$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft File: v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft (raw, json) Hash identifier: SHAFFeWbZDkuCi5K/U9tKw5AxdyWKY71icERm1sLdd0= Subject key identifier: 42:9C:A3:63:B8:E4:87:B1:14:E0:45:2B:E5:2A:AC:19:12:CE:00:38 Authority key identifier: BF:52:2D:99:25:A5:84:62:80:F6:05:30:AD:39:D7:66:E4:AB:F0:93 Certificate issuer: /CN=A9123F5D/serialNumber=BF522D9925A5846280F60530AD39D766E4ABF093 Certificate serial: 0A68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft Manifest number: 0A4E Signing time: Sat 26 Apr 2025 19:30:57 +0000 Manifest this update: Sat 26 Apr 2025 19:30:57 +0000 Manifest next update: Sat 03 May 2025 19:30:57 +0000 Files and hashes: 1: v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl (hash: lwO4nziqINpebH10/YTaYSxp4oLYQFVVf0DK+pARjg8=) 2: 4DF99E0E934311ED882FFE24C4F9AE02.roa (hash: nBUoblotDyN0/Ui1SLb2Vd1fmIjqvsKS8zhy8qSXzhY=) 3: 99CFA3844DF511ED91A8AB4BC4F9AE02.roa (hash: GuMyFs8mowkXrX6mHMVeKiU6aeZe3E0B32jb5heztzI=) 4: AF4E5B08483911EEB846EA36C4F9AE02.roa (hash: lYCr6kAfGaxdZr+eWwEYwFIaASsvVDDBGvokBcs3KLg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2664 (0xa68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123F5D, serialNumber=BF522D9925A5846280F60530AD39D766E4ABF093 Validity Not Before: Apr 26 19:30:57 2025 GMT Not After : May 3 19:30:57 2025 GMT Subject: CN=680d3471-9854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b4:51:a1:d8:4b:25:1b:f5:48:ed:3c:e4:bd: 90:4a:d0:46:99:89:10:00:7e:4f:3d:16:b0:52:41: 46:9a:bd:ef:f7:1e:5e:3a:b5:9d:b8:e0:de:e6:1c: c6:f8:38:e9:94:2b:0a:01:75:33:f5:72:4b:29:bd: f0:64:1b:3d:38:6b:dc:32:0c:e0:a0:f9:6b:a9:f1: 07:3e:92:c1:0d:a2:ba:e0:06:d4:ff:f9:0e:db:28: da:0b:5b:83:9b:fd:52:37:23:dc:10:02:19:5c:eb: 53:bc:d1:af:68:6a:ac:d0:04:c2:3a:52:74:a4:3b: 15:6f:30:0d:60:48:e4:cd:bd:65:d7:58:fb:c4:22: 1a:66:26:da:15:57:f3:42:4a:76:d8:b0:36:d5:9f: e8:65:a7:68:88:4a:c0:ff:cc:51:5a:cd:e1:6c:41: 84:e9:9b:dd:96:90:05:ae:9a:84:99:22:f5:c2:56: 14:2f:16:1c:1f:91:21:dd:1e:ee:6e:cb:6d:0e:8f: 1b:29:b9:8c:92:49:82:7f:6a:9d:5f:eb:1b:a7:4c: a7:6b:63:ea:76:7d:21:d4:01:8f:2c:ea:c6:f3:88: 53:1c:8d:b8:9d:ab:1f:6b:31:4d:51:d1:80:28:56: 05:b9:c2:5f:b2:cb:79:fc:74:61:b0:f0:fc:03:0d: e6:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:9C:A3:63:B8:E4:87:B1:14:E0:45:2B:E5:2A:AC:19:12:CE:00:38 X509v3 Authority Key Identifier: keyid:BF:52:2D:99:25:A5:84:62:80:F6:05:30:AD:39:D7:66:E4:AB:F0:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:ce:69:9a:b9:c1:4f:3a:fc:e6:0a:07:07:57:16:27:db:b3: 4b:b3:4a:09:f3:06:ed:32:a0:86:a5:51:bb:21:bc:e1:99:b6: 0b:eb:82:eb:e5:d7:3e:72:6c:d1:97:a9:f9:42:72:87:e6:50: ba:a5:bb:15:5c:56:f5:aa:10:41:7a:51:86:79:aa:12:e5:80: ec:e3:86:ec:21:3b:4c:c7:98:de:14:b5:86:ca:fb:7b:75:81: dc:5f:9f:6c:d0:d6:6d:ee:6c:0a:86:cd:14:f8:da:bc:15:e3: d0:18:93:50:c2:ab:15:83:e6:30:de:17:a8:ac:f1:ce:9f:6d: 1a:3e:5a:15:21:eb:86:ab:5b:39:1c:9f:e1:7a:3c:e4:97:da: cd:79:3a:b6:19:fc:2a:ab:62:89:16:70:86:40:3e:d1:3f:ef: 2c:b1:dd:c9:b9:e3:37:ca:71:ad:d7:8d:09:8b:36:4c:d9:c8: c2:c1:7f:f4:d9:c3:25:e5:3d:58:0f:dd:ec:32:5c:b3:71:41: 12:ad:1b:9f:02:c7:88:61:8b:bd:c3:21:26:ce:43:08:e5:ca: d7:b5:43:aa:45:85:8f:e8:a6:ec:b6:ef:c5:16:a3:d2:14:d4: 2a:75:d3:eb:12:1a:7c:27:a5:40:2f:7b:63:86:c1:74:4d:d1: d7:2a:73:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNGNUQxMTAvBgNVBAUTKEJGNTIyRDk5MjVBNTg0NjI4MEY2MDUzMEFEMzlENzY2 RTRBQkYwOTMwHhcNMjUwNDI2MTkzMDU3WhcNMjUwNTAzMTkzMDU3WjAYMRYwFAYD VQQDEw02ODBkMzQ3MS05ODU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsrRRodhLJRv1SO085L2QStBGmYkQAH5PPRawUkFGmr3v9x5eOrWduODe5hzG +DjplCsKAXUz9XJLKb3wZBs9OGvcMgzgoPlrqfEHPpLBDaK64AbU//kO2yjaC1uD m/1SNyPcEAIZXOtTvNGvaGqs0ATCOlJ0pDsVbzANYEjkzb1l11j7xCIaZibaFVfz Qkp22LA21Z/oZadoiErA/8xRWs3hbEGE6ZvdlpAFrpqEmSL1wlYULxYcH5Eh3R7u bsttDo8bKbmMkkmCf2qdX+sbp0yna2Pqdn0h1AGPLOrG84hTHI24nasfazFNUdGA KFYFucJfsst5/HRhsPD8Aw3mLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEKco2O4 5IexFOBFK+UqrBkSzgA4MB8GA1UdIwQYMBaAFL9SLZklpYRigPYFMK0512bkq/CT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0Y1RC83NUY4NzVGMjY2 OTAxMUVBOTY4M0ZCMkZDNEY5QUUwMi92MUl0bVNXbGhHS0E5Z1V3clRuWFp1U3I4 Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YxSXRtU1dsaEdLQTlnVXdyVG5YWnVTcjhKTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0Y1RC83NUY4NzVGMjY2OTAxMUVBOTY4M0ZCMkZDNEY5QUUwMi92MUl0bVNXbGhH S0E5Z1V3clRuWFp1U3I4Sk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOzmmaucFPOvzmCgcHVxYn27NLs0oJ8wbtMqCGpVG7IbzhmbYL64Lr 5dc+cmzRl6n5QnKH5lC6pbsVXFb1qhBBelGGeaoS5YDs44bsITtMx5jeFLWGyvt7 dYHcX59s0NZt7mwKhs0U+Nq8FePQGJNQwqsVg+Yw3heorPHOn20aPloVIeuGq1s5 HJ/hejzkl9rNeTq2Gfwqq2KJFnCGQD7RP+8ssd3JueM3ynGt140JizZM2cjCwX/0 2cMl5T1YD93sMlyzcUESrRufAseIYYu9wyEmzkMI5crXtUOqRYWP6Kbstu/FFqPS FNQqddPrEhp8J6VAL3tjhsF0TdHXKnMj -----END CERTIFICATE-----Generated at Sun Apr 27 00:13:55 2025 by rpki-client on console.sobornost.net