$ rpki-client -vvf rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.mft File: tNIXk5onUZOOB2WaeUiFqciEGRk.mft (raw, json) Hash identifier: xU7uIiuyYGs+RtFt53dLQxVTep1hXjs/+4IuzlrOTwc= Subject key identifier: 5E:06:85:05:A0:18:B9:EA:E6:2E:61:69:38:04:BC:5F:0D:54:97:7C Authority key identifier: B4:D2:17:93:9A:27:51:93:8E:07:65:9A:79:48:85:A9:C8:84:19:19 Certificate issuer: /CN=A9145B13/serialNumber=B4D217939A2751938E07659A794885A9C8841919 Certificate serial: 4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNIXk5onUZOOB2WaeUiFqciEGRk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.mft Manifest number: 4D Signing time: Sun 27 Apr 2025 06:09:30 +0000 Manifest this update: Sun 27 Apr 2025 06:09:30 +0000 Manifest next update: Sun 04 May 2025 06:09:30 +0000 Files and hashes: 1: tNIXk5onUZOOB2WaeUiFqciEGRk.crl (hash: vTTUrnF3007v0/T1tNEHji1s+/7svnH2GZnSB7tbqEA=) 2: 793486E0C11A11EF99C19012C4F9AE02.roa (hash: pawwhpt8xl4Jm5tUlNLFvNNRwT1g8ks5JKIz2Wod4KM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.crl rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNIXk5onUZOOB2WaeUiFqciEGRk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145B13, serialNumber=B4D217939A2751938E07659A794885A9C8841919 Validity Not Before: Apr 27 06:09:30 2025 GMT Not After : May 4 06:09:30 2025 GMT Subject: CN=680dca1a-ffdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a1:42:cf:82:be:9d:ce:e0:a8:9f:ac:d2:7d: 6f:36:16:b2:cf:d1:72:92:4d:0f:20:e1:d3:95:14: 00:2f:3a:cf:f3:f0:85:38:85:0c:eb:ea:7c:af:9e: 57:6d:28:a2:91:d5:18:6a:d3:84:d6:cb:d7:19:cd: 5b:69:88:e4:ec:fc:96:83:df:4a:32:cc:d9:7a:24: d5:ab:ce:f5:c3:3f:b9:b3:ca:1e:5b:89:78:00:22: b1:04:d4:29:9f:65:4c:52:2c:34:04:57:f5:12:a8: 1d:dd:4c:31:e9:fd:64:68:62:41:eb:bf:18:08:94: cc:16:b2:3d:2a:15:8b:13:23:fb:85:ff:77:41:53: aa:28:74:85:e0:46:11:85:bb:c3:a2:df:61:52:f0: ed:37:1b:b0:22:60:97:2e:f2:c7:01:6f:ce:9d:ce: f2:62:56:5e:e6:e5:18:3b:23:6f:94:0c:61:4e:af: 9f:de:ce:b6:11:8b:7a:b4:94:d8:e8:37:5b:55:ea: 43:d7:32:55:a8:cf:47:a0:34:fe:30:b6:da:ee:b6: 0b:1f:74:48:49:52:93:e5:ac:6b:20:5d:01:b0:73: d3:ca:0c:a0:1d:72:26:00:39:3d:7e:37:6e:3c:5e: 34:51:54:4a:f1:0b:8f:25:14:13:e0:48:c7:4b:64: c6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:06:85:05:A0:18:B9:EA:E6:2E:61:69:38:04:BC:5F:0D:54:97:7C X509v3 Authority Key Identifier: keyid:B4:D2:17:93:9A:27:51:93:8E:07:65:9A:79:48:85:A9:C8:84:19:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNIXk5onUZOOB2WaeUiFqciEGRk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:0a:94:29:21:36:0a:3f:eb:ee:e6:08:3e:cf:7b:9d:24:d3: 