$ rpki-client -vvf rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft File: Ks6UC13DAzfS5UIXIhkauSOqdcc.mft (raw, json) Hash identifier: FYd7j2E+vcfaWHvh1DRLsztRdvxpQARQHkFtWZC8QLg= Subject key identifier: F4:4C:85:C7:C8:89:9B:B9:1B:98:D5:17:B7:70:43:F1:FE:1A:3F:87 Authority key identifier: 2A:CE:94:0B:5D:C3:03:37:D2:E5:42:17:22:19:1A:B9:23:AA:75:C7 Certificate issuer: /CN=A9138A9F/serialNumber=2ACE940B5DC30337D2E5421722191AB923AA75C7 Certificate serial: EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft Manifest number: E7 Signing time: Sun 27 Apr 2025 04:18:59 +0000 Manifest this update: Sun 27 Apr 2025 04:18:58 +0000 Manifest next update: Sun 04 May 2025 04:18:58 +0000 Files and hashes: 1: Ks6UC13DAzfS5UIXIhkauSOqdcc.crl (hash: yikn4vs2b9IdnzbJ3ZpSU8Tu+XuByg1CSiPf6tyiPZM=) 2: 440FD944C56F11EE8FF5FF2FC4F9AE02.roa (hash: LYlNZimo/Kla2SAg6rJowkusOEeb0t8EqOyo/ewHEdM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.crl rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 234 (0xea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138A9F, serialNumber=2ACE940B5DC30337D2E5421722191AB923AA75C7 Validity Not Before: Apr 27 04:18:58 2025 GMT Not After : May 4 04:18:58 2025 GMT Subject: CN=680db033-7f79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:79:96:13:80:ed:cd:86:60:40:b7:f0:50:ba: bf:9d:c3:4e:27:a6:8b:61:35:77:14:d7:9f:f0:ce: 83:37:91:70:8e:24:5d:8e:41:11:f2:ad:b7:23:42: 92:0a:e9:7d:b5:6c:b8:b9:1b:e5:04:01:ed:7c:f0: eb:77:e6:8a:e3:f0:b9:f8:a5:5b:22:ad:68:45:89: 01:13:5a:11:22:2f:53:88:07:2b:e9:0b:cf:76:9c: 2f:7f:85:7b:6c:65:06:21:79:32:1d:71:a9:78:b5: 8f:6a:76:86:e6:59:4b:30:fe:ab:9d:82:29:53:37: 43:15:c3:8d:07:df:15:a7:5a:f0:f2:1a:ff:f5:1e: 15:6a:9c:4b:44:26:84:47:a3:2e:40:6a:0d:3e:d6: ad:06:0b:46:d8:40:f2:97:77:13:eb:7c:31:8b:bc: 9a:b9:35:13:cf:e6:a0:4c:21:55:bd:67:75:ca:86: 04:9d:17:24:d3:32:ff:13:37:39:d3:84:2f:b0:81: 48:24:0b:55:3b:3e:c5:0f:ec:64:11:2b:8a:0b:84: 85:70:4d:68:81:62:ce:81:7d:0d:29:79:01:6e:07: 15:31:3e:20:e0:d3:a3:79:06:dc:d7:f8:d4:cc:65: 15:0f:84:78:8c:f2:63:45:07:24:ea:3c:76:3f:9c: 53:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:4C:85:C7:C8:89:9B:B9:1B:98:D5:17:B7:70:43:F1:FE:1A:3F:87 X509v3 Authority Key Identifier: keyid:2A:CE:94:0B:5D:C3:03:37:D2:E5:42:17:22:19:1A:B9:23:AA:75:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:15:e3:c9:d2:5e:5b:64:d5:6f:de:18:5c:e7:b3:4f:82:af: 