$ rpki-client -vvf rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.mft File: 9-pxtubNBKVdrrDRWOBE3poSIWo.mft (raw, json) Hash identifier: McFD3ZRDwHByURpC+0uK5vjOWQ/4tK1+lPaXdvsWReo= Subject key identifier: E2:2F:68:CE:7A:9B:70:EF:51:D5:AE:51:4B:C9:7D:9F:E0:DD:4E:83 Authority key identifier: F7:EA:71:B6:E6:CD:04:A5:5D:AE:B0:D1:58:E0:44:DE:9A:12:21:6A Certificate issuer: /CN=A914976C/serialNumber=F7EA71B6E6CD04A55DAEB0D158E044DE9A12216A Certificate serial: 8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-pxtubNBKVdrrDRWOBE3poSIWo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.mft Manifest number: 8A Signing time: Sun 27 Apr 2025 05:21:13 +0000 Manifest this update: Sun 27 Apr 2025 05:21:12 +0000 Manifest next update: Sun 04 May 2025 05:21:12 +0000 Files and hashes: 1: 9-pxtubNBKVdrrDRWOBE3poSIWo.crl (hash: 49wLj9lUodyAKP98IwGtQbSx8SQKRDhhtlZVMsv41sI=) 2: D65DAE8A595C11EF8FABE750C4F9AE02.roa (hash: nYA6qJYLssodvPidYdiPlhElm9th4J64wlRbRyUbQK0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.crl rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-pxtubNBKVdrrDRWOBE3poSIWo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914976C, serialNumber=F7EA71B6E6CD04A55DAEB0D158E044DE9A12216A Validity Not Before: Apr 27 05:21:12 2025 GMT Not After : May 4 05:21:12 2025 GMT Subject: CN=680dbec8-36c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0c:82:77:0f:f7:40:be:8e:00:24:c9:30:3d: 38:8b:bd:ce:58:ee:5c:c1:d5:8c:bc:9c:0a:ee:ee: 68:c1:8f:68:d9:26:a9:77:10:8d:53:43:89:c1:7b: ac:a6:0e:72:5a:68:a7:c8:c0:2c:f7:df:ed:86:ad: b8:30:5f:d0:ac:c1:30:bd:02:c6:ef:84:db:82:e6: 7b:c8:c7:2b:0a:fe:3e:43:72:75:e9:bb:6d:31:64: 00:e4:ba:42:24:b1:74:6e:61:d6:0f:28:37:d4:ad: a6:fb:e9:95:bc:ab:51:75:5a:7c:26:38:87:86:1a: c4:43:d8:41:d9:0f:9d:d6:ef:18:2f:82:9f:cf:48: 46:0b:ba:bb:07:51:bc:21:2f:93:75:ab:3e:49:87: 86:f6:04:1c:b6:9c:c4:f3:60:54:3f:e0:81:9d:ce: 38:45:8b:11:7a:e9:72:80:48:a0:50:3e:90:2c:97: 02:fb:56:29:72:cf:a6:05:e7:b0:62:1f:b7:5d:14: 4d:30:1c:a3:9a:5e:c1:13:1a:bf:90:e7:52:4f:aa: 3a:6c:5c:b3:8a:7a:8b:d9:06:73:77:7e:30:da:dc: 48:73:9d:85:31:bc:b2:e0:96:6e:72:a6:bf:32:da: 23:2e:43:b3:8c:d9:e9:d7:7c:cf:4e:b4:a6:88:85: cd:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:2F:68:CE:7A:9B:70:EF:51:D5:AE:51:4B:C9:7D:9F:E0:DD:4E:83 X509v3 Authority Key Identifier: keyid:F7:EA:71:B6:E6:CD:04:A5:5D:AE:B0:D1:58:E0:44:DE:9A:12:21:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-pxtubNBKVdrrDRWOBE3poSIWo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:db:d2:fa:40:81:74:52:66:14:c3:eb:53:fd:42:f6:a0:9d: a2:35:c8:0a:8e:80:e7:0c:b6:25:3a:3a:85:be:a5:b3:ac:3d: cd:f4:34:4e:6c:e6:c0:d7:65:98:e8:f4:01:47:6c:f5:56:50: 53:1a:03:ec:9d:5d:df:36:c8:e4:b5:97:d6:80:17:c5:84:3d: 61:1c:c1:ba:45:da:94:93:5a:87:60:04:e0:13:2a:95:32:39: c2:78:6c:64:e7:af:2c:7c:08:fd:fb:a1:bd:ba:7f:77:39:02: e7:c4:27:aa:a3:e3:12:c9:dd:f9:fb:86:1c:d2:fb:50:58:2c: bd:ee:75:e1:c3:93:db:48:30:74:11:c8:82:62:06:86:03:4e: 5e:03:2f:5a:d2:f6:e0:0d:0d:69:5e:2c:90:8d:0e:23:d2:b6: 3f:58:c1:7c:0b:ab:24:69:4e:38:d4:51:1c:6b:b8:c6:bf:1f: dd:0a:7b:04:3d:6b:2e:5f:02:ce:85:b6:2e:3e:98:9d:be:c0: d4:a2:37:0d:da:2b:a4:dd:99:0c:f7:1a:9b:77:4d:fd:3e:c8: d7:1f:d6:b8:80:c3:e7:19:82:64:7d:21:eb:3c:a9:1e:d4:bd: 85:42:45:71:80:b3:60:b1:6a:bf:5e:21:b1:e4:3f:7e:95:41: 96:9b:a5:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk3NkMxMTAvBgNVBAUTKEY3RUE3MUI2RTZDRDA0QTU1REFFQjBEMTU4RTA0NERF OUExMjIxNkEwHhcNMjUwNDI3MDUyMTEyWhcNMjUwNTA0MDUyMTEyWjAYMRYwFAYD VQQDEw02ODBkYmVjOC0zNmM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnAyCdw/3QL6OACTJMD04i73OWO5cwdWMvJwK7u5owY9o2SapdxCNU0OJwXus pg5yWminyMAs99/thq24MF/QrMEwvQLG74TbguZ7yMcrCv4+Q3J16bttMWQA5LpC JLF0bmHWDyg31K2m++mVvKtRdVp8JjiHhhrEQ9hB2Q+d1u8YL4Kfz0hGC7q7B1G8 IS+Tdas+SYeG9gQctpzE82BUP+CBnc44RYsReulygEigUD6QLJcC+1Ypcs+mBeew Yh+3XRRNMByjml7BExq/kOdST6o6bFyzinqL2QZzd34w2txIc52FMbyy4JZucqa/ MtojLkOzjNnp13zPTrSmiIXN2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOIvaM56 m3DvUdWuUUvJfZ/g3U6DMB8GA1UdIwQYMBaAFPfqcbbmzQSlXa6w0VjgRN6aEiFq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTc2Qy84MzUwRDJCQzU5 NUMxMUVGOTE1OTYzNTBDNEY5QUUwMi85LXB4dHViTkJLVmRyckRSV09CRTNwb1NJ V28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzktcHh0dWJOQktWZHJyRFJXT0JFM3BvU0lXby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTc2Qy84MzUwRDJCQzU5NUMxMUVGOTE1OTYzNTBDNEY5QUUwMi85LXB4dHViTkJL VmRyckRSV09CRTNwb1NJV28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC029L6QIF0UmYUw+tT/UL2oJ2iNcgKjoDnDLYlOjqFvqWzrD3N9DRO bObA12WY6PQBR2z1VlBTGgPsnV3fNsjktZfWgBfFhD1hHMG6RdqUk1qHYATgEyqV MjnCeGxk568sfAj9+6G9un93OQLnxCeqo+MSyd35+4Yc0vtQWCy97nXhw5PbSDB0 EciCYgaGA05eAy9a0vbgDQ1pXiyQjQ4j0rY/WMF8C6skaU441FEca7jGvx/dCnsE PWsuXwLOhbYuPpidvsDUojcN2iuk3ZkM9xqbd039PsjXH9a4gMPnGYJkfSHrPKke 1L2FQkVxgLNgsWq/XiGx5D9+lUGWm6X6 -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:43 2025 by rpki-client on console.sobornost.net