$ rpki-client -vvf rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.mft File: u9oqUrUEjxqKq79cJBcmASd8svM.mft (raw, json) Hash identifier: aawo/TO9eNvPbBhGXqHZF1mZPa9I/rxRMsv/J4btArM= Subject key identifier: ED:3B:86:A9:0A:F9:7A:16:36:10:BD:A6:AA:E1:AE:A2:C0:40:E0:8F Authority key identifier: BB:DA:2A:52:B5:04:8F:1A:8A:AB:BF:5C:24:17:26:01:27:7C:B2:F3 Certificate issuer: /CN=A912BA82/serialNumber=BBDA2A52B5048F1A8AABBF5C24172601277CB2F3 Certificate serial: E5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u9oqUrUEjxqKq79cJBcmASd8svM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.mft Manifest number: E1 Signing time: Sun 27 Apr 2025 04:23:10 +0000 Manifest this update: Sun 27 Apr 2025 04:23:10 +0000 Manifest next update: Sun 04 May 2025 04:23:10 +0000 Files and hashes: 1: u9oqUrUEjxqKq79cJBcmASd8svM.crl (hash: /ISaBDNGHzsHgfsowM0izcYYIHlbsaR5gbxHVfYxsHs=) 2: 32F8A3CCEB3311EEA2DF8C7DC4F9AE02.roa (hash: YjW6NRyoT2Yd6bOqBMqlNLXFCINZXzceER+JobJKz/s=) 3: 6133230CEB3311EEA75DE77DC4F9AE02.roa (hash: yJ7MqVkk1tgytYWvBl1+oFmFkyxkl54djaWZOByH5xI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.crl rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u9oqUrUEjxqKq79cJBcmASd8svM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 229 (0xe5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BA82, serialNumber=BBDA2A52B5048F1A8AABBF5C24172601277CB2F3 Validity Not Before: Apr 27 04:23:10 2025 GMT Not After : May 4 04:23:10 2025 GMT Subject: CN=680db12e-28ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:1b:36:37:7c:e7:3c:13:d5:5a:bc:43:d8:aa: ac:15:f0:ec:0b:25:36:c4:15:71:12:28:47:d1:89: 4c:31:4c:71:8f:10:09:22:92:ef:54:1a:41:1f:6b: 84:3f:a7:98:f2:fc:51:4a:51:42:25:e2:59:e2:a5: e8:e3:33:c7:27:3f:3a:94:8e:de:03:32:29:40:d0: cb:be:a5:aa:a0:f1:5f:3b:b8:a0:ce:7e:9a:81:ae: e1:d2:0a:3f:9e:47:09:a0:f0:83:3b:7c:12:4b:5b: 10:2e:66:b5:67:85:cb:73:a5:fc:fc:02:b6:dd:3e: a0:3a:dd:38:a3:5b:3a:d5:a4:d9:2c:c5:d3:46:58: c4:fc:9e:3e:fe:d5:0f:81:65:4d:57:93:a7:b1:08: 9e:cd:0e:68:e9:93:50:e0:94:d3:c7:26:bb:d5:ff: 44:1c:e9:d1:f9:5b:90:f7:f2:74:01:f1:6a:61:27: fb:64:32:a1:89:62:8e:ee:08:32:8e:2b:81:3c:10: 7f:03:03:18:85:6b:03:a1:1f:a6:f0:18:2b:9d:db: 8e:f4:db:01:c6:29:f7:6e:a1:4e:89:04:14:2e:14: 54:09:d8:ec:76:69:6a:14:9d:53:3c:c9:c8:ee:d7: 07:0f:10:18:b8:5c:7d:9e:18:a3:00:85:35:55:49: 71:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:3B:86:A9:0A:F9:7A:16:36:10:BD:A6:AA:E1:AE:A2:C0:40:E0:8F X509v3 Authority Key Identifier: