$ rpki-client -vvf rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft File: O2jmA9GPVutmXvcukmQF8MEL4-c.mft (raw, json) Hash identifier: tQE1W+GbvKjD0xyaA05RV7VkCINDQVOZPM/I50oGAYk= Subject key identifier: 4E:04:51:D7:7F:26:24:D9:DD:82:17:02:68:1B:94:10:5B:02:FF:27 Authority key identifier: 3B:68:E6:03:D1:8F:56:EB:66:5E:F7:2E:92:64:05:F0:C1:0B:E3:E7 Certificate issuer: /CN=A912D1D1/serialNumber=3B68E603D18F56EB665EF72E926405F0C10BE3E7 Certificate serial: 086F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft Manifest number: 0869 Signing time: Sat 26 Apr 2025 20:25:22 +0000 Manifest this update: Sat 26 Apr 2025 20:25:22 +0000 Manifest next update: Sat 03 May 2025 20:25:22 +0000 Files and hashes: 1: O2jmA9GPVutmXvcukmQF8MEL4-c.crl (hash: R3jak7s4RvDzIQA9ojqEGlGy3cpRFukbJO9Eqc2HOhI=) 2: 30CB037EC18E11EA8BF4FB68C4F9AE02.roa (hash: d1mOeGTfFGoxO3FpLGtyELB1KUYkFiEXG3WDXupnmMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.crl rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2159 (0x86f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D1D1, serialNumber=3B68E603D18F56EB665EF72E926405F0C10BE3E7 Validity Not Before: Apr 26 20:25:22 2025 GMT Not After : May 3 20:25:22 2025 GMT Subject: CN=680d4132-b4f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:89:23:45:9e:ae:05:97:47:92:00:e7:5b:1b: 12:a8:04:b3:fd:c4:34:32:d1:e2:16:15:05:42:53: eb:c9:53:47:40:44:55:bc:ac:e9:06:60:52:8b:b9: 61:4f:a6:bb:13:bc:69:fb:ce:dc:eb:92:19:ba:4a: b9:ca:2c:18:c0:27:3f:50:4a:17:44:e3:8c:37:6b: f9:13:02:04:23:7e:5b:a5:e3:fc:f7:db:35:c5:b8: be:24:ba:9b:1c:4c:cd:85:b3:b1:77:6e:73:57:03: 7a:e2:b0:8e:1b:c4:e1:dd:6f:60:d2:62:64:b4:15: a3:a2:2c:21:47:4c:4d:fb:a6:ff:8a:06:4e:be:e0: 3f:e7:53:aa:61:a3:14:dc:18:40:ab:81:88:98:cc: a6:88:77:66:f7:4f:8e:bb:e8:f8:a9:bd:7f:ed:aa: ec:e3:f6:06:f0:00:0b:35:e9:a5:87:b9:84:fb:45: 3d:0c:d5:a2:c8:d0:90:ef:fb:db:d5:35:d2:01:f5: 10:b5:9e:78:11:b2:f4:a1:2a:b5:41:3d:a2:4b:c2: 3a:62:6a:15:ec:d7:1b:16:58:e9:e1:3a:94:5a:b4: 05:05:d2:2c:6f:ce:1d:7d:e6:53:cd:0f:57:34:4c: 95:7f:97:28:35:6b:5e:4d:d9:30:76:a8:c7:69:f0: f2:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:04:51:D7:7F:26:24:D9:DD:82:17:02:68:1B:94:10:5B:02:FF:27 X509v3 Authority Key Identifier: keyid:3B:68:E6:03:D1:8F:56:EB:66:5E:F7:2E:92:64:05:F0:C1:0B:E3:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:ab:fc:f0:eb:9b:62:01:fe:c9:68:93:80:19:2c:6c:0c:fd: 