27:50:1a:95:0d:88:81:db:a3:c3:3e:1c:ae:cd:99:22:b1:1c: dc:62:52:1b:0b:20:ae:2a:19:61:3b:a8:1c:92:23:dc:9b:ec: cb:93:a6:5b:04:dd:7f:2b:c7:96:c6:59:15:b5:f0:71:b3:12: f6:86:41:3e:25:c9:5b:27:79:5e:2d:88:54:71:d3:f8:a9:34: 79:ac:54:fb:d4:d5:e9:68:1f:5d:9f:59:fd:6a:fb:e8:f0:f3: d9:45:9e:cc:cb:1e:66:bc:6b:e8:44:be:4d:ea:ef:b5:4f:0b: f9:07:06:94:2a:c7:48:d7:1f:42:e6:bf:68:18:0b:37:1d:89: 34:e7:f2:9d:c4:9d:ad:af:0b:e0:fc:d0:fe:42:ee:d2:ac:cb: 9e:74:ac:50:12:37:3b:85:9c:d5:d6:50:a7:f8:99:d1:05:a6: 33:5c:3e:8b:5e:49:be:c9:cc:f1:dc:9a:cb:cb:7c:0c:6d:a5: a2:30:fa:bc:47:57:73:c7:94:be:e5:3a:a9:32:40:52:93:df: 20:a5:41:f3:06:99:7a:b1:00:e1:cd:57:18:bb:76:32:ff:a1: 87:dc:88:c4:f7:c9:dc:83:8e:8c:7f:72:93:86:bf:09:45:40: e7:9e:8a:66 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NUIxMzExMC8GA1UEBRMoQjREMjE3OTM5QTI3NTE5MzhFMDc2NTlBNzk0ODg1QTlD ODg0MTkxOTAeFw0yNTA0MjcwNjA5MzBaFw0yNTA1MDQwNjA5MzBaMBgxFjAUBgNV BAMTDTY4MGRjYTFhLWZmZGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCroULPgr6dzuCon6zSfW82FrLP0XKSTQ8g4dOVFAAvOs/z8IU4hQzr6nyvnldt KKKR1Rhq04TWy9cZzVtpiOTs/JaD30oyzNl6JNWrzvXDP7mzyh5biXgAIrEE1Cmf ZUxSLDQEV/USqB3dTDHp/WRoYkHrvxgIlMwWsj0qFYsTI/uF/3dBU6oodIXgRhGF u8Oi32FS8O03G7AiYJcu8scBb86dzvJiVl7m5Rg7I2+UDGFOr5/ezrYRi3q0lNjo N1tV6kPXMlWoz0egNP4wttrutgsfdEhJUpPlrGsgXQGwc9PKDKAdciYAOT1+N248 XjRRVErxC48lFBPgSMdLZMYjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXgaFBaAY uermLmFpOAS8Xw1Ul3wwHwYDVR0jBBgwFoAUtNIXk5onUZOOB2WaeUiFqciEGRkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1QjEzLzUwQkQyMzBFQjEy ODExRUZCNzUwQTUyQkM0RjlBRTAyL3ROSVhrNW9uVVpPT0IyV2FlVWlGcWNpRUdS ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdE5JWGs1b25VWk9PQjJXYWVVaUZxY2lFR1JrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1 QjEzLzUwQkQyMzBFQjEyODExRUZCNzUwQTUyQkM0RjlBRTAyL3ROSVhrNW9uVVpP T0IyV2FlVWlGcWNpRUdSay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAoKlCkhNgo/6+7mCD7Pe50k0ydQGpUNiIHbo8M+HK7NmSKxHNxiUhsL IK4qGWE7qBySI9yb7MuTplsE3X8rx5bGWRW18HGzEvaGQT4lyVsneV4tiFRx0/ip NHmsVPvU1eloH12fWf1q++jw89lFnszLHma8a+hEvk3q77VPC/kHBpQqx0jXH0Lm v2gYCzcdiTTn8p3Ena2vC+D80P5C7tKsy550rFASNzuFnNXWUKf4mdEFpjNcPote Sb7JzPHcmsvLfAxtpaIw+rxHV3PHlL7lOqkyQFKT3yClQfMGmXqxAOHNVxi7djL/ oYfciMT3ydyDjox/cpOGvwlFQOeeimY= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:43 2025 by rpki-client on console.sobornost.net