$ rpki-client -vvf rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft File: tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft (raw, json) Hash identifier: LrWc+g2A4/3oB1na/Es11djoE8O+XX3+gUeiEl1T1Qw= Subject key identifier: 96:C3:DC:3A:04:BF:82:EE:4B:53:57:1E:97:35:B2:E1:FA:C3:AF:7A Authority key identifier: B4:83:9F:4F:C3:F8:ED:FC:BD:22:DA:1A:79:9D:86:5A:CF:E0:32:5F Certificate issuer: /CN=A9131181/serialNumber=B4839F4FC3F8EDFCBD22DA1A799D865ACFE0325F Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIOfT8P47fy9ItoaeZ2GWs_gMl8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft Manifest number: 13 Signing time: Sun 27 Apr 2025 06:52:44 +0000 Manifest this update: Sun 27 Apr 2025 06:52:43 +0000 Manifest next update: Sun 04 May 2025 06:52:43 +0000 Files and hashes: 1: tIOfT8P47fy9ItoaeZ2GWs_gMl8.crl (hash: UquFvPvo1K2YFAW+LZ0ofigtlxxux4HYDRr767YUZ7k=) 2: AD57493E0B7B11F09EB3322EC4F9AE02.roa (hash: OwduiWmYFtEig81kPfdDRhJbko4w3+s4usceEwZWT2I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.crl rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIOfT8P47fy9ItoaeZ2GWs_gMl8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131181, serialNumber=B4839F4FC3F8EDFCBD22DA1A799D865ACFE0325F Validity Not Before: Apr 27 06:52:43 2025 GMT Not After : May 4 06:52:43 2025 GMT Subject: CN=680dd43b-4cb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f7:94:8e:c5:5f:e5:23:e6:b1:67:d5:aa:35: a0:26:a6:15:86:21:05:2a:6c:3d:58:3d:db:93:0f: 12:c3:fa:27:72:89:32:2d:22:36:d8:37:48:95:6e: 29:aa:f0:ce:fe:85:c7:07:c4:9a:0b:c4:74:7d:21: df:e9:9f:f0:7a:5d:8e:cb:e8:2f:f1:27:1e:02:db: 74:73:f6:41:74:f2:47:9e:e4:21:d9:cd:a3:cc:6d: 42:4d:e9:83:0f:d0:6e:ad:28:3a:59:b8:d2:38:0d: 19:69:8b:72:76:4f:aa:fd:f1:4b:c9:a6:f1:f8:a8: 87:b7:83:69:b7:fd:86:16:1f:14:4e:35:4c:c3:36: 38:77:1e:df:45:b5:e8:e1:67:42:2e:f7:37:7e:94: 7b:c0:85:e9:66:af:6f:71:ba:58:bf:55:11:4c:34: 3f:0e:46:af:3c:be:1a:1b:e6:2c:a9:93:69:e0:ab: 97:1a:7d:67:29:92:7d:2e:63:ba:8d:36:b7:e2:82: a9:c1:d1:62:4e:d4:38:8c:f9:74:86:58:96:77:c1: 79:52:8f:9f:aa:aa:21:2d:0f:07:6f:87:0e:f3:e2: a0:a8:7c:a6:ee:ca:75:47:5b:ca:ae:9d:e2:6b:44: 81:56:da:7c:88:e7:ce:f9:b9:a3:6d:bc:ad:6b:7c: b4:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:C3:DC:3A:04:BF:82:EE:4B:53:57:1E:97:35:B2:E1:FA:C3:AF:7A X509v3 Authority Key Identifier: keyid:B4:83:9F:4F:C3:F8:ED:FC:BD:22:DA:1A:79:9D:86:5A:CF:E0:32:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIOfT8P47fy9ItoaeZ2GWs_gMl8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:ce:b0:64:fa:7c:52:84:41:a0:87:08:34:e1:5b:ec:f7:2b: 