$ rpki-client -vvf rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.mft File: QnVRUgCwOWcq-g6Fh31OP-cNidc.mft (raw, json) Hash identifier: BJ+VgXJ2u+5USnprOghDPEixf1JFwD0Kz2BHeyEVDBk= Subject key identifier: 66:21:EA:15:EF:36:71:8F:4E:BB:42:67:70:23:C9:8A:EE:72:55:2F Authority key identifier: 42:75:51:52:00:B0:39:67:2A:FA:0E:85:87:7D:4E:3F:E7:0D:89:D7 Certificate issuer: /CN=A9127733/serialNumber=4275515200B039672AFA0E85877D4E3FE70D89D7 Certificate serial: 070E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnVRUgCwOWcq-g6Fh31OP-cNidc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.mft Manifest number: 06F8 Signing time: Tue 22 Apr 2025 21:55:12 +0000 Manifest this update: Tue 22 Apr 2025 21:55:12 +0000 Manifest next update: Tue 29 Apr 2025 21:55:12 +0000 Files and hashes: 1: QnVRUgCwOWcq-g6Fh31OP-cNidc.crl (hash: x5/bMSqUsvBZtfaNm25viHROnHhy+MXmlhUGw7UhxYA=) 2: E91BDAD0D6DE11ED88F30263C4F9AE02.roa (hash: iIfOWh1uqVhAcXqeHkNjA4YHqNreyuB3xizBAQVozys=) 3: 683CDAD0B4C411EE8F1E5D85C4F9AE02.roa (hash: jpOm+AzzM4Yjd+hxm5Xa0uKGQEaJYO441Q/17W+FFzA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.crl rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnVRUgCwOWcq-g6Fh31OP-cNidc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 21:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1806 (0x70e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127733, serialNumber=4275515200B039672AFA0E85877D4E3FE70D89D7 Validity Not Before: Apr 22 21:55:12 2025 GMT Not After : Apr 29 21:55:12 2025 GMT Subject: CN=68081040-f468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:84:0d:7b:fc:c9:35:0e:d7:ca:44:eb:0e:07: 99:71:aa:7b:cd:fb:74:7c:9e:24:ea:9b:da:83:74: 31:83:53:71:9b:ad:4b:d9:31:06:35:12:01:02:f5: 81:a2:5f:3d:51:e2:a3:1d:57:76:80:86:af:55:40: 35:b0:a1:37:ec:74:4b:5a:21:26:a1:89:d0:da:ac: 29:e1:9c:39:7e:85:cf:5c:14:b8:0d:b2:8c:7e:a9: 0d:1b:f8:7b:54:82:89:73:4d:f1:b1:06:ce:85:5f: d7:19:00:98:67:ff:80:9e:c0:c5:14:b6:fc:2e:b3: 42:02:27:6f:1c:18:51:8c:ca:a5:18:45:d7:9d:d1: f6:8c:ac:48:a2:15:74:7f:a8:eb:11:d3:c2:5e:50: 6f:24:5f:3a:6f:fa:35:19:ad:44:e9:c7:b1:52:70: e2:69:e9:f0:21:c9:d8:e5:da:df:1b:3d:79:26:53: 3e:00:a7:54:9c:74:02:58:54:08:3e:25:b9:10:5f: 3b:42:63:4f:14:16:85:ef:e3:59:04:7c:ae:6a:60: 94:70:6c:7a:55:e4:d5:6a:47:7f:1f:62:2f:f1:11: 7d:23:cb:97:68:8a:fc:8b:bc:78:e1:da:da:93:41: 96:6c:e0:58:e1:54:da:16:b8:ec:cf:64:3b:83:9f: 47:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:21:EA:15:EF:36:71:8F:4E:BB:42:67:70:23:C9:8A:EE:72:55:2F X509v3 Authority Key Identifier: keyid:42:75:51:52:00:B0:39:67:2A:FA:0E:85:87:7D:4E:3F:E7:0D:89:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnVRUgCwOWcq-g6Fh31OP-cNidc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:79:df:3f:cc:a4:db:9e:ba:dc:97:24:54:d4:1c:ba:e9:a4: 6c:72:53:3d:e4:c3:96:1e:01:16:37:21:0b:9f:89:6b:7d:6d: c9:51:6f:b4:c7:00:88:c6:3f:5a:1b:db:67:0e:12:f1:fb:f4: fd:4c:21:4b:7d:f7:b4:38:c4:cf:da:c4:5e:97:0c:17:5a:12: 09:c6:53:17:5a:cd:a2:01:83:0d:65:88:d6:75:6b:43:45:28: b1:8b:4c:2b:46:f1:17:b5:b9:a1:b1:18:49:f1:65:b0:71:62: 25:d2:03:a1:0a:c0:1c:10:b6:d1:37:fd:2a:2e:d8:73:f6:ec: f5:22:9a:03:e2:61:30:df:e3:5c:a8:04:a1:fc:89:de:29:10: 35:59:fc:ff:11:25:e9:57:96:21:e2:02:78:af:7d:ad:c3:73: c2:2e:67:b9:4f:bd:af:4d:d3:51:c3:22:6c:14:61:31:ae:0d: 01:fc:c2:6e:39:3f:66:65:74:e3:b9:7f:8e:31:35:eb:39:0e: e0:24:4d:ed:4d:01:b9:8b:20:1c:fc:43:2a:4d:8a:8e:42:1f: 12:ff:6e:c3:5f:27:bc:0c:b0:d9:3e:c0:86:0d:cf:95:3c:7d: 31:1c:3d:42:56:27:e1:63:6c:7c:81:64:e1:74:6a:7c:50:e4: 7b:f8:1d:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBw4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc3MzMxMTAvBgNVBAUTKDQyNzU1MTUyMDBCMDM5NjcyQUZBMEU4NTg3N0Q0RTNG RTcwRDg5RDcwHhcNMjUwNDIyMjE1NTEyWhcNMjUwNDI5MjE1NTEyWjAYMRYwFAYD VQQDEw02ODA4MTA0MC1mNDY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuYQNe/zJNQ7XykTrDgeZcap7zft0fJ4k6pvag3Qxg1Nxm61L2TEGNRIBAvWB ol89UeKjHVd2gIavVUA1sKE37HRLWiEmoYnQ2qwp4Zw5foXPXBS4DbKMfqkNG/h7 VIKJc03xsQbOhV/XGQCYZ/+AnsDFFLb8LrNCAidvHBhRjMqlGEXXndH2jKxIohV0 f6jrEdPCXlBvJF86b/o1Ga1E6cexUnDiaenwIcnY5drfGz15JlM+AKdUnHQCWFQI PiW5EF87QmNPFBaF7+NZBHyuamCUcGx6VeTVakd/H2Iv8RF9I8uXaIr8i7x44dra k0GWbOBY4VTaFrjsz2Q7g59HCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGYh6hXv NnGPTrtCZ3AjyYruclUvMB8GA1UdIwQYMBaAFEJ1UVIAsDlnKvoOhYd9Tj/nDYnX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzczMy9BRERDM0IzRTQ1 OEQxMUVCQTM5QUM3NDBDNEY5QUUwMi9RblZSVWdDd09XY3EtZzZGaDMxT1AtY05p ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FuVlJVZ0N3T1djcS1nNkZoMzFPUC1jTmlkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzczMy9BRERDM0IzRTQ1OEQxMUVCQTM5QUM3NDBDNEY5QUUwMi9RblZSVWdDd09X Y3EtZzZGaDMxT1AtY05pZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5ed8/zKTbnrrclyRU1By66aRsclM95MOWHgEWNyELn4lrfW3JUW+0 xwCIxj9aG9tnDhLx+/T9TCFLffe0OMTP2sRelwwXWhIJxlMXWs2iAYMNZYjWdWtD RSixi0wrRvEXtbmhsRhJ8WWwcWIl0gOhCsAcELbRN/0qLthz9uz1IpoD4mEw3+Nc qASh/IneKRA1Wfz/ESXpV5Yh4gJ4r32tw3PCLme5T72vTdNRwyJsFGExrg0B/MJu OT9mZXTjuX+OMTXrOQ7gJE3tTQG5iyAc/EMqTYqOQh8S/27DXye8DLDZPsCGDc+V PH0xHD1CVifhY2x8gWThdGp8UOR7+B2j -----END CERTIFICATE-----Generated at Wed Apr 23 00:39:50 2025 by rpki-client on console.sobornost.net