$ rpki-client -vvf rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft File: 9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft (raw, json) Hash identifier: MPtHtfISwwgd4i8q+aRYU0hvbRpmopDHQ0V3GO2Rdqo= Subject key identifier: 43:E0:7C:44:70:D4:46:4A:5B:11:E5:E6:6A:BB:8D:7B:EE:C2:93:8D Authority key identifier: F5:F8:49:C4:45:37:0C:8B:83:81:13:9B:32:70:98:4C:0A:10:FA:B1 Certificate issuer: /CN=A911CDD9/serialNumber=F5F849C445370C8B8381139B3270984C0A10FAB1 Certificate serial: 0786 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fhJxEU3DIuDgRObMnCYTAoQ-rE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft Manifest number: 0780 Signing time: Thu 24 Apr 2025 21:12:25 +0000 Manifest this update: Thu 24 Apr 2025 21:12:24 +0000 Manifest next update: Thu 01 May 2025 21:12:24 +0000 Files and hashes: 1: 9fhJxEU3DIuDgRObMnCYTAoQ-rE.crl (hash: Iz2YvXuXwsJNzRpGSCfa9V+M1DCMAE6JVVD2oe2uuNM=) 2: A01CB8D409DD11EBB507BD1DC4F9AE02.roa (hash: TvcOHSsYCyXpnMLRDhy2fSmnr1T+wVns1s4NPPpAH1I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.crl rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fhJxEU3DIuDgRObMnCYTAoQ-rE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:56:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1926 (0x786) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CDD9, serialNumber=F5F849C445370C8B8381139B3270984C0A10FAB1 Validity Not Before: Apr 24 21:12:24 2025 GMT Not After : May 1 21:12:24 2025 GMT Subject: CN=680aa938-3b99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4e:9b:4e:79:ae:e3:10:eb:37:5e:80:7b:e7: a3:43:54:93:bb:12:8c:5d:f1:f1:00:2a:73:b1:28: 20:01:e8:6e:5a:ac:5a:b9:90:e2:ba:81:f3:c9:59: 08:2e:2d:b4:c8:ee:e5:e9:f4:7f:ce:8d:18:3a:e1: 3c:47:ab:bb:3e:42:03:1b:8c:be:c6:22:b0:cb:e3: 9b:94:41:10:03:dc:95:d7:ac:c6:9d:b4:0c:b0:4e: 3b:dc:76:46:86:e1:6c:7c:68:aa:a1:6b:d0:13:58: 36:fd:ef:a7:31:90:16:f4:22:da:49:05:c4:cd:a7: 0b:fd:f7:0c:04:dc:38:82:99:74:78:71:02:9b:5d: 8f:d5:eb:f2:00:12:ef:bf:e7:57:1b:23:92:a2:6d: 27:24:bc:5a:d2:1d:e1:d2:d5:00:ee:fe:f8:c8:d8: 92:47:b0:d4:d5:f8:36:30:9e:c1:bb:c4:49:9a:0c: f0:bd:f8:dc:ac:55:59:8c:cb:5f:f5:31:42:71:f8: c4:b4:d8:52:80:f1:10:50:fa:bd:24:34:5d:44:3d: 28:38:0d:63:34:2f:49:b2:0c:f2:38:de:72:75:95: 0c:d0:9c:6a:14:a7:6b:28:5f:da:cf:50:91:24:68: 9b:59:ff:c4:87:34:32:62:05:57:9c:49:e2:30:d8: 2d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:E0:7C:44:70:D4:46:4A:5B:11:E5:E6:6A:BB:8D:7B:EE:C2:93:8D X509v3 Authority Key Identifier: keyid:F5:F8:49:C4:45:37:0C:8B:83:81:13:9B:32:70:98:4C:0A:10:FA:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fhJxEU3DIuDgRObMnCYTAoQ-rE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:f7:c9:10:a6:6c:39:7a:f7:d5:43:fd:c4:47:9c:b2:21:8e: d5:46:03:2a:85:7e:d3:2b:2a:ff:08:76:bc:8d:c2:eb:8d:30: c1:bd:41:cb:87:40:b4:f9:a2:0d:c7:6f:7c:da:66:57:f0:0f: 7c:a9:c5:19:f6:77:82:5f:8b:77:a2:ea:74:a7:50:2a:09:d9: b0:55:85:bf:97:10:ad:3d:9c:ee:20:da:64:d9:70:fa:90:2d: b5:49:cc:8e:49:17:b3:b9:97:7d:a1:6e:bb:05:cb:50:ab:2f: 5f:bd:6d:7b:2a:25:2f:e8:29:70:27:21:81:62:9f:c0:ed:f2: d4:6f:26:6f:e0:2e:d7:06:67:14:27:f0:e3:11:70:58:cf:92: 2b:ec:1a:6d:3b:7d:ae:a9:92:07:e7:94:a3:51:e1:07:2c:e2: 9f:2d:3d:1f:76:a1:02:71:65:00:f9:b4:c8:b6:20:15:77:c9: 3b:e6:28:a8:69:49:59:18:71:59:b7:b9:48:a2:d3:3c:b3:7a: e0:06:b5:b6:eb:11:69:4a:5b:2c:10:44:d6:05:a5:d0:98:7f: 32:93:8e:f4:4b:cd:f6:69:09:c7:27:ba:a5:fd:71:f5:4f:73: aa:e2:d4:25:72:98:4a:51:f0:1e:9a:44:dd:51:c2:39:92:e7: 55:13:84:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNERDkxMTAvBgNVBAUTKEY1Rjg0OUM0NDUzNzBDOEI4MzgxMTM5QjMyNzA5ODRD MEExMEZBQjEwHhcNMjUwNDI0MjExMjI0WhcNMjUwNTAxMjExMjI0WjAYMRYwFAYD VQQDEw02ODBhYTkzOC0zYjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwU6bTnmu4xDrN16Ae+ejQ1STuxKMXfHxACpzsSggAehuWqxauZDiuoHzyVkI Li20yO7l6fR/zo0YOuE8R6u7PkIDG4y+xiKwy+OblEEQA9yV16zGnbQMsE473HZG huFsfGiqoWvQE1g2/e+nMZAW9CLaSQXEzacL/fcMBNw4gpl0eHECm12P1evyABLv v+dXGyOSom0nJLxa0h3h0tUA7v74yNiSR7DU1fg2MJ7Bu8RJmgzwvfjcrFVZjMtf 9TFCcfjEtNhSgPEQUPq9JDRdRD0oOA1jNC9JsgzyON5ydZUM0JxqFKdrKF/az1CR JGibWf/EhzQyYgVXnEniMNgt1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEPgfERw 1EZKWxHl5mq7jXvuwpONMB8GA1UdIwQYMBaAFPX4ScRFNwyLg4ETmzJwmEwKEPqx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0REOS83QzkyQjhFMjA5 REMxMUVCQUY0NzlEMUNDNEY5QUUwMi85ZmhKeEVVM0RJdURnUk9iTW5DWVRBb1Et ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlmaEp4RVUzREl1RGdST2JNbkNZVEFvUS1yRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Q0REOS83QzkyQjhFMjA5REMxMUVCQUY0NzlEMUNDNEY5QUUwMi85ZmhKeEVVM0RJ dURnUk9iTW5DWVRBb1EtckUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCU98kQpmw5evfVQ/3ER5yyIY7VRgMqhX7TKyr/CHa8jcLrjTDBvUHL h0C0+aINx2982mZX8A98qcUZ9neCX4t3oup0p1AqCdmwVYW/lxCtPZzuINpk2XD6 kC21ScyOSRezuZd9oW67BctQqy9fvW17KiUv6ClwJyGBYp/A7fLUbyZv4C7XBmcU J/DjEXBYz5Ir7BptO32uqZIH55SjUeEHLOKfLT0fdqECcWUA+bTItiAVd8k75iio aUlZGHFZt7lIotM8s3rgBrW26xFpSlssEETWBaXQmH8yk470S832aQnHJ7ql/XH1 T3Oq4tQlcphKUfAemkTdUcI5kudVE4SE -----END CERTIFICATE-----Generated at Fri Apr 25 00:08:19 2025 by rpki-client on console.sobornost.net