$ rpki-client -vvf rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.mft File: Xtho2ocq-NaWpcGp-ngp9lJzynk.mft (raw, json) Hash identifier: +jOc5w+MZL336gHXD9FrTSa9lBggHbmO/HmsbuqXnwE= Subject key identifier: D3:A2:47:40:5D:01:04:B0:EA:BA:EB:D5:3B:3E:D7:A9:55:3D:D3:97 Authority key identifier: 5E:D8:68:DA:87:2A:F8:D6:96:A5:C1:A9:FA:78:29:F6:52:73:CA:79 Certificate issuer: /CN=A9119B43/serialNumber=5ED868DA872AF8D696A5C1A9FA7829F65273CA79 Certificate serial: 0464 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xtho2ocq-NaWpcGp-ngp9lJzynk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.mft Manifest number: 045C Signing time: Sat 26 Apr 2025 23:49:27 +0000 Manifest this update: Sat 26 Apr 2025 23:49:27 +0000 Manifest next update: Sat 03 May 2025 23:49:27 +0000 Files and hashes: 1: Xtho2ocq-NaWpcGp-ngp9lJzynk.crl (hash: 9fuhvK+OpoCo+oewnCdk8aidSzwy/4H9DllyMTSQZwM=) 2: 6C27C19E4BFA11ECA6797F6DC4F9AE02.roa (hash: 9zlcNMp71CcrKhJ6RcgbQ3pW8nUmE/ShM6R3qPGEpIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.crl rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xtho2ocq-NaWpcGp-ngp9lJzynk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 23:49:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1124 (0x464) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119B43, serialNumber=5ED868DA872AF8D696A5C1A9FA7829F65273CA79 Validity Not Before: Apr 26 23:49:27 2025 GMT Not After : May 3 23:49:27 2025 GMT Subject: CN=680d7107-078d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8b:aa:2c:5a:f9:e6:ad:e7:92:48:3d:ca:8e: 8c:ed:6c:1a:df:10:15:04:a2:33:43:b1:02:38:ce: 32:c7:a1:58:08:83:bd:b5:be:04:fb:c5:71:9f:34: 94:1a:62:5c:0e:43:5c:94:97:34:43:38:35:6f:46: 7e:7e:9a:be:7d:ef:d8:93:12:48:a8:04:b5:f6:d2: 08:f6:d1:ad:f4:23:3c:83:fd:20:d9:a1:ed:4b:75: 41:0c:e7:66:95:76:bf:d1:45:a6:1e:72:5e:01:e1: 49:a7:0d:26:78:15:81:4c:4e:be:3e:75:7a:f3:fa: 4c:71:98:67:32:2f:c1:b0:8e:8a:2c:8e:32:05:86: 07:7e:7e:43:35:2c:8d:73:44:d1:e2:cf:8f:c7:73: b5:be:28:a9:19:92:82:8f:92:b6:f1:fa:52:ef:7c: 01:03:36:f4:bc:08:ce:6e:49:2d:f4:21:89:33:f9: 1b:72:cc:ab:15:cf:65:13:8a:77:99:cf:80:69:9a: a4:22:7b:cd:1f:0b:2a:6b:8d:c8:bd:5c:9f:06:64: dd:8f:22:c2:98:f6:f4:cf:a0:8d:b0:8c:31:9e:fd: a2:b2:64:f4:e9:a9:50:f8:1b:ee:a7:81:10:8c:70: e4:69:7b:77:c4:25:f0:03:55:49:2f:25:24:8f:34: fc:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:A2:47:40:5D:01:04:B0:EA:BA:EB:D5:3B:3E:D7:A9:55:3D:D3:97 X509v3 Authority Key Identifier: keyid:5E:D8:68:DA:87:2A:F8:D6:96:A5:C1:A9:FA:78:29:F6:52:73:CA:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xtho2ocq-NaWpcGp-ngp9lJzynk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:df:02:40:1e:08:b6:70:38:ce:3e:c1:dc:aa:91:5c:5a:63: e1:fd:4c:16:2a:e9:54:65:65:e2:c4:2e:67:54:31:5d:1a:90: a9:43:12:19:cb:4c:31:79:66:49:85:d8:8e:6f:05:0d:25:77: 2d:d9:56:2a:e3:ea:14:5f:33:05:af:b5:92:97:0a:1f:3a:c8: 90:8e:e0:68:ed:57:65:1e:8a:43:cf:56:a5:da:15:60:2b:2e: 5e:03:22:9e:b6:ea:a8:4a:22:f5:e3:53:39:ee:d2:91:77:80: fc:0f:34:23:2a:b2:0d:0a:38:af:25:42:65:e3:72:7c:30:fd: 4d:4c:7f:a4:e3:64:c8:24:ea:3c:9b:b8:a6:a8:0e:73:20:d8: 50:f4:4a:fc:8f:37:3a:72:45:22:09:86:ff:74:7b:ad:29:8a: 7f:93:35:58:e7:6b:a3:f5:92:57:8f:cc:43:59:ad:2d:f2:40: b5:01:92:d2:45:b0:6c:fe:fc:fc:d4:f0:37:5f:4d:ab:e4:b0: 4f:1f:72:21:22:cd:10:3d:ed:d5:54:98:ee:32:ce:7c:e5:f9: 13:8b:f4:48:cf:16:a4:97:cb:6c:00:3a:56:43:bf:3f:db:71: f4:ad:85:ce:e8:d1:9f:ca:c4:ff:03:ab:5d:f1:11:7d:1d:14: 28:63:6c:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlCNDMxMTAvBgNVBAUTKDVFRDg2OERBODcyQUY4RDY5NkE1QzFBOUZBNzgyOUY2 NTI3M0NBNzkwHhcNMjUwNDI2MjM0OTI3WhcNMjUwNTAzMjM0OTI3WjAYMRYwFAYD VQQDEw02ODBkNzEwNy0wNzhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz4uqLFr55q3nkkg9yo6M7Wwa3xAVBKIzQ7ECOM4yx6FYCIO9tb4E+8VxnzSU GmJcDkNclJc0Qzg1b0Z+fpq+fe/YkxJIqAS19tII9tGt9CM8g/0g2aHtS3VBDOdm lXa/0UWmHnJeAeFJpw0meBWBTE6+PnV68/pMcZhnMi/BsI6KLI4yBYYHfn5DNSyN c0TR4s+Px3O1viipGZKCj5K28fpS73wBAzb0vAjObkkt9CGJM/kbcsyrFc9lE4p3 mc+AaZqkInvNHwsqa43IvVyfBmTdjyLCmPb0z6CNsIwxnv2ismT06alQ+Bvup4EQ jHDkaXt3xCXwA1VJLyUkjzT8sQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNOiR0Bd AQSw6rrr1Ts+16lVPdOXMB8GA1UdIwQYMBaAFF7YaNqHKvjWlqXBqfp4KfZSc8p5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUI0My9FNUI4Mzk4MjRC M0ExMUVDOTkyRTgxNTBDNEY5QUUwMi9YdGhvMm9jcS1OYVdwY0dwLW5ncDlsSnp5 bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h0aG8yb2NxLU5hV3BjR3AtbmdwOWxKenluay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OUI0My9FNUI4Mzk4MjRCM0ExMUVDOTkyRTgxNTBDNEY5QUUwMi9YdGhvMm9jcS1O YVdwY0dwLW5ncDlsSnp5bmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQ3wJAHgi2cDjOPsHcqpFcWmPh/UwWKulUZWXixC5nVDFdGpCpQxIZ y0wxeWZJhdiObwUNJXct2VYq4+oUXzMFr7WSlwofOsiQjuBo7VdlHopDz1al2hVg Ky5eAyKetuqoSiL141M57tKRd4D8DzQjKrINCjivJUJl43J8MP1NTH+k42TIJOo8 m7imqA5zINhQ9Er8jzc6ckUiCYb/dHutKYp/kzVY52uj9ZJXj8xDWa0t8kC1AZLS RbBs/vz81PA3X02r5LBPH3IhIs0QPe3VVJjuMs585fkTi/RIzxakl8tsADpWQ78/ 23H0rYXO6NGfysT/A6td8RF9HRQoY2xL -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:16 2025 by rpki-client on console.sobornost.net