$ rpki-client -vvf rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/U2uRsXtuG7FjjINYoPpepdDr77c.mft File: U2uRsXtuG7FjjINYoPpepdDr77c.mft (raw, json) Hash identifier: kcPt9G45DDYdI8B4M1aeeTqLGIe8EeNVILTDoJ3A8AA= Subject key identifier: 8D:47:91:52:6F:F5:01:B5:01:08:D4:31:7F:0B:38:68:1A:32:40:D1 Authority key identifier: 53:6B:91:B1:7B:6E:1B:B1:63:8C:83:58:A0:FA:5E:A5:D0:EB:EF:B7 Certificate issuer: /CN=A9125C3D/serialNumber=536B91B17B6E1BB1638C8358A0FA5EA5D0EBEFB7 Certificate serial: 016C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U2uRsXtuG7FjjINYoPpepdDr77c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/U2uRsXtuG7FjjINYoPpepdDr77c.mft Manifest number: 0169 Signing time: Sun 27 Apr 2025 00:35:09 +0000 Manifest this update: Sun 27 Apr 2025 00:35:09 +0000 Manifest next update: Sun 04 May 2025 00:35:09 +0000 Files and hashes: 1: U2uRsXtuG7FjjINYoPpepdDr77c.crl (hash: mpeKSBSphd1UyJZ9m6i5Bch6hHRwk3tknKHcMe3J9Ho=) 2: 234074FA00DD11EE95AF6F7CC4F9AE02.roa (hash: vudAIhef5Qu3uhKZwtVnPdKYRITi3gAfCU8Ph/yVQYE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/U2uRsXtuG7FjjINYoPpepdDr77c.crl rsync://rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/U2uRsXtuG7FjjINYoPpepdDr77c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U2uRsXtuG7FjjINYoPpepdDr77c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 00:35:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 364 (0x16c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125C3D, serialNumber=536B91B17B6E1BB1638C8358A0FA5EA5D0EBEFB7 Validity Not Before: Apr 27 00:35:09 2025 GMT Not After : May 4 00:35:09 2025 GMT Subject: CN=680d7bbd-6c12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a7:03:de:ab:d4:85:bf:7b:02:0d:0c:33:f6: 01:6c:44:89:6c:b7:8e:3b:17:96:6b:73:65:ce:8c: 23:a9:71:5c:1a:ca:bb:2d:19:1d:12:0f:7d:ef:ce: eb:9e:a2:07:c3:79:3f:cf:bd:5a:c8:eb:96:08:37: 97:da:d8:2f:34:f7:95:1d:21:45:c1:e6:50:ae:b5: 37:e3:82:69:d9:d8:26:0f:7d:71:94:09:63:aa:d7: 5a:05:ed:6c:de:24:2f:a6:b2:2c:d9:d4:1a:7e:87: 8d:24:21:23:e1:fb:c0:18:37:42:4c:99:02:6a:bc: c3:7b:03:f5:e7:51:a1:9e:86:ef:1c:fc:cf:4c:ca: 08:31:36:79:08:e1:a2:09:76:5b:ad:87:4c:43:31: 1a:2c:31:38:86:95:07:b7:c3:ed:2d:61:c8:37:ed: 40:09:5a:00:31:3d:ca:ff:6c:8f:7b:36:6b:ab:3f: e1:18:ca:38:1f:f1:e5:eb:7a:e4:ec:4c:89:a8:59: b7:4b:e4:38:78:8e:49:65:3a:52:89:e8:a5:81:8d: 2c:f8:6f:e3:00:f2:fe:91:d1:29:24:38:53:ab:6a: 01:ad:ac:ac:a9:78:4d:fc:30:9e:e3:66:af:5c:0f: 8f:c3:76:ff:ce:06:73:c0:95:3f:98:d5:3f:70:78: 4b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:47:91:52:6F:F5:01:B5:01:08:D4:31:7F:0B:38:68:1A:32:40:D1 X509v3 Authority Key Identifier: keyid:53:6B:91:B1:7B:6E:1B:B1:63:8C:83:58:A0:FA:5E:A5:D0:EB:EF:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/U2uRsXtuG7FjjINYoPpepdDr77c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U2uRsXtuG7FjjINYoPpepdDr77c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/U2uRsXtuG7FjjINYoPpepdDr77c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:be:0c:8e:e6:81:31:92:a0:70:f5:75:e0:91:25:c8:21:bd: c9:b3:0a:a0:df:0f:58:77:88:8e:98:8c:2f:6b:f0:af:98:04: 9b:f0:24:c4:82:39:2a:f1:48:d7:a0:fd:fb:e5:89:0e:cc:bb: b7:83:fa:83:97:3a:40:84:5f:4c:81:7e:4b:3c:e3:28:b2:2e: f3:e5:19:6f:5c:0d:0b:16:ed:1a:4a:de:cd:34:05:53:83:e6: ca:9d:fb:a8:92:13:fb:79:bc:89:e9:f7:89:ae:1e:c1:ca:da: 95:08:11:1f:72:63:2f:fc:a1:62:26:9a:ab:fc:cc:bf:a3:b2: aa:c5:3b:14:d2:1e:b2:9a:db:14:03:89:5c:95:32:6b:a1:0e: 3f:38:86:eb:47:08:36:b8:16:b5:3b:58:c8:54:a1:72:02:b3: b1:1d:80:fd:fb:49:2a:70:e9:77:95:30:29:f5:24:3a:a7:38: 73:c4:62:61:ec:9e:bc:7e:7d:87:7b:5f:27:ca:2a:d5:ba:05: 51:35:ad:4c:1e:06:e3:fb:a4:0b:77:bf:1a:ee:63:2e:5b:1f: a0:4e:9b:08:07:94:1a:62:d0:b9:79:c5:b5:00:d1:1c:a9:91: ec:b9:bc:55:4e:21:b7:4e:d3:9b:0c:ef:58:4e:67:20:a9:31: fa:45:e8:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVDM0QxMTAvBgNVBAUTKDUzNkI5MUIxN0I2RTFCQjE2MzhDODM1OEEwRkE1RUE1 RDBFQkVGQjcwHhcNMjUwNDI3MDAzNTA5WhcNMjUwNTA0MDAzNTA5WjAYMRYwFAYD VQQDEw02ODBkN2JiZC02YzEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtqcD3qvUhb97Ag0MM/YBbESJbLeOOxeWa3NlzowjqXFcGsq7LRkdEg99787r nqIHw3k/z71ayOuWCDeX2tgvNPeVHSFFweZQrrU344Jp2dgmD31xlAljqtdaBe1s 3iQvprIs2dQafoeNJCEj4fvAGDdCTJkCarzDewP151GhnobvHPzPTMoIMTZ5COGi CXZbrYdMQzEaLDE4hpUHt8PtLWHIN+1ACVoAMT3K/2yPezZrqz/hGMo4H/Hl63rk 7EyJqFm3S+Q4eI5JZTpSieilgY0s+G/jAPL+kdEpJDhTq2oBraysqXhN/DCe42av XA+Pw3b/zgZzwJU/mNU/cHhL0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI1HkVJv 9QG1AQjUMX8LOGgaMkDRMB8GA1UdIwQYMBaAFFNrkbF7bhuxY4yDWKD6XqXQ6++3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUMzRC8yMzIzRkQ4MDAw RDcxMUVFOTNDQjBGN0VDNEY5QUUwMi9VMnVSc1h0dUc3RmpqSU5Zb1BwZXBkRHI3 N2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1UydVJzWHR1RzdGampJTllvUHBlcGREcjc3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUMzRC8yMzIzRkQ4MDAwRDcxMUVFOTNDQjBGN0VDNEY5QUUwMi9VMnVSc1h0dUc3 RmpqSU5Zb1BwZXBkRHI3N2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYvgyO5oExkqBw9XXgkSXIIb3Jswqg3w9Yd4iOmIwva/CvmASb8CTE gjkq8UjXoP375YkOzLu3g/qDlzpAhF9MgX5LPOMosi7z5RlvXA0LFu0aSt7NNAVT g+bKnfuokhP7ebyJ6feJrh7BytqVCBEfcmMv/KFiJpqr/My/o7KqxTsU0h6ymtsU A4lclTJroQ4/OIbrRwg2uBa1O1jIVKFyArOxHYD9+0kqcOl3lTAp9SQ6pzhzxGJh 7J68fn2He18nyirVugVRNa1MHgbj+6QLd78a7mMuWx+gTpsIB5QaYtC5ecW1ANEc qZHsubxVTiG3TtObDO9YTmcgqTH6Reip -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:19 2025 by rpki-client on console.sobornost.net