$ rpki-client -vvf rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.mft File: -1uWlTzNsR6SaDs-tbekV0lLJfA.mft (raw, json) Hash identifier: Y13TS2lqkjZwzWYNNhN1KPcQA6VoF+cfqO+DUQBo9pU= Subject key identifier: 0A:4D:A4:0A:6C:2C:1C:BA:E4:AE:E5:6D:62:AA:6E:1D:3A:D8:E3:5A Authority key identifier: FB:5B:96:95:3C:CD:B1:1E:92:68:3B:3E:B5:B7:A4:57:49:4B:25:F0 Certificate issuer: /CN=A9146A72/serialNumber=FB5B96953CCDB11E92683B3EB5B7A457494B25F0 Certificate serial: 011E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-1uWlTzNsR6SaDs-tbekV0lLJfA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.mft Manifest number: 011C Signing time: Mon 28 Apr 2025 15:35:47 +0000 Manifest this update: Mon 28 Apr 2025 15:35:46 +0000 Manifest next update: Mon 05 May 2025 15:35:46 +0000 Files and hashes: 1: -1uWlTzNsR6SaDs-tbekV0lLJfA.crl (hash: ITvqhN8ddBKkiTF9BNwdJzS6sppl2hnfmPoL3o7EC44=) 2: 67B0ACBC8E5011EE95DFC141C4F9AE02.roa (hash: 4RQI+EFj/mJJo3iDsYdl0ustKcpifsqTMWOHIgjxyFk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.crl rsync://rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-1uWlTzNsR6SaDs-tbekV0lLJfA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 14:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 286 (0x11e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146A72, serialNumber=FB5B96953CCDB11E92683B3EB5B7A457494B25F0 Validity Not Before: Apr 28 15:35:46 2025 GMT Not After : May 5 15:35:46 2025 GMT Subject: CN=680fa053-4d43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f7:38:55:d8:30:20:50:b5:c7:4c:a6:63:e6: ea:c3:82:84:d8:01:81:06:dd:10:f2:9b:b3:7a:9d: d6:7e:95:b1:2b:1d:ae:dd:35:4b:02:db:75:2b:3d: 12:11:c2:82:07:d3:9c:08:ea:46:6d:6b:3e:a7:ac: 67:e3:b5:b4:3a:40:7d:22:cd:9a:c6:43:8b:c3:b2: 35:d8:15:8b:52:dc:de:6e:18:a0:ad:3a:48:a4:8d: d0:64:cc:20:29:25:7c:41:76:8b:11:ea:e7:e8:cf: a8:72:42:34:25:53:eb:8b:b6:e5:d8:54:24:c1:76: a9:6b:59:01:5c:f5:fe:28:aa:c4:da:01:94:8c:7a: de:b4:09:57:e4:03:68:1d:95:19:7f:76:fc:f8:8d: 6a:10:05:be:5d:34:6e:6a:db:e2:43:8a:5f:f7:1b: 32:14:fe:76:4e:f9:da:f1:9d:fc:bf:64:0b:9d:77: 4e:b2:14:53:7a:9c:9d:6d:b7:06:9f:9f:ba:cf:90: 43:e4:17:ad:69:ca:a4:ab:aa:20:26:70:ba:35:22: 4e:80:5a:5d:fa:66:9e:cf:27:51:31:96:db:a1:1c: 94:3e:8c:46:c5:ca:af:46:ae:9b:89:14:4d:68:d4: 07:42:86:b7:40:fb:5d:41:f9:f4:fe:44:30:88:1a: dd:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:4D:A4:0A:6C:2C:1C:BA:E4:AE:E5:6D:62:AA:6E:1D:3A:D8:E3:5A X509v3 Authority Key Identifier: keyid:FB:5B:96:95:3C:CD:B1:1E:92:68:3B:3E:B5:B7:A4:57:49:4B:25:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-1uWlTzNsR6SaDs-tbekV0lLJfA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:29:a0:bc:6f:4f:d6:f8:f2:e4:bb:bb:69:fd:87:28:51:8f: b4:2a:fd:f3:eb:fd:fc:d0:18:b6:54:4a:a1:94:41:bb:98:3a: fd:62:c3:da:7d:2e:2d:10:26:a4:6e:d2:d1:ab:7b:b6:63:15: 02:58:86:a4:0b:c2:f6:ce:d0:b3:56:7d:65:25:b0:7b:a5:15: 3f:db:82:4b:45:0c:34:6c:24:42:07:a0:7d:07:af:67:e8:de: f8:24:99:14:19:c9:e5:f5:87:6e:76:83:c9:d6:18:25:f2:c2: 80:6f:ec:ce:b1:83:e4:e5:11:3d:f3:e3:b5:eb:c5:a2:53:4f: e9:0a:d6:cf:f6:65:e8:37:59:8b:4f:ec:6e:c1:37:d6:fa:60: 9c:b9:e4:cf:66:af:3d:71:b3:d2:42:22:63:0a:95:82:b8:11: 3b:13:14:9a:fb:e1:45:5e:c9:3a:5e:4d:03:4b:0e:3e:f6:32: e1:5e:45:2b:54:09:7f:3c:1d:88:7a:d5:b7:d8:ce:53:b6:de: ad:10:10:43:da:88:9b:40:05:7c:80:56:df:b4:ac:d7:38:3e: 33:28:cd:b4:94:fd:e8:65:2c:db:e4:c7:30:62:10:39:e8:4f: c8:40:1b:66:e2:9d:27:52:5e:09:ec:4d:10:7f:25:7f:0e:41: 8b:29:e7:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZBNzIxMTAvBgNVBAUTKEZCNUI5Njk1M0NDREIxMUU5MjY4M0IzRUI1QjdBNDU3 NDk0QjI1RjAwHhcNMjUwNDI4MTUzNTQ2WhcNMjUwNTA1MTUzNTQ2WjAYMRYwFAYD VQQDEw02ODBmYTA1My00ZDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq/c4VdgwIFC1x0ymY+bqw4KE2AGBBt0Q8puzep3WfpWxKx2u3TVLAtt1Kz0S EcKCB9OcCOpGbWs+p6xn47W0OkB9Is2axkOLw7I12BWLUtzebhigrTpIpI3QZMwg KSV8QXaLEern6M+ockI0JVPri7bl2FQkwXapa1kBXPX+KKrE2gGUjHretAlX5ANo HZUZf3b8+I1qEAW+XTRuatviQ4pf9xsyFP52Tvna8Z38v2QLnXdOshRTepydbbcG n5+6z5BD5Betacqkq6ogJnC6NSJOgFpd+maezydRMZbboRyUPoxGxcqvRq6biRRN aNQHQoa3QPtdQfn0/kQwiBrdJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFApNpAps LBy65K7lbWKqbh062ONaMB8GA1UdIwQYMBaAFPtblpU8zbEekmg7PrW3pFdJSyXw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkE3Mi80RjU2QzAxQzc3 OUQxMUVFQkI0OUUyNjlDNEY5QUUwMi8tMXVXbFR6TnNSNlNhRHMtdGJla1YwbExK ZkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy0xdVdsVHpOc1I2U2FEcy10YmVrVjBsTEpmQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkE3Mi80RjU2QzAxQzc3OUQxMUVFQkI0OUUyNjlDNEY5QUUwMi8tMXVXbFR6TnNS NlNhRHMtdGJla1YwbExKZkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLKaC8b0/W+PLku7tp/YcoUY+0Kv3z6/380Bi2VEqhlEG7mDr9YsPa fS4tECakbtLRq3u2YxUCWIakC8L2ztCzVn1lJbB7pRU/24JLRQw0bCRCB6B9B69n 6N74JJkUGcnl9YdudoPJ1hgl8sKAb+zOsYPk5RE98+O168WiU0/pCtbP9mXoN1mL T+xuwTfW+mCcueTPZq89cbPSQiJjCpWCuBE7ExSa++FFXsk6Xk0DSw4+9jLhXkUr VAl/PB2IetW32M5Ttt6tEBBD2oibQAV8gFbftKzXOD4zKM20lP3oZSzb5McwYhA5 6E/IQBtm4p0nUl4J7E0QfyV/DkGLKefD -----END CERTIFICATE-----Generated at Mon Apr 28 17:44:50 2025 by rpki-client on console.sobornost.net