$ rpki-client -vvf rpki.apnic.net/member_repository/A9130837/E3F87CB236E311ECBC8CC250C4F9AE02/U2i4yNaWPq2DmQWkhvU8RLBBpe8.mft File: U2i4yNaWPq2DmQWkhvU8RLBBpe8.mft (raw, json) Hash identifier: VCg1MSt3FdVkWLGH8jNTt3PqVNAW4uFxm5gHkuYMn/Y= Subject key identifier: E8:BC:67:72:53:9C:2B:15:60:57:54:D3:9F:C2:42:7D:A4:0B:63:A8 Authority key identifier: 53:68:B8:C8:D6:96:3E:AD:83:99:05:A4:86:F5:3C:44:B0:41:A5:EF Certificate issuer: /CN=A9130837/serialNumber=5368B8C8D6963EAD839905A486F53C44B041A5EF Certificate serial: 0498 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U2i4yNaWPq2DmQWkhvU8RLBBpe8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130837/E3F87CB236E311ECBC8CC250C4F9AE02/U2i4yNaWPq2DmQWkhvU8RLBBpe8.mft Manifest number: 0491 Signing time: Sat 26 Apr 2025 23:40:24 +0000 Manifest this update: Sat 26 Apr 2025 23:40:24 +0000 Manifest next update: Sat 03 May 2025 23:40:24 +0000 Files and hashes: 1: U2i4yNaWPq2DmQWkhvU8RLBBpe8.crl (hash: H6IDi1txDgQpoZEaXlIj+5ycIvv1p6hLuAxUh+0MzB8=) 2: 1C032F5A36E711EC9581EC54C4F9AE02.roa (hash: zuaM96z3jhp+fAEf2SKv65O5x2n5mX1/wYZc1QfKJIE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130837/E3F87CB236E311ECBC8CC250C4F9AE02/U2i4yNaWPq2DmQWkhvU8RLBBpe8.crl rsync://rpki.apnic.net/member_repository/A9130837/E3F87CB236E311ECBC8CC250C4F9AE02/U2i4yNaWPq2DmQWkhvU8RLBBpe8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U2i4yNaWPq2DmQWkhvU8RLBBpe8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 23:40:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1176 (0x498) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130837, serialNumber=5368B8C8D6963EAD839905A486F53C44B041A5EF Validity Not Before: Apr 26 23:40:24 2025 GMT Not After : May 3 23:40:24 2025 GMT Subject: CN=680d6ee8-35d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:44:44:3a:28:3f:d9:f8:e8:e9:8f:38:59:84: 8c:7d:f2:d4:f7:dc:9e:e0:b6:4d:a5:6e:cc:b3:45: a1:47:6e:70:47:23:14:98:b5:72:9d:c1:af:0b:9c: 4a:07:da:cf:eb:fe:94:5a:39:3f:34:28:c7:4b:a2: d5:3f:d2:aa:f9:7e:b5:be:2d:ad:ac:ac:52:5b:90: f7:cc:6e:d3:a5:60:90:ce:f5:b3:48:ca:f8:4f:ef: ec:15:72:4c:60:b4:30:67:a2:45:ad:1a:69:e0:d4: 44:75:0c:70:5c:53:d4:6e:a0:9e:e9:f9:76:74:2e: d1:8f:ae:74:49:39:eb:b8:40:04:84:e4:68:17:25: 0b:e2:f0:9f:7f:ea:7c:16:c1:67:9e:56:c1:fc:08: 87:7c:ad:3c:37:69:73:e4:31:0a:1f:c1:e9:31:94: 9e:2a:51:44:0f:7f:5b:90:ad:75:a5:19:c9:ef:b9: c8:6b:c1:0d:75:9a:ad:70:f8:f0:4f:43:f1:3d:7d: 5e:2a:12:5f:e5:b3:39:66:e7:4e:ad:7c:22:08:a6: 83:a0:31:93:da:7a:05:83:8f:bb:10:03:9e:3f:c8: 27:5e:3a:55:4e:7a:ec:4d:74:37:1b:d8:c3:ff:82: be:56:0e:89:0b:02:13:79:3d:52:e8:de:fd:26:71: ee:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:BC:67:72:53:9C:2B:15:60:57:54:D3:9F:C2:42:7D:A4:0B:63:A8 X509v3 Authority Key Identifier: keyid:53:68:B8:C8:D6:96:3E:AD:83:99:05:A4:86:F5:3C:44:B0:41:A5:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130837/E3F87CB236E311ECBC8CC250C4F9AE02/U2i4yNaWPq2DmQWkhvU8RLBBpe8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U2i4yNaWPq2DmQWkhvU8RLBBpe8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130837/E3F87CB236E311ECBC8CC250C4F9AE02/U2i4yNaWPq2DmQWkhvU8RLBBpe8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:5a:e6:89:ce:b4:29:1f:de:7c:cd:3d:6c:ee:eb:ab:7b:9b: 6c:d2:2e:bb:64:e8:05:d4:99:5e:99:95:e4:39:eb:c6:34:fa: a7:4d:93:c6:eb:f5:ac:03:7b:40:99:0c:95:98:fd:b2:d9:7d: e8:dc:82:27:df:ce:24:7f:00:cf:65:fe:30:e7:a4:63:5b:8c: 54:da:09:d3:bd:92:49:c4:8c:ed:d6:73:6a:9f:79:cb:12:26: 98:10:f1:99:0e:e7:f0:a4:64:b4:c7:09:82:50:2b:f7:40:9a: df:bf:ca:f6:ec:76:75:ae:3a:eb:43:89:f9:7a:19:f3:e0:62: 5e:51:cd:c5:4f:f0:2a:43:f9:e1:ee:c0:29:74:e5:96:43:32: c7:66:fb:b8:c6:c8:22:11:16:f1:9f:8e:9e:f8:2a:b4:ff:36: 13:11:12:f8:3c:ce:80:f2:2e:7c:92:0e:6b:e3:07:5c:71:e4: b7:c9:61:f4:f4:2c:5e:e5:d8:9d:e7:be:22:26:3f:25:d9:56: e4:1f:03:05:6f:99:a8:72:b3:7a:e0:a9:dd:2e:30:3c:1e:1d: 7a:7b:bd:a0:2b:c2:c3:53:b1:4f:7b:cd:e6:d2:4a:67:a6:7b: 4e:c7:ae:72:f7:ee:a2:c0:6b:7e:f8:9f:1b:60:45:1e:e6:dc: 6b:13:82:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA4MzcxMTAvBgNVBAUTKDUzNjhCOEM4RDY5NjNFQUQ4Mzk5MDVBNDg2RjUzQzQ0 QjA0MUE1RUYwHhcNMjUwNDI2MjM0MDI0WhcNMjUwNTAzMjM0MDI0WjAYMRYwFAYD VQQDEw02ODBkNmVlOC0zNWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApUREOig/2fjo6Y84WYSMffLU99ye4LZNpW7Ms0WhR25wRyMUmLVyncGvC5xK B9rP6/6UWjk/NCjHS6LVP9Kq+X61vi2trKxSW5D3zG7TpWCQzvWzSMr4T+/sFXJM YLQwZ6JFrRpp4NREdQxwXFPUbqCe6fl2dC7Rj650STnruEAEhORoFyUL4vCff+p8 FsFnnlbB/AiHfK08N2lz5DEKH8HpMZSeKlFED39bkK11pRnJ77nIa8ENdZqtcPjw T0PxPX1eKhJf5bM5ZudOrXwiCKaDoDGT2noFg4+7EAOeP8gnXjpVTnrsTXQ3G9jD /4K+Vg6JCwITeT1S6N79JnHu8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOi8Z3JT nCsVYFdU05/CQn2kC2OoMB8GA1UdIwQYMBaAFFNouMjWlj6tg5kFpIb1PESwQaXv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDgzNy9FM0Y4N0NCMjM2 RTMxMUVDQkM4Q0MyNTBDNEY5QUUwMi9VMmk0eU5hV1BxMkRtUVdraHZVOFJMQkJw ZTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1UyaTR5TmFXUHEyRG1RV2todlU4UkxCQnBlOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDgzNy9FM0Y4N0NCMjM2RTMxMUVDQkM4Q0MyNTBDNEY5QUUwMi9VMmk0eU5hV1Bx MkRtUVdraHZVOFJMQkJwZTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvWuaJzrQpH958zT1s7uure5ts0i67ZOgF1JlemZXkOevGNPqnTZPG 6/WsA3tAmQyVmP2y2X3o3IIn384kfwDPZf4w56RjW4xU2gnTvZJJxIzt1nNqn3nL EiaYEPGZDufwpGS0xwmCUCv3QJrfv8r27HZ1rjrrQ4n5ehnz4GJeUc3FT/AqQ/nh 7sApdOWWQzLHZvu4xsgiERbxn46e+Cq0/zYTERL4PM6A8i58kg5r4wdcceS3yWH0 9Cxe5did574iJj8l2VbkHwMFb5mocrN64KndLjA8Hh16e72gK8LDU7FPe83m0kpn pntOx65y9+6iwGt++J8bYEUe5txrE4Ii -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:26 2025 by rpki-client on console.sobornost.net