$ rpki-client -vvf rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.mft File: JI9ViOqPx90KO02h4VWAMcDZJ-Q.mft (raw, json) Hash identifier: +0R873IHbhE9qg3HbhCwL+mKcyWtJ55u9jTb0wMNvkU= Subject key identifier: C1:32:E7:E6:28:4C:76:3D:38:6F:80:5B:CA:D1:B8:13:BF:7F:C0:2E Authority key identifier: 24:8F:55:88:EA:8F:C7:DD:0A:3B:4D:A1:E1:55:80:31:C0:D9:27:E4 Certificate issuer: /CN=A911E008/serialNumber=248F5588EA8FC7DD0A3B4DA1E1558031C0D927E4 Certificate serial: 16D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI9ViOqPx90KO02h4VWAMcDZJ-Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.mft Manifest number: 16C9 Signing time: Mon 28 Apr 2025 16:52:31 +0000 Manifest this update: Mon 28 Apr 2025 16:52:30 +0000 Manifest next update: Mon 05 May 2025 16:52:30 +0000 Files and hashes: 1: JI9ViOqPx90KO02h4VWAMcDZJ-Q.crl (hash: pct3rc5nBM6qxlRWB3gwedlgaSaKN/gayBgRg0pvROg=) 2: 04A96D3ADB0511EBB30F6E2EC4F9AE02.roa (hash: R7Apdk4jkU/Dl3TATxMh3vpfjJKmPcvmf2PXDUW1LFI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.crl rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI9ViOqPx90KO02h4VWAMcDZJ-Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 16:52:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5842 (0x16d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E008, serialNumber=248F5588EA8FC7DD0A3B4DA1E1558031C0D927E4 Validity Not Before: Apr 28 16:52:30 2025 GMT Not After : May 5 16:52:30 2025 GMT Subject: CN=680fb24e-71b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d1:4b:66:11:79:ca:b0:3f:95:be:55:a4:fb: 5a:84:23:bb:67:90:14:51:aa:35:ea:9f:c9:97:a0: c3:0d:cc:6a:d1:ae:2f:f6:4b:0e:61:ea:8d:f4:53: 6b:44:b4:0a:85:84:23:47:75:d4:fe:f4:3b:5f:2a: 8d:87:91:16:2e:f7:77:0c:d2:3b:73:a9:38:b0:3a: 32:83:d6:33:51:8f:fc:b0:0b:2c:48:b3:4a:58:e1: 0c:b4:0d:8e:e7:c1:d5:cd:2c:8e:1e:f3:2e:0b:6c: 95:ef:c8:e9:ab:99:3b:2d:0b:47:7a:6f:fc:80:c1: e2:9c:8d:70:bc:2b:3a:15:33:91:d2:e1:57:2f:ed: df:ac:85:07:d6:fb:8f:ba:19:d5:dd:ce:e1:b0:b6: 7b:09:12:13:49:b1:05:25:c3:a8:05:6d:4f:7e:2d: 4d:b5:45:6f:32:fb:85:91:34:72:13:c0:8b:86:69: 1a:b0:fa:cf:15:9d:45:ed:bb:b3:29:32:1f:2f:39: 50:a5:3b:26:1e:bb:46:d3:24:23:73:4e:25:66:59: e3:8e:9f:61:e3:86:7a:cf:c0:c4:8e:e2:ec:75:42: 4e:01:aa:48:31:3b:41:ed:3a:bb:b9:a1:80:96:3c: 3c:db:28:5c:73:7b:5e:d3:94:17:27:ad:3f:6a:11: 8b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:32:E7:E6:28:4C:76:3D:38:6F:80:5B:CA:D1:B8:13:BF:7F:C0:2E X509v3 Authority Key Identifier: keyid:24:8F:55:88:EA:8F:C7:DD:0A:3B:4D:A1:E1:55:80:31:C0:D9:27:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI9ViOqPx90KO02h4VWAMcDZJ-Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:cc:25:bf:77:07:1b:f7:43:a4:03:17:b8:59:76:88:c4:46: ce:51:c1:06:53:fb:40:8b:c9:68:ef:c3:9e:ee:74:e7:7e:86: 84:e1:86:a9:b1:3b:16:84:21:32:63:22:14:82:81:df:7d:f4: fc:98:7c:53:b1:7b:b1:f4:95:e8:49:04:0b:85:a9:db:ae:7b: 4c:7e:10:81:39:c7:72:85:d6:a2:3b:8f:b3:87:51:a1:81:7a: 92:5c:75:51:cf:6f:07:b8:03:d2:48:25:a1:19:95:53:54:1d: 88:b4:5e:b1:35:aa:76:e8:e3:24:3c:f7:eb:bf:14:4f:8f:0f: 2e:f5:1f:6c:0c:c2:97:59:70:3d:a4:d3:9f:8b:ee:d5:60:dd: 83:56:5e:d0:a2:39:35:5c:74:b1:09:23:95:29:bd:43:ee:fc: 26:41:f0:df:b8:d3:10:4b:c3:8a:7b:de:cd:ce:f9:07:0b:22: ad:07:11:eb:f4:89:67:b1:c3:d3:00:b9:af:4f:7e:63:be:8d: aa:2c:96:40:30:99:c3:52:0b:80:eb:31:62:3e:89:59:4c:b4: 84:64:1a:f7:ea:65:e6:60:19:7a:12:a7:f1:fc:94:77:d5:ec: eb:e1:aa:4d:4b:d7:83:aa:b5:49:c2:55:42:ff:36:00:a3:71: c8:a0:69:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFtIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUUwMDgxMTAvBgNVBAUTKDI0OEY1NTg4RUE4RkM3REQwQTNCNERBMUUxNTU4MDMx QzBEOTI3RTQwHhcNMjUwNDI4MTY1MjMwWhcNMjUwNTA1MTY1MjMwWjAYMRYwFAYD VQQDEw02ODBmYjI0ZS03MWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq9FLZhF5yrA/lb5VpPtahCO7Z5AUUao16p/Jl6DDDcxq0a4v9ksOYeqN9FNr RLQKhYQjR3XU/vQ7XyqNh5EWLvd3DNI7c6k4sDoyg9YzUY/8sAssSLNKWOEMtA2O 58HVzSyOHvMuC2yV78jpq5k7LQtHem/8gMHinI1wvCs6FTOR0uFXL+3frIUH1vuP uhnV3c7hsLZ7CRITSbEFJcOoBW1Pfi1NtUVvMvuFkTRyE8CLhmkasPrPFZ1F7buz KTIfLzlQpTsmHrtG0yQjc04lZlnjjp9h44Z6z8DEjuLsdUJOAapIMTtB7Tq7uaGA ljw82yhcc3te05QXJ60/ahGL+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMEy5+Yo THY9OG+AW8rRuBO/f8AuMB8GA1UdIwQYMBaAFCSPVYjqj8fdCjtNoeFVgDHA2Sfk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTAwOC9ERDg4QzNBRUYx RDMxMUU3OTdFRDQyNDBDNEY5QUUwMi9KSTlWaU9xUHg5MEtPMDJoNFZXQU1jRFpK LVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pJOVZpT3FQeDkwS08wMmg0VldBTWNEWkotUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTAwOC9ERDg4QzNBRUYxRDMxMUU3OTdFRDQyNDBDNEY5QUUwMi9KSTlWaU9xUHg5 MEtPMDJoNFZXQU1jRFpKLVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZzCW/dwcb90OkAxe4WXaIxEbOUcEGU/tAi8lo78Oe7nTnfoaE4Yap sTsWhCEyYyIUgoHfffT8mHxTsXux9JXoSQQLhanbrntMfhCBOcdyhdaiO4+zh1Gh gXqSXHVRz28HuAPSSCWhGZVTVB2ItF6xNap26OMkPPfrvxRPjw8u9R9sDMKXWXA9 pNOfi+7VYN2DVl7Qojk1XHSxCSOVKb1D7vwmQfDfuNMQS8OKe97NzvkHCyKtBxHr 9IlnscPTALmvT35jvo2qLJZAMJnDUguA6zFiPolZTLSEZBr36mXmYBl6Eqfx/JR3 1ezr4apNS9eDqrVJwlVC/zYAo3HIoGlh -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:23 2025 by rpki-client on console.sobornost.net