4d:06:ee:20:37:5e:f1:7c:74:f8:3d:2c:3d:31:e8:80:d6:3c: 01:e1:79:4d:ed:7b:dd:4f:74:a2:71:c5:2a:b7:cb:e0:cf:3e: 29:36:a8:f9:61:1b:d7:80:ee:45:37:ec:9b:35:35:fa:24:b2: 74:80:dc:91:4a:1d:57:1f:4c:48:08:ef:53:23:51:d0:05:f4: 7e:0d:a4:9b:b0:15:b5:71:e3:10:a9:d8:bd:3f:4a:96:19:b7: b0:6e:51:66:d5:d1:45:69:70:6d:38:c7:95:95:46:03:e3:45: 93:e4:94:ea:2f:68:f5:26:93:12:56:9c:f4:09:f6:21:78:0d: a7:e6:68:e7:00:b8:29:8a:6b:82:6b:02:30:62:c3:9b:9d:36: 75:da:dc:16:4f:71:4c:96:49:40:07:6a:32:7a:a6:78:65:70: 45:43:e9:2c:75:99:32:86:71:0f:3d:b4:3c:28:73:21:df:ae: 74:d3:a1:25:c9:b4:45:0a:d8:0d:08:d9:4b:c0:fc:7c:f4:1c: c9:44:5e:99:0a:18:8d:0f:3c:19:9e:d6:b5:a3:f4:ad:01:94: 49:7f:ae:53:96:ae:46:d0:c4:91:b8:d5:9c:f9:09:9a:29:a1: f2:ee:d5:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzhBOUYxMTAvBgNVBAUTKDJBQ0U5NDBCNURDMzAzMzdEMkU1NDIxNzIyMTkxQUI5 MjNBQTc1QzcwHhcNMjUwNDI3MDQxODU4WhcNMjUwNTA0MDQxODU4WjAYMRYwFAYD VQQDEw02ODBkYjAzMy03Zjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk3mWE4DtzYZgQLfwULq/ncNOJ6aLYTV3FNef8M6DN5FwjiRdjkER8q23I0KS Cul9tWy4uRvlBAHtfPDrd+aK4/C5+KVbIq1oRYkBE1oRIi9TiAcr6QvPdpwvf4V7 bGUGIXkyHXGpeLWPanaG5llLMP6rnYIpUzdDFcONB98Vp1rw8hr/9R4VapxLRCaE R6MuQGoNPtatBgtG2EDyl3cT63wxi7yauTUTz+agTCFVvWd1yoYEnRck0zL/Ezc5 04QvsIFIJAtVOz7FD+xkESuKC4SFcE1ogWLOgX0NKXkBbgcVMT4g4NOjeQbc1/jU zGUVD4R4jPJjRQck6jx2P5xTyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPRMhcfI iZu5G5jVF7dwQ/H+Gj+HMB8GA1UdIwQYMBaAFCrOlAtdwwM30uVCFyIZGrkjqnXH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEE5Ri84MkM2N0VBNkM1 NkQxMUVFQjI3ODUzNEFDNEY5QUUwMi9LczZVQzEzREF6ZlM1VUlYSWhrYXVTT3Fk Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tzNlVDMTNEQXpmUzVVSVhJaGthdVNPcWRjYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OEE5Ri84MkM2N0VBNkM1NkQxMUVFQjI3ODUzNEFDNEY5QUUwMi9LczZVQzEzREF6 ZlM1VUlYSWhrYXVTT3FkY2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcFePJ0l5bZNVv3hhc57NPgq9NBu4gN17xfHT4PSw9MeiA1jwB4XlN 7XvdT3SiccUqt8vgzz4pNqj5YRvXgO5FN+ybNTX6JLJ0gNyRSh1XH0xICO9TI1HQ BfR+DaSbsBW1ceMQqdi9P0qWGbewblFm1dFFaXBtOMeVlUYD40WT5JTqL2j1JpMS Vpz0CfYheA2n5mjnALgpimuCawIwYsObnTZ12twWT3FMlklAB2oyeqZ4ZXBFQ+ks dZkyhnEPPbQ8KHMh365006ElybRFCtgNCNlLwPx89BzJRF6ZChiNDzwZnta1o/St AZRJf65Tlq5G0MSRuNWc+QmaKaHy7tX8 -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:42 2025 by rpki-client on console.sobornost.net