$ rpki-client -vvf rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft File: ao09a_bbD13jJOQgxXOwqRhDx5Q.mft (raw, json) Hash identifier: vLaoDMY8u3UsFDJdt5gdBXlN4rgWQicUBHb3mtlhhFs= Subject key identifier: E8:BE:A6:E0:51:A1:EC:C3:BD:01:00:DA:AA:6E:BD:AC:79:A7:AB:DD Authority key identifier: 6A:8D:3D:6B:F6:DB:0F:5D:E3:24:E4:20:C5:73:B0:A9:18:43:C7:94 Certificate issuer: /CN=A911A108/serialNumber=6A8D3D6BF6DB0F5DE324E420C573B0A91843C794 Certificate serial: 0125 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft Manifest number: 0122 Signing time: Sun 27 Apr 2025 03:38:27 +0000 Manifest this update: Sun 27 Apr 2025 03:38:26 +0000 Manifest next update: Sun 04 May 2025 03:38:26 +0000 Files and hashes: 1: ao09a_bbD13jJOQgxXOwqRhDx5Q.crl (hash: S6WKpU3hmfgEJFzttg9yaTLzCtdu1z6c7JPXVpsynQQ=) 2: 2152B7B06C0411EEBC1AA814C4F9AE02.roa (hash: uM3aIpNluGtsYzZphAI84X+sXAAc8YbQ0FM++FIKSB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.crl rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 293 (0x125) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A108, serialNumber=6A8D3D6BF6DB0F5DE324E420C573B0A91843C794 Validity Not Before: Apr 27 03:38:26 2025 GMT Not After : May 4 03:38:26 2025 GMT Subject: CN=680da6b2-3527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:15:7e:61:68:aa:71:bd:60:89:a9:46:ec:92: 5f:f3:51:5b:8a:8b:94:eb:29:0f:f5:4a:22:bc:c7: e9:c4:c7:93:67:70:6e:d8:3c:a1:d2:5d:12:b7:72: 3b:f7:f5:ba:bb:31:56:6f:b8:b0:97:f7:4c:e9:2f: f0:c2:85:56:fa:e3:06:9d:47:ff:73:84:50:48:98: ce:bf:b1:df:ca:73:27:29:17:b4:76:1a:fe:a5:d6: 39:e1:64:2c:dc:d3:79:e5:f2:a3:45:51:9b:a2:33: 18:a3:29:ac:b1:c0:d4:54:c1:ee:f6:62:a5:77:cb: 97:23:9a:b6:39:2f:94:66:8e:b7:4c:42:f6:4a:78: 82:3f:3e:6d:fe:f4:2f:bc:7a:6e:4a:93:82:c6:a8: 61:21:38:d5:e0:d9:8e:bb:14:2b:d9:a4:a9:4e:5b: 79:19:af:7e:d3:fb:77:9b:3f:d3:40:73:0b:0e:62: 00:94:58:2b:31:a4:01:19:bd:3a:62:0f:b5:e5:0f: 3a:14:7d:7f:c8:8b:6e:36:2a:54:49:c5:cb:ec:aa: 65:3e:5f:0e:11:60:ea:19:5a:dd:05:17:e5:0a:08: 2f:0a:ae:59:f1:7f:d3:41:bc:4b:f9:e4:41:71:59: f4:95:64:95:a0:35:0c:1f:fe:c6:68:48:cc:2d:f2: f0:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:BE:A6:E0:51:A1:EC:C3:BD:01:00:DA:AA:6E:BD:AC:79:A7:AB:DD X509v3 Authority Key Identifier: keyid:6A:8D:3D:6B:F6:DB:0F:5D:E3:24:E4:20:C5:73:B0:A9:18:43:C7:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:30:bf:e8:56:85:34:6a:30:a9:c7:33:73:57:9c:08:d6:29: 