$ rpki-client -vvf rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft File: b-azPqhzkGYLRrER2tV9YG8v7iQ.mft (raw, json) Hash identifier: uR33zSgRKi679cW+GNSRLwmgRctFWIzR0bWixgrwCks= Subject key identifier: B3:7E:63:99:B6:11:11:53:5D:92:BF:27:F2:69:B7:03:EC:78:90:72 Authority key identifier: 6F:E6:B3:3E:A8:73:90:66:0B:46:B1:11:DA:D5:7D:60:6F:2F:EE:24 Certificate issuer: /CN=A9145519/serialNumber=6FE6B33EA87390660B46B111DAD57D606F2FEE24 Certificate serial: 1C5D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b-azPqhzkGYLRrER2tV9YG8v7iQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft Manifest number: 1C42 Signing time: Mon 28 Apr 2025 16:18:31 +0000 Manifest this update: Mon 28 Apr 2025 16:18:30 +0000 Manifest next update: Mon 05 May 2025 16:18:30 +0000 Files and hashes: 1: b-azPqhzkGYLRrER2tV9YG8v7iQ.crl (hash: pFTfgi91cNO8MU2n47UzgcChkTczHHePk+Po8QV94bw=) 2: 7814B330E45E11E681F82341C4F9AE02.roa (hash: KpfW5v22QQ8knW5hcfiQgbsPMLlFz8zLOAmQh0gN2hw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.crl rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b-azPqhzkGYLRrER2tV9YG8v7iQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 14:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7261 (0x1c5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145519, serialNumber=6FE6B33EA87390660B46B111DAD57D606F2FEE24 Validity Not Before: Apr 28 16:18:30 2025 GMT Not After : May 5 16:18:30 2025 GMT Subject: CN=680faa57-e49c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:98:1e:d4:fb:af:94:0c:79:10:6d:f4:34:0b: 1b:b6:96:25:d4:23:2c:8b:69:c5:a6:6c:05:37:c7: f5:66:7f:6f:b0:82:1d:0f:6b:dc:5c:4e:a1:56:bd: 72:5f:b8:d2:26:05:c0:2f:6c:76:55:b8:14:9d:94: fc:e0:67:47:58:32:93:f4:15:77:d9:be:88:c7:f7: db:ee:49:55:dd:fa:c4:bb:09:a5:53:01:19:fc:b4: d6:c4:80:f2:d0:ce:1a:2a:56:2a:72:58:71:44:89: 60:ce:24:b2:51:05:80:88:54:0a:7e:91:81:a0:1f: 95:aa:f6:f4:95:16:82:c8:f4:9e:24:1f:9f:27:c3: 55:25:78:da:b6:2b:81:80:73:3e:7f:5f:fb:8c:42: 21:26:27:45:ef:09:6f:ac:19:a9:98:0d:28:17:ad: 28:1d:80:c1:dd:b7:a4:07:25:ab:c9:d2:c0:4e:65: b7:48:b6:ad:10:2b:3e:a9:25:f4:3c:cd:b4:b0:09: 8a:08:80:79:7e:d0:47:0e:1d:61:2a:bd:87:0a:ae: 49:28:f7:53:d9:85:43:e8:0b:e7:fa:5a:bb:6d:c4: f8:c6:13:3a:1f:6d:6b:0c:33:1f:35:60:07:a4:b8: cd:bd:5c:aa:e5:bd:b6:8b:5e:12:72:d0:80:e4:ec: 44:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:7E:63:99:B6:11:11:53:5D:92:BF:27:F2:69:B7:03:EC:78:90:72 X509v3 Authority Key Identifier: keyid:6F:E6:B3:3E:A8:73:90:66:0B:46:B1:11:DA:D5:7D:60:6F:2F:EE:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b-azPqhzkGYLRrER2tV9YG8v7iQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:90:ca:8e:18:66:0b:42:53:74:28:e8:86:2f:29:11:23:03: d6:50:16:35:cf:b4:81:bc:26:8a:7b:4b:0c:82:77:7a:6f:f9: 22:70:47:7b:c9:6e:42:6b:59:b9:fb:fc:ef:d3:b1:d7:f2:ab: df:b5:60:72:2c:71:cf:03:05:e9:d8:f7:f6:19:47:35:03:f7: 22:7a:3c:33:14:be:a4:b5:e9:27:87:20:7a:81:af:de:d6:c6: 0c:85:15:4e:c9:84:9c:7d:52:85:55:5f:0c:09:78:99:36:0d: 06:75:9e:c4:e9:ac:82:52:4e:66:01:6b:22:7b:84:be:fe:8a: fe:8a:4d:d1:50:92:e8:01:72:ef:26:68:20:bc:93:43:9d:07: 73:88:dc:05:04:4b:da:0f:63:04:2e:05:c5:82:8d:c4:fa:5e: 7e:77:0b:d2:0f:0d:4c:9f:8a:e2:55:47:bb:e9:4f:dd:bb:fa: c3:39:e0:29:bf:44:9e:0b:dc:fc:7a:a7:9b:da:41:3c:9d:fd: a6:46:55:62:9a:c5:34:98:b3:5f:a4:49:3f:b3:d8:99:d0:9b: 41:48:75:20:82:2f:b0:c6:f9:c8:03:b0:e2:a2:bf:8e:0d:6c: a6:d2:47:da:20:5e:e3:9f:1a:ec:85:c4:57:c9:a1:31:01:85: 34:ae:4b:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHF0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU1MTkxMTAvBgNVBAUTKDZGRTZCMzNFQTg3MzkwNjYwQjQ2QjExMURBRDU3RDYw NkYyRkVFMjQwHhcNMjUwNDI4MTYxODMwWhcNMjUwNTA1MTYxODMwWjAYMRYwFAYD VQQDEw02ODBmYWE1Ny1lNDljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Jge1PuvlAx5EG30NAsbtpYl1CMsi2nFpmwFN8f1Zn9vsIIdD2vcXE6hVr1y X7jSJgXAL2x2VbgUnZT84GdHWDKT9BV32b6Ix/fb7klV3frEuwmlUwEZ/LTWxIDy 0M4aKlYqclhxRIlgziSyUQWAiFQKfpGBoB+Vqvb0lRaCyPSeJB+fJ8NVJXjatiuB gHM+f1/7jEIhJidF7wlvrBmpmA0oF60oHYDB3bekByWrydLATmW3SLatECs+qSX0 PM20sAmKCIB5ftBHDh1hKr2HCq5JKPdT2YVD6Avn+lq7bcT4xhM6H21rDDMfNWAH pLjNvVyq5b22i14SctCA5OxEuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLN+Y5m2 ERFTXZK/J/JptwPseJByMB8GA1UdIwQYMBaAFG/msz6oc5BmC0axEdrVfWBvL+4k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTUxOS9BMkZDMzI2NEU0 NUMxMUU2OENFREZBM0VDNEY5QUUwMi9iLWF6UHFoemtHWUxSckVSMnRWOVlHOHY3 aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ItYXpQcWh6a0dZTFJyRVIydFY5WUc4djdpUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTUxOS9BMkZDMzI2NEU0NUMxMUU2OENFREZBM0VDNEY5QUUwMi9iLWF6UHFoemtH WUxSckVSMnRWOVlHOHY3aVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjkMqOGGYLQlN0KOiGLykRIwPWUBY1z7SBvCaKe0sMgnd6b/kicEd7 yW5Ca1m5+/zv07HX8qvftWByLHHPAwXp2Pf2GUc1A/ciejwzFL6kteknhyB6ga/e 1sYMhRVOyYScfVKFVV8MCXiZNg0GdZ7E6ayCUk5mAWsie4S+/or+ik3RUJLoAXLv JmggvJNDnQdziNwFBEvaD2MELgXFgo3E+l5+dwvSDw1Mn4riVUe76U/du/rDOeAp v0SeC9z8eqeb2kE8nf2mRlVimsU0mLNfpEk/s9iZ0JtBSHUggi+wxvnIA7Dior+O DWym0kfaIF7jnxrshcRXyaExAYU0rkv2 -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:31 2025 by rpki-client on console.sobornost.net