$ rpki-client -vvf rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft File: kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft (raw, json) Hash identifier: pUGlORimyp8lGnPaiB+MAH8AwapY4WEmUHHBf7z4mrY= Subject key identifier: 60:49:99:AF:B6:30:39:A7:D7:6D:79:17:F6:C3:F2:AF:2E:C1:8E:45 Authority key identifier: 90:7B:03:8A:DE:C7:C3:FA:9C:64:93:0E:64:19:B2:FB:BA:B9:C8:1C Certificate issuer: /CN=A913A7A6/serialNumber=907B038ADEC7C3FA9C64930E6419B2FBBAB9C81C Certificate serial: 0A06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHsDit7Hw_qcZJMOZBmy-7q5yBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft Manifest number: 09FF Signing time: Mon 28 Apr 2025 20:15:58 +0000 Manifest this update: Mon 28 Apr 2025 20:15:58 +0000 Manifest next update: Mon 05 May 2025 20:15:58 +0000 Files and hashes: 1: kHsDit7Hw_qcZJMOZBmy-7q5yBw.crl (hash: MQUPS7MIJFXKBYsxZD9rZ2S3LrABKF6wBaLLhA5AKeg=) 2: D4AECB7A701611EF824F7281C4F9AE02.roa (hash: 05sTqgo+Z4rvsk50BgwNBJM+KFLlXu8LZA40jZLQRSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.crl rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHsDit7Hw_qcZJMOZBmy-7q5yBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:15:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2566 (0xa06) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A7A6, serialNumber=907B038ADEC7C3FA9C64930E6419B2FBBAB9C81C Validity Not Before: Apr 28 20:15:58 2025 GMT Not After : May 5 20:15:58 2025 GMT Subject: CN=680fe1fe-6e08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:14:21:a0:f9:26:60:c0:96:bc:73:f6:cf:fd: 75:ab:1d:fc:2d:06:a0:9a:8e:14:9c:f4:d7:fb:69: b2:5b:cb:ed:32:b5:77:2d:d8:f5:96:4f:fa:3d:b4: 54:25:5f:d8:d7:89:df:6c:55:16:fa:a8:89:c0:27: 65:d8:e2:23:64:ef:df:4b:31:fc:62:db:66:01:a3: 26:f1:33:7c:54:62:29:ad:67:5b:0c:1e:63:62:7d: 41:37:96:c4:a1:e5:07:28:de:7a:c7:56:fe:60:ed: 53:60:4b:d9:02:ce:d2:bc:da:bf:32:ab:74:a9:c5: d8:07:88:71:05:f0:66:5e:60:8c:6e:da:f9:28:3c: ae:8e:d0:a1:1d:a3:a5:b1:f3:84:33:d8:c9:3d:54: 00:ca:e7:d9:de:8d:42:b8:4c:70:5f:1f:f9:b2:85: 32:64:ca:79:9d:da:4d:15:23:38:73:fb:00:b8:72: 90:7f:1d:a2:69:ad:fe:ff:7d:fa:bf:54:c2:a6:1a: 61:f9:62:25:84:20:33:9e:d4:7e:d3:2b:e3:5e:f6: 89:51:53:c0:e8:33:b1:5d:33:05:47:92:8e:e9:a6: da:85:cd:c1:52:8f:dd:50:a1:b5:46:ca:fc:58:fc: 12:74:35:0c:b7:73:71:84:72:b5:ea:7b:84:03:bf: 93:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:49:99:AF:B6:30:39:A7:D7:6D:79:17:F6:C3:F2:AF:2E:C1:8E:45 X509v3 Authority Key Identifier: keyid:90:7B:03:8A:DE:C7:C3:FA:9C:64:93:0E:64:19:B2:FB:BA:B9:C8:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHsDit7Hw_qcZJMOZBmy-7q5yBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:14:c9:1c:96:ab:d1:12:3f:20:71:f8:17:dd:63:0e:9a:9d: e9:b1:b9:07:7c:4e:fc:2c:5a:91:d2:f3:e8:72:bb:a4:7e:18: f6:6a:35:0b:68:66:3c:ec:e2:8d:28:86:8f:af:23:0b:ac:3c: ce:db:8b:e4:3f:1d:51:5d:c5:da:b9:1f:d4:63:cb:91:8e:c5: 3a:ca:90:a1:2c:be:91:e3:ee:20:47:18:bb:c2:78:92:46:3d: 8f:4a:67:73:7f:ab:f9:e7:16:58:57:ea:14:44:e3:20:c7:73: 0e:ce:3a:af:c5:a4:01:93:0a:43:8e:46:5d:01:13:8d:30:f6: 1f:5d:4b:fc:70:de:8e:24:17:09:33:84:ea:7e:74:55:4c:5c: da:3c:1f:60:66:d0:fb:3b:53:aa:d7:2e:f1:fc:89:83:f5:bf: 32:8c:06:a2:68:86:45:b5:cd:1c:5f:a7:15:04:27:39:4c:c9: 59:c1:30:7e:b0:a8:1d:c3:2f:7a:1d:1a:2a:2f:73:99:f3:d6: 3b:3b:7a:f4:be:54:58:eb:80:97:93:38:73:00:5c:a9:79:93: 4c:6a:08:51:23:8e:64:53:09:a3:31:53:c6:16:9e:b6:c6:d1: 45:54:74:43:c0:9e:1f:a3:84:cb:1e:3a:89:ec:d7:97:73:24: 2b:fd:66:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCgYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0E3QTYxMTAvBgNVBAUTKDkwN0IwMzhBREVDN0MzRkE5QzY0OTMwRTY0MTlCMkZC QkFCOUM4MUMwHhcNMjUwNDI4MjAxNTU4WhcNMjUwNTA1MjAxNTU4WjAYMRYwFAYD VQQDEw02ODBmZTFmZS02ZTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwhQhoPkmYMCWvHP2z/11qx38LQagmo4UnPTX+2myW8vtMrV3Ldj1lk/6PbRU JV/Y14nfbFUW+qiJwCdl2OIjZO/fSzH8YttmAaMm8TN8VGIprWdbDB5jYn1BN5bE oeUHKN56x1b+YO1TYEvZAs7SvNq/Mqt0qcXYB4hxBfBmXmCMbtr5KDyujtChHaOl sfOEM9jJPVQAyufZ3o1CuExwXx/5soUyZMp5ndpNFSM4c/sAuHKQfx2iaa3+/336 v1TCphph+WIlhCAzntR+0yvjXvaJUVPA6DOxXTMFR5KO6abahc3BUo/dUKG1Rsr8 WPwSdDUMt3NxhHK16nuEA7+TAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGBJma+2 MDmn1215F/bD8q8uwY5FMB8GA1UdIwQYMBaAFJB7A4rex8P6nGSTDmQZsvu6ucgc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTdBNi80REI5NDQzQTcz QjYxMUVBOUI4QzFGNUNDNEY5QUUwMi9rSHNEaXQ3SHdfcWNaSk1PWkJteS03cTV5 QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tIc0RpdDdId19xY1pKTU9aQm15LTdxNXlCdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QTdBNi80REI5NDQzQTczQjYxMUVBOUI4QzFGNUNDNEY5QUUwMi9rSHNEaXQ3SHdf cWNaSk1PWkJteS03cTV5QncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRFMkclqvREj8gcfgX3WMOmp3psbkHfE78LFqR0vPocrukfhj2ajUL aGY87OKNKIaPryMLrDzO24vkPx1RXcXauR/UY8uRjsU6ypChLL6R4+4gRxi7wniS Rj2PSmdzf6v55xZYV+oUROMgx3MOzjqvxaQBkwpDjkZdARONMPYfXUv8cN6OJBcJ M4TqfnRVTFzaPB9gZtD7O1Oq1y7x/ImD9b8yjAaiaIZFtc0cX6cVBCc5TMlZwTB+ sKgdwy96HRoqL3OZ89Y7O3r0vlRY64CXkzhzAFypeZNMaghRI45kUwmjMVPGFp62 xtFFVHRDwJ4fo4TLHjqJ7NeXcyQr/WYy -----END CERTIFICATE-----Generated at Mon Apr 28 23:05:02 2025 by rpki-client on console.sobornost.net