$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft File: Obr5A_sjDbZa60L2fJ8_NgMMff0.mft (raw, json) Hash identifier: rqUhXRN0q2NbF9upsXy9421UtcsOr/VGz3No07r5BwU= Subject key identifier: C9:9B:27:7C:8C:0A:A1:50:1D:87:A7:7F:C8:74:8B:3D:31:23:63:05 Authority key identifier: 39:BA:F9:03:FB:23:0D:B6:5A:EB:42:F6:7C:9F:3F:36:03:0C:7D:FD Certificate issuer: /CN=A9142A17/serialNumber=39BAF903FB230DB65AEB42F67C9F3F36030C7DFD Certificate serial: 0426 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Obr5A_sjDbZa60L2fJ8_NgMMff0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft Manifest number: 0422 Signing time: Sun 27 Apr 2025 00:01:46 +0000 Manifest this update: Sun 27 Apr 2025 00:01:45 +0000 Manifest next update: Sun 04 May 2025 00:01:45 +0000 Files and hashes: 1: Obr5A_sjDbZa60L2fJ8_NgMMff0.crl (hash: PLzH1a8H5yeGyDI648GAsMKxuDn3fGuiXDYvy0+24g8=) 2: 5475C39A5F7111ECA813E17DC4F9AE02.roa (hash: +D56I4b7nWl9oFXCZLe1V1DGfoh8L2BH9bwrOgGWI6U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.crl rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Obr5A_sjDbZa60L2fJ8_NgMMff0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 00:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1062 (0x426) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142A17, serialNumber=39BAF903FB230DB65AEB42F67C9F3F36030C7DFD Validity Not Before: Apr 27 00:01:45 2025 GMT Not After : May 4 00:01:45 2025 GMT Subject: CN=680d73e9-9e9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:fa:8b:f4:58:dc:80:c5:c6:21:db:51:46:59: e4:cf:c1:df:a9:89:bd:86:7a:c5:42:df:56:b9:dd: 48:f2:7d:81:e7:d6:85:b9:37:d8:52:03:64:49:5f: 51:7b:35:0a:98:43:18:81:ec:63:f3:b6:01:80:2a: b6:fb:c8:61:58:41:92:0d:92:e1:18:d4:68:f5:22: 20:c6:3a:bb:cd:36:52:14:db:92:c7:4d:d0:d3:67: 5b:f7:16:19:1e:68:ae:bf:62:e5:c6:18:82:87:56: cb:a2:66:fc:3b:2d:e6:7d:d0:5c:18:0e:80:14:ff: f5:8e:36:10:ee:6d:51:94:68:ed:b9:39:85:e7:6a: d4:57:c4:0a:af:01:0e:c5:5e:9c:a1:ac:6d:89:62: a6:26:dd:80:d1:be:3d:0e:d0:13:64:6f:6f:c2:c6: 69:5c:f9:28:75:11:58:9b:62:e4:40:ca:6e:3d:ed: a3:c6:e7:9d:aa:8f:74:a3:9a:0c:f2:8a:56:57:a6: 29:5b:1a:26:55:a5:c4:c0:af:fa:67:67:b2:fa:ef: ba:14:03:70:63:eb:78:4f:91:6c:03:76:64:b6:7e: 26:74:cd:3b:95:e4:3f:83:79:1e:ee:1d:82:91:cc: 72:a5:0e:da:f6:b0:48:fb:ad:ec:5b:21:75:51:e8: 03:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:9B:27:7C:8C:0A:A1:50:1D:87:A7:7F:C8:74:8B:3D:31:23:63:05 X509v3 Authority Key Identifier: