$ rpki-client -vvf rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft File: gYE9avls8KB0gHHNux4nD2tcYRM.mft (raw, json) Hash identifier: DWAL7YJfRzQ4psjqNjhcZ6i05FQ24lpD5PGYobZ01Us= Subject key identifier: A7:B4:F6:C0:35:93:00:61:11:76:0B:9B:16:7F:D2:AA:3E:B3:92:9C Authority key identifier: 81:81:3D:6A:F9:6C:F0:A0:74:80:71:CD:BB:1E:27:0F:6B:5C:61:13 Certificate issuer: /CN=A9128DE9/serialNumber=81813D6AF96CF0A0748071CDBB1E270F6B5C6113 Certificate serial: 0BD3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft Manifest number: 0BC2 Signing time: Mon 28 Apr 2025 19:14:32 +0000 Manifest this update: Mon 28 Apr 2025 19:14:32 +0000 Manifest next update: Mon 05 May 2025 19:14:32 +0000 Files and hashes: 1: gYE9avls8KB0gHHNux4nD2tcYRM.crl (hash: SZMUupX7qaCfrAwhpRCLD27K3n2DlhoCwBxjV1Mz98k=) 2: 1D77B4081BD911EAB49CC840C4F9AE02.roa (hash: jHX60u9ArdYh7GwRrx6uREAMvSVK0+kOgD9fYQ7pbX8=) 3: B3148DDA1BD711EAB801703AC4F9AE02.roa (hash: vAnu7lUAwo4HH4C945cyzFyVOcsgKeAbmVZGK6iXYjc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.crl rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 19:14:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3027 (0xbd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128DE9, serialNumber=81813D6AF96CF0A0748071CDBB1E270F6B5C6113 Validity Not Before: Apr 28 19:14:32 2025 GMT Not After : May 5 19:14:32 2025 GMT Subject: CN=680fd398-1b6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:fd:93:42:59:b1:a1:30:f5:c6:d9:65:c9:57: 74:22:46:19:30:43:68:0c:7d:d5:5d:3d:2e:25:11: 08:0e:78:2e:b7:b5:38:c5:3c:b6:8b:3e:50:94:73: f1:11:43:84:2a:ed:d8:11:dd:3a:e5:bc:37:b2:c5: 90:d4:a3:f1:14:2d:e6:3a:3e:ab:ca:c7:0b:4f:06: 5e:e3:0f:08:56:4c:03:9d:c5:d1:50:9e:1b:61:3f: de:9f:dc:e1:08:79:20:f8:26:b4:03:ca:36:5d:b9: 30:e2:b8:65:fc:e3:93:c9:6d:2a:d9:21:aa:c3:a4: 8a:b5:6f:ba:62:63:c8:ad:67:ca:4d:30:70:d9:33: 3f:35:d2:7f:68:77:db:0e:66:dc:d0:fe:3b:f7:35: 14:a7:ef:ea:ab:85:ea:40:84:84:9e:38:f1:ff:f6: 77:8b:f0:97:4e:46:9c:36:a3:6f:f1:d6:7e:9e:d6: bc:51:54:ae:46:2a:79:df:00:a2:79:32:da:cf:41: 0d:46:e7:2f:55:1b:a0:c6:4e:56:7f:42:09:6d:af: 0d:04:00:5a:e1:27:d6:9d:14:e2:41:d5:3b:68:35: 47:77:de:de:8b:40:0a:d3:46:f5:89:c3:76:da:f1: c1:4c:0a:07:da:42:4b:a8:6b:e4:44:9a:dd:a6:ed: 8a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:B4:F6:C0:35:93:00:61:11:76:0B:9B:16:7F:D2:AA:3E:B3:92:9C X509v3 Authority Key Identifier: keyid:81:81:3D:6A:F9:6C:F0:A0:74:80:71:CD:BB:1E:27:0F:6B:5C:61:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:3c:7c:ae:ec:1f:f2:72:8b:d5:4c:8d:ed:83:82:2e:57:0b: 0e:62:64:bb:cc:28:65:55:50:7a:bf:09:3f:73:39:49:2f:07: 60:cc:6b:85:f0:5d:4b:d4:02:cb:c5:c1:57:8a:bb:52:b2:67: 6f:d7:25:d9:2d:30:20:96:01:cd:b5:c0:c8:0b:73:ab:63:c7: 9c:0c:8e:8b:e6:91:34:32:bb:fa:9b:35:d4:48:75:5d:50:8a: fd:69:cd:ba:b5:69:05:ee:da:06:44:c4:9c:a6:c2:0c:22:68: c9:1d:e3:1c:89:bc:b3:fa:e7:0a:5b:cd:23:9f:bd:14:ae:6a: 9e:ac:b0:bf:ee:26:fe:37:21:8e:5e:83:f2:f8:20:95:82:ce: 0e:e6:bd:fa:64:d7:c4:8b:84:f6:a3:5b:89:4a:57:4f:2e:fa: 74:e7:c6:b6:bd:d6:40:2d:03:4f:39:5b:14:5a:cc:d6:43:b9: eb:93:3e:83:5d:fb:87:b0:f1:c8:15:a0:6a:0c:a6:51:e8:cf: 6f:6e:24:b1:4d:3b:46:66:95:6f:bb:76:ac:96:bb:de:89:74: 37:b2:52:ad:d9:f6:22:4f:aa:47:fa:4e:86:4b:cc:9b:fb:da: b5:89:bb:51:35:30:8c:76:8d:9a:00:36:11:ee:5b:f1:ef:63: 12:40:7e:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhERTkxMTAvBgNVBAUTKDgxODEzRDZBRjk2Q0YwQTA3NDgwNzFDREJCMUUyNzBG NkI1QzYxMTMwHhcNMjUwNDI4MTkxNDMyWhcNMjUwNTA1MTkxNDMyWjAYMRYwFAYD VQQDEw02ODBmZDM5OC0xYjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApf2TQlmxoTD1xtllyVd0IkYZMENoDH3VXT0uJREIDngut7U4xTy2iz5QlHPx EUOEKu3YEd065bw3ssWQ1KPxFC3mOj6ryscLTwZe4w8IVkwDncXRUJ4bYT/en9zh CHkg+Ca0A8o2Xbkw4rhl/OOTyW0q2SGqw6SKtW+6YmPIrWfKTTBw2TM/NdJ/aHfb Dmbc0P479zUUp+/qq4XqQISEnjjx//Z3i/CXTkacNqNv8dZ+nta8UVSuRip53wCi eTLaz0ENRucvVRugxk5Wf0IJba8NBABa4SfWnRTiQdU7aDVHd97ei0AK00b1icN2 2vHBTAoH2kJLqGvkRJrdpu2KJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKe09sA1 kwBhEXYLmxZ/0qo+s5KcMB8GA1UdIwQYMBaAFIGBPWr5bPCgdIBxzbseJw9rXGET MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOERFOS9ENjlCNDVFODFC RDUxMUVBODBDQkNGMzZDNEY5QUUwMi9nWUU5YXZsczhLQjBnSEhOdXg0bkQydGNZ Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dZRTlhdmxzOEtCMGdISE51eDRuRDJ0Y1lSTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OERFOS9ENjlCNDVFODFCRDUxMUVBODBDQkNGMzZDNEY5QUUwMi9nWUU5YXZsczhL QjBnSEhOdXg0bkQydGNZUk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmPHyu7B/ycovVTI3tg4IuVwsOYmS7zChlVVB6vwk/czlJLwdgzGuF 8F1L1ALLxcFXirtSsmdv1yXZLTAglgHNtcDIC3OrY8ecDI6L5pE0Mrv6mzXUSHVd UIr9ac26tWkF7toGRMScpsIMImjJHeMcibyz+ucKW80jn70UrmqerLC/7ib+NyGO XoPy+CCVgs4O5r36ZNfEi4T2o1uJSldPLvp058a2vdZALQNPOVsUWszWQ7nrkz6D XfuHsPHIFaBqDKZR6M9vbiSxTTtGZpVvu3aslrveiXQ3slKt2fYiT6pH+k6GS8yb +9q1ibtRNTCMdo2aADYR7lvx72MSQH4P -----END CERTIFICATE-----Generated at Mon Apr 28 23:04:57 2025 by rpki-client on console.sobornost.net