$ rpki-client -vvf rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.mft File: UiKhYZ3_8Eywl7tRagdMzR2v_Hg.mft (raw, json) Hash identifier: v3SncuKM8J+4ru15rLRykys1TeeAYAHWfavG301qwno= Subject key identifier: 21:D4:72:1F:F9:8C:9F:2C:CA:6D:0F:E5:2E:6C:24:6E:EB:B7:BD:AA Authority key identifier: 52:22:A1:61:9D:FF:F0:4C:B0:97:BB:51:6A:07:4C:CD:1D:AF:FC:78 Certificate issuer: /CN=A9136D7D/serialNumber=5222A1619DFFF04CB097BB516A074CCD1DAFFC78 Certificate serial: 0231 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.mft Manifest number: 0229 Signing time: Sun 27 Apr 2025 01:33:45 +0000 Manifest this update: Sun 27 Apr 2025 01:33:45 +0000 Manifest next update: Sun 04 May 2025 01:33:45 +0000 Files and hashes: 1: UiKhYZ3_8Eywl7tRagdMzR2v_Hg.crl (hash: 44CCcsKChK57H3ixn6O1KGDLMZUVOEctpIiYrDt/Pss=) 2: A9E3A5041C3411EFBF05095BC4F9AE02.roa (hash: DS6aoQLqOLSS763BWHIUmquh48JGAfBdAQCJMqSDzPU=) 3: E4A016C01CD211EFB606D514C4F9AE02.roa (hash: yMapl0YXXAfKwoBzESq2p7IfMt1+B0piySrxnFgxgIw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.crl rsync://rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 01:33:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 561 (0x231) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136D7D, serialNumber=5222A1619DFFF04CB097BB516A074CCD1DAFFC78 Validity Not Before: Apr 27 01:33:45 2025 GMT Not After : May 4 01:33:45 2025 GMT Subject: CN=680d8979-faba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:2a:86:b8:22:67:6c:5f:66:29:44:12:9b:92: 7a:ea:2b:72:1c:9f:30:31:36:0f:3e:17:5b:58:97: dc:1d:c9:86:e2:22:7f:86:2c:09:0a:62:4e:3d:8d: 41:1f:ef:7e:72:d0:ce:ec:12:19:a0:5f:e3:57:e5: d1:fb:92:12:78:2b:ba:aa:81:f2:17:ae:8a:13:cc: 22:73:2f:08:c5:10:1c:d0:6c:a2:21:8b:2b:e9:89: 37:60:8e:06:24:3e:a4:31:f2:6b:4e:54:39:3e:a4: ff:e6:7b:6d:7f:18:63:9c:c9:a1:06:6c:6a:4f:d7: 3d:d2:cc:68:18:d4:d9:34:60:ee:a4:70:25:1d:c1: c3:8c:76:21:46:83:78:4c:22:81:60:7f:e5:e6:46: 1c:8f:b0:74:82:ac:52:c4:df:68:42:b4:9e:46:c2: 59:21:db:e2:20:e1:67:6b:8d:04:2d:9a:67:a6:f5: 13:3b:9a:5a:14:62:09:4c:11:eb:4e:15:28:f8:57: 4f:63:97:5a:ee:d3:c0:14:18:2d:c6:bd:a7:98:fb: b8:e7:85:92:d3:e2:74:4c:2a:f5:46:3d:f7:d3:8f: 57:44:cb:dc:a1:62:8d:a4:f3:b9:fc:38:66:ba:44: 11:3f:fc:7b:45:e2:9d:97:49:23:22:9d:a5:af:6a: 40:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:D4:72:1F:F9:8C:9F:2C:CA:6D:0F:E5:2E:6C:24:6E:EB:B7:BD:AA X509v3 Authority Key Identifier: keyid:52:22:A1:61:9D:FF:F0:4C:B0:97:BB:51:6A:07:4C:CD:1D:AF:FC:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:9e:4f:c6:29:ff:90:07:ad:d9:8c:9a:f8:f6:8d:a8:02:82: 67:6e:84:d2:c7:f8:f9:8a:70:a2:8f:22:59:bc:59:f0:50:6d: 8f:30:33:6a:96:5b:79:5b:d4:51:40:e6:60:3a:2f:ea:38:40: 63:6f:58:3c:63:f7:e7:9a:b6:b1:82:f6:00:31:ff:0f:44:14: 39:96:42:b1:2a:09:7c:72:8f:c5:fe:37:c2:88:e9:99:7d:36: de:3b:f5:40:c6:60:b3:87:ea:fa:a8:3b:5f:2d:70:d0:9d:c7: aa:b4:62:1f:92:c7:92:bd:6b:8c:d6:ec:d1:51:09:16:e8:5e: 93:03:71:04:02:c7:f0:fb:50:1b:15:82:ca:24:34:29:6e:9a: 63:a7:bd:5f:0e:2c:7a:a9:e3:9a:2b:fa:2a:79:a5:af:eb:2a: 54:97:c6:44:d9:f7:fe:5c:cf:7e:48:f7:1f:92:e9:67:fe:cc: 6e:15:a3:04:3f:0d:de:8f:26:ec:43:d3:fb:af:e2:50:a6:0d: 7c:21:8a:23:a7:1c:f2:f6:bc:b9:7d:61:15:f2:78:f6:1e:ee: 26:d4:e8:4b:30:a4:00:26:49:8e:4e:fd:4c:59:4f:d6:eb:af: 08:e6:2a:9e:ff:51:de:9c:22:6f:1e:b4:27:35:13:42:1a:f8: cf:21:35:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZEN0QxMTAvBgNVBAUTKDUyMjJBMTYxOURGRkYwNENCMDk3QkI1MTZBMDc0Q0NE MURBRkZDNzgwHhcNMjUwNDI3MDEzMzQ1WhcNMjUwNTA0MDEzMzQ1WjAYMRYwFAYD VQQDEw02ODBkODk3OS1mYWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6SqGuCJnbF9mKUQSm5J66ityHJ8wMTYPPhdbWJfcHcmG4iJ/hiwJCmJOPY1B H+9+ctDO7BIZoF/jV+XR+5ISeCu6qoHyF66KE8wicy8IxRAc0GyiIYsr6Yk3YI4G JD6kMfJrTlQ5PqT/5nttfxhjnMmhBmxqT9c90sxoGNTZNGDupHAlHcHDjHYhRoN4 TCKBYH/l5kYcj7B0gqxSxN9oQrSeRsJZIdviIOFna40ELZpnpvUTO5paFGIJTBHr ThUo+FdPY5da7tPAFBgtxr2nmPu454WS0+J0TCr1Rj33049XRMvcoWKNpPO5/Dhm ukQRP/x7ReKdl0kjIp2lr2pAyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCHUch/5 jJ8sym0P5S5sJG7rt72qMB8GA1UdIwQYMBaAFFIioWGd//BMsJe7UWoHTM0dr/x4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkQ3RC9BMzM5NjMwRTI3 NTAxMUVEOTE0N0IyNzNDNEY5QUUwMi9VaUtoWVozXzhFeXdsN3RSYWdkTXpSMnZf SGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VpS2hZWjNfOEV5d2w3dFJhZ2RNelIydl9IZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkQ3RC9BMzM5NjMwRTI3NTAxMUVEOTE0N0IyNzNDNEY5QUUwMi9VaUtoWVozXzhF eXdsN3RSYWdkTXpSMnZfSGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpnk/GKf+QB63ZjJr49o2oAoJnboTSx/j5inCijyJZvFnwUG2PMDNq llt5W9RRQOZgOi/qOEBjb1g8Y/fnmraxgvYAMf8PRBQ5lkKxKgl8co/F/jfCiOmZ fTbeO/VAxmCzh+r6qDtfLXDQnceqtGIfkseSvWuM1uzRUQkW6F6TA3EEAsfw+1Ab FYLKJDQpbppjp71fDix6qeOaK/oqeaWv6ypUl8ZE2ff+XM9+SPcfkuln/sxuFaME Pw3ejybsQ9P7r+JQpg18IYojpxzy9ry5fWEV8nj2Hu4m1OhLMKQAJkmOTv1MWU/W 668I5iqe/1HenCJvHrQnNRNCGvjPITUZ -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:30 2025 by rpki-client on console.sobornost.net