$ rpki-client -vvf rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.mft File: J_xj2GH0aU96L5UfsShH4H-qkHI.mft (raw, json) Hash identifier: 8DQpDTCZe5VsqaL4Wotiv4zcA8ZcoiuL1Ha4vYRdVc0= Subject key identifier: EE:63:9E:39:A3:8F:F1:2A:C3:DE:24:12:1B:CA:9B:91:B8:B8:50:E0 Authority key identifier: 27:FC:63:D8:61:F4:69:4F:7A:2F:95:1F:B1:28:47:E0:7F:AA:90:72 Certificate issuer: /CN=A9125F95/serialNumber=27FC63D861F4694F7A2F951FB12847E07FAA9072 Certificate serial: 1D74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J_xj2GH0aU96L5UfsShH4H-qkHI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.mft Manifest number: 1D6C Signing time: Mon 28 Apr 2025 16:14:15 +0000 Manifest this update: Mon 28 Apr 2025 16:14:15 +0000 Manifest next update: Mon 05 May 2025 16:14:15 +0000 Files and hashes: 1: J_xj2GH0aU96L5UfsShH4H-qkHI.crl (hash: N3d64LGmVtKOfnwBfM+SUDGiWXrudhw+E8qt1606+1I=) 2: A17F07705FA311EAB1BB612CC4F9AE02.roa (hash: X5h8vQiP6tB103ZWi1RDruZWJP5MBROBXJX+od9NULg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.crl rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J_xj2GH0aU96L5UfsShH4H-qkHI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 16:14:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7540 (0x1d74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125F95, serialNumber=27FC63D861F4694F7A2F951FB12847E07FAA9072 Validity Not Before: Apr 28 16:14:15 2025 GMT Not After : May 5 16:14:15 2025 GMT Subject: CN=680fa957-4541 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f0:ff:f0:a3:89:93:92:03:07:d1:8f:a1:57: 29:07:63:3c:11:65:29:0e:89:d8:77:68:ff:f6:12: cc:b7:4d:60:72:97:1d:6a:a6:08:f5:d0:32:5a:b8: 95:16:d5:5e:34:1b:f6:2e:c6:e8:76:16:0a:09:54: 1c:c7:cf:34:65:40:96:08:7c:36:00:77:32:d7:70: 5c:bf:dc:1c:ba:46:cc:43:2b:f6:77:0d:ae:d6:99: 66:8a:72:08:33:bf:9d:4b:b6:f4:9b:50:27:fc:46: 64:de:4a:57:ef:b0:25:a8:e0:7c:05:d2:f0:79:7f: 88:ec:ed:50:40:80:6a:5e:cf:02:7a:90:ec:46:8f: 29:72:28:a8:82:6c:3c:1e:cb:54:a2:37:ab:32:66: 71:f2:58:8c:82:48:e3:87:ae:c6:5c:b6:49:75:08: b0:bd:74:c9:be:8d:ca:e5:3b:89:7f:6e:00:b8:f9: c3:38:ef:f1:72:5c:9b:eb:5e:7a:a0:4f:6b:71:eb: 28:2c:d6:e9:51:50:29:16:a7:8e:74:a3:6e:fa:83: a9:46:b1:61:21:04:72:02:4b:96:12:9b:d1:b6:a8: 04:2d:60:59:ca:44:27:91:ff:47:5e:5e:23:2f:8a: e7:ca:be:e9:ce:3e:98:3e:c6:d8:3d:ed:9a:f0:ed: 30:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:63:9E:39:A3:8F:F1:2A:C3:DE:24:12:1B:CA:9B:91:B8:B8:50:E0 X509v3 Authority Key Identifier: keyid:27:FC:63:D8:61:F4:69:4F:7A:2F:95:1F:B1:28:47:E0:7F:AA:90:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J_xj2GH0aU96L5UfsShH4H-qkHI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:bd:e3:a5:89:1d:07:fb:0d:31:d3:e7:5f:f3:c4:97:37:a4: 48:bb:51:1f:1c:a1:51:bf:e9:6a:15:95:19:1b:42:60:29:8b: c8:cf:21:e5:9a:f6:f9:d0:f2:7f:10:db:e5:0f:80:02:41:d2: 57:c3:35:7c:15:90:b1:9b:c8:79:b1:06:97:8a:16:a7:d1:b4: ce:2e:0f:ec:30:a0:77:3f:ed:21:05:cc:ad:51:8b:75:70:c4: 34:49:6d:a4:aa:80:c2:4a:06:3b:c2:5a:d6:3a:6b:08:ca:0c: 10:23:bd:0b:92:cf:d4:be:ba:63:a5:46:af:29:3e:87:38:47: 1a:05:87:07:42:25:41:2c:2a:cb:f1:2d:20:fd:ed:22:17:43: 32:ba:0a:65:4c:d7:20:14:42:d7:74:22:1a:99:20:22:4f:1e: d4:7d:93:9a:04:6a:7a:4d:4a:8a:f7:9e:ff:e4:08:e9:dc:41: e2:d2:09:81:a3:d9:a1:d0:62:ac:f4:ef:a8:16:6b:51:58:47: c9:f1:bc:23:01:43:fb:e9:1a:0d:c1:f5:ab:14:62:ae:08:ec: 42:dc:0a:6f:b2:84:29:75:c2:2c:85:8f:b0:24:f6:c5:6e:09: 94:19:ba:29:c1:84:6b:9e:8f:5f:02:e1:79:f9:d4:13:45:9a: 73:36:0d:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVGOTUxMTAvBgNVBAUTKDI3RkM2M0Q4NjFGNDY5NEY3QTJGOTUxRkIxMjg0N0Uw N0ZBQTkwNzIwHhcNMjUwNDI4MTYxNDE1WhcNMjUwNTA1MTYxNDE1WjAYMRYwFAYD VQQDEw02ODBmYTk1Ny00NTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmfD/8KOJk5IDB9GPoVcpB2M8EWUpDonYd2j/9hLMt01gcpcdaqYI9dAyWriV FtVeNBv2LsbodhYKCVQcx880ZUCWCHw2AHcy13Bcv9wcukbMQyv2dw2u1plminII M7+dS7b0m1An/EZk3kpX77AlqOB8BdLweX+I7O1QQIBqXs8CepDsRo8pciiogmw8 HstUojerMmZx8liMgkjjh67GXLZJdQiwvXTJvo3K5TuJf24AuPnDOO/xclyb6156 oE9rcesoLNbpUVApFqeOdKNu+oOpRrFhIQRyAkuWEpvRtqgELWBZykQnkf9HXl4j L4rnyr7pzj6YPsbYPe2a8O0woQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO5jnjmj j/Eqw94kEhvKm5G4uFDgMB8GA1UdIwQYMBaAFCf8Y9hh9GlPei+VH7EoR+B/qpBy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUY5NS9DRTJBRkM0NkEy NzUxMUU2OUVCMTc3NzRDNEY5QUUwMi9KX3hqMkdIMGFVOTZMNVVmc1NoSDRILXFr SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pfeGoyR0gwYVU5Nkw1VWZzU2hINEgtcWtISS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUY5NS9DRTJBRkM0NkEyNzUxMUU2OUVCMTc3NzRDNEY5QUUwMi9KX3hqMkdIMGFV OTZMNVVmc1NoSDRILXFrSEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGveOliR0H+w0x0+df88SXN6RIu1EfHKFRv+lqFZUZG0JgKYvIzyHl mvb50PJ/ENvlD4ACQdJXwzV8FZCxm8h5sQaXihan0bTOLg/sMKB3P+0hBcytUYt1 cMQ0SW2kqoDCSgY7wlrWOmsIygwQI70Lks/UvrpjpUavKT6HOEcaBYcHQiVBLCrL 8S0g/e0iF0MyugplTNcgFELXdCIamSAiTx7UfZOaBGp6TUqK957/5Ajp3EHi0gmB o9mh0GKs9O+oFmtRWEfJ8bwjAUP76RoNwfWrFGKuCOxC3ApvsoQpdcIshY+wJPbF bgmUGbopwYRrno9fAuF5+dQTRZpzNg2q -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:25 2025 by rpki-client on console.sobornost.net