$ rpki-client -vvf rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft File: ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft (raw, json) Hash identifier: Lc6dgpmazJaKOUTVz1RsU1Lk4nCvUm9LEMHccQJ/Qao= Subject key identifier: A6:7A:36:9C:FA:37:2B:48:9F:3C:21:D8:BE:19:CF:B8:BF:11:B7:60 Authority key identifier: 4E:81:E0:F6:A8:3A:DC:2A:D5:23:26:64:A9:54:D2:67:CB:43:D9:0A Certificate issuer: /CN=A9130138/serialNumber=4E81E0F6A83ADC2AD5232664A954D267CB43D90A Certificate serial: 0352 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft Manifest number: 0339 Signing time: Sun 27 Apr 2025 00:46:14 +0000 Manifest this update: Sun 27 Apr 2025 00:46:14 +0000 Manifest next update: Sun 04 May 2025 00:46:13 +0000 Files and hashes: 1: ToHg9qg63CrVIyZkqVTSZ8tD2Qo.crl (hash: Diy7aaGXdZA1rvkVcZ52sQd7gnKvnDDrvLpWD+xZyHE=) 2: 6D3CF65A134311EEA2AF3B1EC4F9AE02.roa (hash: UBiYNqcmtBfIzuh2rKChQRqBKv4o6kiL3PCKwJHHiWM=) 3: 5E0B2804158811EEA0660D12C4F9AE02.roa (hash: 5vOwA9yYve8Rd0veqkKYknGLc6ONCvBt3X45gfOUijw=) 4: 2A616414808A11EF813A8343C4F9AE02.roa (hash: SPcUKAYBAtziUJsb1+HLmMDC9dz+I+2POCJimexdaR4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.crl rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 00:46:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 850 (0x352) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130138, serialNumber=4E81E0F6A83ADC2AD5232664A954D267CB43D90A Validity Not Before: Apr 27 00:46:14 2025 GMT Not After : May 4 00:46:13 2025 GMT Subject: CN=680d7e56-a14d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:52:9d:e7:3a:fd:c8:5e:b4:2b:62:3b:f4:e3: b4:24:c8:95:7b:e3:e4:4a:6b:39:ed:c9:3a:7b:d0: 6c:56:d9:ec:7e:a2:36:6d:bf:b0:ed:fb:aa:69:87: 29:40:54:66:a7:38:58:da:ba:8b:87:a8:1e:e2:75: 93:d0:f4:51:74:7c:9f:ab:d9:2a:4d:9f:90:51:c9: 55:96:dc:33:91:37:ef:b4:f0:2f:e5:6e:47:3a:79: 6e:23:91:b2:b4:38:c4:24:49:b9:cf:08:0e:53:e3: 0f:af:a9:23:05:01:01:31:4a:f6:70:69:eb:be:4b: 97:11:4d:4b:63:a2:14:c2:ca:da:ac:68:e2:ed:bf: f0:19:35:12:3e:ca:e2:6d:23:06:64:fd:97:54:43: c5:8f:7b:80:66:e5:12:61:61:b9:8b:2a:23:88:66: 40:3c:48:34:26:73:92:67:9a:a3:6e:ec:80:66:17: 99:9a:a4:ba:03:d4:9a:f6:83:ef:a4:ba:6d:0d:36: ef:19:7b:cb:5a:12:7a:73:98:a5:72:28:4d:50:e9: 5a:c6:42:de:04:79:9f:3e:00:87:f4:24:54:72:0b: 77:ba:c3:cc:27:54:02:7d:0a:ec:aa:02:03:ac:9e: 28:4d:56:61:88:b7:a6:7d:42:25:c4:2b:69:e5:d2: a6:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:7A:36:9C:FA:37:2B:48:9F:3C:21:D8:BE:19:CF:B8:BF:11:B7:60 X509v3 Authority Key Identifier: keyid:4E:81:E0:F6:A8:3A:DC:2A:D5:23:26:64:A9:54:D2:67:CB:43:D9:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:c6:57:f6:ff:3c:70:c8:3a:c8:50:61:bc:44:34:e3:27:16: 3d:6f:bc:d4:af:db:61:e4:80:3d:2f:c7:68:8a:23:5b:a5:78: 5f:9f:ca:1f:a0:7d:be:6d:52:56:4b:4e:e9:74:a3:77:bc:e7: 92:c0:5a:0d:1c:13:a7:75:7f:c3:cc:f8:27:30:8b:02:7d:3f: f7:67:ce:35:de:07:94:2c:a8:13:75:68:ca:be:5b:af:2a:fe: df:ad:0a:0c:65:8d:0f:1d:d0:1b:2d:d2:8d:45:5c:5f:90:a7: 96:82:5d:63:b4:f0:68:b8:26:e4:e4:6b:86:44:97:0d:13:88: 54:1c:a0:0f:8d:19:38:6d:73:d5:8b:1e:63:63:3f:e2:80:9c: e2:c7:8d:97:1d:cf:be:95:6a:a8:00:3f:ef:29:57:80:74:f5: ce:1d:d3:1a:98:7b:20:75:4d:bd:7c:a2:8c:8b:55:c6:32:fc: 93:a8:57:98:d7:1d:56:cc:f5:57:67:01:35:0b:fa:28:ee:f5: 0f:f0:b8:21:1e:60:c5:9f:ac:e2:57:5a:60:29:64:c1:81:1c: 40:db:00:85:5f:fe:79:6b:e1:89:3b:1c:a9:78:ee:c8:10:ac: 1b:88:c5:43:28:4e:13:4b:5b:69:00:54:3c:ce:ac:c6:53:bd: 8e:0f:5b:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAxMzgxMTAvBgNVBAUTKDRFODFFMEY2QTgzQURDMkFENTIzMjY2NEE5NTREMjY3 Q0I0M0Q5MEEwHhcNMjUwNDI3MDA0NjE0WhcNMjUwNTA0MDA0NjEzWjAYMRYwFAYD VQQDEw02ODBkN2U1Ni1hMTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz1Kd5zr9yF60K2I79OO0JMiVe+PkSms57ck6e9BsVtnsfqI2bb+w7fuqaYcp QFRmpzhY2rqLh6ge4nWT0PRRdHyfq9kqTZ+QUclVltwzkTfvtPAv5W5HOnluI5Gy tDjEJEm5zwgOU+MPr6kjBQEBMUr2cGnrvkuXEU1LY6IUwsrarGji7b/wGTUSPsri bSMGZP2XVEPFj3uAZuUSYWG5iyojiGZAPEg0JnOSZ5qjbuyAZheZmqS6A9Sa9oPv pLptDTbvGXvLWhJ6c5ilcihNUOlaxkLeBHmfPgCH9CRUcgt3usPMJ1QCfQrsqgID rJ4oTVZhiLemfUIlxCtp5dKmzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKZ6Npz6 NytInzwh2L4Zz7i/EbdgMB8GA1UdIwQYMBaAFE6B4PaoOtwq1SMmZKlU0mfLQ9kK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDEzOC82M0E0RDFCQ0M0 N0ExMUVDOEIzNDQ5NjRDNEY5QUUwMi9Ub0hnOXFnNjNDclZJeVprcVZUU1o4dEQy UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RvSGc5cWc2M0NyVkl5WmtxVlRTWjh0RDJRby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDEzOC82M0E0RDFCQ0M0N0ExMUVDOEIzNDQ5NjRDNEY5QUUwMi9Ub0hnOXFnNjND clZJeVprcVZUU1o4dEQyUW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYxlf2/zxwyDrIUGG8RDTjJxY9b7zUr9th5IA9L8doiiNbpXhfn8of oH2+bVJWS07pdKN3vOeSwFoNHBOndX/DzPgnMIsCfT/3Z8413geULKgTdWjKvluv Kv7frQoMZY0PHdAbLdKNRVxfkKeWgl1jtPBouCbk5GuGRJcNE4hUHKAPjRk4bXPV ix5jYz/igJzix42XHc++lWqoAD/vKVeAdPXOHdMamHsgdU29fKKMi1XGMvyTqFeY 1x1WzPVXZwE1C/oo7vUP8LghHmDFn6ziV1pgKWTBgRxA2wCFX/55a+GJOxypeO7I EKwbiMVDKE4TS1tpAFQ8zqzGU72OD1sL -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:26 2025 by rpki-client on console.sobornost.net