5f:aa:d7:d5:aa:9a:df:f8:34:da:7c:73:15:65:9e:ec:b1:0f: 30:a3:7e:70:b2:25:ba:87:eb:1a:99:1d:08:a8:2b:16:85:72: ff:30:50:19:97:32:19:fd:61:3b:9e:a8:4e:96:a2:ea:d0:ad: 67:4f:e4:c2:bf:01:38:6a:85:bc:3b:ed:32:e6:d3:78:bb:cd: 1f:f3:ff:b0:3a:c5:c5:cf:93:23:55:c6:ae:a3:f2:49:b2:43: 93:99:e5:27:c7:ec:8c:a9:46:21:62:9c:df:ea:ff:5e:7d:f2: 0d:b6:3f:56:6e:e7:6e:fd:58:9e:62:57:ea:46:ac:a3:bb:5a: 66:43:52:58:f5:d6:8c:1b:5f:b9:40:68:45:e0:a3:d6:be:1c: f3:3d:61:de:e9:d7:c3:28:32:47:bd:f5:56:0c:c9:81:c9:87: 29:dc:af:97:e3:23:34:49:d1:ee:48:a9:8e:62:9c:ba:6f:f2: 2b:6e:c5:8b:e5:9b:ec:fa:1e:05:e0:ec:95:7e:cc:2d:b1:a3: cd:2e:5f:fe:6b:a1:18:9c:10:5f:6d:3d:e1:cb:2e:44:f6:e3: 66:32:d6:d0:21:d6:9c:a4:fa:9f:1b:65:a9:c7:1e:36:59:a6: df:db:46:24 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MTE4MTExMC8GA1UEBRMoQjQ4MzlGNEZDM0Y4RURGQ0JEMjJEQTFBNzk5RDg2NUFD RkUwMzI1RjAeFw0yNTA0MjcwNjUyNDNaFw0yNTA1MDQwNjUyNDNaMBgxFjAUBgNV BAMTDTY4MGRkNDNiLTRjYjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDC95SOxV/lI+axZ9WqNaAmphWGIQUqbD1YPduTDxLD+idyiTItIjbYN0iVbimq 8M7+hccHxJoLxHR9Id/pn/B6XY7L6C/xJx4C23Rz9kF08kee5CHZzaPMbUJN6YMP 0G6tKDpZuNI4DRlpi3J2T6r98UvJpvH4qIe3g2m3/YYWHxRONUzDNjh3Ht9Ftejh Z0Iu9zd+lHvAhelmr29xuli/VRFMND8ORq88vhob5iypk2ngq5cafWcpkn0uY7qN NrfigqnB0WJO1DiM+XSGWJZ3wXlSj5+qqiEtDwdvhw7z4qCofKbuynVHW8quneJr RIFW2nyI5875uaNtvK1rfLSxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlsPcOgS/ gu5LU1celzWy4frDr3owHwYDVR0jBBgwFoAUtIOfT8P47fy9ItoaeZ2GWs/gMl8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMxMTgxL0FBMDg3RjdBMEI3 OTExRjBCQjk5RUQ2QUM0RjlBRTAyL3RJT2ZUOFA0N2Z5OUl0b2FlWjJHV3NfZ01s OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdElPZlQ4UDQ3Znk5SXRvYWVaMkdXc19nTWw4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMx MTgxL0FBMDg3RjdBMEI3OTExRjBCQjk5RUQ2QUM0RjlBRTAyL3RJT2ZUOFA0N2Z5 OUl0b2FlWjJHV3NfZ01sOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACjOsGT6fFKEQaCHCDThW+z3K1+q19Wqmt/4NNp8cxVlnuyxDzCjfnCy JbqH6xqZHQioKxaFcv8wUBmXMhn9YTueqE6WourQrWdP5MK/AThqhbw77TLm03i7 zR/z/7A6xcXPkyNVxq6j8kmyQ5OZ5SfH7IypRiFinN/q/1598g22P1Zu5279WJ5i V+pGrKO7WmZDUlj11owbX7lAaEXgo9a+HPM9Yd7p18MoMke99VYMyYHJhyncr5fj IzRJ0e5IqY5inLpv8ituxYvlm+z6HgXg7JV+zC2xo80uX/5roRicEF9tPeHLLkT2 42Yy1tAh1pyk+p8bZanHHjZZpt/bRiQ= -----END CERTIFICATE-----Generated at Sun Apr 27 10:27:17 2025 by rpki-client on console.sobornost.net