$ rpki-client -vvf rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft File: 9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft (raw, json) Hash identifier: FmQtQyhg9m4rXuNV2UwxjKU2LvVm+CByfy/NlRZWQ7o= Subject key identifier: 5A:98:4D:1A:13:55:25:25:E0:83:C3:05:AD:BC:27:14:FE:DB:70:74 Authority key identifier: F6:49:8B:99:B7:7A:8F:01:B3:99:26:1F:BC:B9:04:E1:42:82:55:2E Certificate issuer: /CN=A9135604/serialNumber=F6498B99B77A8F01B399261FBCB904E14282552E Certificate serial: 0189 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmLmbd6jwGzmSYfvLkE4UKCVS4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft Manifest number: 0186 Signing time: Sun 27 Apr 2025 02:37:58 +0000 Manifest this update: Sun 27 Apr 2025 02:37:58 +0000 Manifest next update: Sun 04 May 2025 02:37:58 +0000 Files and hashes: 1: 9kmLmbd6jwGzmSYfvLkE4UKCVS4.crl (hash: OfDfnzCYCgEjBsi6BjUPvysKrd1cXSIYw9htJnSSpko=) 2: D2528232D2A011ED86EB1F59C4F9AE02.roa (hash: 56O4jNAGsWq8QxLhQ86Wzd380hCjYQVi8/lo+JDEK9g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.crl rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmLmbd6jwGzmSYfvLkE4UKCVS4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 393 (0x189) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135604, serialNumber=F6498B99B77A8F01B399261FBCB904E14282552E Validity Not Before: Apr 27 02:37:58 2025 GMT Not After : May 4 02:37:58 2025 GMT Subject: CN=680d9886-56db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:f4:44:12:8e:4b:e7:26:e5:11:e1:52:18:34: 6f:75:d0:e3:73:90:4c:aa:56:9f:b2:75:c7:c8:f5: 87:35:17:a8:1e:5c:7b:ff:6e:56:ad:45:af:fb:d9: 68:72:41:bb:75:54:e3:82:4b:25:0c:1a:9d:99:53: ae:96:ee:28:a6:4b:65:35:3e:34:20:a6:6f:09:6b: 48:75:7b:68:ea:6c:73:2a:18:fc:6e:bc:f4:46:be: 13:d4:0c:ef:d5:0d:2c:e9:be:74:f1:51:85:38:c2: 13:d4:e8:58:3d:61:42:c2:af:a3:3a:66:da:df:1d: 6e:6c:24:9e:68:ce:bb:cc:ea:6d:2a:dc:6f:de:bb: 55:5b:62:03:7e:2f:02:7e:d5:f7:27:37:ad:66:ea: 37:37:42:f1:50:14:25:92:94:6a:0b:9e:da:ac:b1: 37:d1:3c:95:d0:f5:21:55:66:32:62:5f:8e:2a:90: c5:8b:49:d2:da:ac:5f:1a:d0:47:c0:86:1c:c9:cb: 7f:71:ca:b0:a8:02:8d:ee:71:25:72:93:8d:04:3c: a6:23:df:52:53:5d:ce:b8:43:e4:3b:9b:ad:d8:82: 4b:db:e3:a0:bf:69:cf:c6:3a:ab:87:7f:3f:46:22: 2d:e0:76:da:6a:35:ab:ee:5e:40:37:30:5d:3c:c3: 42:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:98:4D:1A:13:55:25:25:E0:83:C3:05:AD:BC:27:14:FE:DB:70:74 X509v3 Authority Key Identifier: keyid:F6:49:8B:99:B7:7A:8F:01:B3:99:26:1F:BC:B9:04:E1:42:82:55:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmLmbd6jwGzmSYfvLkE4UKCVS4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:a3:04:44:68:df:b2:b8:9e:84:f1:27:cc:28:c8:79:06:20: 60:1e:46:f0:e4:69:0a:a4:58:87:be:66:75:32:47:ef:98:d0: 4a:bb:22:c3:11:c6:78:f5:e5:04:d8:3a:03:cf:83:1e:50:28: 50:b4:0f:e5:16:a3:8c:13:a9:60:fc:78:e7:c5:b7:f8:e1:23: 21:ee:e2:4c:e2:ab:b0:1c:fb:79:3e:61:50:e6:b4:75:94:c3: e9:0e:27:55:0c:a6:69:3a:e1:a4:a9:08:d3:83:80:d4:32:40: 08:95:7a:4f:3d:2d:a8:2b:55:b3:6c:b3:06:a7:64:fd:fd:ac: 17:1f:eb:f1:1c:11:75:a0:f9:6d:52:85:da:37:7f:8b:af:e0: c4:f3:19:2a:20:73:9b:ec:80:d8:b3:c3:84:1a:27:44:2f:96: 42:f4:63:f3:b6:5c:eb:c3:ad:e6:c3:ae:80:d2:56:17:ea:33: bc:f5:4c:99:b9:b1:3f:64:14:1f:e5:93:fd:ba:44:fe:63:b0: 85:34:94:85:23:87:30:bc:48:40:d0:3c:96:92:73:ef:9b:96: a1:49:2b:9e:e1:5d:53:93:d2:d0:11:07:e5:2e:ce:2c:a5:dd: 06:16:97:4d:18:22:ae:0d:6b:6b:8c:7c:79:47:ea:e4:74:5b: 3e:33:e7:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU2MDQxMTAvBgNVBAUTKEY2NDk4Qjk5Qjc3QThGMDFCMzk5MjYxRkJDQjkwNEUx NDI4MjU1MkUwHhcNMjUwNDI3MDIzNzU4WhcNMjUwNTA0MDIzNzU4WjAYMRYwFAYD VQQDEw02ODBkOTg4Ni01NmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7/REEo5L5yblEeFSGDRvddDjc5BMqlafsnXHyPWHNReoHlx7/25WrUWv+9lo ckG7dVTjgkslDBqdmVOulu4opktlNT40IKZvCWtIdXto6mxzKhj8brz0Rr4T1Azv 1Q0s6b508VGFOMIT1OhYPWFCwq+jOmba3x1ubCSeaM67zOptKtxv3rtVW2IDfi8C ftX3JzetZuo3N0LxUBQlkpRqC57arLE30TyV0PUhVWYyYl+OKpDFi0nS2qxfGtBH wIYcyct/ccqwqAKN7nElcpONBDymI99SU13OuEPkO5ut2IJL2+Ogv2nPxjqrh38/ RiIt4HbaajWr7l5ANzBdPMNC8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFqYTRoT VSUl4IPDBa28JxT+23B0MB8GA1UdIwQYMBaAFPZJi5m3eo8Bs5kmH7y5BOFCglUu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTYwNC8xMDI2NDhEQ0Qy OUMxMUVEQjQxMUM0NURDNEY5QUUwMi85a21MbWJkNmp3R3ptU1lmdkxrRTRVS0NW UzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlrbUxtYmQ2andHem1TWWZ2TGtFNFVLQ1ZTNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTYwNC8xMDI2NDhEQ0QyOUMxMUVEQjQxMUM0NURDNEY5QUUwMi85a21MbWJkNmp3 R3ptU1lmdkxrRTRVS0NWUzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrowREaN+yuJ6E8SfMKMh5BiBgHkbw5GkKpFiHvmZ1MkfvmNBKuyLD EcZ49eUE2DoDz4MeUChQtA/lFqOME6lg/Hjnxbf44SMh7uJM4quwHPt5PmFQ5rR1 lMPpDidVDKZpOuGkqQjTg4DUMkAIlXpPPS2oK1WzbLMGp2T9/awXH+vxHBF1oPlt UoXaN3+Lr+DE8xkqIHOb7IDYs8OEGidEL5ZC9GPztlzrw63mw66A0lYX6jO89UyZ ubE/ZBQf5ZP9ukT+Y7CFNJSFI4cwvEhA0DyWknPvm5ahSSue4V1Tk9LQEQflLs4s pd0GFpdNGCKuDWtrjHx5R+rkdFs+M+ea -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:29 2025 by rpki-client on console.sobornost.net