$ rpki-client -vvf rpki.apnic.net/member_repository/A9148D52/1D4B44EEDB6B11E992987F41C4F9AE02/aIdCVFR7NLOvid21tI0CAj9Xrhc.mft File: aIdCVFR7NLOvid21tI0CAj9Xrhc.mft (raw, json) Hash identifier: UotewDo75CuxvyKUfc5Wf4TOLovqdKGWBNpKD5JjUng= Subject key identifier: 23:BA:38:F8:0A:8E:F7:7C:5E:E0:D4:80:E2:49:C8:07:13:7A:D8:AF Authority key identifier: 68:87:42:54:54:7B:34:B3:AF:89:DD:B5:B4:8D:02:02:3F:57:AE:17 Certificate issuer: /CN=A9148D52/serialNumber=68874254547B34B3AF89DDB5B48D02023F57AE17 Certificate serial: 0D15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIdCVFR7NLOvid21tI0CAj9Xrhc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148D52/1D4B44EEDB6B11E992987F41C4F9AE02/aIdCVFR7NLOvid21tI0CAj9Xrhc.mft Manifest number: 0D0C Signing time: Mon 28 Apr 2025 18:16:26 +0000 Manifest this update: Mon 28 Apr 2025 18:16:26 +0000 Manifest next update: Mon 05 May 2025 18:16:26 +0000 Files and hashes: 1: aIdCVFR7NLOvid21tI0CAj9Xrhc.crl (hash: 1Zq9ycUBM9PMieHO/WfpSBIG4wiHsPyAuiSsGc+Jt7Q=) 2: 0198539E94F311EA9429BF86C4F9AE02.roa (hash: 5GX92aioe88puPmyzGflssCck3bnuW06XT8lCNmGXB4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148D52/1D4B44EEDB6B11E992987F41C4F9AE02/aIdCVFR7NLOvid21tI0CAj9Xrhc.crl rsync://rpki.apnic.net/member_repository/A9148D52/1D4B44EEDB6B11E992987F41C4F9AE02/aIdCVFR7NLOvid21tI0CAj9Xrhc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIdCVFR7NLOvid21tI0CAj9Xrhc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 18:16:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3349 (0xd15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148D52, serialNumber=68874254547B34B3AF89DDB5B48D02023F57AE17 Validity Not Before: Apr 28 18:16:26 2025 GMT Not After : May 5 18:16:26 2025 GMT Subject: CN=680fc5fa-4e86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:02:9e:81:4a:72:23:2e:ea:9a:4b:65:66:ef: d4:60:40:72:15:ac:80:1e:56:0e:c6:af:19:2a:d5: ea:98:58:74:f1:fb:1d:6b:a5:82:51:3d:20:88:ba: c1:fd:f0:88:58:83:a2:df:24:73:76:d2:b8:28:12: 88:ae:43:8e:2c:8b:ae:e0:78:6e:49:09:1e:d6:1d: 3e:01:29:45:14:9c:5c:34:b4:48:81:05:4c:3a:12: f7:80:aa:41:9a:04:e3:38:75:d8:77:c0:8f:d4:e6: 09:4d:f2:72:7f:89:75:a0:c6:f9:20:5c:ac:de:80: b8:8c:9c:d1:df:de:ac:f1:74:3c:ea:76:10:f6:cb: 9c:a6:a4:d3:f1:a4:03:9d:e4:1c:25:4f:f1:69:53: 93:a0:98:2f:ae:80:34:6c:8d:56:33:a5:85:3a:27: 2b:cb:b0:49:8e:11:47:d2:be:54:90:c2:f8:64:ac: 76:1d:29:f8:22:f6:59:eb:c4:b1:dd:8a:2a:f5:99: f7:7f:8f:6c:74:b2:0c:0e:7f:34:bd:4c:50:71:42: c2:08:8c:97:03:86:41:54:f9:9d:81:58:6f:46:e2: 88:7b:b5:ce:b5:1a:c3:24:95:89:d0:1c:e7:51:09: 8d:23:37:73:26:40:f6:8e:e5:d9:e9:e2:b3:d5:94: 33:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:BA:38:F8:0A:8E:F7:7C:5E:E0:D4:80:E2:49:C8:07:13:7A:D8:AF X509v3 Authority Key Identifier: