$ rpki-client -vvf rpki.apnic.net/member_repository/A9123E38/A1087D3600EA11E8BC93B16BC4F9AE02/1Uvzmb4bZZsTIxS4IZM6ILo4uWo.mft File: 1Uvzmb4bZZsTIxS4IZM6ILo4uWo.mft (raw, json) Hash identifier: 60uNM5QkwnQVS1cx1IUT4vOBBikinOhJ+mhMcLyWUYA= Subject key identifier: 7D:01:97:36:D6:FD:57:37:5A:49:59:F6:D5:37:25:B2:6F:82:D7:EC Authority key identifier: D5:4B:F3:99:BE:1B:65:9B:13:23:14:B8:21:93:3A:20:BA:38:B9:6A Certificate issuer: /CN=A9123E38/serialNumber=D54BF399BE1B659B132314B821933A20BA38B96A Certificate serial: 16BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Uvzmb4bZZsTIxS4IZM6ILo4uWo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123E38/A1087D3600EA11E8BC93B16BC4F9AE02/1Uvzmb4bZZsTIxS4IZM6ILo4uWo.mft Manifest number: 1698 Signing time: Mon 28 Apr 2025 16:54:28 +0000 Manifest this update: Mon 28 Apr 2025 16:54:28 +0000 Manifest next update: Mon 05 May 2025 16:54:28 +0000 Files and hashes: 1: 1Uvzmb4bZZsTIxS4IZM6ILo4uWo.crl (hash: S4OnqiOc3jYUGpc1QxUTWJCMNbNyZVv0Qp6c9O/oLGA=) 2: 8F7AEE2CB97811ED8676732CC4F9AE02.roa (hash: sH2jJ21DhS4sCGylQQiCrKT8tlc4o1+akcKeD9is8zw=) 3: 24CFDABE00EC11E8AAC4DD6EC4F9AE02.roa (hash: EKgbTwvRylsbqxeRajIn7ze6UKSmEpVK8Vh5H0DigpA=) 4: 0F2AF0F0AFDA11EAAED1C066C4F9AE02.roa (hash: B+/0Dt4lygSFyiBKYax6LeRwYimYLhup5mlrpuEHDzo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123E38/A1087D3600EA11E8BC93B16BC4F9AE02/1Uvzmb4bZZsTIxS4IZM6ILo4uWo.crl rsync://rpki.apnic.net/member_repository/A9123E38/A1087D3600EA11E8BC93B16BC4F9AE02/1Uvzmb4bZZsTIxS4IZM6ILo4uWo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Uvzmb4bZZsTIxS4IZM6ILo4uWo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 16:54:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5822 (0x16be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123E38, serialNumber=D54BF399BE1B659B132314B821933A20BA38B96A Validity Not Before: Apr 28 16:54:28 2025 GMT Not After : May 5 16:54:28 2025 GMT Subject: CN=680fb2c4-6c7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:03:b5:05:2d:e5:ac:78:2e:68:78:11:fc:f9: 57:9d:ea:39:4e:42:ab:86:1e:6d:07:7a:4a:27:6b: 2f:f5:89:1d:1f:37:8a:cc:07:43:14:e7:0f:55:90: 0c:d1:d3:f4:42:7d:e1:71:e7:27:93:1a:fb:60:ce: 9d:0c:f8:48:5f:4c:cb:02:73:7b:39:f1:e4:ed:53: 83:18:3a:4d:9b:19:4c:ab:6d:76:cd:9e:d0:c2:2f: f6:61:db:3f:f4:73:09:52:df:0c:eb:86:3a:b6:7a: e8:86:23:2e:45:5a:37:6a:e3:f4:18:4a:61:11:be: 9c:92:55:e0:15:49:8c:df:85:c9:fc:04:b4:94:7e: 96:53:12:c4:60:f9:f1:3e:6f:32:19:a7:14:42:7a: 2d:a3:2d:24:99:a3:7e:64:d3:42:2d:63:a9:2e:2d: f8:ca:80:2b:db:71:77:a4:f0:d4:4e:f0:86:47:04: a5:8e:05:40:28:d6:52:b5:af:05:d4:70:6d:b6:69: 07:f0:06:1e:02:c2:5f:01:9f:64:e9:ac:19:64:96: 12:95:81:36:ce:5c:28:91:f8:d7:f6:89:45:01:4e: 72:63:ec:81:75:88:6d:08:1a:7c:fb:b7:ef:17:9d: fa:5a:3b:eb:58:d7:86:fe:4d:47:8e:6d:0b:ed:18: 16:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:01:97:36:D6:FD:57:37:5A:49:59:F6:D5:37:25:B2:6F:82:D7:EC X509v3 