$ rpki-client -vvf rpki.apnic.net/member_repository/A9148C20/A5A4CD10CC7611ED93CEAD7EC4F9AE02/8iRPqPsPyfURGt76wZeZwp88iFs.mft File: 8iRPqPsPyfURGt76wZeZwp88iFs.mft (raw, json) Hash identifier: LsIghpCbbzZP6Qow5zIH2fSyR9E4kvMhq+dNU8INWug= Subject key identifier: FD:CA:64:B7:A4:8E:D3:9B:F6:50:59:1B:FF:49:32:2A:61:1F:CA:C6 Authority key identifier: F2:24:4F:A8:FB:0F:C9:F5:11:1A:DE:FA:C1:97:99:C2:9F:3C:88:5B Certificate issuer: /CN=A9148C20/serialNumber=F2244FA8FB0FC9F5111ADEFAC19799C29F3C885B Certificate serial: 018F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iRPqPsPyfURGt76wZeZwp88iFs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148C20/A5A4CD10CC7611ED93CEAD7EC4F9AE02/8iRPqPsPyfURGt76wZeZwp88iFs.mft Manifest number: 0189 Signing time: Sun 27 Apr 2025 02:35:39 +0000 Manifest this update: Sun 27 Apr 2025 02:35:38 +0000 Manifest next update: Sun 04 May 2025 02:35:38 +0000 Files and hashes: 1: 8iRPqPsPyfURGt76wZeZwp88iFs.crl (hash: vqPCmuPfAArmUINQ76af9/vYyjtNqo/u+yuPR892yNc=) 2: A8CCF2D4CC7A11EDA9430E31C4F9AE02.roa (hash: aeO1Mj/elW/xh7ym1J+KF848UMK5HdQa3I9hteU56q0=) 3: A9862EACCC7A11EDA9430E31C4F9AE02.roa (hash: pPZ9JIadC5wyaOareOX2satHOT6x5cmd8WRCUuxQZvg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148C20/A5A4CD10CC7611ED93CEAD7EC4F9AE02/8iRPqPsPyfURGt76wZeZwp88iFs.crl rsync://rpki.apnic.net/member_repository/A9148C20/A5A4CD10CC7611ED93CEAD7EC4F9AE02/8iRPqPsPyfURGt76wZeZwp88iFs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iRPqPsPyfURGt76wZeZwp88iFs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:35:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 399 (0x18f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148C20, serialNumber=F2244FA8FB0FC9F5111ADEFAC19799C29F3C885B Validity Not Before: Apr 27 02:35:38 2025 GMT Not After : May 4 02:35:38 2025 GMT Subject: CN=680d97fa-a8f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f8:33:a5:eb:c5:a5:a8:06:02:8f:16:a2:7b: 2c:b3:3a:73:ea:52:82:57:6e:61:00:76:ab:66:e6: eb:99:3a:35:2f:0c:4a:b3:25:83:56:24:59:de:76: ed:00:67:00:64:c2:80:76:c4:19:f4:64:cb:c2:26: 4c:da:a9:fa:86:5e:e6:60:30:b3:e2:e5:2a:60:e6: 01:d5:74:e0:31:fa:43:24:fb:87:0d:26:4a:8d:42: 9f:8b:3b:d7:1e:6d:1b:75:5b:8e:34:59:e1:ea:5b: 9d:23:19:0f:3f:a0:19:ad:c5:30:ed:8d:80:7b:b7: a4:c4:4c:80:6d:52:3d:9b:a9:08:da:e3:00:4f:1d: 2f:c2:c0:69:10:a1:f1:8d:11:ee:8b:e6:79:33:fc: 24:c6:cf:52:eb:48:30:3d:79:40:29:8d:9f:c4:f5: c8:75:d3:9d:0b:8c:e6:40:b0:1b:88:10:82:29:68: 64:cf:02:ff:fa:ee:9f:5b:35:0d:63:bc:e8:e3:8e: 46:e5:44:7e:90:26:a4:5f:26:8b:32:c3:47:d5:cf: 3f:e9:6b:e4:cd:a7:68:a3:4d:3f:35:d8:20:c2:09: 32:6d:e8:b9:1d:d7:b6:f3:a7:92:7d:0f:12:37:90: 74:df:ef:20:a7:88:16:a2:af:f9:9c:3a:05:47:55: fc:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:CA:64:B7:A4:8E:D3:9B:F6:50:59:1B:FF:49:32:2A:61:1F:CA:C6 X509v3 Authority Key Identifier: