 GMT Subject: CN=680dbf9b-8842 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:55:96:75:e9:d2:17:1f:df:8f:b7:1d:f6:3e: ea:bd:79:2e:14:97:2f:2b:ed:14:1a:27:4c:8f:93: e1:4b:ee:ea:fb:34:32:05:6e:e3:e3:48:20:05:3d: 26:a8:e0:8b:5b:df:aa:ec:44:f5:5f:98:e6:cb:16: 35:99:57:11:f6:8d:6d:2d:c0:2e:32:88:11:94:89: 3e:bb:7c:f8:cf:fb:00:ca:37:7a:48:26:30:c2:cd: 49:c3:66:d9:48:8e:73:de:e8:8b:a5:50:6c:22:a9: 37:15:e8:4d:47:a8:e7:c7:43:49:13:c0:4b:72:d0: f9:9b:0a:f5:ca:21:52:d0:74:41:e4:54:e9:6c:8e: 91:31:f0:ad:36:e9:38:c0:df:4f:48:d4:d7:2f:9c: 4b:ea:6b:9b:63:63:eb:80:bd:df:62:9f:d7:70:10: 7a:26:48:f5:1c:cf:75:68:4a:c0:ba:bc:f9:6f:b6: b2:9d:b5:6a:b2:b9:0c:81:a8:5f:03:9d:4a:3c:c5: 8a:1d:81:37:2c:64:13:74:4d:e2:07:37:67:3a:86: f1:06:7e:be:e7:7d:bb:e8:03:30:7e:04:bd:ff:50: 5f:07:87:94:b4:76:bf:17:59:27:da:bb:6e:63:f7: 22:e7:10:5c:ab:26:5d:2c:3f:8c:83:2c:2d:c6:fc: c2:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:A6:E5:94:C4:39:36:60:62:2B:6C:EE:2F:3B:1B:4C:BE:26:0F:D6 X509v3 Authority Key Identifier: keyid:68:77:41:DE:15:CD:88:3C:10:DD:BC:4F:C3:A2:DC:F5:48:5E:7D:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:1b:87:76:50:7a:f5:35:45:4e:0d:ec:91:05:81:f0:fe:bf: 97:39:7e:bf:91:2e:92:c6:77:6e:4e:2c:9b:af:2e:46:4a:1b: 26:a5:fb:a2:e1:33:3d:ee:a1:92:ae:78:77:42:92:e6:0e:0d: 41:9c:f5:34:15:5b:8c:cc:9a:78:3e:11:37:f6:51:7e:ec:47: ec:07:be:59:70:71:df:b9:0e:a9:9a:51:cc:c7:89:81:50:0f: 0c:c5:86:94:72:86:4d:37:59:02:14:0f:1b:62:c7:03:01:97: 6b:e1:09:81:86:39:89:ea:2f:72:22:00:bc:9e:04:da:48:22: bf:48:4b:ee:24:51:02:e4:4d:58:62:24:d8:87:1d:d6:ea:7d: e6:0a:1f:95:db:25:4b:43:d4:fa:66:6b:50:ea:19:57:44:45: 3b:6a:c6:c2:86:d3:d8:cd:38:37:2b:68:1f:32:0a:3e:05:f5: f1:a5:3b:5f:67:4c:49:96:f3:b4:4d:4b:ce:c5:e1:9b:6e:fc: 23:c6:11:ec:0d:c5:3c:e0:d9:31:6c:1a:b9:30:71:1c:7b:6a: c7:dc:24:37:2f:67:5d:2a:4c:14:75:7a:c1:8c:11:8d:4f:5d: 6a:88:3a:8c:8f:68:4e:f8:25:06:a4:49:b8:25:ff:84:cd:62: cd:68:72:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTRENEYxMTAvBgNVBAUTKDY4Nzc0MURFMTVDRDg4M0MxMEREQkM0RkMzQTJEQ0Y1 NDg1RTdERjMwHhcNMjUwNDI3MDUyNDQzWhcNMjUwNTA0MDUyNDQzWjAYMRYwFAYD VQQDEw02ODBkYmY5Yi04ODQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxlWWdenSFx/fj7cd9j7qvXkuFJcvK+0UGidMj5PhS+7q+zQyBW7j40ggBT0m qOCLW9+q7ET1X5jmyxY1mVcR9o1tLcAuMogRlIk+u3z4z/sAyjd6SCYwws1Jw2bZ SI5z3uiLpVBsIqk3FehNR6jnx0NJE8BLctD5mwr1yiFS0HRB5FTpbI6RMfCtNuk4 wN9PSNTXL5xL6mubY2PrgL3fYp/XcBB6Jkj1HM91aErAurz5b7aynbVqsrkMgahf A51KPMWKHYE3LGQTdE3iBzdnOobxBn6+53276AMwfgS9/1BfB4eUtHa/F1kn2rtu Y/ci5xBcqyZdLD+MgywtxvzCdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBOm5ZTE OTZgYits7i87G0y+Jg/WMB8GA1UdIwQYMBaAFGh3Qd4VzYg8EN28T8Oi3PVIXn3z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEQ0Ri8wRTNBQ0NGQzVC OUMxMUVGOUIxNTQ5NDRDNEY5QUUwMi9hSGRCM2hYTmlEd1EzYnhQdzZMYzlVaGVm Zk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FIZEIzaFhOaUR3UTNieFB3NkxjOVVoZWZmTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NEQ0Ri8wRTNBQ0NGQzVCOUMxMUVGOUIxNTQ5NDRDNEY5QUUwMi9hSGRCM2hYTmlE d1EzYnhQdzZMYzlVaGVmZk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVG4d2UHr1NUVODeyRBYHw/r+XOX6/kS6SxnduTiybry5GShsmpfui 4TM97qGSrnh3QpLmDg1BnPU0FVuMzJp4PhE39lF+7EfsB75ZcHHfuQ6pmlHMx4mB UA8MxYaUcoZNN1kCFA8bYscDAZdr4QmBhjmJ6i9yIgC8ngTaSCK/SEvuJFEC5E1Y YiTYhx3W6n3mCh+V2yVLQ9T6ZmtQ6hlXREU7asbChtPYzTg3K2gfMgo+BfXxpTtf Z0xJlvO0TUvOxeGbbvwjxhHsDcU84NkxbBq5MHEce2rH3CQ3L2ddKkwUdXrBjBGN T11qiDqMj2hO+CUGpEm4Jf+EzWLNaHLU -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:40 2025 by rpki-client on console.sobornost.net