$ rpki-client -vvf rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.mft File: 4YL5k2lSxCadZw2ldS3syGgjTxs.mft (raw, json) Hash identifier: PQEI/dLU5I5aJGkHU6pLjQJS6QcBXyV5N52DEdS65EI= Subject key identifier: 2D:DE:73:68:3C:A1:4E:98:09:FB:90:91:C0:00:15:CD:07:1C:F5:C7 Authority key identifier: E1:82:F9:93:69:52:C4:26:9D:67:0D:A5:75:2D:EC:C8:68:23:4F:1B Certificate issuer: /CN=A9126F2B/serialNumber=E182F9936952C4269D670DA5752DECC868234F1B Certificate serial: 21BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YL5k2lSxCadZw2ldS3syGgjTxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.mft Manifest number: 219C Signing time: Mon 28 Apr 2025 16:00:53 +0000 Manifest this update: Mon 28 Apr 2025 16:00:52 +0000 Manifest next update: Mon 05 May 2025 16:00:52 +0000 Files and hashes: 1: 4YL5k2lSxCadZw2ldS3syGgjTxs.crl (hash: TAMUEzWqtXkNVY16NV685H8BKoPiHJCRhdzgQ9z8MOc=) 2: B72206B4554B11E791BA5861C4F9AE02.roa (hash: Si+Xx28szHe9Iv7W1YtcZoNp90VlP5RP91wUGl6kx/U=) 3: A8E9DE704B8511E7BF406610C4F9AE02.roa (hash: nu+MmRVMelFZBsdSEFhVpeJliAcHe14e7veTklAJkjc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.crl rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YL5k2lSxCadZw2ldS3syGgjTxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 15:55:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8637 (0x21bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126F2B, serialNumber=E182F9936952C4269D670DA5752DECC868234F1B Validity Not Before: Apr 28 16:00:52 2025 GMT Not After : May 5 16:00:52 2025 GMT Subject: CN=680fa634-2820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c2:bc:ae:e8:81:d3:8f:a1:75:1d:8e:b8:f5: 07:5d:d7:35:0f:46:7b:1c:6e:5a:57:c1:eb:36:bf: 21:64:36:79:df:fa:1f:3b:72:06:9d:27:b8:29:ba: 9e:93:ba:e8:e7:b7:09:46:fc:6f:ed:a7:63:45:19: e9:03:dc:1f:b8:62:db:95:e0:e5:f5:40:e2:40:5e: c4:29:d0:2c:26:5c:7d:5a:ad:fc:6f:34:6f:6b:70: 61:cd:5c:2c:bc:4c:b6:d4:0f:6f:3e:3e:70:d9:32: b8:3e:8a:ed:65:f4:be:57:67:9a:2e:49:60:23:aa: b6:ac:fb:76:cd:0c:c7:bc:4e:21:57:ff:78:0e:b6: ee:f2:c4:c3:57:1d:2d:36:c6:1e:77:2d:52:7c:56: 61:12:7e:64:8a:a2:e3:20:06:06:7e:21:9d:6b:a4: e3:fd:7c:c0:10:2c:eb:3e:87:2e:d4:4b:91:e8:49: f5:a9:34:fa:59:f8:98:03:7e:cc:d5:2d:37:f9:c4: 7c:ab:b0:c0:44:ff:3a:c6:d1:c9:8e:e1:91:64:fc: a2:fc:7a:f5:0d:58:23:e8:e5:6b:e5:ea:fa:06:7e: 0f:b5:ae:63:75:a9:24:4f:ac:7f:93:7e:06:01:bb: 60:52:67:26:8b:83:72:bc:97:2d:f2:78:60:b2:57: bc:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:DE:73:68:3C:A1:4E:98:09:FB:90:91:C0:00:15:CD:07:1C:F5:C7 X509v3 Authority Key Identifier: keyid:E1:82:F9:93:69:52:C4:26:9D:67:0D:A5:75:2D:EC:C8:68:23:4F:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YL5k2lSxCadZw2ldS3syGgjTxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:c0:f8:21:6a:ea:d3:90:cb:46:98:12:96:f9:82:89:68:d5: 51:0a:ae:d4:5c:8a:57:e1:c3:5d:c1:4e:3b:68:8c:37:bf:70: a2:ea:ae:e7:5f:0d:da:d8:0f:02:fe:bb:1e:15:51:f9:b2:77: 52:21:17:0d:8d:8d:c5:1b:d1:e4:9e:ee:5b:35:3e:0d:64:7b: a1:fa:e2:1f:6d:9b:a9:44:06:7a:5b:3c:ef:71:d9:ff:c9:48: a7:f9:d7:28:53:70:fe:23:72:c3:d0:99:c9:69:32:f1:84:a0: 40:23:8d:7d:1a:14:67:b8:c6:04:52:04:46:b4:62:33:52:02: e8:66:a8:8a:ff:f4:37:04:6c:25:33:ae:02:2a:60:59:5d:44: fb:e3:3b:8a:62:ab:70:30:31:d9:bd:d8:f3:a2:aa:30:1e:df: 84:c1:f1:90:e9:4d:a4:f7:ed:a9:40:13:a5:2d:ff:be:8b:be: cb:2a:77:5f:58:70:ee:4f:ff:50:a0:e0:dc:ac:b0:6e:42:16: e2:7e:4a:be:b2:c2:76:fb:15:3d:52:7c:ad:a0:dc:cc:4e:8b: 2a:b8:7a:fa:3e:c1:0e:3f:01:f5:55:9c:a1:1f:aa:30:8e:f8: 66:11:37:33:5d:42:c7:cf:36:9f:3a:ba:bd:91:a7:76:53:5f: 06:34:df:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjZGMkIxMTAvBgNVBAUTKEUxODJGOTkzNjk1MkM0MjY5RDY3MERBNTc1MkRFQ0M4 NjgyMzRGMUIwHhcNMjUwNDI4MTYwMDUyWhcNMjUwNTA1MTYwMDUyWjAYMRYwFAYD VQQDEw02ODBmYTYzNC0yODIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxMK8ruiB04+hdR2OuPUHXdc1D0Z7HG5aV8HrNr8hZDZ53/ofO3IGnSe4Kbqe k7ro57cJRvxv7adjRRnpA9wfuGLbleDl9UDiQF7EKdAsJlx9Wq38bzRva3BhzVws vEy21A9vPj5w2TK4PortZfS+V2eaLklgI6q2rPt2zQzHvE4hV/94Drbu8sTDVx0t NsYedy1SfFZhEn5kiqLjIAYGfiGda6Tj/XzAECzrPocu1EuR6En1qTT6WfiYA37M 1S03+cR8q7DARP86xtHJjuGRZPyi/Hr1DVgj6OVr5er6Bn4Pta5jdakkT6x/k34G AbtgUmcmi4NyvJct8nhgsle8HQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC3ec2g8 oU6YCfuQkcAAFc0HHPXHMB8GA1UdIwQYMBaAFOGC+ZNpUsQmnWcNpXUt7MhoI08b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNkYyQi85MEZBREVFQ0Q1 Q0QxMUU1QUE0MjZFNDBDNEY5QUUwMi80WUw1azJsU3hDYWRadzJsZFMzc3lHZ2pU eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRZTDVrMmxTeENhZFp3MmxkUzNzeUdnalR4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NkYyQi85MEZBREVFQ0Q1Q0QxMUU1QUE0MjZFNDBDNEY5QUUwMi80WUw1azJsU3hD YWRadzJsZFMzc3lHZ2pUeHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0wPghaurTkMtGmBKW+YKJaNVRCq7UXIpX4cNdwU47aIw3v3Ci6q7n Xw3a2A8C/rseFVH5sndSIRcNjY3FG9Hknu5bNT4NZHuh+uIfbZupRAZ6Wzzvcdn/ yUin+dcoU3D+I3LD0JnJaTLxhKBAI419GhRnuMYEUgRGtGIzUgLoZqiK//Q3BGwl M64CKmBZXUT74zuKYqtwMDHZvdjzoqowHt+EwfGQ6U2k9+2pQBOlLf++i77LKndf WHDuT/9QoODcrLBuQhbifkq+ssJ2+xU9UnytoNzMTosquHr6PsEOPwH1VZyhH6ow jvhmETczXULHzzafOrq9kad2U18GNN/y -----END CERTIFICATE-----Generated at Mon Apr 28 17:44:46 2025 by rpki-client on console.sobornost.net