$ rpki-client -vvf rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/cJIQz3Yexn-zlOpYlqXGR7MF7vE.mft File: cJIQz3Yexn-zlOpYlqXGR7MF7vE.mft (raw, json) Hash identifier: Iyi0lhqZUPCCTPLUSI0x1vorpFGC+eOKjV/B4kw16Ak= Subject key identifier: 19:B6:42:1C:8A:4F:10:7C:D0:F0:D2:33:BF:E1:EA:52:80:D7:AD:88 Authority key identifier: 70:92:10:CF:76:1E:C6:7F:B3:94:EA:58:96:A5:C6:47:B3:05:EE:F1 Certificate issuer: /CN=A913CA4B/serialNumber=709210CF761EC67FB394EA5896A5C647B305EEF1 Certificate serial: 08D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJIQz3Yexn-zlOpYlqXGR7MF7vE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/cJIQz3Yexn-zlOpYlqXGR7MF7vE.mft Manifest number: 089D Signing time: Sat 26 Apr 2025 20:24:09 +0000 Manifest this update: Sat 26 Apr 2025 20:24:08 +0000 Manifest next update: Sat 03 May 2025 20:24:08 +0000 Files and hashes: 1: cJIQz3Yexn-zlOpYlqXGR7MF7vE.crl (hash: zxszr4E0obF+Xdbk6/hF7LLWsbageTzt9xtwigzNn/Y=) 2: 7206C9B0B9A911EE82CE6832C4F9AE02.roa (hash: 1BGCuCR8/5XNnfEBqosQ71/PFSfQ7yzaxtqH4ChrsGI=) 3: C714F71CBF9B11EA9CDFD642C4F9AE02.roa (hash: WQhWvpsGEUoUyhuwJrl1CNiZNORHG8GhG41+pFuVnQM=) 4: E6EBBE4A64CA11EE97188C5DC4F9AE02.roa (hash: FPmK/ZWN45BRsvOMGslxfKU8yKPfXq+QEtu+U3CAeqM=) 5: 60D4C96008DA11EEA1B2EE78C4F9AE02.roa (hash: 9dLmROiC4Lw0+lnZo79JQvbFk0n5gZqA79ORbR1QB2I=) 6: C7A523E6BF9B11EA9CDFD642C4F9AE02.roa (hash: /9KNehkZXA610WgWCgrhBX7+tDPfjbkeRPHfwTNaPSo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/cJIQz3Yexn-zlOpYlqXGR7MF7vE.crl rsync://rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/cJIQz3Yexn-zlOpYlqXGR7MF7vE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJIQz3Yexn-zlOpYlqXGR7MF7vE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2265 (0x8d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CA4B, serialNumber=709210CF761EC67FB394EA5896A5C647B305EEF1 Validity Not Before: Apr 26 20:24:08 2025 GMT Not After : May 3 20:24:08 2025 GMT Subject: CN=680d40e8-32bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c4:57:94:26:b3:13:48:f6:7d:7b:95:bd:a2: e8:c3:59:d6:32:3f:a6:08:84:5f:4b:c8:2f:bb:65: 19:54:0d:3e:60:84:bb:98:1a:60:8b:1e:1a:e7:36: 69:a0:5d:1b:15:64:30:b5:63:b9:d7:98:8e:33:47: 83:e4:81:26:62:d0:fe:c6:15:a1:25:a2:fc:e0:88: c0:be:7b:e5:a2:8d:1e:52:22:69:4c:cc:99:3f:29: 54:87:8a:7c:c0:75:40:83:4d:cd:d3:a7:5e:cb:3c: 09:fd:7d:0e:b8:14:bd:17:71:07:1d:b9:c6:84:b8: 83:c8:c1:f6:70:6f:3a:d9:2b:fa:16:4f:52:37:b0: ab:30:29:1b:de:b0:93:74:64:5e:28:65:f1:62:ec: d3:50:d8:f6:20:fa:25:3f:64:64:07:3a:0c:49:3a: db:26:47:2f:dc:f3:12:e9:60:06:ce:49:5a:12:33: a9:1e:20:ef:8a:40:36:b0:4c:6b:6f:06:94:2a:31: e5:ee:15:27:e5:c1:a8:b6:87:c0:67:d0:01:5c:86: 4a:f5:80:2f:03:64:45:52:df:23:a7:48:59:cb:81: a5:78:5c:2f:91:87:55:a8:45:ac:1d:d5:f6:bd:59: 41:26:46:38:f8:83:92:0f:45:12:19:4b:36:6d:c5: e8:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:B6:42:1C:8A:4F:10:7C:D0:F0:D2:33:BF:E1:EA:52:80:D7:AD:88 