$ rpki-client -vvf rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft File: Xx0w6XO1wcioD2BH3FKXeJQETD8.mft (raw, json) Hash identifier: L2pdV/jneSZER/jCEMlKrwmSUZi1Cr9B2AJ9upg5OIo= Subject key identifier: C7:0F:69:E5:A5:2F:33:68:68:DB:3A:60:ED:12:47:53:03:F8:43:42 Authority key identifier: 5F:1D:30:E9:73:B5:C1:C8:A8:0F:60:47:DC:52:97:78:94:04:4C:3F Certificate issuer: /CN=A9122E09/serialNumber=5F1D30E973B5C1C8A80F6047DC52977894044C3F Certificate serial: 077E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft Manifest number: 0776 Signing time: Sat 26 Apr 2025 21:09:28 +0000 Manifest this update: Sat 26 Apr 2025 21:09:27 +0000 Manifest next update: Sat 03 May 2025 21:09:27 +0000 Files and hashes: 1: Xx0w6XO1wcioD2BH3FKXeJQETD8.crl (hash: AzQBRDA3vmCrZAH9AQ7YaVzb4HvpKui42sQmhKDbXTs=) 2: BE35EDD80CCA11EF9AEDB96EC4F9AE02.roa (hash: 2EESpGE96F3IVjtLV41daSR2L6O8KHOUeR6PY1Lrgz4=) 3: 0226D57A0CCB11EF8AE6276FC4F9AE02.roa (hash: 0Y4V+EWkL3FbcoWlsNiGkR+IyKHT+HocUV9zzfnIVl8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.crl rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1918 (0x77e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122E09, serialNumber=5F1D30E973B5C1C8A80F6047DC52977894044C3F Validity Not Before: Apr 26 21:09:27 2025 GMT Not After : May 3 21:09:27 2025 GMT Subject: CN=680d4b87-7851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:14:95:cf:38:94:c1:e4:fa:1f:7e:9b:1a:5e: d0:e3:7d:97:05:d3:cf:1e:14:71:cb:ca:fd:03:cc: cc:57:23:24:b5:3f:d6:84:08:19:8a:70:7e:fe:65: 75:c7:c2:86:e3:74:a8:7d:f3:e4:59:ca:3f:c0:da: ce:3b:c6:c7:51:1d:8e:bc:f4:82:ff:df:7e:03:49: cf:d4:c2:97:92:c6:a0:30:56:d0:ad:4d:70:3d:c0: d0:28:da:dd:3d:5f:05:ce:1a:bb:fe:bb:6a:45:58: 7d:1f:d3:84:2b:62:11:e4:74:7a:4a:8d:e9:cc:b2: c0:71:60:ff:41:04:35:15:e2:14:43:ad:e9:ed:c6: 9b:46:34:d0:5f:8e:df:f7:3a:a8:f5:47:89:54:84: 5c:6a:cc:c8:4f:cf:67:42:cb:09:6d:67:62:95:5c: b7:61:6f:6c:8a:0d:6e:18:a8:22:ec:48:ca:b3:2c: 8c:60:a4:16:e9:78:e1:ff:65:f0:0f:bf:5c:ff:ff: 7a:17:3c:d9:e6:a3:9c:91:2b:0d:b7:2a:f8:55:5f: fe:37:55:e1:21:bb:9d:44:3b:6f:c4:8b:c2:2c:a7: 78:ee:c2:fe:d0:c2:65:0b:29:6a:f2:28:88:99:c2: 4e:10:b6:6c:a7:67:1b:0a:57:22:0d:10:4e:45:1b: a7:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:0F:69:E5:A5:2F:33:68:68:DB:3A:60:ED:12:47:53:03:F8:43:42 X509v3 Authority Key Identifier: keyid:5F:1D:30:E9:73:B5:C1:C8:A8:0F:60:47:DC:52:97:78:94:04:4C:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:b7:db:b1:cc:c1:1d:01:26:d1:4a:74:04:2f:cd:13:bf:36: 