$ rpki-client -vvf rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.mft File: 9y6IAGvoiFtvNKZ9b1uEIJrZlsg.mft (raw, json) Hash identifier: Qj73OjEg07mMu3pHXC2sFnxhroXqX3kdNPgkx1eUyeI= Subject key identifier: 4B:57:37:D5:C0:23:02:A9:58:22:C5:6C:11:5C:96:DA:DC:C1:D2:1A Authority key identifier: F7:2E:88:00:6B:E8:88:5B:6F:34:A6:7D:6F:5B:84:20:9A:D9:96:C8 Certificate issuer: /CN=A9140917/serialNumber=F72E88006BE8885B6F34A67D6F5B84209AD996C8 Certificate serial: 32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.mft Manifest number: 2B Signing time: Sun 27 Apr 2025 06:40:26 +0000 Manifest this update: Sun 27 Apr 2025 06:40:26 +0000 Manifest next update: Sun 04 May 2025 06:40:26 +0000 Files and hashes: 1: 9y6IAGvoiFtvNKZ9b1uEIJrZlsg.crl (hash: Ghve9SKaLDklF0CX+NDDk7Qpjem90bdyctnT/V7tlu4=) 2: 54438BB2150A11F08FAB4D29C4F9AE02.roa (hash: QyFlPzNaTAV4qZ+Q91sObqyXdS2spwmY+8JMAhH/OYQ=) 3: 0173D2DC217311F0BAF2AA30C4F9AE02.roa (hash: nryCYlJbHFwsxOAc1QWOqjcmSxXnzL35lsWmd38XYPI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.crl rsync://rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140917, serialNumber=F72E88006BE8885B6F34A67D6F5B84209AD996C8 Validity Not Before: Apr 27 06:40:26 2025 GMT Not After : May 4 06:40:26 2025 GMT Subject: CN=680dd15a-70cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a1:d8:da:e8:81:bc:64:39:3c:25:ba:4b:95: c0:3b:2b:16:b3:07:1a:85:c7:ed:52:a7:a8:f0:f4: 7a:b3:d1:8b:68:4a:eb:1a:4b:2c:65:40:be:cb:14: ad:b4:83:18:6b:f0:fa:18:19:1f:73:91:19:a8:ed: bb:30:d7:cc:e5:07:17:a9:37:0a:6d:c1:13:5e:94: 4c:e6:72:9d:1c:67:9a:4d:f8:03:84:cb:c8:8b:71: b9:ad:c3:7e:7a:32:6c:31:07:c5:b6:4c:31:a5:ec: 56:c1:4d:3c:3a:2e:6f:cc:d8:25:74:f5:bc:73:4b: 99:c1:33:a1:b7:4d:0d:6d:bd:45:40:e5:80:d2:b3: d0:f2:9d:86:33:cd:7e:37:c9:c5:4c:b6:bb:8b:40: 2d:88:78:a8:fb:85:35:29:cc:9f:1f:d3:bb:78:a1: 65:70:06:82:0f:6c:a4:71:4e:59:bf:f0:28:61:01: dd:a2:99:ee:d8:b0:98:11:e7:b3:5c:71:cc:e5:1f: 17:ec:a5:16:08:e7:9d:31:f9:b5:67:aa:a8:1d:65: e6:e5:bc:05:81:ce:ad:b8:41:de:73:d4:a9:b4:6f: b8:3e:97:24:a3:8d:1b:cf:78:5b:49:a1:54:02:4d: 7d:33:51:37:d9:0c:78:cc:24:49:ce:6e:4f:7a:49: b5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:57:37:D5:C0:23:02:A9:58:22:C5:6C:11:5C:96:DA:DC:C1:D2:1A X509v3 Authority Key Identifier: keyid:F7:2E:88:00:6B:E8:88:5B:6F:34:A6:7D:6F:5B:84:20:9A:D9:96:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:13:ee:58:45:5b:71:03:a0:f8:8c:12:2d:8b:df:88:37:2e: 