X509v3 Authority Key Identifier: keyid:70:92:10:CF:76:1E:C6:7F:B3:94:EA:58:96:A5:C6:47:B3:05:EE:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/cJIQz3Yexn-zlOpYlqXGR7MF7vE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJIQz3Yexn-zlOpYlqXGR7MF7vE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/cJIQz3Yexn-zlOpYlqXGR7MF7vE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:df:9e:d5:b6:86:54:04:fc:7c:96:d0:7e:10:d9:c8:37:e0: 6c:da:8f:18:60:76:ba:55:1e:08:65:ff:4f:85:53:4c:65:45: a9:28:e6:a5:9f:37:d0:e0:1f:21:88:d1:6d:3b:19:23:f5:27: 18:25:10:61:d6:b8:b3:a6:7d:64:00:0f:cc:51:8d:85:5b:4c: de:92:6b:e4:68:39:e9:00:0b:b5:c1:53:9a:e7:13:f8:da:40: 28:46:36:68:55:7d:82:c4:9e:3a:21:f1:c5:49:33:e5:b8:11: f6:d1:ba:24:9c:b4:1a:69:88:67:62:e8:d0:2d:16:36:ae:61: 9d:eb:e4:72:5d:cc:2d:58:f5:84:94:d9:9e:df:6e:ef:6f:ae: 2d:3d:88:07:fa:37:4c:50:0c:8c:33:a1:60:ce:72:35:a8:73: 7d:8b:67:7c:be:16:ef:e7:1b:91:33:e6:90:fb:29:29:d4:b8: fd:b4:68:4a:c9:29:18:07:4d:99:a2:d8:49:2b:bf:7f:8f:14: 1b:76:28:67:29:6d:6c:9c:1c:d8:ef:80:49:f5:d1:98:99:34: 4a:73:0c:33:bd:dc:76:01:11:fe:84:38:bf:8f:fe:d6:62:73: 7b:9a:dc:bc:d0:fa:7a:f2:9f:f5:0a:14:50:a6:4e:53:3d:ab: f1:37:b6:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCNkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NBNEIxMTAvBgNVBAUTKDcwOTIxMENGNzYxRUM2N0ZCMzk0RUE1ODk2QTVDNjQ3 QjMwNUVFRjEwHhcNMjUwNDI2MjAyNDA4WhcNMjUwNTAzMjAyNDA4WjAYMRYwFAYD VQQDEw02ODBkNDBlOC0zMmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAscRXlCazE0j2fXuVvaLow1nWMj+mCIRfS8gvu2UZVA0+YIS7mBpgix4a5zZp oF0bFWQwtWO515iOM0eD5IEmYtD+xhWhJaL84IjAvnvloo0eUiJpTMyZPylUh4p8 wHVAg03N06deyzwJ/X0OuBS9F3EHHbnGhLiDyMH2cG862Sv6Fk9SN7CrMCkb3rCT dGReKGXxYuzTUNj2IPolP2RkBzoMSTrbJkcv3PMS6WAGzklaEjOpHiDvikA2sExr bwaUKjHl7hUn5cGotofAZ9ABXIZK9YAvA2RFUt8jp0hZy4GleFwvkYdVqEWsHdX2 vVlBJkY4+IOSD0USGUs2bcXowQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBm2QhyK TxB80PDSM7/h6lKA162IMB8GA1UdIwQYMBaAFHCSEM92HsZ/s5TqWJalxkezBe7x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0E0Qi9EQzJGMDQzMkJG ODAxMUVBOTZGRTRBNjhDNEY5QUUwMi9jSklRejNZZXhuLXpsT3BZbHFYR1I3TUY3 dkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NKSVF6M1lleG4temxPcFlscVhHUjdNRjd2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Q0E0Qi9EQzJGMDQzMkJGODAxMUVBOTZGRTRBNjhDNEY5QUUwMi9jSklRejNZZXhu LXpsT3BZbHFYR1I3TUY3dkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBV357VtoZUBPx8ltB+ENnIN+Bs2o8YYHa6VR4IZf9PhVNMZUWpKOal nzfQ4B8hiNFtOxkj9ScYJRBh1rizpn1kAA/MUY2FW0zekmvkaDnpAAu1wVOa5xP4 2kAoRjZoVX2CxJ46IfHFSTPluBH20boknLQaaYhnYujQLRY2rmGd6+RyXcwtWPWE lNme327vb64tPYgH+jdMUAyMM6FgznI1qHN9i2d8vhbv5xuRM+aQ+ykp1Lj9tGhK ySkYB02ZothJK79/jxQbdihnKW1snBzY74BJ9dGYmTRKcwwzvdx2ARH+hDi/j/7W YnN7mty80Pp68p/1ChRQpk5TPavxN7ai -----END CERTIFICATE-----Generated at Sun Apr 27 00:13:56 2025 by rpki-client on console.sobornost.net