keyid:F2:24:4F:A8:FB:0F:C9:F5:11:1A:DE:FA:C1:97:99:C2:9F:3C:88:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148C20/A5A4CD10CC7611ED93CEAD7EC4F9AE02/8iRPqPsPyfURGt76wZeZwp88iFs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iRPqPsPyfURGt76wZeZwp88iFs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148C20/A5A4CD10CC7611ED93CEAD7EC4F9AE02/8iRPqPsPyfURGt76wZeZwp88iFs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:0a:1f:1a:d8:da:13:34:28:ce:43:f8:1b:62:b5:83:76:7f: 7e:10:df:2b:d7:f6:06:e5:a8:37:48:d3:44:78:e7:3e:82:0f: 11:3a:9f:0d:3c:26:9b:b5:3c:e2:d6:1f:78:61:e5:21:e7:cc: d1:e6:5f:b9:4f:f4:5e:63:48:76:e6:ab:4c:96:24:6f:e9:74: 40:17:ba:7c:4e:e7:3d:3b:cd:d6:9f:77:1f:bb:55:42:2c:86: 5a:ca:1a:f9:fb:9c:7b:b7:19:40:dd:4b:38:a3:43:c8:e4:7c: 5b:ef:dc:f9:7c:5b:df:27:bb:64:9a:8d:67:f7:57:7c:f9:ba: e1:23:54:7e:12:58:aa:2d:55:7f:f4:42:23:28:e6:31:73:f5: 45:f6:7c:d8:10:99:c7:8d:c6:e7:cf:ab:10:12:a9:e3:21:b0: 53:6f:34:c4:53:05:28:92:e4:35:31:4c:78:75:7b:57:9f:1d: f3:bd:13:15:c3:ae:0a:5e:aa:bb:f9:ed:f8:c4:2c:ec:19:72: b8:26:95:d9:5c:5a:23:62:f7:be:f6:77:33:34:d7:56:05:4b: 08:3f:99:0f:33:da:1d:dd:e6:4c:ee:9c:20:ca:5a:b5:a4:4c: cd:d3:f3:9b:ea:a3:96:ec:24:cd:d9:94:0b:ca:9e:ad:46:20: aa:7c:a0:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhDMjAxMTAvBgNVBAUTKEYyMjQ0RkE4RkIwRkM5RjUxMTFBREVGQUMxOTc5OUMy OUYzQzg4NUIwHhcNMjUwNDI3MDIzNTM4WhcNMjUwNTA0MDIzNTM4WjAYMRYwFAYD VQQDEw02ODBkOTdmYS1hOGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq/gzpevFpagGAo8Wonssszpz6lKCV25hAHarZubrmTo1LwxKsyWDViRZ3nbt AGcAZMKAdsQZ9GTLwiZM2qn6hl7mYDCz4uUqYOYB1XTgMfpDJPuHDSZKjUKfizvX Hm0bdVuONFnh6ludIxkPP6AZrcUw7Y2Ae7ekxEyAbVI9m6kI2uMATx0vwsBpEKHx jRHui+Z5M/wkxs9S60gwPXlAKY2fxPXIddOdC4zmQLAbiBCCKWhkzwL/+u6fWzUN Y7zo445G5UR+kCakXyaLMsNH1c8/6Wvkzadoo00/Ndggwgkybei5Hde286eSfQ8S N5B03+8gp4gWoq/5nDoFR1X8bQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP3KZLek jtOb9lBZG/9JMiphH8rGMB8GA1UdIwQYMBaAFPIkT6j7D8n1ERre+sGXmcKfPIhb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEMyMC9BNUE0Q0QxMEND NzYxMUVEOTNDRUFEN0VDNEY5QUUwMi84aVJQcVBzUHlmVVJHdDc2d1plWndwODhp RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhpUlBxUHNQeWZVUkd0NzZ3WmVad3A4OGlGcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEMyMC9BNUE0Q0QxMENDNzYxMUVEOTNDRUFEN0VDNEY5QUUwMi84aVJQcVBzUHlm VVJHdDc2d1plWndwODhpRnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATCh8a2NoTNCjOQ/gbYrWDdn9+EN8r1/YG5ag3SNNEeOc+gg8ROp8N PCabtTzi1h94YeUh58zR5l+5T/ReY0h25qtMliRv6XRAF7p8Tuc9O83Wn3cfu1VC LIZayhr5+5x7txlA3Us4o0PI5Hxb79z5fFvfJ7tkmo1n91d8+brhI1R+EliqLVV/ 9EIjKOYxc/VF9nzYEJnHjcbnz6sQEqnjIbBTbzTEUwUokuQ1MUx4dXtXnx3zvRMV w64KXqq7+e34xCzsGXK4JpXZXFojYve+9nczNNdWBUsIP5kPM9od3eZM7pwgylq1 pEzN0/Ob6qOW7CTN2ZQLyp6tRiCqfKBP -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:40 2025 by rpki-client on console.sobornost.net