29:b5:f0:2c:64:93:a5:95:e5:c4:24:b9:b6:5d:89:2e:e3:89: e2:48:72:96:6e:68:20:51:b3:bb:c7:9b:bb:d0:81:0f:bc:d1: 57:a1:37:05:d8:61:de:63:34:d8:6f:79:ce:63:3c:44:90:c4: 77:06:c1:ab:1d:8e:05:7e:0b:5e:11:ee:f6:11:59:64:ae:5b: 4b:0b:33:fa:48:ac:25:32:9a:39:77:4c:26:d4:02:8f:4f:ec: 61:bc:0d:70:c7:97:c3:54:e2:99:75:13:55:23:4b:d4:70:4c: 6a:a8:85:96:78:35:0e:34:b2:ca:e5:3e:d2:57:f6:07:c0:ca: 17:b3:1e:31:e5:91:ed:4e:37:17:bd:0e:b4:b7:fc:51:66:ee: 16:f4:8e:bd:f8:00:c0:a5:b7:93:8c:14:98:b8:3a:32:ae:01: 33:88:b9:7f:14:35:b8:91:8e:dd:86:72:19:84:d5:46:5d:aa: 8a:dc:a8:ce:e7:86:b2:7d:85:78:34:47:4f:7d:a9:c2:2e:cd: f7:ea:84:14:ac:49:7e:1e:04:4f:ec:6f:e8:80:78:4b:86:d0: ae:d2:5f:5a:40:01:4c:2d:b9:0f:63:5b:76:25:4c:07:2b:f6: 84:c1:12:46 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MDkxNzExMC8GA1UEBRMoRjcyRTg4MDA2QkU4ODg1QjZGMzRBNjdENkY1Qjg0MjA5 QUQ5OTZDODAeFw0yNTA0MjcwNjQwMjZaFw0yNTA1MDQwNjQwMjZaMBgxFjAUBgNV BAMTDTY4MGRkMTVhLTcwY2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZodja6IG8ZDk8JbpLlcA7KxazBxqFx+1Sp6jw9Hqz0YtoSusaSyxlQL7LFK20 gxhr8PoYGR9zkRmo7bsw18zlBxepNwptwRNelEzmcp0cZ5pN+AOEy8iLcbmtw356 MmwxB8W2TDGl7FbBTTw6Lm/M2CV09bxzS5nBM6G3TQ1tvUVA5YDSs9DynYYzzX43 ycVMtruLQC2IeKj7hTUpzJ8f07t4oWVwBoIPbKRxTlm/8ChhAd2ime7YsJgR57Nc cczlHxfspRYI550x+bVnqqgdZeblvAWBzq24Qd5z1Km0b7g+lySjjRvPeFtJoVQC TX0zUTfZDHjMJEnObk96SbX5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUS1c31cAj AqlYIsVsEVyW2tzB0howHwYDVR0jBBgwFoAU9y6IAGvoiFtvNKZ9b1uEIJrZlsgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQwOTE3L0E1QUY4RTY4RjU2 MzExRUY5RkFCQ0I0MUM0RjlBRTAyLzl5NklBR3ZvaUZ0dk5LWjliMXVFSUpyWmxz Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOXk2SUFHdm9pRnR2TktaOWIxdUVJSnJabHNnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQw OTE3L0E1QUY4RTY4RjU2MzExRUY5RkFCQ0I0MUM0RjlBRTAyLzl5NklBR3ZvaUZ0 dk5LWjliMXVFSUpyWmxzZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAIT7lhFW3EDoPiMEi2L34g3Lim18Cxkk6WV5cQkubZdiS7jieJIcpZu aCBRs7vHm7vQgQ+80VehNwXYYd5jNNhvec5jPESQxHcGwasdjgV+C14R7vYRWWSu W0sLM/pIrCUymjl3TCbUAo9P7GG8DXDHl8NU4pl1E1UjS9RwTGqohZZ4NQ40ssrl PtJX9gfAyhezHjHlke1ONxe9DrS3/FFm7hb0jr34AMClt5OMFJi4OjKuATOIuX8U NbiRjt2GchmE1UZdqorcqM7nhrJ9hXg0R099qcIuzffqhBSsSX4eBE/sb+iAeEuG 0K7SX1pAAUwtuQ9jW3YlTAcr9oTBEkY= -----END CERTIFICATE-----Generated at Sun Apr 27 10:27:17 2025 by rpki-client on console.sobornost.net