$ rpki-client -vvf rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft File: rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft (raw, json) Hash identifier: TSUWB1wD1khyfuONKlmdzBzFSLtKwdHsH3vwxrHjaZ0= Subject key identifier: 63:05:BB:75:AC:6E:66:7F:8E:EE:67:80:7F:29:21:D9:32:33:76:DB Authority key identifier: AC:88:64:26:38:24:ED:E3:65:5B:99:74:2D:FB:39:E8:83:BB:91:45 Certificate issuer: /CN=A9120974/serialNumber=AC8864263824EDE3655B99742DFB39E883BB9145 Certificate serial: 1046 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft Manifest number: 1042 Signing time: Sat 26 Apr 2025 17:19:43 +0000 Manifest this update: Sat 26 Apr 2025 17:19:43 +0000 Manifest next update: Sat 03 May 2025 17:19:43 +0000 Files and hashes: 1: rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl (hash: BkLyNeTpzUZbjl1eAZBU9qyKohxd5A1uo4wSF5KTi0c=) 2: CBAED530FE6A11ECAB640344C4F9AE02.roa (hash: ICClcvVBKcFuPdfdFfNgviyTAzomOOoPWyOYhtZ5b7Q=) 3: 6B1B75BC756311EFB6C7E64CC4F9AE02.roa (hash: H1dTpSfdD/QgGNFcXeYoqv9nvsCcB8MXgkClUdfFMB4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 14:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4166 (0x1046) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120974, serialNumber=AC8864263824EDE3655B99742DFB39E883BB9145 Validity Not Before: Apr 26 17:19:43 2025 GMT Not After : May 3 17:19:43 2025 GMT Subject: CN=680d15af-247b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:07:fd:7d:0f:e7:50:85:70:b3:77:df:ab:0d: 62:bb:8d:77:36:42:b0:f9:c7:ac:34:7e:a7:80:2e: 86:db:fe:99:4c:12:55:db:5e:84:68:12:1a:c6:34: 46:e5:36:61:1a:b8:7e:a8:36:63:26:63:e8:e3:57: 2e:b8:da:1b:f9:5f:01:aa:23:78:a2:f7:bb:2f:e4: ee:2e:81:28:7e:b5:0e:3f:da:f7:63:f0:e1:83:38: 1e:3a:ea:e5:94:a2:14:79:21:40:34:3b:1d:8e:2d: 92:9d:c7:35:ab:5f:e0:88:66:a3:e2:72:f8:c5:43: 13:30:92:2c:e5:aa:9f:fb:c3:b7:a3:54:f0:6f:6b: d8:d2:2b:9a:aa:fc:e0:be:71:47:d3:a3:ff:66:04: e0:d0:37:ab:b5:c5:41:74:93:cd:50:c6:be:37:89: 87:75:ce:8c:86:c2:de:82:86:81:27:dc:40:22:34: b1:9f:70:17:8e:f2:b5:a4:ca:87:34:42:78:67:51: 84:a2:be:2e:1c:44:e5:d7:04:4a:bd:bd:95:0c:e6: 70:54:7e:a4:72:23:b3:74:2d:7b:f8:61:c9:de:b9: 41:ac:55:43:0d:c2:b7:cf:1b:d3:ed:ab:2a:eb:d1: e6:04:58:4e:0d:93:45:80:1c:a3:a1:e2:54:03:a8: ee:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:05:BB:75:AC:6E:66:7F:8E:EE:67:80:7F:29:21:D9:32:33:76:DB X509v3 Authority Key Identifier: keyid:AC:88:64:26:38:24:ED:E3:65:5B:99:74:2D:FB:39:E8:83:BB:91:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:2b:64:e3:8f:f2:aa:2d:4d:ff:0f:91:60:eb:25:19:97:c3: 