$ rpki-client -vvf rpki.apnic.net/member_repository/A913344F/94FFBAA0250F11E990DDE36CC4F9AE02/rSHioIh9gBBYg2nxR4WWAoR3zb4.mft File: rSHioIh9gBBYg2nxR4WWAoR3zb4.mft (raw, json) Hash identifier: EmeTCkCGSyp1iNLLpDMiqTab5ECcgcseb7tOacwOjug= Subject key identifier: 0B:67:3D:6A:7E:80:B2:FF:5B:96:BE:C4:4E:CE:47:59:8E:D6:8B:CC Authority key identifier: AD:21:E2:A0:88:7D:80:10:58:83:69:F1:47:85:96:02:84:77:CD:BE Certificate issuer: /CN=A913344F/serialNumber=AD21E2A0887D8010588369F1478596028477CDBE Certificate serial: 10AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSHioIh9gBBYg2nxR4WWAoR3zb4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913344F/94FFBAA0250F11E990DDE36CC4F9AE02/rSHioIh9gBBYg2nxR4WWAoR3zb4.mft Manifest number: 10A6 Signing time: Mon 28 Apr 2025 17:33:45 +0000 Manifest this update: Mon 28 Apr 2025 17:33:45 +0000 Manifest next update: Mon 05 May 2025 17:33:45 +0000 Files and hashes: 1: rSHioIh9gBBYg2nxR4WWAoR3zb4.crl (hash: 2QGE3vsoaGPT+J4sGuy2jSjydLaHE5zy+4TxaIDOYD8=) 2: 2CDBC1B0251111E997B74770C4F9AE02.roa (hash: /+y+JZvdgDvleCapwUXYIThVyUcKdFkPONIIfNbMybY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913344F/94FFBAA0250F11E990DDE36CC4F9AE02/rSHioIh9gBBYg2nxR4WWAoR3zb4.crl rsync://rpki.apnic.net/member_repository/A913344F/94FFBAA0250F11E990DDE36CC4F9AE02/rSHioIh9gBBYg2nxR4WWAoR3zb4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSHioIh9gBBYg2nxR4WWAoR3zb4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 17:33:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4269 (0x10ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913344F, serialNumber=AD21E2A0887D8010588369F1478596028477CDBE Validity Not Before: Apr 28 17:33:45 2025 GMT Not After : May 5 17:33:45 2025 GMT Subject: CN=680fbbf9-6709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1d:9e:ed:e1:16:ac:74:e9:62:59:28:75:9a: 3c:38:cc:2f:39:3c:22:3d:30:11:65:f4:5e:df:b9: 94:73:7c:2f:dd:4d:19:ec:50:29:cd:09:7c:14:e0: a9:35:ef:62:9f:f7:7c:2c:c3:50:c7:97:23:f9:8c: b2:80:38:e1:b1:de:fa:05:f5:5f:4d:55:9d:06:20: 04:77:ac:a7:99:8f:d1:c0:73:94:32:01:6b:5b:f5: 86:c4:a6:b2:cd:55:a9:fa:1b:41:82:df:55:30:16: 16:89:9b:f1:34:57:c5:9d:37:c3:93:ca:3a:37:9d: a7:fa:2c:c0:80:ef:97:81:f2:82:9e:a5:23:f4:9c: 91:dd:18:b2:b7:5b:a7:ef:34:98:c7:b6:52:46:16: 47:b4:f3:f3:5e:a7:51:7c:41:82:cb:d9:a0:02:e9: 95:07:9e:54:d6:bf:d3:d7:c6:c6:04:07:94:77:ef: 64:b9:9f:56:65:56:76:3f:78:5f:6a:68:98:24:fb: 7a:5a:04:63:02:9e:37:9b:ab:c7:f2:61:dd:db:5b: 08:3f:68:41:ad:f9:c1:6a:17:1f:98:4e:9b:d8:85: 40:f2:53:2a:24:68:36:b6:12:e8:24:12:4b:44:83: e4:29:85:87:fe:7d:cd:14:b3:49:4c:a4:d6:6f:ff: b0:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:67:3D:6A:7E:80:B2:FF:5B:96:BE:C4:4E:CE:47:59:8E:D6:8B:CC X509v3 Authority Key Identifier: keyid:AD:21:E2:A0:88:7D:80:10:58:83:69:F1:47:85:96:02:84:77:CD:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913344F/94FFBAA0250F11E990DDE36CC4F9AE02/rSHioIh9gBBYg2nxR4WWAoR3zb4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSHioIh9gBBYg2nxR4WWAoR3zb4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913344F/94FFBAA0250F11E990DDE36CC4F9AE02/rSHioIh9gBBYg2nxR4WWAoR3zb4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:54:e9:d4:f0:22:73:27:a4:0d:47:b3:5c:4c:fe:37:54:b3: 79:01:f6:b2:0d:b2:b9:1b:a1:2e:b2:5c:10:72:96:af:bf:31: 20:8a:4d:ad:ad:a2:ad:77:9a:c5:17:3d:7f:a2:0c:c8:b7:03: e9:1e:72:17:2b:9c:7a:f6:b1:15:1d:66:b8:09:59:30:45:b5: 4e:38:a5:7a:65:84:9c:ee:91:55:3a:57:80:9f:dc:e9:20:11: 61:a7:03:ef:22:6a:65:3a:fd:50:29:4b:b9:fa:7d:e9:0f:6f: c5:3c:4f:43:72:d3:f8:b2:42:64:3b:44:7f:c6:5f:09:28:5a: d4:d7:16:e5:d7:21:3a:63:22:71:ba:7a:fd:b9:db:2c:e1:1e: af:f7:d3:e1:88:42:cf:f6:a5:3f:c7:cd:50:d8:44:64:91:30: 0e:06:cf:e8:22:f6:04:f0:c6:4a:82:b2:1e:ed:e7:85:22:61: 49:29:86:62:0d:2d:cc:76:96:ae:ab:14:d8:4f:ee:d7:a9:b9: 83:10:11:de:27:e2:7e:b7:da:e4:fa:20:2a:c8:28:22:ca:2e: c8:c7:07:f9:0e:2e:76:f2:af:a4:a3:bd:a6:9f:8e:5f:cc:c4: a8:84:b0:a2:2a:6c:86:f4:e5:ca:c0:ba:50:16:7b:4a:37:28: ab:5e:7a:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM0NEYxMTAvBgNVBAUTKEFEMjFFMkEwODg3RDgwMTA1ODgzNjlGMTQ3ODU5NjAy ODQ3N0NEQkUwHhcNMjUwNDI4MTczMzQ1WhcNMjUwNTA1MTczMzQ1WjAYMRYwFAYD VQQDEw02ODBmYmJmOS02NzA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyh2e7eEWrHTpYlkodZo8OMwvOTwiPTARZfRe37mUc3wv3U0Z7FApzQl8FOCp Ne9in/d8LMNQx5cj+YyygDjhsd76BfVfTVWdBiAEd6ynmY/RwHOUMgFrW/WGxKay zVWp+htBgt9VMBYWiZvxNFfFnTfDk8o6N52n+izAgO+XgfKCnqUj9JyR3Riyt1un 7zSYx7ZSRhZHtPPzXqdRfEGCy9mgAumVB55U1r/T18bGBAeUd+9kuZ9WZVZ2P3hf amiYJPt6WgRjAp43m6vH8mHd21sIP2hBrfnBahcfmE6b2IVA8lMqJGg2thLoJBJL RIPkKYWH/n3NFLNJTKTWb/+wHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAtnPWp+ gLL/W5a+xE7OR1mO1ovMMB8GA1UdIwQYMBaAFK0h4qCIfYAQWINp8UeFlgKEd82+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzQ0Ri85NEZGQkFBMDI1 MEYxMUU5OTBEREUzNkNDNEY5QUUwMi9yU0hpb0loOWdCQllnMm54UjRXV0FvUjN6 YjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JTSGlvSWg5Z0JCWWcybnhSNFdXQW9SM3piNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzQ0Ri85NEZGQkFBMDI1MEYxMUU5OTBEREUzNkNDNEY5QUUwMi9yU0hpb0loOWdC QllnMm54UjRXV0FvUjN6YjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMVOnU8CJzJ6QNR7NcTP43VLN5AfayDbK5G6EuslwQcpavvzEgik2t raKtd5rFFz1/ogzItwPpHnIXK5x69rEVHWa4CVkwRbVOOKV6ZYSc7pFVOleAn9zp IBFhpwPvImplOv1QKUu5+n3pD2/FPE9DctP4skJkO0R/xl8JKFrU1xbl1yE6YyJx unr9udss4R6v99PhiELP9qU/x81Q2ERkkTAOBs/oIvYE8MZKgrIe7eeFImFJKYZi DS3MdpauqxTYT+7XqbmDEBHeJ+J+t9rk+iAqyCgiyi7Ixwf5Di528q+ko72mn45f zMSohLCiKmyG9OXKwLpQFntKNyirXno9 -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:27 2025 by rpki-client on console.sobornost.net