$ rpki-client -vvf rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft File: jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft (raw, json) Hash identifier: 8JpT5nbkDmOBOSigzPSwjaEDjtbvMzhff65IDCdACDs= Subject key identifier: 6F:9E:D3:FD:EE:53:2E:AD:62:E8:FF:7C:04:CF:9F:E5:8E:80:1F:EC Authority key identifier: 8D:16:FD:0E:25:FB:89:6E:26:FA:73:4A:BC:98:4C:E4:B4:69:8D:D3 Certificate issuer: /CN=A9149A6C/serialNumber=8D16FD0E25FB896E26FA734ABC984CE4B4698DD3 Certificate serial: 06D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRb9DiX7iW4m-nNKvJhM5LRpjdM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft Manifest number: 06CB Signing time: Sat 26 Apr 2025 21:43:29 +0000 Manifest this update: Sat 26 Apr 2025 21:43:28 +0000 Manifest next update: Sat 03 May 2025 21:43:28 +0000 Files and hashes: 1: jRb9DiX7iW4m-nNKvJhM5LRpjdM.crl (hash: qPoVHi0XzQ46qB0OMOPIPIP7ue+1X/UQNvak2mmdazw=) 2: 22D8137A51A711EBAAAB6410C4F9AE02.roa (hash: W1YtTgfcUQgVCMN18bivEJ+sBWqdB/GL1VhO0Gs0eBo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.crl rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRb9DiX7iW4m-nNKvJhM5LRpjdM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1744 (0x6d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149A6C, serialNumber=8D16FD0E25FB896E26FA734ABC984CE4B4698DD3 Validity Not Before: Apr 26 21:43:28 2025 GMT Not After : May 3 21:43:28 2025 GMT Subject: CN=680d5381-1354 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:8a:45:4b:4b:0c:8b:4a:ee:4b:53:43:cb:e1: 6e:13:ce:7a:6f:33:9b:5f:32:ba:e3:98:5c:8d:f9: 63:66:04:0b:bb:83:d5:a8:bc:13:04:a5:08:21:b5: 4d:77:5b:b3:db:e6:b4:af:59:04:0e:de:38:c4:d1: e8:16:90:1d:f2:59:68:b0:5d:b8:b4:ba:ae:33:2b: b9:09:4f:81:61:e8:63:18:a4:b5:16:0f:54:13:35: a7:96:23:7d:08:b7:82:28:22:29:62:95:f1:07:54: b8:26:7f:a1:e8:f3:80:10:b4:ed:06:8a:7c:c3:52: ad:d5:13:08:80:f4:f5:22:e8:22:af:91:6a:5d:7a: 36:08:13:b1:86:6a:93:ba:18:1e:4c:c1:f8:db:cc: c8:61:8c:79:d8:a7:d8:84:77:1f:b6:6a:59:79:56: 8e:6d:69:6a:27:a4:ae:36:27:8b:93:ec:de:b1:07: 3a:cb:b9:a4:06:2c:3d:43:19:0d:da:ff:17:a0:fb: 71:87:fc:f8:c5:4f:fa:e6:92:ad:0a:21:07:3e:43: a4:39:e1:da:5d:cb:df:99:86:78:af:70:7f:f8:9f: 00:01:22:a5:67:1c:4f:a9:a0:05:06:d1:ef:d6:7e: 25:b9:ff:94:ff:a7:44:83:a8:0b:48:52:86:6c:82: 1e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:9E:D3:FD:EE:53:2E:AD:62:E8:FF:7C:04:CF:9F:E5:8E:80:1F:EC X509v3 Authority Key Identifier: keyid:8D:16:FD:0E:25:FB:89:6E:26:FA:73:4A:BC:98:4C:E4:B4:69:8D:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRb9DiX7iW4m-nNKvJhM5LRpjdM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:04:36:90:e9:10:e2:6a:94:2c:0c:83:1e:1b:7f:d4:92:30: 12:65:62:9e:be:bb:ef:23:3c:46:5d:fb:38:69:99:95:d8:b3: f3:2e:08:30:ec:1d:f1:e2:51:d1:0e:77:84:a5:bb:25:ec:a1: 04:8b:2c:c7:52:f3:23:0f:91:de:da:38:ab:db:df:ad:0e:92: d3:74:4c:26:70:de:50:9d:03:0c:43:12:e2:50:ad:74:0d:ad: 39:8c:ac:8d:be:99:71:87:2c:98:df:76:4a:88:e7:be:a2:b9: f0:37:a7:0a:a6:e1:b2:8a:9d:9c:f8:23:d2:50:ec:fb:bd:77: 43:7c:9b:3b:2b:9b:f9:57:3f:31:47:aa:f0:eb:aa:45:e0:28: 7b:14:dd:3d:dd:83:c0:b6:02:4e:64:e8:cb:12:b7:61:3d:bb: 3b:66:f0:7e:6a:20:2b:c2:b8:3b:d3:aa:f2:d9:22:d1:1f:0e: fc:09:3c:b8:57:13:f9:b0:4b:bc:98:08:8d:17:76:a9:86:91: 9d:a9:b5:c9:4d:05:2a:5d:6e:dd:58:58:09:d5:43:dc:10:f5: 07:98:9a:46:af:31:84:c6:ab:f2:5e:37:98:5b:f0:9c:89:96: bc:9e:49:bd:f3:35:82:ff:71:06:f0:ce:e6:92:44:aa:f5:7b: 73:e0:42:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlBNkMxMTAvBgNVBAUTKDhEMTZGRDBFMjVGQjg5NkUyNkZBNzM0QUJDOTg0Q0U0 QjQ2OThERDMwHhcNMjUwNDI2MjE0MzI4WhcNMjUwNTAzMjE0MzI4WjAYMRYwFAYD VQQDEw02ODBkNTM4MS0xMzU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmYpFS0sMi0ruS1NDy+FuE856bzObXzK645hcjfljZgQLu4PVqLwTBKUIIbVN d1uz2+a0r1kEDt44xNHoFpAd8llosF24tLquMyu5CU+BYehjGKS1Fg9UEzWnliN9 CLeCKCIpYpXxB1S4Jn+h6POAELTtBop8w1Kt1RMIgPT1Iugir5FqXXo2CBOxhmqT uhgeTMH428zIYYx52KfYhHcftmpZeVaObWlqJ6SuNieLk+zesQc6y7mkBiw9QxkN 2v8XoPtxh/z4xU/65pKtCiEHPkOkOeHaXcvfmYZ4r3B/+J8AASKlZxxPqaAFBtHv 1n4luf+U/6dEg6gLSFKGbIIeFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG+e0/3u Uy6tYuj/fATPn+WOgB/sMB8GA1UdIwQYMBaAFI0W/Q4l+4luJvpzSryYTOS0aY3T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUE2Qy8zQjg0OTNCNDUx QTUxMUVCQjRBRjA0MEVDNEY5QUUwMi9qUmI5RGlYN2lXNG0tbk5LdkpoTTVMUnBq ZE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pSYjlEaVg3aVc0bS1uTkt2SmhNNUxScGpkTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUE2Qy8zQjg0OTNCNDUxQTUxMUVCQjRBRjA0MEVDNEY5QUUwMi9qUmI5RGlYN2lX NG0tbk5LdkpoTTVMUnBqZE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNBDaQ6RDiapQsDIMeG3/UkjASZWKevrvvIzxGXfs4aZmV2LPzLggw 7B3x4lHRDneEpbsl7KEEiyzHUvMjD5He2jir29+tDpLTdEwmcN5QnQMMQxLiUK10 Da05jKyNvplxhyyY33ZKiOe+ornwN6cKpuGyip2c+CPSUOz7vXdDfJs7K5v5Vz8x R6rw66pF4Ch7FN093YPAtgJOZOjLErdhPbs7ZvB+aiArwrg706ry2SLRHw78CTy4 VxP5sEu8mAiNF3aphpGdqbXJTQUqXW7dWFgJ1UPcEPUHmJpGrzGExqvyXjeYW/Cc iZa8nkm98zWC/3EG8M7mkkSq9Xtz4EIc -----END CERTIFICATE-----Generated at Sun Apr 27 00:13:58 2025 by rpki-client on console.sobornost.net