$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft File: I_XZOoLn14QGebHGTaN8N8_-d-8.mft (raw, json) Hash identifier: cr4QnX+H4e2065H6t5HWIlPPuN++Zai2O4LkYO0JH2Q= Subject key identifier: E6:B7:C8:87:D4:EF:E3:7D:04:CC:62:F8:E3:67:1A:74:F8:D7:22:28 Authority key identifier: 23:F5:D9:3A:82:E7:D7:84:06:79:B1:C6:4D:A3:7C:37:CF:FE:77:EF Certificate issuer: /CN=A9132B4D/serialNumber=23F5D93A82E7D7840679B1C64DA37C37CFFE77EF Certificate serial: 064D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft Manifest number: 0618 Signing time: Thu 24 Apr 2025 22:47:22 +0000 Manifest this update: Thu 24 Apr 2025 22:47:21 +0000 Manifest next update: Thu 01 May 2025 22:47:21 +0000 Files and hashes: 1: I_XZOoLn14QGebHGTaN8N8_-d-8.crl (hash: evobGNBrQisshBlgwO3EKD3UiRNWH1lcvzv5EPqv6OE=) 2: B4B1A742BE4C11EEB1327A54C4F9AE02.roa (hash: P11sIa+o699M+Jrp/6j9KRqVJetMbcC+wvd26lTDVLs=) 3: B3E4DCF8BE4C11EEB1327A54C4F9AE02.roa (hash: /zbyHciIwndBXlxJhKITEkhA9vsFIRYPFElbWadsiXw=) 4: E1201A0422D611EFAE700044C4F9AE02.roa (hash: 6KG4K+YscUuCOPJskrNXUVs3OZB2ppYjCB4dtTgCAMw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.crl rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:47:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1613 (0x64d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132B4D, serialNumber=23F5D93A82E7D7840679B1C64DA37C37CFFE77EF Validity Not Before: Apr 24 22:47:21 2025 GMT Not After : May 1 22:47:21 2025 GMT Subject: CN=680abf79-4d6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:58:d0:15:ff:c4:d3:13:b6:2f:a5:76:5f:55: 2c:fa:72:45:49:06:58:54:01:bc:1b:d7:40:c8:94: a8:46:dd:5d:50:5e:ae:1b:a0:ae:6e:ef:15:4c:3e: 2b:3f:f5:87:58:c1:8b:44:80:c4:9f:8f:ef:54:ca: 23:ae:4e:63:11:b6:7b:80:57:b6:de:a7:f3:40:25: 48:a1:9b:8e:11:4f:ba:9a:a9:f4:21:74:a7:bf:98: c4:56:bc:52:3c:f1:56:26:bf:42:a9:7a:5d:2f:e6: d7:3f:f8:dd:2b:c3:1e:a7:ec:26:ca:6d:1a:1e:01: 25:69:45:79:8f:0a:77:dd:59:08:0f:85:09:5c:09: 51:43:cd:6b:a5:9e:6c:9f:a9:8f:b0:8e:08:65:13: 89:d2:68:99:52:de:f7:94:d4:10:37:5d:dc:18:70: 75:5d:f2:7d:28:53:43:7e:12:e5:b0:3d:7b:30:6b: ad:9b:fa:2e:8a:58:e2:df:18:50:b5:c0:d0:a1:71: 65:62:5c:fd:c2:41:38:20:78:40:f7:38:86:c3:f7: 4c:35:5a:96:94:25:fe:4d:db:d9:53:c0:f5:6e:24: f1:82:52:a1:e3:ca:95:b0:62:1e:6d:e2:be:5c:62: 6a:db:37:02:0b:b4:bc:a6:06:3a:41:2e:dd:9a:d3: 95:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:B7:C8:87:D4:EF:E3:7D:04:CC:62:F8:E3:67:1A:74:F8:D7:22:28 X509v3 Authority Key Identifier: keyid:23:F5:D9:3A:82:E7:D7:84:06:79:B1:C6:4D:A3:7C:37:CF:FE:77:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:c2:8e:09:d0:81:cd:a3:de:63:eb:8c:34:21:d3:1d:2c:b1: f1:54:50:04:ae:46:e9:1a:0d:2a:87:49:9a:8b:0a:3b:23:4b: 35:0f:a0:e4:07:8b:e7:68:91:c7:21:c0:47:1e:5d:61:c9:7d: 6e:67:e9:72:b8:c8:cf:fc:56:ce:8d:e0:d1:a1:76:10:2d:29: 10:9d:f5:d5:90:0e:52:41:79:02:e4:18:e1:45:79:c4:cc:b6: f3:c0:31:4e:3a:24:14:98:82:98:a8:e9:f8:90:68:5c:17:eb: e4:cf:86:62:8e:ad:08:4c:cc:af:4e:2c:9d:f0:3a:b1:c3:5e: a1:8e:13:1a:ad:4f:81:3f:7a:1f:c0:99:0e:f8:9d:8f:23:42: fd:04:83:04:47:d6:88:e1:47:63:81:b6:73:15:93:4c:1c:d2: cc:46:0a:08:14:7d:b1:30:6a:4a:97:55:9c:a4:c2:0c:62:39: 8c:38:5c:c8:69:b5:2c:85:21:cd:71:fb:22:95:eb:a7:d2:ba: 94:6d:67:43:31:8c:f0:17:56:f4:28:31:90:83:ed:7e:a2:0a: ef:ce:cd:71:ca:02:5b:ed:06:45:29:4a:c2:0b:fd:3f:25:13: 22:84:2a:1c:46:da:2b:86:0f:48:48:29:9c:79:20:32:02:80: b4:43:93:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBk0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJCNEQxMTAvBgNVBAUTKDIzRjVEOTNBODJFN0Q3ODQwNjc5QjFDNjREQTM3QzM3 Q0ZGRTc3RUYwHhcNMjUwNDI0MjI0NzIxWhcNMjUwNTAxMjI0NzIxWjAYMRYwFAYD VQQDEw02ODBhYmY3OS00ZDZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+ljQFf/E0xO2L6V2X1Us+nJFSQZYVAG8G9dAyJSoRt1dUF6uG6Cubu8VTD4r P/WHWMGLRIDEn4/vVMojrk5jEbZ7gFe23qfzQCVIoZuOEU+6mqn0IXSnv5jEVrxS PPFWJr9CqXpdL+bXP/jdK8Mep+wmym0aHgElaUV5jwp33VkID4UJXAlRQ81rpZ5s n6mPsI4IZROJ0miZUt73lNQQN13cGHB1XfJ9KFNDfhLlsD17MGutm/ouilji3xhQ tcDQoXFlYlz9wkE4IHhA9ziGw/dMNVqWlCX+TdvZU8D1biTxglKh48qVsGIebeK+ XGJq2zcCC7S8pgY6QS7dmtOVvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOa3yIfU 7+N9BMxi+ONnGnT41yIoMB8GA1UdIwQYMBaAFCP12TqC59eEBnmxxk2jfDfP/nfv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkI0RC9DMTk5RTAwNkIy MDUxMUVCQUVBRTlGMTBDNEY5QUUwMi9JX1haT29MbjE0UUdlYkhHVGFOOE44Xy1k LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lfWFpPb0xuMTRRR2ViSEdUYU44TjhfLWQtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkI0RC9DMTk5RTAwNkIyMDUxMUVCQUVBRTlGMTBDNEY5QUUwMi9JX1haT29MbjE0 UUdlYkhHVGFOOE44Xy1kLTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxwo4J0IHNo95j64w0IdMdLLHxVFAErkbpGg0qh0maiwo7I0s1D6Dk B4vnaJHHIcBHHl1hyX1uZ+lyuMjP/FbOjeDRoXYQLSkQnfXVkA5SQXkC5BjhRXnE zLbzwDFOOiQUmIKYqOn4kGhcF+vkz4Zijq0ITMyvTiyd8Dqxw16hjhMarU+BP3of wJkO+J2PI0L9BIMER9aI4UdjgbZzFZNMHNLMRgoIFH2xMGpKl1WcpMIMYjmMOFzI abUshSHNcfsileun0rqUbWdDMYzwF1b0KDGQg+1+ogrvzs1xygJb7QZFKUrCC/0/ JRMihCocRtorhg9ISCmceSAyAoC0Q5P1 -----END CERTIFICATE-----Generated at Fri Apr 25 08:23:41 2025 by rpki-client on console.sobornost.net