$ rpki-client -vvf rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft File: x2h2G8gatP5_1EAVSCYcuocge-o.mft (raw, json) Hash identifier: LQ2QHW1C8thHCRAk39g69pkyW73HDTonNDXn1lpv0Z4= Subject key identifier: E6:65:F3:E0:B5:2E:2F:C6:E2:AD:5E:C8:40:35:89:4D:B0:78:E6:58 Authority key identifier: C7:68:76:1B:C8:1A:B4:FE:7F:D4:40:15:48:26:1C:BA:87:20:7B:EA Certificate issuer: /CN=A9118022/serialNumber=C768761BC81AB4FE7FD4401548261CBA87207BEA Certificate serial: 0E16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x2h2G8gatP5_1EAVSCYcuocge-o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft Manifest number: 0DF4 Signing time: Mon 28 Apr 2025 18:04:25 +0000 Manifest this update: Mon 28 Apr 2025 18:04:25 +0000 Manifest next update: Mon 05 May 2025 18:04:25 +0000 Files and hashes: 1: x2h2G8gatP5_1EAVSCYcuocge-o.crl (hash: LS4o0EUjnQTpSy/W6q6BKphGL2ylGL9Nm+r2eZ8q2UM=) 2: 127D33EC027011EB98FEC44BC4F9AE02.roa (hash: WKzAcG2HI+Rmp0I06ZjLFib0fSkn15at9z87zdNmyk8=) 3: 1C99C7E021D911EB85DAFE71C4F9AE02.roa (hash: SWjsz2ZRwBkKRs3lCM8x1HuP6oZ8eAnIrMziwftZzas=) 4: 670DF186232111EB9896B783C4F9AE02.roa (hash: Uzh2H0WzqUhAdOejeRuGcUfDdr3mQiiZM4aNaZoNZlE=) 5: 1609CE067A4A11EB99C11F5FC4F9AE02.roa (hash: /6vaZiCWJmBFNJgiNOI49M1x4iJoUHYLtfB+8hNudBk=) 6: 1D93B82C21D911EB85DAFE71C4F9AE02.roa (hash: E9L/TTXk+Px8nGO4KJnm/ouPNchL+BTaTG1X0znr2Rg=) 7: 1BBE249C21D911EB85DAFE71C4F9AE02.roa (hash: EwzDgqgyP+42whL7/ceKehIKyd0tgvQ5kUq+8PMWfXY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.crl rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x2h2G8gatP5_1EAVSCYcuocge-o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 18:04:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3606 (0xe16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118022, serialNumber=C768761BC81AB4FE7FD4401548261CBA87207BEA Validity Not Before: Apr 28 18:04:25 2025 GMT Not After : May 5 18:04:25 2025 GMT Subject: CN=680fc329-6f84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b6:ea:7c:2e:28:f4:47:f2:4b:b8:a9:ea:b4: 8b:2c:50:06:e8:7a:93:8f:11:60:f3:83:a2:12:ba: c9:d7:50:df:61:de:0c:a1:54:d7:5f:af:39:22:73: d0:48:3b:14:44:08:fa:48:2c:3c:33:68:a5:2d:f2: 66:73:be:b4:79:2b:0c:44:49:90:ef:72:cb:3c:47: b1:43:bc:da:9e:89:50:06:d6:1c:36:9d:2d:ef:50: 7d:4d:b6:c2:ce:8b:9c:52:d0:e2:91:f4:b1:3f:53: de:32:43:c6:0c:0f:3e:58:26:69:58:50:ff:b4:0e: f5:0c:35:ed:02:93:d8:b5:41:38:cd:ca:22:1c:cf: 63:0b:9e:3a:05:54:c1:3f:3c:d7:55:63:cb:d5:cd: 4f:05:15:e9:65:97:d5:a8:58:59:29:48:94:3a:26: be:e3:28:3c:8a:b3:35:3a:9f:51:d8:d5:e2:a9:3c: e6:6c:4d:93:d4:15:28:15:55:93:ac:7c:95:6a:b9: 37:ae:e5:9c:0e:60:fe:f2:47:3c:9f:a9:29:6e:94: 9b:78:be:00:c8:57:07:7b:ee:38:21:66:8b:9b:b4: 79:16:2c:66:15:8d:c2:fd:ba:83:7e:59:07:27:44: 36:fa:8d:8b:41:47:c7:67:8c:1d:76:85:0a:6f:ff: fb:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:65:F3:E0:B5:2E:2F:C6:E2:AD:5E:C8:40:35:89:4D:B0:78:E6:58 X509v3 Authority Key Identifier: keyid:C7:68:76:1B:C8:1A:B4:FE:7F:D4:40:15:48:26:1C:BA:87:20:7B:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x2h2G8gatP5_1EAVSCYcuocge-o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:bf:2f:40:1c:eb:e9:40:2a:1e:f2:15:9a:ee:49:66:8d:87: 4f:d7:63:36:91:2d:89:15:df:80:99:c7:07:e7:40:52:1c:e3: b3:5c:3c:5b:d4:cb:4e:bd:bf:11:3e:78:88:60:2c:91:83:34: d9:3e:ca:29:21:4c:04:b0:dc:ed:1d:d3:05:40:e0:c1:e2:15: a4:5d:5a:cf:10:da:f5:2d:0e:0c:b9:7a:2e:85:92:a6:5c:8e: 60:e8:9a:1f:fe:90:c1:ed:87:4a:ac:6e:a2:4b:49:71:2b:7c: f2:72:bb:a2:f3:cb:cc:0c:47:c2:28:3a:67:df:04:6b:09:c4: 3a:82:e9:c1:64:7c:39:73:0a:db:1d:3d:54:6c:6d:28:24:1e: 40:0c:75:57:ab:94:4e:19:e8:25:c2:51:c7:d5:8b:4e:02:6b: 9c:b7:2e:af:9b:b3:c3:3c:9f:70:8b:19:82:0a:bb:4f:1c:0f: 57:f6:b1:bc:13:a8:d7:7e:43:82:fc:e3:99:15:88:19:17:63: a9:46:ce:25:6b:46:33:96:a9:62:95:84:80:07:05:f7:90:bb: 9e:5e:d2:2a:62:1d:5f:7d:a0:c9:89:0c:ad:46:1b:c3:48:4d: c0:fb:ae:6e:7f:ad:30:95:37:e3:39:3a:37:89:66:27:46:47: 7d:05:27:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDhYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTgwMjIxMTAvBgNVBAUTKEM3Njg3NjFCQzgxQUI0RkU3RkQ0NDAxNTQ4MjYxQ0JB ODcyMDdCRUEwHhcNMjUwNDI4MTgwNDI1WhcNMjUwNTA1MTgwNDI1WjAYMRYwFAYD VQQDEw02ODBmYzMyOS02Zjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1bbqfC4o9EfyS7ip6rSLLFAG6HqTjxFg84OiErrJ11DfYd4MoVTXX685InPQ SDsURAj6SCw8M2ilLfJmc760eSsMREmQ73LLPEexQ7zanolQBtYcNp0t71B9TbbC zoucUtDikfSxP1PeMkPGDA8+WCZpWFD/tA71DDXtApPYtUE4zcoiHM9jC546BVTB PzzXVWPL1c1PBRXpZZfVqFhZKUiUOia+4yg8irM1Op9R2NXiqTzmbE2T1BUoFVWT rHyVark3ruWcDmD+8kc8n6kpbpSbeL4AyFcHe+44IWaLm7R5FixmFY3C/bqDflkH J0Q2+o2LQUfHZ4wddoUKb//7aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOZl8+C1 Li/G4q1eyEA1iU2weOZYMB8GA1UdIwQYMBaAFMdodhvIGrT+f9RAFUgmHLqHIHvq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODAyMi9DNjFDMjU2QUFE Q0MxMUU5QUM2NzJGNEJDNEY5QUUwMi94MmgyRzhnYXRQNV8xRUFWU0NZY3VvY2dl LW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gyaDJHOGdhdFA1XzFFQVZTQ1ljdW9jZ2Utby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODAyMi9DNjFDMjU2QUFEQ0MxMUU5QUM2NzJGNEJDNEY5QUUwMi94MmgyRzhnYXRQ NV8xRUFWU0NZY3VvY2dlLW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4vy9AHOvpQCoe8hWa7klmjYdP12M2kS2JFd+AmccH50BSHOOzXDxb 1MtOvb8RPniIYCyRgzTZPsopIUwEsNztHdMFQODB4hWkXVrPENr1LQ4MuXouhZKm XI5g6Jof/pDB7YdKrG6iS0lxK3zycrui88vMDEfCKDpn3wRrCcQ6gunBZHw5cwrb HT1UbG0oJB5ADHVXq5ROGeglwlHH1YtOAmucty6vm7PDPJ9wixmCCrtPHA9X9rG8 E6jXfkOC/OOZFYgZF2OpRs4la0YzlqlilYSABwX3kLueXtIqYh1ffaDJiQytRhvD SE3A+65uf60wlTfjOTo3iWYnRkd9BSfN -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:22 2025 by rpki-client on console.sobornost.net