$ rpki-client -vvf rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft File: 8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft (raw, json) Hash identifier: g9OPDcd/spVsHTewTVbC+ZQDOqg2IVqlpgWgjdOAADQ= Subject key identifier: 2E:88:CA:29:B1:27:6A:71:48:BE:09:35:E4:37:C2:70:F7:7C:33:F8 Authority key identifier: F1:6E:08:0A:EF:19:3F:5D:59:EA:2A:19:ED:5A:6D:75:28:2A:0C:84 Certificate issuer: /CN=A9144FDD/serialNumber=F16E080AEF193F5D59EA2A19ED5A6D75282A0C84 Certificate serial: 0894 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft Manifest number: 0886 Signing time: Sat 26 Apr 2025 20:21:29 +0000 Manifest this update: Sat 26 Apr 2025 20:21:28 +0000 Manifest next update: Sat 03 May 2025 20:21:28 +0000 Files and hashes: 1: 8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl (hash: 8We97b9Q5+L955RY44/JcB3cUpC1fVFHJDvRRfjwAU0=) 2: E8053F36BC3011EA840E2A56C4F9AE02.roa (hash: eX1Jqzb/wvl6CH4yih7NF/ZllkUpoBKZivz1fQWZTFc=) 3: E89C37B0BC3011EA840E2A56C4F9AE02.roa (hash: u1VWd5IJTGCG//nYGKvxvoYAm+UMxol66g1kBC9OWXk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2196 (0x894) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144FDD, serialNumber=F16E080AEF193F5D59EA2A19ED5A6D75282A0C84 Validity Not Before: Apr 26 20:21:28 2025 GMT Not After : May 3 20:21:28 2025 GMT Subject: CN=680d4048-b0ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:a5:57:cc:e4:09:97:dc:95:1e:37:eb:ba:f2: 51:c3:98:32:db:13:9c:c3:62:08:0f:cb:a0:18:63: 69:ec:09:9e:00:fe:e6:8b:b0:e2:37:f9:ff:9e:7e: 7c:99:35:ee:49:a6:4a:9c:05:f3:c3:0f:4e:5c:4e: aa:3b:94:38:58:f1:71:93:2b:46:1b:59:f5:c9:f9: 52:05:bd:33:d2:c7:75:64:ff:31:6c:ee:db:0b:8b: 96:0c:93:0a:24:8a:cd:1d:ab:ed:97:2d:89:c2:00: f0:ae:db:6d:28:7b:4c:9a:8e:5c:48:a0:19:06:4c: 1f:8a:36:c1:ed:9c:18:71:33:9d:96:23:08:19:09: 7f:eb:69:84:2f:a7:5b:ce:f6:85:9e:9e:22:31:98: da:99:b3:42:bb:20:0a:70:0e:78:6f:69:d1:10:9a: 4c:27:a2:d8:df:6c:77:ab:c0:0f:b9:7d:90:d9:c0: d9:c6:e1:f5:ed:b5:11:5f:9d:f6:83:c9:e6:b5:0f: 1f:5c:b0:bf:20:6a:41:8e:f3:29:74:89:8b:78:85: 80:0a:3b:87:a9:18:be:df:cf:7a:0b:16:d2:88:15: e3:2c:9c:24:c8:d8:26:7a:95:9f:44:2e:86:9f:62: 27:52:2d:52:5e:be:82:fa:db:28:a3:48:21:3b:8a: 1e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:88:CA:29:B1:27:6A:71:48:BE:09:35:E4:37:C2:70:F7:7C:33:F8 X509v3 Authority Key Identifier: keyid:F1:6E:08:0A:EF:19:3F:5D:59:EA:2A:19:ED:5A:6D:75:28:2A:0C:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:50:40:37:46:35:a0:7b:ad:e9:03:2b:38:01:bc:c3:a1:be: d5:85:bc:28:b4:55:e1:43:63:ec:d1:b9:a4:92:69:2a:85:92: e5:5f:f0:31:55:4c:fe:06:22:24:b7:25:15:bc:84:33:57:16: 6a:7f:2b:81:9b:e2:97:85:f1:81:5a:01:df:13:e9:8c:a2:05: 2c:74:6e:6c:d4:99:32:08:84:d9:65:3b:91:91:dc:26:ce:97: 07:d6:64:9b:7f:b1:d3:c9:7a:91:bd:92:42:52:24:b9:e9:2b: e8:c7:86:9a:d4:d5:12:9c:fe:b6:6c:81:f6:aa:f2:0c:99:79: c6:bc:89:ab:aa:2e:50:6b:9b:78:1f:c6:66:7b:2d:55:bd:8d: 39:cb:00:95:a8:b3:23:22:bd:03:2a:25:c6:22:46:23:13:92: 41:27:e7:9a:14:5e:7f:51:89:7e:18:31:c4:42:97:3b:7e:f9: fd:a9:53:b9:ad:d9:7f:6f:83:49:d2:66:c4:fc:a3:1f:72:13: b9:0f:64:bc:94:6d:d2:b3:58:ab:7f:68:fc:fe:06:07:9c:f8: 30:ca:86:f5:d6:1d:a9:05:01:52:a6:90:bd:17:f5:6d:50:b1: de:fa:60:dd:fd:7c:4f:73:b5:59:46:0d:d7:f9:32:86:c2:a4: 92:fd:81:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRGREQxMTAvBgNVBAUTKEYxNkUwODBBRUYxOTNGNUQ1OUVBMkExOUVENUE2RDc1 MjgyQTBDODQwHhcNMjUwNDI2MjAyMTI4WhcNMjUwNTAzMjAyMTI4WjAYMRYwFAYD VQQDEw02ODBkNDA0OC1iMGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6qVXzOQJl9yVHjfruvJRw5gy2xOcw2IID8ugGGNp7AmeAP7mi7DiN/n/nn58 mTXuSaZKnAXzww9OXE6qO5Q4WPFxkytGG1n1yflSBb0z0sd1ZP8xbO7bC4uWDJMK JIrNHavtly2JwgDwrtttKHtMmo5cSKAZBkwfijbB7ZwYcTOdliMIGQl/62mEL6db zvaFnp4iMZjambNCuyAKcA54b2nREJpMJ6LY32x3q8APuX2Q2cDZxuH17bURX532 g8nmtQ8fXLC/IGpBjvMpdImLeIWACjuHqRi+3896CxbSiBXjLJwkyNgmepWfRC6G n2InUi1SXr6C+tsoo0ghO4oeJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC6Iyimx J2pxSL4JNeQ3wnD3fDP4MB8GA1UdIwQYMBaAFPFuCArvGT9dWeoqGe1abXUoKgyE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEZERC8yOEZCMjQ4NEJD MzAxMUVBQkJFMEVDNTVDNEY5QUUwMi84VzRJQ3U4WlAxMVo2aW9aN1ZwdGRTZ3FE SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhXNElDdThaUDExWjZpb1o3VnB0ZFNncURJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEZERC8yOEZCMjQ4NEJDMzAxMUVBQkJFMEVDNTVDNEY5QUUwMi84VzRJQ3U4WlAx MVo2aW9aN1ZwdGRTZ3FESVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChUEA3RjWge63pAys4AbzDob7VhbwotFXhQ2Ps0bmkkmkqhZLlX/Ax VUz+BiIktyUVvIQzVxZqfyuBm+KXhfGBWgHfE+mMogUsdG5s1JkyCITZZTuRkdwm zpcH1mSbf7HTyXqRvZJCUiS56Svox4aa1NUSnP62bIH2qvIMmXnGvImrqi5Qa5t4 H8Zmey1VvY05ywCVqLMjIr0DKiXGIkYjE5JBJ+eaFF5/UYl+GDHEQpc7fvn9qVO5 rdl/b4NJ0mbE/KMfchO5D2S8lG3Ss1irf2j8/gYHnPgwyob11h2pBQFSppC9F/Vt ULHe+mDd/XxPc7VZRg3X+TKGwqSS/YE/ -----END CERTIFICATE-----Generated at Sun Apr 27 00:13:57 2025 by rpki-client on console.sobornost.net