20:2f:9d:2d:cc:26:2a:18:c4:a0:f5:e0:fb:55:07:37:d7:c0: 08:fc:2f:20:4e:38:6a:9b:09:97:d8:8b:d0:2d:e7:3b:15:68: 95:ed:81:08:dd:c6:a6:f6:e2:9f:ea:36:5f:3c:25:30:30:08: a1:42:a1:ea:98:fa:bd:db:63:5d:45:9b:a5:28:4c:c8:50:b8: cb:a6:3d:6d:c8:01:96:8c:77:f2:76:cb:4e:d6:a4:9a:70:f6: a3:fd:13:a0:47:bf:70:46:32:2e:a8:40:ee:d7:7f:c3:d1:ac: 02:8a:68:75:f9:8a:25:90:94:66:d2:17:ff:bc:2a:f7:14:ba: b1:2f:7b:ca:da:28:01:bf:4d:ab:45:30:cd:54:41:b8:6e:2a: b8:39:0d:f2:b8:aa:c9:fc:71:0d:e9:eb:9e:6f:94:47:ed:2c: d9:bc:bc:f4:25:7b:a7:2a:12:eb:bf:9b:a3:25:24:2a:24:9b: eb:9e:da:99:fe:ac:3d:58:b4:c9:3f:01:af:af:91:cd:3b:78: 31:e1:fc:60:5f:f2:50:9b:4a:07:7c:9c:07:0f:8a:36:d3:24: 1c:7b:d6:f8:81:08:1c:82:d5:1e:c3:e3:25:4a:0c:ba:ea:65: 4e:c4:11:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB34wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJFMDkxMTAvBgNVBAUTKDVGMUQzMEU5NzNCNUMxQzhBODBGNjA0N0RDNTI5Nzc4 OTQwNDRDM0YwHhcNMjUwNDI2MjEwOTI3WhcNMjUwNTAzMjEwOTI3WjAYMRYwFAYD VQQDEw02ODBkNGI4Ny03ODUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2hSVzziUweT6H36bGl7Q432XBdPPHhRxy8r9A8zMVyMktT/WhAgZinB+/mV1 x8KG43SoffPkWco/wNrOO8bHUR2OvPSC/99+A0nP1MKXksagMFbQrU1wPcDQKNrd PV8Fzhq7/rtqRVh9H9OEK2IR5HR6So3pzLLAcWD/QQQ1FeIUQ63p7cabRjTQX47f 9zqo9UeJVIRcaszIT89nQssJbWdilVy3YW9sig1uGKgi7EjKsyyMYKQW6Xjh/2Xw D79c//96FzzZ5qOckSsNtyr4VV/+N1XhIbudRDtvxIvCLKd47sL+0MJlCylq8iiI mcJOELZsp2cbClciDRBORRunnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMcPaeWl LzNoaNs6YO0SR1MD+ENCMB8GA1UdIwQYMBaAFF8dMOlztcHIqA9gR9xSl3iUBEw/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkUwOS8wMUE1ODM3QTBG NjQxMUVCOUZENTM3NDlDNEY5QUUwMi9YeDB3NlhPMXdjaW9EMkJIM0ZLWGVKUUVU RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h4MHc2WE8xd2Npb0QyQkgzRktYZUpRRVREOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkUwOS8wMUE1ODM3QTBGNjQxMUVCOUZENTM3NDlDNEY5QUUwMi9YeDB3NlhPMXdj aW9EMkJIM0ZLWGVKUUVURDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBht9uxzMEdASbRSnQEL80TvzYgL50tzCYqGMSg9eD7VQc318AI/C8g TjhqmwmX2IvQLec7FWiV7YEI3cam9uKf6jZfPCUwMAihQqHqmPq922NdRZulKEzI ULjLpj1tyAGWjHfydstO1qSacPaj/ROgR79wRjIuqEDu13/D0awCimh1+YolkJRm 0hf/vCr3FLqxL3vK2igBv02rRTDNVEG4biq4OQ3yuKrJ/HEN6eueb5RH7SzZvLz0 JXunKhLrv5ujJSQqJJvrntqZ/qw9WLTJPwGvr5HNO3gx4fxgX/JQm0oHfJwHD4o2 0yQce9b4gQgcgtUew+MlSgy66mVOxBFN -----END CERTIFICATE-----Generated at Sun Apr 27 00:13:55 2025 by rpki-client on console.sobornost.net