$ rpki-client -vvf rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.mft File: KOAXfHClckcH27FJ7VV8D4FW4Ok.mft (raw, json) Hash identifier: WgsQAgt+JcSmzA++oIRrl5C3GAZ7B1I7OExlBCaOVCQ= Subject key identifier: 7C:61:A1:67:33:8F:80:AC:23:0D:FF:F2:FD:30:AD:55:C0:64:72:0B Authority key identifier: 28:E0:17:7C:70:A5:72:47:07:DB:B1:49:ED:55:7C:0F:81:56:E0:E9 Certificate issuer: /CN=A9136109/serialNumber=28E0177C70A5724707DBB149ED557C0F8156E0E9 Certificate serial: 05C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOAXfHClckcH27FJ7VV8D4FW4Ok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.mft Manifest number: 05BA Signing time: Sat 26 Apr 2025 22:48:56 +0000 Manifest this update: Sat 26 Apr 2025 22:48:56 +0000 Manifest next update: Sat 03 May 2025 22:48:56 +0000 Files and hashes: 1: KOAXfHClckcH27FJ7VV8D4FW4Ok.crl (hash: Ra5LC+bsDCITtPDs1f5s5k+2LjSncKznFXOFq4ppGfQ=) 2: 590697D6465611EE8128031BC4F9AE02.roa (hash: JIQ3Z5Vql3trgih29wB+iKDBgbYVi7iH8FQ6aCEf6sw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.crl rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOAXfHClckcH27FJ7VV8D4FW4Ok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 22:48:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1480 (0x5c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136109, serialNumber=28E0177C70A5724707DBB149ED557C0F8156E0E9 Validity Not Before: Apr 26 22:48:56 2025 GMT Not After : May 3 22:48:56 2025 GMT Subject: CN=680d62d8-1338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d2:d0:98:1f:fa:e4:f6:dd:81:16:3a:eb:7a: 1d:09:9c:7e:56:3e:73:c3:af:f0:ad:6f:8b:74:41: 31:5c:0b:01:04:d3:30:1b:ef:8c:78:4e:d3:e3:b4: 4d:2a:88:4c:11:7b:36:dc:b7:b8:12:31:79:49:3f: 99:f1:b9:cc:13:10:df:44:d8:cf:b2:95:38:25:3b: 84:e2:63:0e:dc:d8:39:f5:39:14:32:8b:da:75:5b: 6c:78:b0:5f:e5:52:e7:4c:02:77:fa:a3:1b:e9:6c: 3c:b1:a2:eb:f2:7a:73:69:ed:f9:d9:19:a2:ee:4c: d1:04:16:e3:a6:c7:64:46:ba:f3:a6:f6:15:a8:b4: 6e:00:6c:49:24:3b:c4:82:28:f1:da:50:27:de:b8: 9d:03:97:ff:f9:35:b2:12:92:d6:05:91:e1:95:42: ba:60:09:20:3d:65:80:5a:b7:ba:52:af:3c:9a:89: db:3b:f4:00:58:e7:53:f3:7e:2b:80:3f:0d:fb:cb: 65:a4:b3:8d:c7:48:ba:8d:52:74:64:61:ca:3a:c8: 04:c4:15:bb:8a:ae:88:3e:f6:d0:fd:3b:f1:50:41: 98:f0:19:32:14:0b:f5:e3:e1:8d:f4:53:4f:17:77: a4:3f:a7:dc:f0:60:50:ba:57:e3:30:48:c0:c8:4e: 85:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:61:A1:67:33:8F:80:AC:23:0D:FF:F2:FD:30:AD:55:C0:64:72:0B X509v3 Authority Key Identifier: keyid:28:E0:17:7C:70:A5:72:47:07:DB:B1:49:ED:55:7C:0F:81:56:E0:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOAXfHClckcH27FJ7VV8D4FW4Ok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:fe:20:2e:c8:37:4c:87:8a:7e:4d:c9:21:24:3f:46:bd:e0: 15:ec:23:83:e5:7c:e8:4a:fa:44:f5:a8:58:a4:98:3d:52:96: 10:c0:73:f4:d6:e9:ac:f7:0c:66:9e:50:15:61:83:59:22:be: d9:d5:6b:b3:16:5a:97:b5:36:34:3c:10:2c:bd:44:1a:b5:f1: cc:4b:69:67:80:99:6d:d3:d6:7d:ed:0f:80:ce:90:dc:29:d0: 93:0e:12:63:0e:fe:95:f2:c7:8f:1a:6f:6c:fb:9e:96:5e:cc: 38:af:de:57:1d:c0:ae:38:9f:90:45:8a:bc:44:2a:46:ba:ba: 48:50:89:ac:c7:a4:e0:eb:ea:52:44:69:44:57:c1:c4:08:80: 9e:fa:8f:f6:07:5e:9f:40:c6:c1:24:36:8b:83:3d:e1:17:af: 62:63:1a:1f:43:29:4d:cb:60:0c:91:b0:fe:a3:b4:7e:2e:a4: b3:6d:04:7e:c9:8d:b6:43:18:ee:19:c3:5d:6d:17:c4:ae:da: cf:5b:d3:c2:1f:15:7a:26:ae:bc:55:ee:0d:b1:0e:98:69:34: 0d:0e:5d:05:91:38:44:5a:a1:79:98:01:29:6e:45:5f:a5:fd: df:b5:17:10:fd:a1:23:03:45:5f:9a:63:3c:5c:d5:90:ac:2c: c2:2f:99:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzYxMDkxMTAvBgNVBAUTKDI4RTAxNzdDNzBBNTcyNDcwN0RCQjE0OUVENTU3QzBG ODE1NkUwRTkwHhcNMjUwNDI2MjI0ODU2WhcNMjUwNTAzMjI0ODU2WjAYMRYwFAYD VQQDEw02ODBkNjJkOC0xMzM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAltLQmB/65PbdgRY663odCZx+Vj5zw6/wrW+LdEExXAsBBNMwG++MeE7T47RN KohMEXs23Le4EjF5ST+Z8bnMExDfRNjPspU4JTuE4mMO3Ng59TkUMovadVtseLBf 5VLnTAJ3+qMb6Ww8saLr8npzae352Rmi7kzRBBbjpsdkRrrzpvYVqLRuAGxJJDvE gijx2lAn3ridA5f/+TWyEpLWBZHhlUK6YAkgPWWAWre6Uq88monbO/QAWOdT834r gD8N+8tlpLONx0i6jVJ0ZGHKOsgExBW7iq6IPvbQ/TvxUEGY8BkyFAv14+GN9FNP F3ekP6fc8GBQulfjMEjAyE6FIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHxhoWcz j4CsIw3/8v0wrVXAZHILMB8GA1UdIwQYMBaAFCjgF3xwpXJHB9uxSe1VfA+BVuDp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjEwOS9DODIwNzIxMkM1 MEQxMUVCOUFBRUU4N0JDNEY5QUUwMi9LT0FYZkhDbGNrY0gyN0ZKN1ZWOEQ0Rlc0 T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tPQVhmSENsY2tjSDI3Rko3VlY4RDRGVzRPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjEwOS9DODIwNzIxMkM1MEQxMUVCOUFBRUU4N0JDNEY5QUUwMi9LT0FYZkhDbGNr Y0gyN0ZKN1ZWOEQ0Rlc0T2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAk/iAuyDdMh4p+TckhJD9GveAV7COD5XzoSvpE9ahYpJg9UpYQwHP0 1ums9wxmnlAVYYNZIr7Z1WuzFlqXtTY0PBAsvUQatfHMS2lngJlt09Z97Q+AzpDc KdCTDhJjDv6V8sePGm9s+56WXsw4r95XHcCuOJ+QRYq8RCpGurpIUImsx6Tg6+pS RGlEV8HECICe+o/2B16fQMbBJDaLgz3hF69iYxofQylNy2AMkbD+o7R+LqSzbQR+ yY22QxjuGcNdbRfErtrPW9PCHxV6Jq68Ve4NsQ6YaTQNDl0FkThEWqF5mAEpbkVf pf3ftRcQ/aEjA0VfmmM8XNWQrCzCL5lj -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:29 2025 by rpki-client on console.sobornost.net