keyid:39:BA:F9:03:FB:23:0D:B6:5A:EB:42:F6:7C:9F:3F:36:03:0C:7D:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Obr5A_sjDbZa60L2fJ8_NgMMff0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:3f:d7:80:a1:bb:2c:c3:2c:e2:4a:3a:e7:94:7c:e7:ef:9b: d1:fc:cb:b0:86:fc:b8:77:58:69:f2:54:2b:f7:bb:ec:91:f6: 24:6b:c4:46:80:90:1f:ac:74:20:dc:77:56:13:68:3d:a0:96: 59:90:10:6b:5d:fb:c8:1e:58:71:1d:cf:42:3b:48:70:d5:3c: a1:b0:64:d8:fb:6f:a7:dd:8c:75:5e:6d:cd:3a:f9:4c:32:64: 15:33:33:6c:10:57:d2:e0:d1:20:96:75:e1:a9:81:a4:f2:05: a7:2c:ed:99:37:2b:9d:f5:1c:29:ec:71:ef:f9:1c:48:3e:05: 06:09:e3:7a:35:e3:52:a0:04:17:d8:21:01:bf:c6:13:5e:30: 4e:b3:76:d8:52:49:9e:e1:98:78:d8:41:64:83:7c:c9:9e:9e: f5:54:59:82:c5:2a:5d:fd:db:29:7c:19:e4:64:67:8c:3c:3c: ff:7a:e2:8d:60:08:48:3c:38:9d:9a:7c:ed:08:42:5a:a4:50: 02:16:dd:0d:44:19:ca:5b:7c:c9:94:91:f6:96:f6:ec:35:90: b1:cf:c7:10:8b:d7:95:ef:04:42:50:d3:61:c5:a7:11:99:71: 7f:9c:3b:aa:e3:ad:36:5c:a0:08:9e:4d:bc:5e:23:7c:62:31: 88:3f:14:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJBMTcxMTAvBgNVBAUTKDM5QkFGOTAzRkIyMzBEQjY1QUVCNDJGNjdDOUYzRjM2 MDMwQzdERkQwHhcNMjUwNDI3MDAwMTQ1WhcNMjUwNTA0MDAwMTQ1WjAYMRYwFAYD VQQDEw02ODBkNzNlOS05ZTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzPqL9FjcgMXGIdtRRlnkz8HfqYm9hnrFQt9Wud1I8n2B59aFuTfYUgNkSV9R ezUKmEMYgexj87YBgCq2+8hhWEGSDZLhGNRo9SIgxjq7zTZSFNuSx03Q02db9xYZ Hmiuv2LlxhiCh1bLomb8Oy3mfdBcGA6AFP/1jjYQ7m1RlGjtuTmF52rUV8QKrwEO xV6coaxtiWKmJt2A0b49DtATZG9vwsZpXPkodRFYm2LkQMpuPe2jxuedqo90o5oM 8opWV6YpWxomVaXEwK/6Z2ey+u+6FANwY+t4T5FsA3Zktn4mdM07leQ/g3ke7h2C kcxypQ7a9rBI+63sWyF1UegD8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMmbJ3yM CqFQHYenf8h0iz0xI2MFMB8GA1UdIwQYMBaAFDm6+QP7Iw22WutC9nyfPzYDDH39 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkExNy9BQzZGNjg0MjVG NkUxMUVDQjYxNTkzNzlDNEY5QUUwMi9PYnI1QV9zakRiWmE2MEwyZko4X05nTU1m ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09icjVBX3NqRGJaYTYwTDJmSjhfTmdNTWZmMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkExNy9BQzZGNjg0MjVGNkUxMUVDQjYxNTkzNzlDNEY5QUUwMi9PYnI1QV9zakRi WmE2MEwyZko4X05nTU1mZjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbP9eAobsswyziSjrnlHzn75vR/Muwhvy4d1hp8lQr97vskfYka8RG gJAfrHQg3HdWE2g9oJZZkBBrXfvIHlhxHc9CO0hw1TyhsGTY+2+n3Yx1Xm3NOvlM MmQVMzNsEFfS4NEglnXhqYGk8gWnLO2ZNyud9Rwp7HHv+RxIPgUGCeN6NeNSoAQX 2CEBv8YTXjBOs3bYUkme4Zh42EFkg3zJnp71VFmCxSpd/dspfBnkZGeMPDz/euKN YAhIPDidmnztCEJapFACFt0NRBnKW3zJlJH2lvbsNZCxz8cQi9eV7wRCUNNhxacR mXF/nDuq4602XKAInk28XiN8YjGIPxT4 -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:36 2025 by rpki-client on console.sobornost.net