Authority Key Identifier: keyid:D5:4B:F3:99:BE:1B:65:9B:13:23:14:B8:21:93:3A:20:BA:38:B9:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123E38/A1087D3600EA11E8BC93B16BC4F9AE02/1Uvzmb4bZZsTIxS4IZM6ILo4uWo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Uvzmb4bZZsTIxS4IZM6ILo4uWo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123E38/A1087D3600EA11E8BC93B16BC4F9AE02/1Uvzmb4bZZsTIxS4IZM6ILo4uWo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:44:ff:82:3f:17:3b:0c:4c:ff:00:2f:d4:23:6a:f6:96:ac: 90:e6:41:fd:b3:1c:17:ba:b9:2b:c6:ce:c7:be:83:8e:5a:ba: c0:40:68:41:60:a5:1d:2d:a7:26:5f:7d:ed:64:e1:31:74:22: 3a:7b:e8:74:44:e8:12:49:78:b3:b8:87:0f:55:5a:3d:54:e3: 37:ca:d4:fd:b2:70:ad:6e:df:7f:19:b3:b1:63:16:02:7f:94: 56:a6:9d:51:0c:55:e2:42:97:7c:ec:45:a3:e4:8b:a5:2f:5d: ce:b8:dd:fc:50:19:87:24:44:77:2d:28:41:03:63:ba:8c:9f: 67:ab:f9:94:db:ec:33:fc:22:79:aa:01:72:c2:4c:b3:9f:37: cf:1b:a3:9a:45:e7:fb:95:9c:c2:0f:16:77:67:6e:0b:c4:27: 9b:d6:17:88:5c:96:cb:ef:e0:e9:0f:f1:cc:4c:2f:ea:4a:41: e9:48:af:96:56:77:df:0d:7f:8d:cc:9c:cf:d5:06:b1:83:64: 4f:dd:1a:ac:d8:3d:5a:ce:f9:3a:0b:b9:64:7f:03:8f:e3:73: fe:19:d7:a8:92:7d:6f:d2:cb:29:91:39:95:2d:06:f0:b2:b3: 5a:f4:d5:02:45:d9:63:da:82:aa:b8:2c:89:e2:f3:72:23:c3: 25:a2:4e:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFr4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNFMzgxMTAvBgNVBAUTKEQ1NEJGMzk5QkUxQjY1OUIxMzIzMTRCODIxOTMzQTIw QkEzOEI5NkEwHhcNMjUwNDI4MTY1NDI4WhcNMjUwNTA1MTY1NDI4WjAYMRYwFAYD VQQDEw02ODBmYjJjNC02YzdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArgO1BS3lrHguaHgR/PlXneo5TkKrhh5tB3pKJ2sv9YkdHzeKzAdDFOcPVZAM 0dP0Qn3hcecnkxr7YM6dDPhIX0zLAnN7OfHk7VODGDpNmxlMq212zZ7Qwi/2Yds/ 9HMJUt8M64Y6tnrohiMuRVo3auP0GEphEb6cklXgFUmM34XJ/AS0lH6WUxLEYPnx Pm8yGacUQnotoy0kmaN+ZNNCLWOpLi34yoAr23F3pPDUTvCGRwSljgVAKNZSta8F 1HBttmkH8AYeAsJfAZ9k6awZZJYSlYE2zlwokfjX9olFAU5yY+yBdYhtCBp8+7fv F536WjvrWNeG/k1Hjm0L7RgWtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH0BlzbW /Vc3WklZ9tU3JbJvgtfsMB8GA1UdIwQYMBaAFNVL85m+G2WbEyMUuCGTOiC6OLlq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0UzOC9BMTA4N0QzNjAw RUExMUU4QkM5M0IxNkJDNEY5QUUwMi8xVXZ6bWI0Ylpac1RJeFM0SVpNNklMbzR1 V28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFVdnptYjRiWlpzVEl4UzRJWk02SUxvNHVXby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0UzOC9BMTA4N0QzNjAwRUExMUU4QkM5M0IxNkJDNEY5QUUwMi8xVXZ6bWI0Ylpa c1RJeFM0SVpNNklMbzR1V28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwRP+CPxc7DEz/AC/UI2r2lqyQ5kH9sxwXurkrxs7HvoOOWrrAQGhB YKUdLacmX33tZOExdCI6e+h0ROgSSXizuIcPVVo9VOM3ytT9snCtbt9/GbOxYxYC f5RWpp1RDFXiQpd87EWj5IulL13OuN38UBmHJER3LShBA2O6jJ9nq/mU2+wz/CJ5 qgFywkyznzfPG6OaRef7lZzCDxZ3Z24LxCeb1heIXJbL7+DpD/HMTC/qSkHpSK+W VnffDX+NzJzP1Qaxg2RP3Rqs2D1azvk6C7lkfwOP43P+Gdeokn1v0sspkTmVLQbw srNa9NUCRdlj2oKquCyJ4vNyI8Mlok7X -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:25 2025 by rpki-client on console.sobornost.net