$ rpki-client -vvf rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft File: XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft (raw, json) Hash identifier: Ten9lnamWTXnxH3QOtnZZiklz0gvthjy87/svk0XIWI= Subject key identifier: 18:E5:EE:C3:97:03:58:80:AB:38:29:60:08:04:D9:EF:40:B9:30:92 Authority key identifier: 5C:45:AD:00:0B:BD:50:A7:0F:93:A5:CB:70:B6:66:80:A5:28:ED:C0 Certificate issuer: /CN=A9142812/serialNumber=5C45AD000BBD50A70F93A5CB70B66680A528EDC0 Certificate serial: 0662 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft Manifest number: 0656 Signing time: Sat 26 Apr 2025 22:08:16 +0000 Manifest this update: Sat 26 Apr 2025 22:08:15 +0000 Manifest next update: Sat 03 May 2025 22:08:15 +0000 Files and hashes: 1: XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl (hash: vk+H9XsXhmXX3cEUcqjVSZm+P4Jxm7QHIWMYhTpoFBk=) 2: 9ADBEC30DA6411EF95F32A7FC4F9AE02.roa (hash: Ode9C1rjZZ48xy/QuIzg9S8zoYsoG2CKnN/yX25u2gs=) 3: 9BE20420DA6411EF95F32A7FC4F9AE02.roa (hash: p4MgzG+OXWtv9vZOtFXE4K9GjNanwMoHoivstYkkSaU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 22:08:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1634 (0x662) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142812, serialNumber=5C45AD000BBD50A70F93A5CB70B66680A528EDC0 Validity Not Before: Apr 26 22:08:15 2025 GMT Not After : May 3 22:08:15 2025 GMT Subject: CN=680d5950-51c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6a:21:06:ca:df:44:16:b2:89:fd:fc:27:6c: 1e:82:c1:18:bb:1c:0c:93:dd:07:c5:db:26:18:88: af:ca:14:80:8c:99:b3:6b:54:18:97:3c:68:3f:fb: f9:43:d0:17:6c:b7:94:ec:27:7c:b2:46:8c:51:62: 47:7d:42:e7:06:ee:26:61:85:1d:66:fa:fa:af:84: 6d:b4:bc:45:0c:b2:2e:89:fd:70:0d:0d:08:c9:8b: 9f:7f:85:e4:70:63:75:00:34:f3:72:ec:c7:f8:38: 9f:ee:27:e1:e0:e6:4d:93:e5:ac:fb:db:d6:44:5c: 67:11:0d:a2:5d:58:41:93:af:fd:50:58:ca:0b:21: cd:d2:80:94:1e:75:62:16:d5:a4:33:d1:73:3b:22: 31:89:b9:02:4d:c5:12:5c:dc:05:43:6e:c5:8a:d1: 32:75:2c:8d:e7:3d:a7:c3:64:94:b5:b8:ba:4c:e1: 00:36:15:ba:82:49:fe:8e:79:0d:59:69:d2:91:82: c4:8e:22:44:65:1a:22:99:1d:93:07:22:2f:4a:84: da:f7:30:3c:4c:a7:75:d2:01:9a:8d:34:ea:d0:92: 1c:eb:72:ea:05:98:1a:3d:53:0d:47:db:99:55:c3: ec:ea:d0:c4:59:8e:d7:b9:d0:0e:cf:45:2b:38:09: 43:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:E5:EE:C3:97:03:58:80:AB:38:29:60:08:04:D9:EF:40:B9:30:92 X509v3 Authority Key Identifier: keyid:5C:45:AD:00:0B:BD:50:A7:0F:93:A5:CB:70:B6:66:80:A5:28:ED:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:80:5d:0c:c3:0a:96:8a:12:3b:79:9b:b9:2b:a8:b5:e0:d0: d7:c9:2a:ee:62:cf:16:8b:e9:c0:9b:d7:6a:05:4a:83:b3:49: 5b:ea:12:55:af:b1:92:37:38:f5:bb:e7:02:a0:64:51:74:62: 67:68:58:66:1b:df:a8:90:38:61:8f:75:f4:a9:fe:15:1f:04: 85:7e:56:70:72:d1:0e:3b:e2:f0:2d:85:bc:b9:0b:8b:3d:d7: c9:29:33:56:aa:4a:e4:22:63:7a:01:43:c8:17:80:e0:94:a1: c3:65:13:3f:58:6a:94:d3:0a:86:bf:bc:b1:a8:ae:de:e0:25: 7f:d1:fb:73:56:19:c0:e7:4e:b7:9b:5f:23:f3:61:d5:30:f5: 54:a7:e7:d5:05:83:b3:ca:9b:72:12:75:1e:73:68:78:aa:a2: e9:24:a5:08:4f:13:02:cf:16:58:af:a0:0e:1c:87:e6:2f:ed: d3:38:d3:56:89:d3:dd:4d:a4:75:29:dc:f4:ec:41:ac:36:81: c1:cd:47:5d:03:ab:3a:58:12:89:2d:95:95:0e:71:1a:2e:f4: 02:a4:21:a3:f4:cd:4e:01:0a:22:b2:28:ab:dc:6f:b8:75:69: 2f:19:27:9b:0b:80:da:95:d6:54:5f:0d:65:4e:33:0f:1e:28: 28:2d:05:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI4MTIxMTAvBgNVBAUTKDVDNDVBRDAwMEJCRDUwQTcwRjkzQTVDQjcwQjY2Njgw QTUyOEVEQzAwHhcNMjUwNDI2MjIwODE1WhcNMjUwNTAzMjIwODE1WjAYMRYwFAYD VQQDEw02ODBkNTk1MC01MWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAumohBsrfRBayif38J2wegsEYuxwMk90HxdsmGIivyhSAjJmza1QYlzxoP/v5 Q9AXbLeU7Cd8skaMUWJHfULnBu4mYYUdZvr6r4RttLxFDLIuif1wDQ0IyYuff4Xk cGN1ADTzcuzH+Dif7ifh4OZNk+Ws+9vWRFxnEQ2iXVhBk6/9UFjKCyHN0oCUHnVi FtWkM9FzOyIxibkCTcUSXNwFQ27FitEydSyN5z2nw2SUtbi6TOEANhW6gkn+jnkN WWnSkYLEjiJEZRoimR2TByIvSoTa9zA8TKd10gGajTTq0JIc63LqBZgaPVMNR9uZ VcPs6tDEWY7XudAOz0UrOAlDzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBjl7sOX A1iAqzgpYAgE2e9AuTCSMB8GA1UdIwQYMBaAFFxFrQALvVCnD5Oly3C2ZoClKO3A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjgxMi9DMUU1REQxRTgw N0IxMUVCQTgzQUMwMURDNEY5QUUwMi9YRVd0QUF1OVVLY1BrNlhMY0xabWdLVW83 Y0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hFV3RBQXU5VUtjUGs2WExjTFptZ0tVbzdjQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjgxMi9DMUU1REQxRTgwN0IxMUVCQTgzQUMwMURDNEY5QUUwMi9YRVd0QUF1OVVL Y1BrNlhMY0xabWdLVW83Y0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+gF0MwwqWihI7eZu5K6i14NDXySruYs8Wi+nAm9dqBUqDs0lb6hJV r7GSNzj1u+cCoGRRdGJnaFhmG9+okDhhj3X0qf4VHwSFflZwctEOO+LwLYW8uQuL PdfJKTNWqkrkImN6AUPIF4DglKHDZRM/WGqU0wqGv7yxqK7e4CV/0ftzVhnA5063 m18j82HVMPVUp+fVBYOzyptyEnUec2h4qqLpJKUITxMCzxZYr6AOHIfmL+3TONNW idPdTaR1Kdz07EGsNoHBzUddA6s6WBKJLZWVDnEaLvQCpCGj9M1OAQoisiir3G+4 dWkvGSebC4DaldZUXw1lTjMPHigoLQXl -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:36 2025 by rpki-client on console.sobornost.net