keyid:68:87:42:54:54:7B:34:B3:AF:89:DD:B5:B4:8D:02:02:3F:57:AE:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148D52/1D4B44EEDB6B11E992987F41C4F9AE02/aIdCVFR7NLOvid21tI0CAj9Xrhc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIdCVFR7NLOvid21tI0CAj9Xrhc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148D52/1D4B44EEDB6B11E992987F41C4F9AE02/aIdCVFR7NLOvid21tI0CAj9Xrhc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:3b:58:67:30:d2:62:27:3d:53:dc:44:75:a6:7a:b3:d8:f1: 6b:45:67:d2:93:1f:58:ba:60:32:bc:36:e6:c7:1f:7d:07:b2: 9e:fd:fa:39:c3:bb:94:11:21:aa:98:f5:aa:6e:e1:ef:24:97: 6f:19:b3:0b:d8:ba:2b:5e:0b:9f:c8:79:1d:34:98:c0:c2:77: 50:7f:98:ac:cd:4c:21:91:34:5f:ce:96:fd:a7:bd:a6:11:14: b7:ce:19:ee:37:f9:0c:e8:e5:46:79:0a:ab:2f:90:15:ce:b8: a5:80:4d:77:0f:fb:d6:5c:6d:6b:fd:4c:b0:41:31:18:b7:1f: 0c:4d:97:bc:fa:83:1f:b1:87:c5:d5:4d:bd:6e:fd:f8:08:59: 49:b4:42:e1:49:c8:82:5c:3f:44:e7:98:f4:3b:7b:27:14:71: 57:66:97:bf:f8:03:57:e9:9d:7e:58:78:57:ba:d5:70:91:11: 07:57:1b:39:29:c4:5a:51:3c:0c:5c:3a:35:31:f0:66:aa:38: 30:35:e8:11:b6:73:0f:8e:46:7c:54:ab:9c:22:27:54:4c:bc: d6:db:52:89:47:88:80:02:6b:1e:4c:26:aa:d5:73:58:4e:0a: 08:2e:32:68:6a:1c:8d:e7:d8:8a:e9:f6:86:7b:73:37:07:23: 99:bd:b6:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDRUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhENTIxMTAvBgNVBAUTKDY4ODc0MjU0NTQ3QjM0QjNBRjg5RERCNUI0OEQwMjAy M0Y1N0FFMTcwHhcNMjUwNDI4MTgxNjI2WhcNMjUwNTA1MTgxNjI2WjAYMRYwFAYD VQQDEw02ODBmYzVmYS00ZTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1AKegUpyIy7qmktlZu/UYEByFayAHlYOxq8ZKtXqmFh08fsda6WCUT0giLrB /fCIWIOi3yRzdtK4KBKIrkOOLIuu4HhuSQke1h0+ASlFFJxcNLRIgQVMOhL3gKpB mgTjOHXYd8CP1OYJTfJyf4l1oMb5IFys3oC4jJzR396s8XQ86nYQ9sucpqTT8aQD neQcJU/xaVOToJgvroA0bI1WM6WFOicry7BJjhFH0r5UkML4ZKx2HSn4IvZZ68Sx 3Yoq9Zn3f49sdLIMDn80vUxQcULCCIyXA4ZBVPmdgVhvRuKIe7XOtRrDJJWJ0Bzn UQmNIzdzJkD2juXZ6eKz1ZQz7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCO6OPgK jvd8XuDUgOJJyAcTetivMB8GA1UdIwQYMBaAFGiHQlRUezSzr4ndtbSNAgI/V64X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEQ1Mi8xRDRCNDRFRURC NkIxMUU5OTI5ODdGNDFDNEY5QUUwMi9hSWRDVkZSN05MT3ZpZDIxdEkwQ0FqOVhy aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FJZENWRlI3TkxPdmlkMjF0STBDQWo5WHJoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEQ1Mi8xRDRCNDRFRURCNkIxMUU5OTI5ODdGNDFDNEY5QUUwMi9hSWRDVkZSN05M T3ZpZDIxdEkwQ0FqOVhyaGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/O1hnMNJiJz1T3ER1pnqz2PFrRWfSkx9YumAyvDbmxx99B7Ke/fo5 w7uUESGqmPWqbuHvJJdvGbML2LorXgufyHkdNJjAwndQf5iszUwhkTRfzpb9p72m ERS3zhnuN/kM6OVGeQqrL5AVzrilgE13D/vWXG1r/UywQTEYtx8MTZe8+oMfsYfF 1U29bv34CFlJtELhSciCXD9E55j0O3snFHFXZpe/+ANX6Z1+WHhXutVwkREHVxs5 KcRaUTwMXDo1MfBmqjgwNegRtnMPjkZ8VKucIidUTLzW21KJR4iAAmseTCaq1XNY TgoILjJoahyN59iK6faGe3M3ByOZvbZO -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:32 2025 by rpki-client on console.sobornost.net