$ rpki-client -vvf rpki.apnic.net/member_repository/A9142E1E/13D80608824211EFAD3D8181C4F9AE02/G96wwnXJDoG_o6r-IT5OcSHrc0o.mft File: G96wwnXJDoG_o6r-IT5OcSHrc0o.mft (raw, json) Hash identifier: QBCnMG+GmRe/j/614mFNwW6fKZl0zyW5ILx0luVM2SA= Subject key identifier: 05:74:B2:86:70:1B:C4:82:DE:8E:24:0C:70:8F:9E:03:AA:DD:E9:27 Authority key identifier: 1B:DE:B0:C2:75:C9:0E:81:BF:A3:AA:FE:21:3E:4E:71:21:EB:73:4A Certificate issuer: /CN=A9142E1E/serialNumber=1BDEB0C275C90E81BFA3AAFE213E4E7121EB734A Certificate serial: 73 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G96wwnXJDoG_o6r-IT5OcSHrc0o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142E1E/13D80608824211EFAD3D8181C4F9AE02/G96wwnXJDoG_o6r-IT5OcSHrc0o.mft Manifest number: 70 Signing time: Sun 27 Apr 2025 05:44:02 +0000 Manifest this update: Sun 27 Apr 2025 05:44:01 +0000 Manifest next update: Sun 04 May 2025 05:44:01 +0000 Files and hashes: 1: G96wwnXJDoG_o6r-IT5OcSHrc0o.crl (hash: zYN2x3rBORwW4RuQpYwDcQSuojhcwTROm8s1V4Nxc/E=) 2: 31B5D564824311EF9C69B985C4F9AE02.roa (hash: IVX22Sj0l4iAKc50j77MELQdp1CwcB3skhe7+xJHsEQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142E1E/13D80608824211EFAD3D8181C4F9AE02/G96wwnXJDoG_o6r-IT5OcSHrc0o.crl rsync://rpki.apnic.net/member_repository/A9142E1E/13D80608824211EFAD3D8181C4F9AE02/G96wwnXJDoG_o6r-IT5OcSHrc0o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G96wwnXJDoG_o6r-IT5OcSHrc0o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142E1E, serialNumber=1BDEB0C275C90E81BFA3AAFE213E4E7121EB734A Validity Not Before: Apr 27 05:44:01 2025 GMT Not After : May 4 05:44:01 2025 GMT Subject: CN=680dc421-4c9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:26:ab:63:cd:f0:7c:94:11:56:7c:86:69:50: e7:9e:ec:a5:7a:94:72:b3:34:b8:b3:fa:72:2a:99: ef:de:8e:5c:e9:f9:63:fa:29:27:93:bd:09:2b:cf: 18:09:72:84:cc:0d:9c:8f:0b:4f:1a:da:31:7c:88: 73:c1:9a:38:34:a1:c1:90:88:c9:82:b5:7b:2e:48: 8f:02:a7:ca:af:b9:fa:fe:03:e2:20:50:8c:7f:f9: 72:03:2f:a2:1e:ec:38:cb:9e:26:05:83:97:e8:2f: 3a:54:0b:c2:95:c0:09:36:1b:64:6c:15:d6:a0:9a: fb:29:7b:25:2a:5c:85:9c:f5:f9:67:5a:17:22:cf: a5:99:f2:49:7d:eb:c2:40:ef:ec:75:d6:97:72:5b: fe:ec:16:14:53:df:3b:13:42:99:9a:4e:f1:3a:b7: b7:99:69:ac:43:66:d3:e0:60:14:11:3f:26:74:d3: 2b:87:ef:b0:1d:10:51:94:7a:e7:65:58:ce:09:c5: 34:d4:b3:7a:32:30:31:15:bf:76:e9:6a:aa:46:de: 86:50:18:cc:12:62:8b:7f:5a:98:29:7b:00:7d:4c: 6d:d8:7e:7f:59:d7:c6:4c:25:8a:f9:2e:fe:3d:9f: 7e:8d:6e:69:26:5b:61:ef:b9:65:4c:62:95:fb:a1: a1:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:74:B2:86:70:1B:C4:82:DE:8E:24:0C:70:8F:9E:03:AA:DD:E9:27 X509v3 Authority Key Identifier: keyid:1B:DE:B0:C2:75:C9:0E:81:BF:A3:AA:FE:21:3E:4E:71:21:EB:73:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142E1E/13D80608824211EFAD3D8181C4F9AE02/G96wwnXJDoG_o6r-IT5OcSHrc0o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G96wwnXJDoG_o6r-IT5OcSHrc0o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142E1E/13D80608824211EFAD3D8181C4F9AE02/G96wwnXJDoG_o6r-IT5OcSHrc0o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:cf:8f:76:40:0f:f0:5d:a3:f1:b3:1c:e4:f9:8b:fb:c7:4c: 86:fc:bd:77:05:09:76:70:67:16:18:1a:b6:34:6d:0f:2c:46: 46:04:cd:75:67:9a:ee:a0:8e:85:a5:b0:c7:24:d3:82:d0:d7: df:2b:75:4c:e4:51:2c:d8:02:19:a9:f9:80:43:d1:eb:9c:98: f8:9d:0f:36:d4:79:3e:c1:2e:b1:8c:c2:50:bd:fe:28:71:32: 22:06:64:48:ff:eb:8b:72:b0:fd:9b:c2:df:f6:92:4f:a8:d0: b3:6a:9e:31:fe:00:74:2b:1d:7b:a1:34:ac:43:8f:82:51:81: 45:3a:6c:f8:05:62:35:fc:fe:31:44:fa:9f:1a:5b:74:05:66: 2f:c8:aa:9d:8c:5f:ce:73:53:f5:13:68:3e:b4:a6:d8:cb:5f: 26:5b:06:c5:fa:56:7d:91:1f:80:85:71:c0:2a:bc:13:dc:8c: c1:9b:3e:51:c0:10:42:29:b2:c8:83:78:4c:95:92:0b:ac:7c: 02:56:d3:a3:0b:43:ae:25:83:ef:e1:ae:e3:2a:02:04:4d:f0: 84:4b:f8:a0:51:58:8e:f3:6a:51:ec:b6:27:81:e4:bc:c2:15: 96:8c:79:93:fe:65:6a:d8:49:80:b3:d2:8a:e2:f2:f5:8f:d2: e8:5a:4f:9e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MkUxRTExMC8GA1UEBRMoMUJERUIwQzI3NUM5MEU4MUJGQTNBQUZFMjEzRTRFNzEy MUVCNzM0QTAeFw0yNTA0MjcwNTQ0MDFaFw0yNTA1MDQwNTQ0MDFaMBgxFjAUBgNV BAMTDTY4MGRjNDIxLTRjOWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQJqtjzfB8lBFWfIZpUOee7KV6lHKzNLiz+nIqme/ejlzp+WP6KSeTvQkrzxgJ coTMDZyPC08a2jF8iHPBmjg0ocGQiMmCtXsuSI8Cp8qvufr+A+IgUIx/+XIDL6Ie 7DjLniYFg5foLzpUC8KVwAk2G2RsFdagmvspeyUqXIWc9flnWhciz6WZ8kl968JA 7+x11pdyW/7sFhRT3zsTQpmaTvE6t7eZaaxDZtPgYBQRPyZ00yuH77AdEFGUeudl WM4JxTTUs3oyMDEVv3bpaqpG3oZQGMwSYot/WpgpewB9TG3Yfn9Z18ZMJYr5Lv49 n36NbmkmW2HvuWVMYpX7oaE5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBXSyhnAb xILejiQMcI+eA6rd6ScwHwYDVR0jBBgwFoAUG96wwnXJDoG/o6r+IT5OcSHrc0ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyRTFFLzEzRDgwNjA4ODI0 MjExRUZBRDNEODE4MUM0RjlBRTAyL0c5Nnd3blhKRG9HX282ci1JVDVPY1NIcmMw by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRzk2d3duWEpEb0dfbzZyLUlUNU9jU0hyYzBvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy RTFFLzEzRDgwNjA4ODI0MjExRUZBRDNEODE4MUM0RjlBRTAyL0c5Nnd3blhKRG9H X282ci1JVDVPY1NIcmMwby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKbPj3ZAD/Bdo/GzHOT5i/vHTIb8vXcFCXZwZxYYGrY0bQ8sRkYEzXVn mu6gjoWlsMck04LQ198rdUzkUSzYAhmp+YBD0eucmPidDzbUeT7BLrGMwlC9/ihx MiIGZEj/64tysP2bwt/2kk+o0LNqnjH+AHQrHXuhNKxDj4JRgUU6bPgFYjX8/jFE +p8aW3QFZi/Iqp2MX85zU/UTaD60ptjLXyZbBsX6Vn2RH4CFccAqvBPcjMGbPlHA EEIpssiDeEyVkgusfAJW06MLQ64lg+/hruMqAgRN8IRL+KBRWI7zalHstieB5LzC FZaMeZP+ZWrYSYCz0ori8vWP0uhaT54= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:43 2025 by rpki-client on console.sobornost.net