$ rpki-client -vvf rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft File: 8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft (raw, json) Hash identifier: IFUcVaI8f/nrbZphgihJ9EBuV85d6z5d+bLpwBJoRvY= Subject key identifier: E3:FD:30:11:12:70:97:31:64:0B:B4:D4:E2:61:27:80:96:16:6D:34 Authority key identifier: F1:99:8A:47:5E:92:DE:8A:6C:7D:40:94:55:6A:0D:A6:7D:5D:4D:0E Certificate issuer: /CN=A9118CA7/serialNumber=F1998A475E92DE8A6C7D4094556A0DA67D5D4D0E Certificate serial: 0941 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft Manifest number: 0929 Signing time: Tue 06 May 2025 20:12:07 +0000 Manifest this update: Tue 06 May 2025 20:12:07 +0000 Manifest next update: Tue 13 May 2025 20:12:07 +0000 Files and hashes: 1: 8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl (hash: LhCIfG/Z62s9ocCz+2pCnhFbFVZo/Sq/0mkY6t67kH4=) 2: FFFE56DEDEF111EF8EE4AE37C4F9AE02.roa (hash: kvRrYXzDEb1knff7u5sMUOY0LST5MU2sRwL9Qq51bMI=) 3: E76F99C60FDB11ED9718606AC4F9AE02.roa (hash: 5xmx4EdtRdh7/raKFzoldytV08fzGVQ9tShtrjhxke0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 20:12:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2369 (0x941) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118CA7, serialNumber=F1998A475E92DE8A6C7D4094556A0DA67D5D4D0E Validity Not Before: May 6 20:12:07 2025 GMT Not After : May 13 20:12:07 2025 GMT Subject: CN=681a6d17-4261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a6:66:13:33:0c:eb:dd:2a:dc:0f:e8:c6:13: f6:78:d3:12:19:35:18:79:ef:2a:b0:d6:e5:42:94: fa:f9:99:64:4f:d2:87:b4:be:9f:02:2b:d1:8b:c1: ae:ac:e1:bc:49:0c:fc:11:60:37:4b:5f:88:bf:b5: ae:b7:22:da:ff:ed:15:4f:73:ff:70:2a:a8:0f:58: 25:f6:0b:b1:69:ec:2e:b2:0b:33:4b:c0:bd:94:20: 8c:4f:74:91:d2:e9:5a:ee:98:85:fb:e5:cf:dd:ee: cc:ca:49:53:c3:c1:48:66:d3:df:08:93:e4:65:81: 08:b3:f0:b8:85:e2:18:fe:c9:3b:3f:0d:70:e8:78: 75:47:19:55:98:68:5d:84:c8:94:b4:4b:81:a1:f3: 2a:90:0a:58:2c:8b:e4:d1:26:74:d6:fd:29:aa:47: ae:42:f0:29:6f:61:f6:90:5f:b8:64:2c:71:97:51: 9d:d8:7d:45:b8:13:db:51:d9:62:0a:36:40:3c:f0: 23:bd:01:ee:70:3b:48:a5:8b:25:57:ab:63:a0:b3: 7b:d4:2a:65:bd:97:92:71:95:cf:1e:08:41:10:db: f0:83:35:ca:38:bf:eb:ff:43:b0:3d:46:8e:7c:ee: 91:7d:98:f8:f8:9e:ed:7e:f6:1f:8b:a4:eb:69:6f: e0:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:FD:30:11:12:70:97:31:64:0B:B4:D4:E2:61:27:80:96:16:6D:34 X509v3 Authority Key Identifier: keyid:F1:99:8A:47:5E:92:DE:8A:6C:7D:40:94:55:6A:0D:A6:7D:5D:4D:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:7b:f9:e0:ba:a4:9d:b9:a9:d3:fc:ff:d2:7f:10:6c:db:66: 9c:d1:3c:94:d7:2b:09:ad:bd:de:41:62:19:dc:b6:6b:97:47: 5e:db:ef:c1:39:b1:ee:4f:d2:1b:a7:3b:4c:eb:c2:54:a3:72: e6:44:07:7a:c1:03:5a:1e:1f:f3:32:4c:bd:23:01:a4:93:35: 28:c4:7c:4b:d3:97:0c:62:e5:8f:32:3f:0e:43:6f:07:c9:5a: 65:0d:5c:a9:5f:42:05:be:0f:84:29:79:46:90:16:a1:59:fe: 43:b2:30:90:a5:ac:b2:16:21:d6:d6:94:65:b0:85:c9:d1:1b: f7:52:cc:88:5b:2c:23:53:e2:da:c3:e2:38:23:97:92:8c:81: 05:ce:db:2c:ab:ec:55:cf:01:7b:23:80:c2:7b:bb:ed:b2:05: 4c:2a:40:a8:62:fc:3e:e5:8d:f2:e7:37:96:f7:3e:7c:c0:bd: 98:fb:f2:f5:4b:3f:22:92:ef:be:ab:79:fa:cd:02:d4:b0:b2: 75:bc:94:ba:06:6b:f5:dd:f5:53:92:08:07:38:7b:90:d8:e4: 32:2c:b8:ae:15:40:0e:aa:3e:cb:f5:2d:1e:2c:d1:81:0d:8c: 87:d2:74:4d:23:e2:9f:37:8b:58:2b:da:4d:cf:12:f6:84:5f: 52:c0:50:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThDQTcxMTAvBgNVBAUTKEYxOTk4QTQ3NUU5MkRFOEE2QzdENDA5NDU1NkEwREE2 N0Q1RDREMEUwHhcNMjUwNTA2MjAxMjA3WhcNMjUwNTEzMjAxMjA3WjAYMRYwFAYD VQQDEw02ODFhNmQxNy00MjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn6ZmEzMM690q3A/oxhP2eNMSGTUYee8qsNblQpT6+ZlkT9KHtL6fAivRi8Gu rOG8SQz8EWA3S1+Iv7WutyLa/+0VT3P/cCqoD1gl9guxaewusgszS8C9lCCMT3SR 0ula7piF++XP3e7MyklTw8FIZtPfCJPkZYEIs/C4heIY/sk7Pw1w6Hh1RxlVmGhd hMiUtEuBofMqkApYLIvk0SZ01v0pqkeuQvApb2H2kF+4ZCxxl1Gd2H1FuBPbUdli CjZAPPAjvQHucDtIpYslV6tjoLN71CplvZeScZXPHghBENvwgzXKOL/r/0OwPUaO fO6RfZj4+J7tfvYfi6TraW/gXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOP9MBES cJcxZAu01OJhJ4CWFm00MB8GA1UdIwQYMBaAFPGZikdekt6KbH1AlFVqDaZ9XU0O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOENBNy8yRkM3MEEyNEEw RDUxMUVBQTdGRkRGMjlDNEY5QUUwMi84Wm1LUjE2UzNvcHNmVUNVVldvTnBuMWRU UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhabUtSMTZTM29wc2ZVQ1VWV29OcG4xZFRRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OENBNy8yRkM3MEEyNEEwRDUxMUVBQTdGRkRGMjlDNEY5QUUwMi84Wm1LUjE2UzNv cHNmVUNVVldvTnBuMWRUUTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoe/nguqSduanT/P/SfxBs22ac0TyU1ysJrb3eQWIZ3LZrl0de2+/B ObHuT9IbpztM68JUo3LmRAd6wQNaHh/zMky9IwGkkzUoxHxL05cMYuWPMj8OQ28H yVplDVypX0IFvg+EKXlGkBahWf5DsjCQpayyFiHW1pRlsIXJ0Rv3UsyIWywjU+La w+I4I5eSjIEFztssq+xVzwF7I4DCe7vtsgVMKkCoYvw+5Y3y5zeW9z58wL2Y+/L1 Sz8iku++q3n6zQLUsLJ1vJS6Bmv13fVTkggHOHuQ2OQyLLiuFUAOqj7L9S0eLNGB DYyH0nRNI+KfN4tYK9pNzxL2hF9SwFAO -----END CERTIFICATE-----Generated at Tue May 6 22:43:54 2025 by rpki-client on console.sobornost.net