54:ad:75:df:4d:a0:57:17:19:e0:0b:23:b2:dd:50:eb:02:79: c9:6c:7a:60:5a:ce:33:21:01:ce:db:db:d4:80:c3:5b:2a:da: 6e:06:78:82:12:72:c3:80:73:de:27:91:f4:50:3c:0e:ab:44: 0d:ed:6b:8c:3e:a0:ec:7e:b6:9a:62:61:90:4a:f4:56:6a:70: 16:aa:11:58:c0:c2:24:b4:76:3f:24:7f:64:d9:3d:9c:bb:ab: 1b:9c:15:f4:52:cf:fd:2b:e6:75:84:5c:a1:7f:8f:a2:a6:70: 11:67:a8:8b:2d:c3:0f:42:ff:8b:37:b5:e5:c3:c3:cd:c6:80: 38:6a:f5:2c:ad:1b:8f:57:ed:ee:0f:b5:d0:ca:70:04:da:15: 03:19:4a:83:b9:ba:ea:1c:d2:10:e3:51:6d:6f:85:8a:da:53: 39:da:77:8c:c6:7d:ae:56:73:95:c4:6e:12:b2:9e:38:e1:c9: de:36:62:05:a5:db:6d:99:51:11:e2:f8:9b:ec:2f:26:fd:d5: 97:2e:b1:dd:1e:79:93:52:22:cd:e1:b9:3d:c3:f3:f1:dd:20: b3:2e:d0:99:9a:35:fb:f8:74:e7:ba:0b:32:d0:90:af:84:3c: 8a:92:98:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUExMDgxMTAvBgNVBAUTKDZBOEQzRDZCRjZEQjBGNURFMzI0RTQyMEM1NzNCMEE5 MTg0M0M3OTQwHhcNMjUwNDI3MDMzODI2WhcNMjUwNTA0MDMzODI2WjAYMRYwFAYD VQQDEw02ODBkYTZiMi0zNTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxxV+YWiqcb1gialG7JJf81FbiouU6ykP9UoivMfpxMeTZ3Bu2Dyh0l0St3I7 9/W6uzFWb7iwl/dM6S/wwoVW+uMGnUf/c4RQSJjOv7HfynMnKRe0dhr+pdY54WQs 3NN55fKjRVGbojMYoymsscDUVMHu9mKld8uXI5q2OS+UZo63TEL2SniCPz5t/vQv vHpuSpOCxqhhITjV4NmOuxQr2aSpTlt5Ga9+0/t3mz/TQHMLDmIAlFgrMaQBGb06 Yg+15Q86FH1/yItuNipUScXL7KplPl8OEWDqGVrdBRflCggvCq5Z8X/TQbxL+eRB cVn0lWSVoDUMH/7GaEjMLfLwaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOi+puBR oezDvQEA2qpuvax5p6vdMB8GA1UdIwQYMBaAFGqNPWv22w9d4yTkIMVzsKkYQ8eU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTEwOC9GOTU4RkM0QTZD MDAxMUVFQjk4QjQzMEVDNEY5QUUwMi9hbzA5YV9iYkQxM2pKT1FneFhPd3FSaER4 NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FvMDlhX2JiRDEzakpPUWd4WE93cVJoRHg1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTEwOC9GOTU4RkM0QTZDMDAxMUVFQjk4QjQzMEVDNEY5QUUwMi9hbzA5YV9iYkQx M2pKT1FneFhPd3FSaER4NVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiML/oVoU0ajCpxzNzV5wI1ilUrXXfTaBXFxngCyOy3VDrAnnJbHpg Ws4zIQHO29vUgMNbKtpuBniCEnLDgHPeJ5H0UDwOq0QN7WuMPqDsfraaYmGQSvRW anAWqhFYwMIktHY/JH9k2T2cu6sbnBX0Us/9K+Z1hFyhf4+ipnARZ6iLLcMPQv+L N7Xlw8PNxoA4avUsrRuPV+3uD7XQynAE2hUDGUqDubrqHNIQ41Ftb4WK2lM52neM xn2uVnOVxG4Ssp444cneNmIFpdttmVER4vib7C8m/dWXLrHdHnmTUiLN4bk9w/Px 3SCzLtCZmjX7+HTnugsy0JCvhDyKkpjG -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:16 2025 by rpki-client on console.sobornost.net