$ rpki-client -vvf rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft File: KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft (raw, json) Hash identifier: Iv2FPfuL9ekJDynqANBXFotdTFaDRuLT05WB1qzRznc= Subject key identifier: 93:81:5F:41:CE:DF:90:31:E4:08:96:FE:45:DF:F8:0D:66:BE:B8:6A Authority key identifier: 2A:93:E1:45:97:66:50:61:95:DF:FC:99:B5:23:36:2B:E5:AC:0D:6B Certificate issuer: /CN=A91233D4/serialNumber=2A93E1459766506195DFFC99B523362BE5AC0D6B Certificate serial: 0A47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpPhRZdmUGGV3_yZtSM2K-WsDWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft Manifest number: 0A35 Signing time: Mon 28 Apr 2025 20:10:56 +0000 Manifest this update: Mon 28 Apr 2025 20:10:55 +0000 Manifest next update: Mon 05 May 2025 20:10:55 +0000 Files and hashes: 1: KpPhRZdmUGGV3_yZtSM2K-WsDWs.crl (hash: SbccdI0elTW0y8YWomKLKY6OaY42yoMc/vgyYUTZJKQ=) 2: A08B108A78D411EAA8C57711C4F9AE02.roa (hash: 3OpBGXXCJTXlZTJu94VcICtCah5ixfAdvhW279UITTY=) 3: A1D479B878D411EAA8C57711C4F9AE02.roa (hash: OYgq0o9dgNrqTYjdakq5qNzK/yt9wMabsIU2jLZbz/U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.crl rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpPhRZdmUGGV3_yZtSM2K-WsDWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:10:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2631 (0xa47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91233D4, serialNumber=2A93E1459766506195DFFC99B523362BE5AC0D6B Validity Not Before: Apr 28 20:10:55 2025 GMT Not After : May 5 20:10:55 2025 GMT Subject: CN=680fe0d0-d675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:59:94:e4:c7:90:51:63:a8:68:64:b7:62:01: e5:a5:31:cb:cc:37:ec:d5:13:0e:68:37:ba:14:2e: eb:dc:35:ac:f6:44:75:55:50:fc:4e:ab:2f:76:7d: 38:1d:14:65:49:58:24:97:d8:a1:d9:a9:49:1c:0c: a3:eb:77:88:b6:67:56:4e:b9:ba:df:08:81:aa:5f: 13:83:d0:3f:40:46:80:98:28:7a:1b:f5:eb:71:41: 1c:aa:72:df:ba:02:08:f2:db:ae:6f:d0:76:2b:fe: 36:1b:66:8f:d6:c0:9c:b7:0a:0a:8c:c4:6b:01:62: a9:24:94:ef:2d:68:af:cc:08:33:de:fa:b9:65:c4: c6:fb:73:cf:86:12:6c:0c:6c:f5:96:0c:f7:96:e9: a2:b5:9b:50:6f:9c:52:96:9c:ad:93:4b:9c:12:10: 83:01:86:69:c8:0e:c9:67:64:0a:14:7d:14:f3:ea: ec:02:ee:42:34:6d:d4:d7:a1:63:13:5b:ec:ba:1f: 4d:dd:f9:89:c0:15:88:94:5a:0b:05:72:ad:15:94: 93:6a:f4:36:4a:6b:1f:4f:ec:36:23:d4:2d:8f:c6: 34:9d:26:04:a3:a3:cc:5a:76:08:03:98:2c:a5:32: 63:9f:40:25:d3:af:9e:9e:8c:b1:d9:9e:70:2b:3e: 5a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:81:5F:41:CE:DF:90:31:E4:08:96:FE:45:DF:F8:0D:66:BE:B8:6A X509v3 Authority Key Identifier: keyid:2A:93:E1:45:97:66:50:61:95:DF:FC:99:B5:23:36:2B:E5:AC:0D:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpPhRZdmUGGV3_yZtSM2K-WsDWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:32:05:ff:e1:c6:2f:6c:1d:5c:fd:53:af:06:7a:9b:b2:73: 78:ee:2f:00:1f:af:7b:4c:aa:9f:4c:12:33:8a:e6:70:22:8a: 84:04:cf:3d:de:97:34:3b:43:08:23:92:cc:1f:ce:57:79:5e: 7f:8f:7d:df:ec:16:89:00:0c:b5:d8:be:98:ea:9f:49:09:d2: 29:6d:a0:65:f3:c0:13:e7:0a:c8:f7:5b:de:8c:30:30:f3:d3: 47:ae:e8:e7:7b:1a:aa:ac:e4:18:e2:7e:61:ef:3e:1f:26:bd: 8c:82:52:e4:bf:76:a1:10:d8:04:49:5c:6a:32:35:df:18:13: 5d:48:a4:67:52:c8:44:60:7f:d4:67:88:b0:4f:e7:ca:0c:b2: 4b:d2:83:2e:7e:74:6a:6d:df:fe:c3:dc:b4:9e:03:ed:c9:6c: bd:33:05:3c:6f:bf:0b:ab:07:26:ec:7a:e3:1a:bd:30:04:10: 11:16:67:69:ec:f7:e5:63:83:e0:e4:02:94:ba:5e:3d:b7:cb: 97:93:c2:f4:da:d0:4e:d1:41:1c:37:5f:1b:b7:2a:95:11:88: 97:f5:cc:dc:6a:40:1c:1e:e3:de:6b:5b:5a:9f:b0:8e:a5:5f: 23:73:ea:98:ed:1d:4d:e6:5c:6e:ed:55:9c:73:1e:64:08:81: b3:dd:32:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMzRDQxMTAvBgNVBAUTKDJBOTNFMTQ1OTc2NjUwNjE5NURGRkM5OUI1MjMzNjJC RTVBQzBENkIwHhcNMjUwNDI4MjAxMDU1WhcNMjUwNTA1MjAxMDU1WjAYMRYwFAYD VQQDEw02ODBmZTBkMC1kNjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyVmU5MeQUWOoaGS3YgHlpTHLzDfs1RMOaDe6FC7r3DWs9kR1VVD8Tqsvdn04 HRRlSVgkl9ih2alJHAyj63eItmdWTrm63wiBql8Tg9A/QEaAmCh6G/XrcUEcqnLf ugII8tuub9B2K/42G2aP1sCctwoKjMRrAWKpJJTvLWivzAgz3vq5ZcTG+3PPhhJs DGz1lgz3lumitZtQb5xSlpytk0ucEhCDAYZpyA7JZ2QKFH0U8+rsAu5CNG3U16Fj E1vsuh9N3fmJwBWIlFoLBXKtFZSTavQ2SmsfT+w2I9Qtj8Y0nSYEo6PMWnYIA5gs pTJjn0Al06+enoyx2Z5wKz5a8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJOBX0HO 35Ax5AiW/kXf+A1mvrhqMB8GA1UdIwQYMBaAFCqT4UWXZlBhld/8mbUjNivlrA1r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzNENC8yNUEwNjE4MDZC MUYxMUVBODEzMEE2NUZDNEY5QUUwMi9LcFBoUlpkbVVHR1YzX3ladFNNMkstV3NE V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0twUGhSWmRtVUdHVjNfeVp0U00ySy1Xc0RXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzNENC8yNUEwNjE4MDZCMUYxMUVBODEzMEE2NUZDNEY5QUUwMi9LcFBoUlpkbVVH R1YzX3ladFNNMkstV3NEV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCMgX/4cYvbB1c/VOvBnqbsnN47i8AH697TKqfTBIziuZwIoqEBM89 3pc0O0MII5LMH85XeV5/j33f7BaJAAy12L6Y6p9JCdIpbaBl88AT5wrI91vejDAw 89NHrujnexqqrOQY4n5h7z4fJr2MglLkv3ahENgESVxqMjXfGBNdSKRnUshEYH/U Z4iwT+fKDLJL0oMufnRqbd/+w9y0ngPtyWy9MwU8b78Lqwcm7HrjGr0wBBARFmdp 7PflY4Pg5AKUul49t8uXk8L02tBO0UEcN18btyqVEYiX9czcakAcHuPea1tan7CO pV8jc+qY7R1N5lxu7VWccx5kCIGz3TLm -----END CERTIFICATE-----Generated at Mon Apr 28 23:04:55 2025 by rpki-client on console.sobornost.net