$ rpki-client -vvf rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.mft File: Icv-KamU2PngPkxNRObPW2SLeOw.mft (raw, json) Hash identifier: WlFLvBF5QOjxA8vCM8wDSOrQVV45vuIiUrzosrVLw9M= Subject key identifier: 08:A2:B9:5A:E6:DF:32:6C:B6:B0:89:C6:D5:2C:A5:89:08:AA:D3:07 Authority key identifier: 21:CB:FE:29:A9:94:D8:F9:E0:3E:4C:4D:44:E6:CF:5B:64:8B:78:EC Certificate issuer: /CN=A91272F9/serialNumber=21CBFE29A994D8F9E03E4C4D44E6CF5B648B78EC Certificate serial: 12B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Icv-KamU2PngPkxNRObPW2SLeOw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.mft Manifest number: 12A3 Signing time: Mon 28 Apr 2025 17:18:19 +0000 Manifest this update: Mon 28 Apr 2025 17:18:18 +0000 Manifest next update: Mon 05 May 2025 17:18:18 +0000 Files and hashes: 1: Icv-KamU2PngPkxNRObPW2SLeOw.crl (hash: 4MhG3OHbeJxreHmFPb/jN84Ly49nnk4vwQjWyC3psyM=) 2: AA5A77C88DB811EBA0613421C4F9AE02.roa (hash: fNoRTJRcUq+MisSf8jbpZwfIe00iU+V6oUD6yiNy/5Y=) 3: A5393FF2E70911E8B4D19B84C4F9AE02.roa (hash: 9kzHJ+mrOXjrh7/imCy9YTTgW8CKx7edCdpIZZ1nyQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.crl rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Icv-KamU2PngPkxNRObPW2SLeOw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 17:18:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4789 (0x12b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91272F9, serialNumber=21CBFE29A994D8F9E03E4C4D44E6CF5B648B78EC Validity Not Before: Apr 28 17:18:18 2025 GMT Not After : May 5 17:18:18 2025 GMT Subject: CN=680fb85b-4e9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c3:ee:9d:1a:09:b0:52:18:41:e6:c8:19:57: d6:51:bf:75:9d:1e:8d:2c:76:cc:b8:a2:97:6b:9e: a4:fa:aa:8c:b8:2f:fc:3f:8a:ca:f6:c0:4f:86:80: e6:86:fa:a4:02:22:df:97:2b:31:6c:24:93:11:26: 3e:08:1e:2a:1f:f5:c5:9b:74:03:48:a2:b3:62:cb: f4:0c:bc:17:21:7d:8a:ca:99:f5:4b:1a:b5:0c:e6: 25:b8:02:e9:3b:e8:d3:59:cd:39:e0:64:ae:e1:05: 05:61:c1:fc:2f:b0:ba:f6:49:ef:c3:3e:ef:a2:f1: ad:9a:09:97:48:46:3e:0f:05:be:88:86:1f:10:8a: be:80:04:6f:58:71:62:b1:d9:ba:79:a6:c9:e1:04: 6e:34:a6:bb:2d:83:34:56:1b:9e:ba:ff:9a:8c:3f: 4a:ba:b0:70:8f:b8:9d:06:66:9b:a6:08:e8:ff:e8: 4d:00:2d:ac:94:cb:04:a1:04:dc:57:07:ec:ac:7d: 3d:76:ca:0f:f3:db:e3:bb:f1:96:61:d1:80:a0:dd: b8:c0:ef:e2:c1:28:b3:c5:27:be:18:f5:e5:f3:c4: 0a:f7:9a:4e:80:81:c0:40:98:09:67:e2:04:ba:7f: 7d:76:0b:af:53:07:36:7e:3f:ff:15:32:82:59:8c: c7:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:A2:B9:5A:E6:DF:32:6C:B6:B0:89:C6:D5:2C:A5:89:08:AA:D3:07 X509v3 Authority Key Identifier: keyid:21:CB:FE:29:A9:94:D8:F9:E0:3E:4C:4D:44:E6:CF:5B:64:8B:78:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Icv-KamU2PngPkxNRObPW2SLeOw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:63:3a:c7:a2:be:2d:7c:2d:e7:12:96:4e:8d:f7:1f:64:f8: 50:98:65:ed:c0:45:7d:f3:be:67:39:6a:6a:b3:31:ff:cc:c3: 13:82:00:3d:45:99:cd:f1:c4:be:49:d9:4c:a2:1e:df:df:55: 6e:54:cc:32:7a:a1:5b:ec:3a:6c:b0:cb:3b:32:89:5b:2e:01: 0f:40:a9:61:90:e9:95:2b:99:ea:0c:ff:b5:96:d7:63:05:1f: 40:3d:41:93:10:c6:c4:64:0b:36:b5:72:19:58:0f:09:1a:49: 1f:e5:fb:55:2b:a9:f3:3f:ce:30:74:e3:78:c6:8c:0b:4f:82: 84:20:ce:ca:97:b5:82:77:62:db:e8:52:e6:e3:a7:9d:c0:74: 0b:ab:6d:ef:c2:e6:2e:09:24:19:50:09:d0:0b:9d:45:c1:2a: 31:f8:94:56:7e:3c:a0:71:17:e3:bb:e2:c3:a0:0f:24:cd:1c: 2c:e8:76:a8:43:ba:6c:c5:34:77:ee:c6:90:cf:67:3c:45:d6: cf:88:c7:37:48:a2:20:de:b1:e5:54:7d:5d:17:ca:e5:87:f7: cc:1c:a0:20:43:7a:a9:d3:40:23:72:8c:3e:19:54:8c:ef:7e: 0a:7a:e9:fc:f3:84:64:9a:5e:f8:1e:b7:6c:b6:04:7b:00:c0: a2:b8:ae:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICErUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjcyRjkxMTAvBgNVBAUTKDIxQ0JGRTI5QTk5NEQ4RjlFMDNFNEM0RDQ0RTZDRjVC NjQ4Qjc4RUMwHhcNMjUwNDI4MTcxODE4WhcNMjUwNTA1MTcxODE4WjAYMRYwFAYD VQQDEw02ODBmYjg1Yi00ZTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAysPunRoJsFIYQebIGVfWUb91nR6NLHbMuKKXa56k+qqMuC/8P4rK9sBPhoDm hvqkAiLflysxbCSTESY+CB4qH/XFm3QDSKKzYsv0DLwXIX2Kypn1Sxq1DOYluALp O+jTWc054GSu4QUFYcH8L7C69knvwz7vovGtmgmXSEY+DwW+iIYfEIq+gARvWHFi sdm6eabJ4QRuNKa7LYM0Vhueuv+ajD9KurBwj7idBmabpgjo/+hNAC2slMsEoQTc VwfsrH09dsoP89vju/GWYdGAoN24wO/iwSizxSe+GPXl88QK95pOgIHAQJgJZ+IE un99dguvUwc2fj//FTKCWYzHJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAiiuVrm 3zJstrCJxtUspYkIqtMHMB8GA1UdIwQYMBaAFCHL/implNj54D5MTUTmz1tki3js MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzJGOS9EMkVENDlDMkMy NkQxMUU4QkFCRTExNjVDNEY5QUUwMi9JY3YtS2FtVTJQbmdQa3hOUk9iUFcyU0xl T3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ljdi1LYW1VMlBuZ1BreE5ST2JQVzJTTGVPdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzJGOS9EMkVENDlDMkMyNkQxMUU4QkFCRTExNjVDNEY5QUUwMi9JY3YtS2FtVTJQ bmdQa3hOUk9iUFcyU0xlT3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNYzrHor4tfC3nEpZOjfcfZPhQmGXtwEV9875nOWpqszH/zMMTggA9 RZnN8cS+SdlMoh7f31VuVMwyeqFb7DpssMs7MolbLgEPQKlhkOmVK5nqDP+1ltdj BR9APUGTEMbEZAs2tXIZWA8JGkkf5ftVK6nzP84wdON4xowLT4KEIM7Kl7WCd2Lb 6FLm46edwHQLq23vwuYuCSQZUAnQC51FwSox+JRWfjygcRfju+LDoA8kzRws6Hao Q7psxTR37saQz2c8RdbPiMc3SKIg3rHlVH1dF8rlh/fMHKAgQ3qp00Ajcow+GVSM 734Keun884Rkml74HrdstgR7AMCiuK7f -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:25 2025 by rpki-client on console.sobornost.net