42:c0:16:58:00:9c:2e:d0:8b:32:ff:54:9b:41:a1:60:5d:a3: f8:19:5e:cf:d0:87:72:a0:8b:66:3f:cc:6a:b0:f1:16:35:24: 05:43:c1:8d:e3:00:ae:35:0b:de:b7:ca:a2:b7:09:00:67:57: 39:d0:5c:9a:ff:fd:8a:cc:56:a2:e8:91:f1:06:2f:67:45:d9: 28:a6:21:a3:52:87:ac:77:e0:8c:2c:29:ec:6d:60:cf:f6:c1: 4e:1c:46:44:15:14:91:8f:54:63:60:40:9c:84:5b:3f:bf:2e: 3f:20:32:55:21:c9:63:00:97:24:0a:43:80:92:1b:98:95:ed: 44:31:ff:ca:fc:58:7d:ea:29:07:8d:60:aa:55:ba:fb:8e:eb: 38:24:d3:60:54:1f:c0:60:1a:2f:7e:0e:a7:0d:f7:e6:02:7c: e2:f2:c8:45:9b:7d:0d:b8:a6:50:97:53:db:e2:f6:38:a9:1a: a8:29:1b:90:c5:27:b8:36:15:cd:6f:cf:43:84:91:31:ce:1a: 53:3d:6a:e1:01:2a:33:2f:dc:05:4b:38:3c:90:c3:c3:d9:c0: 82:b5:74:43:8a:3c:df:ce:8a:3c:95:84:7e:e8:1d:73:7b:0c: b2:e4:52:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEEYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA5NzQxMTAvBgNVBAUTKEFDODg2NDI2MzgyNEVERTM2NTVCOTk3NDJERkIzOUU4 ODNCQjkxNDUwHhcNMjUwNDI2MTcxOTQzWhcNMjUwNTAzMTcxOTQzWjAYMRYwFAYD VQQDEw02ODBkMTVhZi0yNDdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAugf9fQ/nUIVws3ffqw1iu413NkKw+cesNH6ngC6G2/6ZTBJV216EaBIaxjRG 5TZhGrh+qDZjJmPo41cuuNob+V8BqiN4ove7L+TuLoEofrUOP9r3Y/DhgzgeOurl lKIUeSFANDsdji2Sncc1q1/giGaj4nL4xUMTMJIs5aqf+8O3o1Twb2vY0iuaqvzg vnFH06P/ZgTg0DertcVBdJPNUMa+N4mHdc6MhsLegoaBJ9xAIjSxn3AXjvK1pMqH NEJ4Z1GEor4uHETl1wRKvb2VDOZwVH6kciOzdC17+GHJ3rlBrFVDDcK3zxvT7asq 69HmBFhODZNFgByjoeJUA6jucwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGMFu3Ws bmZ/ju5ngH8pIdkyM3bbMB8GA1UdIwQYMBaAFKyIZCY4JO3jZVuZdC37OeiDu5FF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk3NC9FMTA1QjNCQTNB NDkxMUU5OTQwRjJEMTZDNEY5QUUwMi9ySWhrSmpnazdlTmxXNWwwTGZzNTZJTzdr VVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3JJaGtKamdrN2VObFc1bDBMZnM1NklPN2tVVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDk3NC9FMTA1QjNCQTNBNDkxMUU5OTQwRjJEMTZDNEY5QUUwMi9ySWhrSmpnazdl TmxXNWwwTGZzNTZJTzdrVVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFK2Tjj/KqLU3/D5Fg6yUZl8NCwBZYAJwu0Isy/1SbQaFgXaP4GV7P 0IdyoItmP8xqsPEWNSQFQ8GN4wCuNQvet8qitwkAZ1c50Fya//2KzFai6JHxBi9n RdkopiGjUoesd+CMLCnsbWDP9sFOHEZEFRSRj1RjYECchFs/vy4/IDJVIcljAJck CkOAkhuYle1EMf/K/Fh96ikHjWCqVbr7jus4JNNgVB/AYBovfg6nDffmAnzi8shF m30NuKZQl1Pb4vY4qRqoKRuQxSe4NhXNb89DhJExzhpTPWrhASozL9wFSzg8kMPD 2cCCtXRDijzfzoo8lYR+6B1zewyy5FKB -----END CERTIFICATE-----Generated at Sat Apr 26 21:01:49 2025 by rpki-client on console.sobornost.net