$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft File: 3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft (raw, json) Hash identifier: 0QvlRur9DoXv1YYYlDH9o/6YSjEGZ05zK1Ps8sONvqg= Subject key identifier: 4F:A4:32:19:2E:BC:53:46:4F:B1:4D:B4:C0:C0:EB:FE:F0:39:39:AD Authority key identifier: DE:9D:64:01:62:91:EA:2A:16:F3:B7:95:6A:0F:40:35:B7:09:E5:47 Certificate issuer: /CN=A9125475/serialNumber=DE9D64016291EA2A16F3B7956A0F4035B709E547 Certificate serial: 2569 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft Manifest number: 2534 Signing time: Mon 28 Apr 2025 14:20:30 +0000 Manifest this update: Mon 28 Apr 2025 14:20:29 +0000 Manifest next update: Mon 05 May 2025 14:20:29 +0000 Files and hashes: 1: 3p1kAWKR6ioW87eVag9ANbcJ5Uc.crl (hash: ys2tfCC66BaycQJ6uX2augCIgXCQY4hko8NbTmsxIuQ=) 2: 19FEDB562AB611EC93861F65C4F9AE02.roa (hash: IctK1F2f+smhGbfiZwt5TjovlvY8GgFhI80wuux0L94=) 3: 87B992CE90E211EDB4035D5EC4F9AE02.roa (hash: 9Mx2YbXgiyB8AIZIQ7AHexIPVIu7UgKFpNuf1xsWr8w=) 4: 0171064E1E7511EFA136126DC4F9AE02.roa (hash: XFxbQQJDj0rE3ZIrAGCdNw3StLs+W3TJQN2I+ajNUy8=) 5: C40F099A1E7411EF818FAE6CC4F9AE02.roa (hash: B3CcjXzeJ4dABXXB8sqhv86VgPvTtQb+NKigWAQp3Ao=) 6: 3373DB98902C11EA898EFD7FC4F9AE02.roa (hash: IbE+JWM/Bgx4LvXRfO5AkKCxabxFW5QHg0Anl0b9X1Q=) 7: E7D3D36A406911EC83A0470DC4F9AE02.roa (hash: QuRY0ECb/GscIKQG3TIAOw51gGl4J73Kmkxl36DZ8mE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.crl rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 14:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9577 (0x2569) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125475, serialNumber=DE9D64016291EA2A16F3B7956A0F4035B709E547 Validity Not Before: Apr 28 14:20:29 2025 GMT Not After : May 5 14:20:29 2025 GMT Subject: CN=680f8ead-d6b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:72:c9:f9:20:e6:b7:57:63:7c:73:0c:54:b3: 6b:79:e9:91:90:3b:28:c3:be:9b:87:61:95:2b:82: 9d:9f:eb:0c:93:0f:49:d1:e6:a1:0f:2d:ec:1f:e9: a3:d1:4b:7d:02:70:3c:50:03:5a:5e:c7:0d:dc:d9: 36:dd:2b:4d:48:43:81:83:be:a7:cd:6e:e5:5d:c1: 5e:bb:57:41:86:0c:25:41:57:82:63:73:5a:a3:28: 4b:fa:7e:46:aa:b1:80:ee:50:4a:65:24:54:6a:a3: 3e:c1:1a:5d:93:5a:20:c3:79:e6:fa:6a:44:8e:01: dd:68:04:68:29:b1:c7:4f:62:74:d9:f0:02:8d:8c: 7a:48:72:96:1b:9a:75:dc:7e:62:83:a2:20:13:e4: e3:10:e3:83:57:9c:f9:4d:1d:a9:48:73:70:7e:28: 68:f5:45:c3:b8:79:34:77:f5:7e:52:ca:6e:18:d7: b7:40:71:27:13:94:bd:b3:e9:52:c9:08:6a:51:69: 2a:64:ac:2e:25:79:57:c5:26:f9:66:3f:27:d5:d8: 36:a8:fd:52:51:60:ae:4b:3e:ea:eb:5b:c5:d6:72: aa:28:d7:d6:c6:5a:84:c5:7f:1e:26:a9:0d:88:24: f6:ce:69:05:9a:06:ef:90:55:48:5b:72:a8:85:39: 84:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:A4:32:19:2E:BC:53:46:4F:B1:4D:B4:C0:C0:EB:FE:F0:39:39:AD X509v3 Authority Key Identifier: keyid:DE:9D:64:01:62:91:EA:2A:16:F3:B7:95:6A:0F:40:35:B7:09:E5:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:34:56:ba:b5:25:35:90:eb:56:91:8f:9a:c6:93:12:61:bd: 54:7f:f4:ad:e8:8e:d0:11:7a:f9:de:22:84:cc:aa:70:0c:84: 99:e4:0a:5d:fa:62:1e:bc:75:ae:cf:04:86:a6:31:ef:5a:7d: 20:bb:11:48:3d:17:e1:42:e3:94:c7:7e:bf:db:50:44:07:0a: cc:b0:78:52:85:92:e5:7b:02:55:6d:24:dc:60:88:ad:31:23: 3d:61:98:c4:f1:1a:67:50:a7:c5:65:66:90:fc:42:aa:01:8d: e9:17:77:5d:1c:6e:b1:ef:e8:d9:c8:48:88:52:2c:93:c4:1d: 42:a2:1d:75:e9:07:d0:20:e4:69:cc:52:c4:84:35:81:38:60: fd:fd:7e:57:2d:d2:fd:89:37:32:e1:56:90:56:ab:31:3b:3e: a8:80:7e:4b:bf:aa:97:20:ea:77:72:db:e9:a4:04:d3:3b:32: 86:34:2f:40:f8:34:41:6b:78:fe:3e:56:3a:6f:a1:31:5f:91: 1d:e8:6d:33:44:14:9c:a7:ac:81:21:8b:49:de:78:fa:82:b9: 92:e2:91:74:36:9f:44:82:09:c9:88:0c:57:72:d3:27:1e:25: a3:0e:aa:a8:19:56:a5:50:69:a9:3d:6a:6b:3e:68:40:91:d4: a1:8f:0e:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU0NzUxMTAvBgNVBAUTKERFOUQ2NDAxNjI5MUVBMkExNkYzQjc5NTZBMEY0MDM1 QjcwOUU1NDcwHhcNMjUwNDI4MTQyMDI5WhcNMjUwNTA1MTQyMDI5WjAYMRYwFAYD VQQDEw02ODBmOGVhZC1kNmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA33LJ+SDmt1djfHMMVLNreemRkDsow76bh2GVK4Kdn+sMkw9J0eahDy3sH+mj 0Ut9AnA8UANaXscN3Nk23StNSEOBg76nzW7lXcFeu1dBhgwlQVeCY3NaoyhL+n5G qrGA7lBKZSRUaqM+wRpdk1ogw3nm+mpEjgHdaARoKbHHT2J02fACjYx6SHKWG5p1 3H5ig6IgE+TjEOODV5z5TR2pSHNwfiho9UXDuHk0d/V+UspuGNe3QHEnE5S9s+lS yQhqUWkqZKwuJXlXxSb5Zj8n1dg2qP1SUWCuSz7q61vF1nKqKNfWxlqExX8eJqkN iCT2zmkFmgbvkFVIW3KohTmE0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE+kMhku vFNGT7FNtMDA6/7wOTmtMB8GA1UdIwQYMBaAFN6dZAFikeoqFvO3lWoPQDW3CeVH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTQ3NS84RDk0NzFGNjI5 MDYxMUU1OTNCRkM2MjZDNEY5QUUwMi8zcDFrQVdLUjZpb1c4N2VWYWc5QU5iY0o1 VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNwMWtBV0tSNmlvVzg3ZVZhZzlBTmJjSjVVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTQ3NS84RDk0NzFGNjI5MDYxMUU1OTNCRkM2MjZDNEY5QUUwMi8zcDFrQVdLUjZp b1c4N2VWYWc5QU5iY0o1VWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJNFa6tSU1kOtWkY+axpMSYb1Uf/St6I7QEXr53iKEzKpwDISZ5Apd +mIevHWuzwSGpjHvWn0guxFIPRfhQuOUx36/21BEBwrMsHhShZLlewJVbSTcYIit MSM9YZjE8RpnUKfFZWaQ/EKqAY3pF3ddHG6x7+jZyEiIUiyTxB1Coh116QfQIORp zFLEhDWBOGD9/X5XLdL9iTcy4VaQVqsxOz6ogH5Lv6qXIOp3ctvppATTOzKGNC9A +DRBa3j+PlY6b6ExX5Ed6G0zRBScp6yBIYtJ3nj6grmS4pF0Np9EggnJiAxXctMn HiWjDqqoGValUGmpPWprPmhAkdShjw7g -----END CERTIFICATE-----Generated at Mon Apr 28 17:44:45 2025 by rpki-client on console.sobornost.net