52:ea:11:70:f6:8b:4a:c0:f1:96:15:c3:51:82:23:96:2c:a5: 90:80:03:ae:4a:9c:d0:18:0b:e7:f3:ea:a2:50:28:ae:26:82: 73:30:e0:33:7b:22:f6:db:7b:6e:ab:ec:08:5a:fc:35:15:3c: e2:80:3c:ee:b5:ca:83:d0:19:7a:b9:1e:56:81:03:77:eb:d1: bf:65:b8:83:75:a7:35:a9:c4:d9:f8:d7:6c:e5:66:78:68:fb: 89:f1:6e:6b:c1:44:a2:51:e3:11:63:6a:e4:e2:a3:96:68:a7: f3:de:1a:8a:c1:26:de:c8:74:43:a5:68:cb:c8:a6:6b:5f:95: da:d1:e8:5a:02:8f:30:cd:a4:6f:d9:e0:62:77:47:9d:79:46: 28:60:d7:e6:70:0e:a0:21:07:61:e3:74:a7:c8:7c:fc:e4:8f: ed:9b:a5:ba:00:69:ce:77:36:81:d2:e9:fb:7e:0e:f3:a7:cb: 4e:c5:51:65:ff:8a:20:ee:2f:ef:b3:3b:6e:21:b4:ce:c2:ab: 95:66:d6:6e:8e:c4:45:74:a8:39:ca:1e:1e:34:e3:d7:c0:b7: b5:76:e8:cd:aa:4f:b8:e2:0b:50:bf:e6:10:12:d5:8e:00:a9: ca:d1:c4:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCG8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQxRDExMTAvBgNVBAUTKDNCNjhFNjAzRDE4RjU2RUI2NjVFRjcyRTkyNjQwNUYw QzEwQkUzRTcwHhcNMjUwNDI2MjAyNTIyWhcNMjUwNTAzMjAyNTIyWjAYMRYwFAYD VQQDEw02ODBkNDEzMi1iNGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnokjRZ6uBZdHkgDnWxsSqASz/cQ0MtHiFhUFQlPryVNHQERVvKzpBmBSi7lh T6a7E7xp+87c65IZukq5yiwYwCc/UEoXROOMN2v5EwIEI35bpeP899s1xbi+JLqb HEzNhbOxd25zVwN64rCOG8Th3W9g0mJktBWjoiwhR0xN+6b/igZOvuA/51OqYaMU 3BhAq4GImMymiHdm90+Ou+j4qb1/7ars4/YG8AALNemlh7mE+0U9DNWiyNCQ7/vb 1TXSAfUQtZ54EbL0oSq1QT2iS8I6YmoV7NcbFljp4TqUWrQFBdIsb84dfeZTzQ9X NEyVf5coNWteTdkwdqjHafDy/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE4EUdd/ JiTZ3YIXAmgblBBbAv8nMB8GA1UdIwQYMBaAFDto5gPRj1brZl73LpJkBfDBC+Pn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDFEMS9DMTYwMDZGQ0Mx OEMxMUVBOEYzNjQxNjZDNEY5QUUwMi9PMmptQTlHUFZ1dG1YdmN1a21RRjhNRUw0 LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL08yam1BOUdQVnV0bVh2Y3VrbVFGOE1FTDQtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDFEMS9DMTYwMDZGQ0MxOEMxMUVBOEYzNjQxNjZDNEY5QUUwMi9PMmptQTlHUFZ1 dG1YdmN1a21RRjhNRUw0LWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtq/zw65tiAf7JaJOAGSxsDP1S6hFw9otKwPGWFcNRgiOWLKWQgAOu SpzQGAvn8+qiUCiuJoJzMOAzeyL223tuq+wIWvw1FTzigDzutcqD0Bl6uR5WgQN3 69G/ZbiDdac1qcTZ+Nds5WZ4aPuJ8W5rwUSiUeMRY2rk4qOWaKfz3hqKwSbeyHRD pWjLyKZrX5Xa0ehaAo8wzaRv2eBid0edeUYoYNfmcA6gIQdh43SnyHz85I/tm6W6 AGnOdzaB0un7fg7zp8tOxVFl/4og7i/vsztuIbTOwquVZtZujsRFdKg5yh4eNOPX wLe1dujNqk+44gtQv+YQEtWOAKnK0cTs -----END CERTIFICATE-----Generated at Sun Apr 27 00:13:55 2025 by rpki-client on console.sobornost.net