$ rpki-client -vvf rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.mft File: 2VWVxglbTfriy5tFuQicwmI9lKM.mft (raw, json) Hash identifier: 6PAXYIVDS3jNswZpSVxDp1X1L8iRPSEglsCeheYa4OQ= Subject key identifier: 3C:8A:E3:14:7B:3D:FE:39:46:0C:BF:3D:1D:E1:F4:37:CF:9B:D5:5D Authority key identifier: D9:55:95:C6:09:5B:4D:FA:E2:CB:9B:45:B9:08:9C:C2:62:3D:94:A3 Certificate issuer: /CN=A9144E38/serialNumber=D95595C6095B4DFAE2CB9B45B9089CC2623D94A3 Certificate serial: 0E89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2VWVxglbTfriy5tFuQicwmI9lKM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.mft Manifest number: 0E80 Signing time: Mon 28 Apr 2025 17:56:37 +0000 Manifest this update: Mon 28 Apr 2025 17:56:36 +0000 Manifest next update: Mon 05 May 2025 17:56:36 +0000 Files and hashes: 1: 2VWVxglbTfriy5tFuQicwmI9lKM.crl (hash: YUDVlBJFHiyaTaqJsYO2hIipdZRZRPXEg8JkhDK3xHo=) 2: D7E41D6A788411EA9186C910C4F9AE02.roa (hash: Lhup7Zk9zUWbpx4YvLoYtp8k4a6DjCWODZVfnB4MNOA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.crl rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2VWVxglbTfriy5tFuQicwmI9lKM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 17:56:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3721 (0xe89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144E38, serialNumber=D95595C6095B4DFAE2CB9B45B9089CC2623D94A3 Validity Not Before: Apr 28 17:56:36 2025 GMT Not After : May 5 17:56:36 2025 GMT Subject: CN=680fc155-8746 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:35:d8:11:99:ee:45:7e:2e:3f:ef:ee:a9:6e: 17:44:84:c9:14:77:ae:36:a2:49:df:ac:d1:11:c5: e9:fd:fc:c8:6e:54:19:5a:5e:88:a8:e1:f1:1f:c5: 0f:58:e8:d8:b7:ef:64:69:c4:2a:5a:8f:81:80:26: 36:85:9e:d5:28:fa:f4:20:bb:b8:e6:bc:be:02:af: f5:c7:43:33:8d:29:fe:eb:dc:cf:e0:6f:91:7a:10: 7d:7c:75:1a:e2:7a:7e:5d:39:25:dd:ce:d7:53:6c: 0f:58:97:98:5f:18:73:54:73:ae:e6:c4:cb:c5:f7: de:29:31:e4:2a:af:f2:22:5c:aa:c6:6c:e0:2f:bb: eb:8f:26:50:90:34:51:10:6d:e2:52:a0:ae:49:e0: 53:35:d1:5c:40:1c:ea:e6:69:8a:fa:6b:62:5a:11: e8:28:a6:ef:0a:fd:c4:65:0a:0f:4f:11:be:45:93: 85:44:78:9f:c8:67:26:34:9b:57:7f:5c:ad:9a:aa: 51:55:b7:8d:c7:6f:3a:e1:88:08:cf:53:db:54:86: 7b:e8:29:1a:28:f5:d9:bb:a9:2f:b3:9e:d1:17:36: 97:ac:66:54:79:39:d5:ff:3f:ff:f6:a3:6b:9d:a5: 96:88:7c:65:5f:6c:6c:10:2d:10:ff:6f:66:9a:ba: da:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:8A:E3:14:7B:3D:FE:39:46:0C:BF:3D:1D:E1:F4:37:CF:9B:D5:5D X509v3 Authority Key Identifier: keyid:D9:55:95:C6:09:5B:4D:FA:E2:CB:9B:45:B9:08:9C:C2:62:3D:94:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2VWVxglbTfriy5tFuQicwmI9lKM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:da:91:ad:4b:61:97:85:1b:4a:69:fb:17:88:cb:de:bb:e4: 30:89:4b:35:f0:ee:e5:80:e7:02:6d:0d:41:8c:2f:d4:f2:c2: ff:11:8b:ac:14:0e:2c:38:67:82:ea:5c:a2:24:96:91:68:83: a6:74:d1:10:9f:bc:15:b6:2a:05:85:c4:f7:ec:b6:a5:a3:7f: 4e:e4:45:0f:d1:bf:fa:66:f6:60:dd:33:ae:38:98:0c:ad:48: 94:b4:09:54:fe:f1:6f:f5:8f:81:0e:ec:db:66:52:95:59:c4: 8d:ab:4a:66:67:16:b5:5c:84:8a:2a:d7:c3:cb:17:6d:9f:02: 1c:54:19:42:83:d0:a6:59:3c:f0:11:b6:5e:7d:ed:8b:37:cb: 0b:9b:6e:2d:83:93:07:58:f2:bc:5d:a4:50:dc:0e:0c:54:6c: b1:25:b8:b0:cf:a9:eb:ad:3d:a5:cb:7b:69:67:9d:ef:5e:f0: 2a:db:23:04:c1:86:1e:95:5c:92:48:90:60:e7:4a:40:27:fc: 40:65:4a:90:6d:86:4b:f8:a8:16:d7:69:e0:a2:c3:9d:ed:9a: ad:5f:8d:10:cb:7f:65:5a:67:37:52:6b:81:dc:07:b4:84:2f: 9d:18:c6:1a:75:39:76:b5:c4:38:ef:06:02:5f:a2:a0:7a:2b: 75:78:c7:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRFMzgxMTAvBgNVBAUTKEQ5NTU5NUM2MDk1QjRERkFFMkNCOUI0NUI5MDg5Q0My NjIzRDk0QTMwHhcNMjUwNDI4MTc1NjM2WhcNMjUwNTA1MTc1NjM2WjAYMRYwFAYD VQQDEw02ODBmYzE1NS04NzQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyzXYEZnuRX4uP+/uqW4XRITJFHeuNqJJ36zREcXp/fzIblQZWl6IqOHxH8UP WOjYt+9kacQqWo+BgCY2hZ7VKPr0ILu45ry+Aq/1x0MzjSn+69zP4G+RehB9fHUa 4np+XTkl3c7XU2wPWJeYXxhzVHOu5sTLxffeKTHkKq/yIlyqxmzgL7vrjyZQkDRR EG3iUqCuSeBTNdFcQBzq5mmK+mtiWhHoKKbvCv3EZQoPTxG+RZOFRHifyGcmNJtX f1ytmqpRVbeNx2864YgIz1PbVIZ76CkaKPXZu6kvs57RFzaXrGZUeTnV/z//9qNr naWWiHxlX2xsEC0Q/29mmrrazQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDyK4xR7 Pf45Rgy/PR3h9DfPm9VdMB8GA1UdIwQYMBaAFNlVlcYJW0364subRbkInMJiPZSj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEUzOC83MzMzMUI1RTkx RDExMUU5QjZBOTMyNUJDNEY5QUUwMi8yVldWeGdsYlRmcml5NXRGdVFpY3dtSTls S00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJWV1Z4Z2xiVGZyaXk1dEZ1UWljd21JOWxLTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEUzOC83MzMzMUI1RTkxRDExMUU5QjZBOTMyNUJDNEY5QUUwMi8yVldWeGdsYlRm cml5NXRGdVFpY3dtSTlsS00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAE2pGtS2GXhRtKafsXiMveu+QwiUs18O7lgOcCbQ1BjC/U8sL/EYus FA4sOGeC6lyiJJaRaIOmdNEQn7wVtioFhcT37Lalo39O5EUP0b/6ZvZg3TOuOJgM rUiUtAlU/vFv9Y+BDuzbZlKVWcSNq0pmZxa1XISKKtfDyxdtnwIcVBlCg9CmWTzw EbZefe2LN8sLm24tg5MHWPK8XaRQ3A4MVGyxJbiwz6nrrT2ly3tpZ53vXvAq2yME wYYelVySSJBg50pAJ/xAZUqQbYZL+KgW12ngosOd7ZqtX40Qy39lWmc3UmuB3Ae0 hC+dGMYadTl2tcQ47wYCX6Kgeit1eMeS -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:31 2025 by rpki-client on console.sobornost.net