$ rpki-client -vvf rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft File: oPv941FZcJK2h-zGQOyF3CnyAXM.mft (raw, json) Hash identifier: +V30l8fzmX0nuanffYJS+L64y5Mbdf19nQ6cdBVVLSs= Subject key identifier: 9D:C1:54:32:62:06:10:BA:6B:92:79:17:61:9B:73:D1:51:92:F6:9C Authority key identifier: A0:FB:FD:E3:51:59:70:92:B6:87:EC:C6:40:EC:85:DC:29:F2:01:73 Certificate issuer: /CN=A9140B3F/serialNumber=A0FBFDE351597092B687ECC640EC85DC29F20173 Certificate serial: 018D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPv941FZcJK2h-zGQOyF3CnyAXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft Manifest number: 0188 Signing time: Sun 27 Apr 2025 02:37:38 +0000 Manifest this update: Sun 27 Apr 2025 02:37:38 +0000 Manifest next update: Sun 04 May 2025 02:37:38 +0000 Files and hashes: 1: oPv941FZcJK2h-zGQOyF3CnyAXM.crl (hash: JJCILYMSTpoREcXCHbC+76TCEgBFJ6rH4os5Av3d7z0=) 2: 1F63D776D29011EDA849876CC4F9AE02.roa (hash: caa9vs5q3NzKdsCc37MTwoPPA4zep6D+Ht0arsk9wtA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.crl rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPv941FZcJK2h-zGQOyF3CnyAXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:37:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 397 (0x18d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140B3F, serialNumber=A0FBFDE351597092B687ECC640EC85DC29F20173 Validity Not Before: Apr 27 02:37:38 2025 GMT Not After : May 4 02:37:38 2025 GMT Subject: CN=680d9872-f4d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:63:5e:98:8b:2c:56:4c:83:1d:69:87:e9:ba: 7c:64:c0:39:4c:b0:52:26:de:06:9e:cc:d8:31:9c: cc:fe:ca:1c:1b:b9:09:c0:9f:85:e2:a5:61:a6:ea: b2:22:5f:cd:0c:3c:ee:c7:0c:8b:42:95:cf:c6:8d: 02:c0:72:9f:37:d8:d2:55:e3:ae:a4:e4:7d:37:ef: 34:b7:04:b3:55:6d:13:38:f6:e8:bd:9c:40:d0:11: d7:24:76:9a:1c:9e:51:2b:76:28:31:b0:10:5a:7f: 36:cb:a4:d9:f1:a8:37:a7:9a:db:88:64:b3:aa:53: 50:14:a1:75:35:e2:36:91:9d:5d:a6:b3:c6:32:d2: 4b:40:24:74:58:ae:06:d0:5c:70:17:6f:4b:02:08: 5c:61:5c:f9:c9:ac:24:c1:13:b4:08:8e:c5:74:5f: 77:95:19:b6:b8:d7:be:10:6a:67:6e:94:d6:30:12: 63:f5:42:66:35:e6:79:49:fb:9c:02:89:9c:33:f0: 84:f4:c2:02:04:7f:a1:b8:30:fe:da:a4:c9:84:03: f5:7a:d1:6b:5b:63:85:6e:45:2a:bd:4f:bd:5e:50: 7b:de:a2:96:8f:c7:8a:b3:53:ab:69:2d:a9:65:a4: f7:29:57:8f:3b:7c:d0:6f:b9:c6:ba:a2:82:68:21: 7e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:C1:54:32:62:06:10:BA:6B:92:79:17:61:9B:73:D1:51:92:F6:9C X509v3 Authority Key Identifier: keyid:A0:FB:FD:E3:51:59:70:92:B6:87:EC:C6:40:EC:85:DC:29:F2:01:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPv941FZcJK2h-zGQOyF3CnyAXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:76:09:d7:d3:d4:0d:bb:74:37:4c:62:06:be:f9:58:b2:d4: 3c:7c:0a:6f:c1:34:93:b0:b0:41:17:b7:5c:5f:22:f4:ef:ba: f1:f9:ba:39:eb:b1:b6:80:ad:4d:c4:52:38:7f:ba:83:75:b7: 64:6e:3d:6f:af:61:f2:b7:83:4d:ee:e8:3e:fe:cf:f3:11:99: 31:1b:cb:26:ae:05:83:78:54:9f:2d:06:f8:eb:8e:e7:5a:89: dd:f2:7a:ec:a2:d4:28:ef:70:1d:83:43:5f:3d:bd:8e:a5:5a: 81:44:bd:b8:53:bc:ea:e6:23:7d:6c:9b:50:00:98:74:23:78: ed:7b:70:04:13:0b:9a:4f:8f:fa:79:a9:74:e3:58:6b:cc:9a: ec:f4:6d:5b:d4:cf:57:51:5c:12:49:31:a7:81:32:23:62:2b: 59:3f:4e:ce:04:06:5f:ae:f2:a8:13:1e:e5:c4:f2:72:ef:d2: 42:76:05:70:9b:fd:76:af:c1:e1:46:34:08:19:51:e3:cf:32: 5b:67:ac:cf:9c:e1:7e:30:d9:c8:ba:39:76:bc:77:1a:f4:c7: 59:df:1a:d6:f2:b8:5e:52:01:b9:1d:e1:95:a1:25:12:4a:89: e2:52:6d:d9:41:08:d1:f2:d0:14:68:76:7a:53:c0:e7:8f:f7: 05:f8:3c:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBCM0YxMTAvBgNVBAUTKEEwRkJGREUzNTE1OTcwOTJCNjg3RUNDNjQwRUM4NURD MjlGMjAxNzMwHhcNMjUwNDI3MDIzNzM4WhcNMjUwNTA0MDIzNzM4WjAYMRYwFAYD VQQDEw02ODBkOTg3Mi1mNGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2GNemIssVkyDHWmH6bp8ZMA5TLBSJt4GnszYMZzM/socG7kJwJ+F4qVhpuqy Il/NDDzuxwyLQpXPxo0CwHKfN9jSVeOupOR9N+80twSzVW0TOPbovZxA0BHXJHaa HJ5RK3YoMbAQWn82y6TZ8ag3p5rbiGSzqlNQFKF1NeI2kZ1dprPGMtJLQCR0WK4G 0FxwF29LAghcYVz5yawkwRO0CI7FdF93lRm2uNe+EGpnbpTWMBJj9UJmNeZ5Sfuc AomcM/CE9MICBH+huDD+2qTJhAP1etFrW2OFbkUqvU+9XlB73qKWj8eKs1OraS2p ZaT3KVePO3zQb7nGuqKCaCF+kQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ3BVDJi BhC6a5J5F2Gbc9FRkvacMB8GA1UdIwQYMBaAFKD7/eNRWXCStofsxkDshdwp8gFz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEIzRi9GOEQ3MkNEQ0Qy OEMxMUVEQkFFOUVFNkFDNEY5QUUwMi9vUHY5NDFGWmNKSzJoLXpHUU95RjNDbnlB WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29Qdjk0MUZaY0pLMmgtekdRT3lGM0NueUFYTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEIzRi9GOEQ3MkNEQ0QyOEMxMUVEQkFFOUVFNkFDNEY5QUUwMi9vUHY5NDFGWmNK SzJoLXpHUU95RjNDbnlBWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSdgnX09QNu3Q3TGIGvvlYstQ8fApvwTSTsLBBF7dcXyL077rx+bo5 67G2gK1NxFI4f7qDdbdkbj1vr2Hyt4NN7ug+/s/zEZkxG8smrgWDeFSfLQb4647n Wond8nrsotQo73Adg0NfPb2OpVqBRL24U7zq5iN9bJtQAJh0I3jte3AEEwuaT4/6 eal041hrzJrs9G1b1M9XUVwSSTGngTIjYitZP07OBAZfrvKoEx7lxPJy79JCdgVw m/12r8HhRjQIGVHjzzJbZ6zPnOF+MNnIujl2vHca9MdZ3xrW8rheUgG5HeGVoSUS SoniUm3ZQQjR8tAUaHZ6U8Dnj/cF+Dzp -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:35 2025 by rpki-client on console.sobornost.net