$ rpki-client -vvf rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft File: UmRCqpPf8MUTmmF7DeZFtznmvs0.mft (raw, json) Hash identifier: sDBpDmtZtF11qcc/lvYWygOktMrP7RzMruzlY6Fmtwg= Subject key identifier: 94:45:23:1A:BF:15:42:BF:03:AC:76:19:69:A6:58:FD:0A:FE:B7:94 Authority key identifier: 52:64:42:AA:93:DF:F0:C5:13:9A:61:7B:0D:E6:45:B7:39:E6:BE:CD Certificate issuer: /CN=A9140D7D/serialNumber=526442AA93DFF0C5139A617B0DE645B739E6BECD Certificate serial: 09D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UmRCqpPf8MUTmmF7DeZFtznmvs0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft Manifest number: 09CE Signing time: Mon 28 Apr 2025 20:22:29 +0000 Manifest this update: Mon 28 Apr 2025 20:22:28 +0000 Manifest next update: Mon 05 May 2025 20:22:28 +0000 Files and hashes: 1: UmRCqpPf8MUTmmF7DeZFtznmvs0.crl (hash: jnAynmkKPZJcK8XgpeNxk64ygae+MEz7AGg5UslTacE=) 2: 1C9AB3F67D6711EA90858415C4F9AE02.roa (hash: 32MI8zjp+omn2pz5wQODlf3/KMVL7tiwkuXJGcfvP+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.crl rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UmRCqpPf8MUTmmF7DeZFtznmvs0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:22:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2518 (0x9d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140D7D, serialNumber=526442AA93DFF0C5139A617B0DE645B739E6BECD Validity Not Before: Apr 28 20:22:28 2025 GMT Not After : May 5 20:22:28 2025 GMT Subject: CN=680fe385-e318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a0:92:e4:f7:c0:3e:b1:81:27:f3:a6:b0:4f: c4:b6:af:fb:4a:bc:d9:91:ce:b0:a8:0e:ca:36:b6: 76:80:33:88:53:12:b5:c3:18:5b:f4:d4:79:ed:cc: 7a:2f:6e:eb:2e:f2:9e:bd:d2:c0:cc:4d:84:c0:c1: 7a:98:5d:d9:ca:a3:02:55:68:fb:b3:67:f2:2a:b4: 2c:10:98:24:82:cb:7a:22:cb:79:3b:bb:77:54:8c: 2d:fc:41:b1:4a:bd:6a:ee:2c:cd:2e:ab:cf:77:94: 0e:4b:53:bf:d4:96:1d:94:92:0b:8d:17:1d:74:a3: 32:dd:26:7d:6a:1b:91:ee:2a:ce:fa:f7:42:7d:74: cb:21:34:e8:86:0f:4d:ac:0a:82:7b:49:f6:be:3d: a1:1e:db:c5:3e:70:c6:b5:fe:a6:f0:71:09:8f:a5: c1:91:1f:22:44:82:38:e9:b2:48:4e:aa:f2:6d:8f: 8c:b7:af:82:ea:96:d6:39:78:4a:81:ef:13:22:48: 8f:16:67:69:98:9c:f8:35:cd:17:2d:8e:ba:8e:9e: 64:0b:e0:91:31:85:4a:d7:b3:4d:be:c1:d8:5f:3a: 7f:50:49:a4:09:ed:71:63:a2:b8:f8:46:52:4d:fd: e5:34:6b:9a:e2:3e:85:28:72:bf:f7:d3:4d:2b:db: c2:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:45:23:1A:BF:15:42:BF:03:AC:76:19:69:A6:58:FD:0A:FE:B7:94 X509v3 Authority Key Identifier: keyid:52:64:42:AA:93:DF:F0:C5:13:9A:61:7B:0D:E6:45:B7:39:E6:BE:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UmRCqpPf8MUTmmF7DeZFtznmvs0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:a4:a6:f5:f7:66:28:73:45:0a:f3:fc:eb:6b:dd:22:92:89: d9:c9:51:29:ba:cf:e2:03:0b:d8:d1:c1:22:9d:43:4b:4c:d0: 5c:37:1e:a0:c3:22:69:2f:de:f3:03:08:79:8e:7b:82:56:74: c9:7c:12:06:ca:42:b7:34:b8:bd:66:0a:11:f2:f5:2b:54:fc: a2:cd:b5:e1:38:36:5d:f2:94:b5:02:27:7e:cc:1b:fc:55:07: 93:5a:15:cf:f6:3f:65:8e:6a:e0:f1:d1:4b:2b:f7:f0:cf:7f: 45:24:9c:46:69:2e:95:ce:42:65:86:e7:35:14:a4:94:66:f1: ed:55:ab:f5:98:07:e0:a0:fc:e2:24:56:10:81:1c:62:24:ae: 9f:d4:18:b7:0e:2b:fd:e5:48:12:cf:1f:d3:60:00:be:8d:be: c5:cb:94:31:f5:0f:4c:61:c0:13:28:14:75:32:52:73:f0:3e: d5:94:48:e5:d0:66:6f:f6:e4:de:02:54:f7:35:17:bd:95:55: 7a:b6:9b:d1:20:8f:ca:b2:5f:1f:33:5d:40:32:11:52:85:88: 8e:50:a1:e4:d6:16:a5:1e:74:d4:fe:9f:f6:aa:8b:91:2e:1e: d3:12:9e:fd:02:f3:57:5d:09:d2:cc:0a:bf:19:03:96:b6:fe: 84:9d:4b:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBEN0QxMTAvBgNVBAUTKDUyNjQ0MkFBOTNERkYwQzUxMzlBNjE3QjBERTY0NUI3 MzlFNkJFQ0QwHhcNMjUwNDI4MjAyMjI4WhcNMjUwNTA1MjAyMjI4WjAYMRYwFAYD VQQDEw02ODBmZTM4NS1lMzE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqKCS5PfAPrGBJ/OmsE/Etq/7SrzZkc6wqA7KNrZ2gDOIUxK1wxhb9NR57cx6 L27rLvKevdLAzE2EwMF6mF3ZyqMCVWj7s2fyKrQsEJgkgst6Ist5O7t3VIwt/EGx Sr1q7izNLqvPd5QOS1O/1JYdlJILjRcddKMy3SZ9ahuR7irO+vdCfXTLITTohg9N rAqCe0n2vj2hHtvFPnDGtf6m8HEJj6XBkR8iRII46bJITqrybY+Mt6+C6pbWOXhK ge8TIkiPFmdpmJz4Nc0XLY66jp5kC+CRMYVK17NNvsHYXzp/UEmkCe1xY6K4+EZS Tf3lNGua4j6FKHK/99NNK9vCWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJRFIxq/ FUK/A6x2GWmmWP0K/reUMB8GA1UdIwQYMBaAFFJkQqqT3/DFE5phew3mRbc55r7N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEQ3RC83MTZEMkYzNjdE NjYxMUVBQjMyQjNCMTVDNEY5QUUwMi9VbVJDcXBQZjhNVVRtbUY3RGVaRnR6bm12 czAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VtUkNxcFBmOE1VVG1tRjdEZVpGdHpubXZzMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEQ3RC83MTZEMkYzNjdENjYxMUVBQjMyQjNCMTVDNEY5QUUwMi9VbVJDcXBQZjhN VVRtbUY3RGVaRnR6bm12czAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDpKb192Yoc0UK8/zra90ikonZyVEpus/iAwvY0cEinUNLTNBcNx6g wyJpL97zAwh5jnuCVnTJfBIGykK3NLi9ZgoR8vUrVPyizbXhODZd8pS1Aid+zBv8 VQeTWhXP9j9ljmrg8dFLK/fwz39FJJxGaS6VzkJlhuc1FKSUZvHtVav1mAfgoPzi JFYQgRxiJK6f1Bi3Div95UgSzx/TYAC+jb7Fy5Qx9Q9MYcATKBR1MlJz8D7VlEjl 0GZv9uTeAlT3NRe9lVV6tpvRII/Ksl8fM11AMhFShYiOUKHk1halHnTU/p/2qouR Lh7TEp79AvNXXQnSzAq/GQOWtv6EnUuz -----END CERTIFICATE-----Generated at Mon Apr 28 23:05:04 2025 by rpki-client on console.sobornost.net