$ rpki-client -vvf rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/mEPIkneoEqvX-tq1LR1h0ni6Kxk.mft File: mEPIkneoEqvX-tq1LR1h0ni6Kxk.mft (raw, json) Hash identifier: tUHP7Cm0u0a0f0TxwU55SwZwpgaBKN96ZqTonlQWMAQ= Subject key identifier: 33:87:F0:5E:65:24:D8:32:87:68:DA:5D:7D:00:16:2A:BB:61:0A:81 Authority key identifier: 98:43:C8:92:77:A8:12:AB:D7:FA:DA:B5:2D:1D:61:D2:78:BA:2B:19 Certificate issuer: /CN=A9145E67/serialNumber=9843C89277A812ABD7FADAB52D1D61D278BA2B19 Certificate serial: 01A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mEPIkneoEqvX-tq1LR1h0ni6Kxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/mEPIkneoEqvX-tq1LR1h0ni6Kxk.mft Manifest number: 019E Signing time: Sun 27 Apr 2025 02:23:15 +0000 Manifest this update: Sun 27 Apr 2025 02:23:14 +0000 Manifest next update: Sun 04 May 2025 02:23:14 +0000 Files and hashes: 1: mEPIkneoEqvX-tq1LR1h0ni6Kxk.crl (hash: 17tq9FMeVNSDyaQTmjdneCSRCdNN5nIhhvHmlIDezls=) 2: EE4D73F2AE5611EDA021E516C4F9AE02.roa (hash: rHhV9X+494LZVhsBFnMPP35cu2Qc4CF3Pf3vW78mDqc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/mEPIkneoEqvX-tq1LR1h0ni6Kxk.crl rsync://rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/mEPIkneoEqvX-tq1LR1h0ni6Kxk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mEPIkneoEqvX-tq1LR1h0ni6Kxk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:23:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 418 (0x1a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145E67, serialNumber=9843C89277A812ABD7FADAB52D1D61D278BA2B19 Validity Not Before: Apr 27 02:23:14 2025 GMT Not After : May 4 02:23:14 2025 GMT Subject: CN=680d9512-a6cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ea:a6:ab:9b:21:14:47:14:7e:23:48:ae:7f: 34:22:ba:09:7f:50:af:21:6c:71:42:4f:00:31:e2: f5:bd:a6:e5:ec:b1:02:31:b7:92:8f:98:64:d8:99: f2:2b:c4:3c:be:a9:df:75:d4:a4:29:d7:da:99:40: 27:a2:50:79:4a:83:68:bc:d1:bb:3d:cd:61:e8:8e: a5:c5:a6:1d:bf:76:0e:2b:29:c8:ff:ea:b1:23:77: 7a:65:97:3e:d6:a4:2a:0e:b0:48:59:92:3d:95:13: f5:0d:75:c5:c2:b5:0b:01:cb:39:28:f3:cb:95:0f: 73:e4:da:b2:6f:57:87:5c:c2:6c:fb:84:39:b1:e9: 74:d7:75:b1:97:b0:52:89:f1:05:da:31:35:83:ef: ee:b4:dc:1e:36:cf:5a:fb:91:d0:0c:0e:8e:31:4a: 4c:cc:c9:e0:1f:7a:ac:44:7e:bd:b5:3a:96:0d:f1: 81:af:f4:f3:d7:fb:ec:cb:ab:9a:19:16:cc:99:11: bc:6e:a9:4f:a4:0e:ce:7a:e1:fd:ad:a0:8b:df:78: fe:1f:11:d8:dd:bb:92:fa:92:c3:93:c0:14:f2:3c: 9a:1e:8e:95:c1:73:d8:7a:d6:17:88:06:fe:5a:3c: b7:96:30:c3:17:ff:5c:ca:d4:ec:d0:7e:af:fb:00: 5e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:87:F0:5E:65:24:D8:32:87:68:DA:5D:7D:00:16:2A:BB:61:0A:81 X509v3 Authority Key Identifier: keyid:98:43:C8:92:77:A8:12:AB:D7:FA:DA:B5:2D:1D:61:D2:78:BA:2B:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/mEPIkneoEqvX-tq1LR1h0ni6Kxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mEPIkneoEqvX-tq1LR1h0ni6Kxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/mEPIkneoEqvX-tq1LR1h0ni6Kxk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:71:40:a9:77:5e:27:ab:46:5d:55:44:1a:56:1e:c5:1f:e1: bb:59:43:6d:2f:33:86:06:53:63:dd:2a:f7:6a:27:3f:c6:c0: 6b:fc:98:75:d2:b4:a8:b0:83:e4:2b:36:63:15:9a:1d:22:69: 94:4b:fd:fc:bc:46:b8:0a:9a:01:06:0d:ff:c4:88:19:e5:89: 5a:21:f3:01:50:e0:2b:27:bb:64:8a:a8:7b:88:84:4c:cf:d7: 65:9e:f1:fd:92:c6:de:34:c8:19:1f:04:2c:47:1a:9b:dc:20: 95:da:78:aa:2f:74:16:72:12:b6:2d:b9:fa:f7:7e:fe:72:24: 0a:a0:96:03:0e:9d:5a:5e:11:11:df:d9:03:0e:57:bd:09:89: 58:74:01:f5:f7:e8:b9:25:ca:19:6a:63:c6:1f:7a:eb:2d:79: 26:32:49:2b:50:49:8f:14:19:45:65:c3:ba:93:47:aa:3a:df: 2f:7f:c8:ca:83:6b:37:09:08:f8:25:ea:52:2a:40:24:01:36: b2:db:70:66:ed:b5:7a:8f:59:8f:ae:ef:b4:68:d2:37:5a:ec: c2:5e:4b:77:cf:94:6c:5a:4d:47:a3:65:a0:26:ba:41:c5:5a: d6:f1:0e:4f:54:6a:9e:29:01:da:c8:0e:cc:ab:f6:8d:54:5f: 5f:ab:0b:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVFNjcxMTAvBgNVBAUTKDk4NDNDODkyNzdBODEyQUJEN0ZBREFCNTJEMUQ2MUQy NzhCQTJCMTkwHhcNMjUwNDI3MDIyMzE0WhcNMjUwNTA0MDIyMzE0WjAYMRYwFAYD VQQDEw02ODBkOTUxMi1hNmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu+qmq5shFEcUfiNIrn80IroJf1CvIWxxQk8AMeL1vabl7LECMbeSj5hk2Jny K8Q8vqnfddSkKdfamUAnolB5SoNovNG7Pc1h6I6lxaYdv3YOKynI/+qxI3d6ZZc+ 1qQqDrBIWZI9lRP1DXXFwrULAcs5KPPLlQ9z5Nqyb1eHXMJs+4Q5sel013Wxl7BS ifEF2jE1g+/utNweNs9a+5HQDA6OMUpMzMngH3qsRH69tTqWDfGBr/Tz1/vsy6ua GRbMmRG8bqlPpA7OeuH9raCL33j+HxHY3buS+pLDk8AU8jyaHo6VwXPYetYXiAb+ Wjy3ljDDF/9cytTs0H6v+wBe1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDOH8F5l JNgyh2jaXX0AFiq7YQqBMB8GA1UdIwQYMBaAFJhDyJJ3qBKr1/ratS0dYdJ4uisZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUU2Ny8yMkMxNDUyOEFF NTIxMUVEOUM1REEzMTBDNEY5QUUwMi9tRVBJa25lb0VxdlgtdHExTFIxaDBuaTZL eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21FUElrbmVvRXF2WC10cTFMUjFoMG5pNkt4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUU2Ny8yMkMxNDUyOEFFNTIxMUVEOUM1REEzMTBDNEY5QUUwMi9tRVBJa25lb0Vx dlgtdHExTFIxaDBuaTZLeGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjcUCpd14nq0ZdVUQaVh7FH+G7WUNtLzOGBlNj3Sr3aic/xsBr/Jh1 0rSosIPkKzZjFZodImmUS/38vEa4CpoBBg3/xIgZ5YlaIfMBUOArJ7tkiqh7iIRM z9dlnvH9ksbeNMgZHwQsRxqb3CCV2niqL3QWchK2Lbn6937+ciQKoJYDDp1aXhER 39kDDle9CYlYdAH19+i5JcoZamPGH3rrLXkmMkkrUEmPFBlFZcO6k0eqOt8vf8jK g2s3CQj4JepSKkAkATay23Bm7bV6j1mPru+0aNI3WuzCXkt3z5RsWk1Ho2WgJrpB xVrW8Q5PVGqeKQHayA7Mq/aNVF9fqwsU -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:38 2025 by rpki-client on console.sobornost.net