$ rpki-client -vvf rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.mft File: pWEUadKee9PIXTGAtycy6qt6-5Y.mft (raw, json) Hash identifier: D6H8rbyRNcPhq7qfoCh0/Zl+uUL9U0AmXGDZtib/EP4= Subject key identifier: 09:52:E2:FF:71:CB:34:93:97:6C:7F:98:69:75:70:35:95:DF:09:A7 Authority key identifier: A5:61:14:69:D2:9E:7B:D3:C8:5D:31:80:B7:27:32:EA:AB:7A:FB:96 Certificate issuer: /CN=A9146BA1/serialNumber=A5611469D29E7BD3C85D3180B72732EAAB7AFB96 Certificate serial: 03AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWEUadKee9PIXTGAtycy6qt6-5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.mft Manifest number: 03A5 Signing time: Sun 27 Apr 2025 00:23:29 +0000 Manifest this update: Sun 27 Apr 2025 00:23:28 +0000 Manifest next update: Sun 04 May 2025 00:23:28 +0000 Files and hashes: 1: pWEUadKee9PIXTGAtycy6qt6-5Y.crl (hash: TiUvn1pPaxju9zlK3RkAkupfN8G695SybPWZYGj0stM=) 2: F67BB6E890AB11ECAB81252FC4F9AE02.roa (hash: 8Epzk8V6Z85r/XJDHr0k0X83+N9uAww9RtIo3M+lRdE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.crl rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWEUadKee9PIXTGAtycy6qt6-5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 00:23:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 938 (0x3aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146BA1, serialNumber=A5611469D29E7BD3C85D3180B72732EAAB7AFB96 Validity Not Before: Apr 27 00:23:28 2025 GMT Not After : May 4 00:23:28 2025 GMT Subject: CN=680d7901-3a9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d3:7a:70:ac:84:ff:d2:1c:74:37:77:d8:a3: 77:d5:4f:f0:f4:2a:e7:42:f5:02:ba:42:d8:be:fe: d4:09:ad:8c:9a:75:98:e7:38:9e:5b:17:f7:79:20: 74:e7:59:5b:99:01:9a:c3:f7:4f:82:58:b1:03:8f: c8:52:8a:71:87:b0:c1:05:55:f2:c6:21:96:0d:f2: f0:aa:b8:09:31:0e:6c:15:12:60:29:96:da:96:87: d7:f4:0d:c5:ab:c2:49:a6:1e:a0:78:63:08:16:27: 3b:df:a0:09:4e:20:e9:82:fe:b1:f2:1a:e0:c1:4f: fe:73:a6:92:be:1c:91:1d:67:54:e5:62:e7:3d:28: 83:3c:31:f6:4a:ae:db:aa:fe:fe:67:72:aa:5f:0f: 3b:48:26:69:69:3d:a7:e3:2a:cb:20:32:ca:49:8e: 3c:0d:d1:a5:bd:fb:b1:20:36:f8:20:1f:e9:9e:ad: b3:17:01:90:10:8d:a5:9e:6d:e2:01:95:59:48:34: 03:98:67:74:3c:d7:f9:47:50:29:92:75:b8:a3:71: 62:08:b3:1b:67:83:f0:10:27:59:1d:73:56:ca:92: 0c:23:46:96:a9:1f:dc:db:72:2a:43:50:e0:a2:fe: 90:a1:c3:a9:4f:b5:b4:2e:80:50:10:91:b5:a7:22: 21:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:52:E2:FF:71:CB:34:93:97:6C:7F:98:69:75:70:35:95:DF:09:A7 X509v3 Authority Key Identifier: keyid:A5:61:14:69:D2:9E:7B:D3:C8:5D:31:80:B7:27:32:EA:AB:7A:FB:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWEUadKee9PIXTGAtycy6qt6-5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:6a:7a:06:df:e9:b2:b5:1e:15:af:1f:cf:c7:d2:8e:7c:a5: 8a:11:5a:18:d5:45:65:b9:8e:72:fa:98:d9:f2:ef:e5:4c:85: 7f:a2:76:5b:15:6a:0d:32:8f:0d:57:b0:64:11:28:68:45:63: 8a:3d:c2:d5:f1:8c:48:22:1a:4d:bb:ed:cb:05:68:92:8d:99: 0a:a0:2d:4d:51:6d:bb:2f:5d:9e:0e:f5:e7:ea:b6:66:84:9e: 1a:ca:7f:d2:8a:e4:a0:eb:36:6e:9c:dd:ac:76:3f:55:cb:5b: 70:59:b6:db:a2:d9:80:2b:6a:d5:d7:d4:ce:2b:ce:d5:db:bb: e8:97:5b:8f:54:bb:da:f1:d8:e1:2f:13:a2:0b:b8:26:2d:fd: 2d:13:2c:ce:fd:76:83:37:a5:e2:7a:b5:91:c3:c8:bd:19:ed: 3a:22:b5:87:3e:24:3e:cf:bd:86:24:06:81:33:51:07:7b:39: cb:2a:7e:af:ce:e4:c3:1f:01:69:8c:d6:b8:97:08:8f:9c:12: b5:fb:c5:fa:44:14:18:e8:95:98:35:6b:25:44:ea:ab:97:e0: 61:5f:32:63:2d:72:39:a5:22:a6:6f:7b:39:93:0b:43:a2:c4: 3f:e5:07:c9:fc:0b:3a:d2:7e:dd:9f:29:04:63:b7:41:c5:d2: e9:be:45:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZCQTExMTAvBgNVBAUTKEE1NjExNDY5RDI5RTdCRDNDODVEMzE4MEI3MjczMkVB QUI3QUZCOTYwHhcNMjUwNDI3MDAyMzI4WhcNMjUwNTA0MDAyMzI4WjAYMRYwFAYD VQQDEw02ODBkNzkwMS0zYTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwNN6cKyE/9IcdDd32KN31U/w9CrnQvUCukLYvv7UCa2MmnWY5zieWxf3eSB0 51lbmQGaw/dPglixA4/IUopxh7DBBVXyxiGWDfLwqrgJMQ5sFRJgKZbalofX9A3F q8JJph6geGMIFic736AJTiDpgv6x8hrgwU/+c6aSvhyRHWdU5WLnPSiDPDH2Sq7b qv7+Z3KqXw87SCZpaT2n4yrLIDLKSY48DdGlvfuxIDb4IB/pnq2zFwGQEI2lnm3i AZVZSDQDmGd0PNf5R1ApknW4o3FiCLMbZ4PwECdZHXNWypIMI0aWqR/c23IqQ1Dg ov6QocOpT7W0LoBQEJG1pyIhIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAlS4v9x yzSTl2x/mGl1cDWV3wmnMB8GA1UdIwQYMBaAFKVhFGnSnnvTyF0xgLcnMuqrevuW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkJBMS82M0I0RUE5ODkw QTkxMUVDOTc2NUIyMkRDNEY5QUUwMi9wV0VVYWRLZWU5UElYVEdBdHljeTZxdDYt NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BXRVVhZEtlZTlQSVhUR0F0eWN5NnF0Ni01WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkJBMS82M0I0RUE5ODkwQTkxMUVDOTc2NUIyMkRDNEY5QUUwMi9wV0VVYWRLZWU5 UElYVEdBdHljeTZxdDYtNVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoanoG3+mytR4Vrx/Px9KOfKWKEVoY1UVluY5y+pjZ8u/lTIV/onZb FWoNMo8NV7BkEShoRWOKPcLV8YxIIhpNu+3LBWiSjZkKoC1NUW27L12eDvXn6rZm hJ4ayn/SiuSg6zZunN2sdj9Vy1twWbbbotmAK2rV19TOK87V27vol1uPVLva8djh LxOiC7gmLf0tEyzO/XaDN6XierWRw8i9Ge06IrWHPiQ+z72GJAaBM1EHeznLKn6v zuTDHwFpjNa4lwiPnBK1+8X6RBQY6JWYNWslROqrl+BhXzJjLXI5pSKmb3s5kwtD osQ/5QfJ/As60n7dnykEY7dBxdLpvkUb -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:39 2025 by rpki-client on console.sobornost.net