keyid:BB:DA:2A:52:B5:04:8F:1A:8A:AB:BF:5C:24:17:26:01:27:7C:B2:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u9oqUrUEjxqKq79cJBcmASd8svM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:bc:8d:11:b6:b9:ca:ac:8b:74:e8:a3:9b:82:2f:11:3e:84: 09:55:06:92:9d:bc:2e:df:d0:fc:15:d3:f0:cf:72:57:92:63: bd:c4:0a:fb:3a:ff:bb:f0:53:54:9f:41:9a:cd:82:93:12:17: 80:f5:f7:41:b0:38:9a:e1:ef:7f:72:8b:01:ba:01:6c:2e:4c: 09:d2:4c:ac:fe:8e:9e:56:a8:a0:84:30:27:1e:d7:1c:82:9b: 4d:18:12:0b:cd:c3:83:db:2a:d9:6f:23:95:dc:2d:73:e3:47: 3b:c9:d5:83:47:67:91:43:28:56:be:64:f8:1f:c6:1c:66:bb: 1e:05:fe:94:c6:3f:7c:67:9f:18:b9:4c:39:ad:97:95:46:e3: fc:84:e4:8f:b5:98:29:3b:24:99:1e:30:a1:ee:ab:72:ee:60: 43:4e:72:e4:21:43:69:c0:2f:4a:db:45:d6:5b:dd:0c:4b:dc: 19:92:3e:f7:d1:21:29:0b:4b:78:b8:fb:8e:ab:a0:0a:56:69: 27:13:81:b8:73:a5:8a:63:82:a4:76:20:d2:10:e7:af:5e:4b: d1:79:d6:00:29:2b:f6:76:26:93:55:3b:54:72:09:57:78:a6: 30:58:86:ab:00:27:01:65:ef:06:ca:4e:86:1c:70:c4:cc:28: 63:40:34:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJBODIxMTAvBgNVBAUTKEJCREEyQTUyQjUwNDhGMUE4QUFCQkY1QzI0MTcyNjAx Mjc3Q0IyRjMwHhcNMjUwNDI3MDQyMzEwWhcNMjUwNTA0MDQyMzEwWjAYMRYwFAYD VQQDEw02ODBkYjEyZS0yOGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoxs2N3znPBPVWrxD2KqsFfDsCyU2xBVxEihH0YlMMUxxjxAJIpLvVBpBH2uE P6eY8vxRSlFCJeJZ4qXo4zPHJz86lI7eAzIpQNDLvqWqoPFfO7igzn6aga7h0go/ nkcJoPCDO3wSS1sQLma1Z4XLc6X8/AK23T6gOt04o1s61aTZLMXTRljE/J4+/tUP gWVNV5OnsQiezQ5o6ZNQ4JTTxya71f9EHOnR+VuQ9/J0AfFqYSf7ZDKhiWKO7ggy jiuBPBB/AwMYhWsDoR+m8BgrnduO9NsBxin3bqFOiQQULhRUCdjsdmlqFJ1TPMnI 7tcHDxAYuFx9nhijAIU1VUlxPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO07hqkK +XoWNhC9pqrhrqLAQOCPMB8GA1UdIwQYMBaAFLvaKlK1BI8aiqu/XCQXJgEnfLLz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkE4Mi9GMjYwMTRFOENF NUExMUVFOEMzQkQwM0FDNEY5QUUwMi91OW9xVXJVRWp4cUtxNzljSkJjbUFTZDhz dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3U5b3FVclVFanhxS3E3OWNKQmNtQVNkOHN2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkE4Mi9GMjYwMTRFOENFNUExMUVFOEMzQkQwM0FDNEY5QUUwMi91OW9xVXJVRWp4 cUtxNzljSkJjbUFTZDhzdk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwvI0RtrnKrIt06KObgi8RPoQJVQaSnbwu39D8FdPwz3JXkmO9xAr7 Ov+78FNUn0GazYKTEheA9fdBsDia4e9/cosBugFsLkwJ0kys/o6eVqighDAnHtcc gptNGBILzcOD2yrZbyOV3C1z40c7ydWDR2eRQyhWvmT4H8YcZrseBf6Uxj98Z58Y uUw5rZeVRuP8hOSPtZgpOySZHjCh7qty7mBDTnLkIUNpwC9K20XWW90MS9wZkj73 0SEpC0t4uPuOq6AKVmknE4G4c6WKY4KkdiDSEOevXkvRedYAKSv2diaTVTtUcglX eKYwWIarACcBZe8Gyk6GHHDEzChjQDRr -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:41 2025 by rpki-client on console.sobornost.net