$ rpki-client -vvf rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft File: RDE2OBW8XQu3pCth2SMLTa4ixTw.mft (raw, json) Hash identifier: Q0AGXlkxbqltmtiZ2hjvEBAhqUNLDGnGaJ66L5CkNIo= Subject key identifier: B4:C1:44:42:F1:69:6E:E4:D8:0F:80:5F:AD:F4:88:39:DA:99:37:7F Authority key identifier: 44:31:36:38:15:BC:5D:0B:B7:A4:2B:61:D9:23:0B:4D:AE:22:C5:3C Certificate issuer: /CN=A9149ADB/serialNumber=4431363815BC5D0BB7A42B61D9230B4DAE22C53C Certificate serial: E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft Manifest number: E4 Signing time: Wed 23 Apr 2025 05:01:02 +0000 Manifest this update: Wed 23 Apr 2025 05:01:01 +0000 Manifest next update: Wed 30 Apr 2025 05:01:01 +0000 Files and hashes: 1: RDE2OBW8XQu3pCth2SMLTa4ixTw.crl (hash: T6QbIbng5D1pFdhvYctjAzetWBwW3DWfnvkb1TabEBU=) 2: ADCDA1F83A0F11EFAB312630C4F9AE02.roa (hash: 8SYA3R8gtlu3Yfmt/OFb7lvOOBmgG2rmJfQokI/04ZM=) 3: FDDFE12EC78C11EE911F1A30C4F9AE02.roa (hash: XDvJ7OAZIZH9Y1m5zAYI1aNVQygP0iZogi7EtsDf/ZM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.crl rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 04:47:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 233 (0xe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149ADB, serialNumber=4431363815BC5D0BB7A42B61D9230B4DAE22C53C Validity Not Before: Apr 23 05:01:01 2025 GMT Not After : Apr 30 05:01:01 2025 GMT Subject: CN=6808740e-d4da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c2:2e:59:76:4e:84:91:b8:8a:da:38:8f:1e: 78:66:b9:c4:b5:3c:11:31:15:cf:93:7b:f7:70:38: 72:f2:81:bb:b0:e4:29:9a:6b:c6:54:79:e7:19:07: 11:c3:1b:20:f7:61:fa:60:4d:43:21:d1:9d:e7:51: 13:eb:94:82:68:56:6a:3f:6e:4d:52:84:b9:62:18: 7b:72:d8:ac:37:4a:da:ea:d2:e6:e0:7c:3b:44:22: de:26:ef:ed:0a:eb:62:e4:aa:ca:91:3c:40:29:ac: 4e:e7:1d:c8:a0:16:ac:5f:2b:d6:d6:18:f7:08:63: 06:63:9a:e1:be:06:e6:dd:bf:d1:13:17:b1:09:bd: ae:d8:33:88:80:37:ac:40:79:4f:5c:d2:42:8f:5e: 43:ae:3a:60:1d:a1:ed:51:83:60:a1:a8:eb:95:1f: b1:9c:0b:08:74:f7:96:e5:7f:a8:94:37:77:eb:14: 2f:c0:9d:da:0e:56:d7:be:fe:95:b0:89:c6:0a:d6: 6d:ff:96:82:d2:61:ff:bf:9f:9b:7a:d5:e0:83:6a: 9f:d9:52:45:af:7f:75:0a:53:17:15:ee:49:65:e1: 64:35:9e:25:03:6e:6a:a3:90:7a:34:44:36:27:16: c7:6a:b0:38:e6:90:81:d7:bf:d5:ba:2f:34:4e:53: 4e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:C1:44:42:F1:69:6E:E4:D8:0F:80:5F:AD:F4:88:39:DA:99:37:7F X509v3 Authority Key Identifier: keyid:44:31:36:38:15:BC:5D:0B:B7:A4:2B:61:D9:23:0B:4D:AE:22:C5:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:4d:16:6f:3b:0b:27:76:1b:a2:34:cc:86:33:41:4c:a5:47: 94:9b:ce:84:5c:68:ca:30:02:99:2e:0c:05:ea:96:e0:b1:20: fc:1d:60:49:a1:d2:39:dc:c3:08:a7:08:91:d8:7b:e1:02:97: 20:9f:cc:ea:f7:b6:e1:1a:23:9f:ab:fd:98:ae:12:dc:f0:e0: 42:2a:50:8e:e0:66:c3:3d:fb:c9:7b:45:4a:95:54:65:aa:25: a0:c0:e3:04:62:e1:a4:c1:06:b3:93:45:08:3f:2c:42:1b:20: 0c:45:a4:bc:78:e5:4c:77:30:0a:e9:92:00:44:59:80:53:17: 8a:80:ed:63:64:2c:d8:32:dc:d5:8b:d9:8e:28:9b:17:7d:61: 16:4a:1f:6f:31:09:6b:7e:f1:2d:e4:d0:da:f1:5f:70:49:2a: 55:c0:b7:ed:83:28:81:17:40:d8:ff:94:3b:50:96:81:49:50: 5a:2d:80:47:0b:47:65:e9:39:7d:63:0c:af:11:dc:cb:fe:60: 94:67:1e:91:2b:2a:81:09:f8:fd:03:db:70:52:d9:ff:7e:5a: 46:13:2c:0c:57:8b:15:c0:fd:03:8c:f6:5d:cc:16:58:83:03: 3f:56:ca:d1:c8:85:97:e0:94:f3:33:8a:50:0c:a3:7a:ba:ae: 9d:fa:0f:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlBREIxMTAvBgNVBAUTKDQ0MzEzNjM4MTVCQzVEMEJCN0E0MkI2MUQ5MjMwQjRE QUUyMkM1M0MwHhcNMjUwNDIzMDUwMTAxWhcNMjUwNDMwMDUwMTAxWjAYMRYwFAYD VQQDEw02ODA4NzQwZS1kNGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA38IuWXZOhJG4ito4jx54ZrnEtTwRMRXPk3v3cDhy8oG7sOQpmmvGVHnnGQcR wxsg92H6YE1DIdGd51ET65SCaFZqP25NUoS5Yhh7ctisN0ra6tLm4Hw7RCLeJu/t Cuti5KrKkTxAKaxO5x3IoBasXyvW1hj3CGMGY5rhvgbm3b/RExexCb2u2DOIgDes QHlPXNJCj15DrjpgHaHtUYNgoajrlR+xnAsIdPeW5X+olDd36xQvwJ3aDlbXvv6V sInGCtZt/5aC0mH/v5+betXgg2qf2VJFr391ClMXFe5JZeFkNZ4lA25qo5B6NEQ2 JxbHarA45pCB17/Vui80TlNOHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLTBRELx aW7k2A+AX630iDnamTd/MB8GA1UdIwQYMBaAFEQxNjgVvF0Lt6QrYdkjC02uIsU8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUFEQi84MUYzODg4NkM3 OEMxMUVFOTdFNDM4MkZDNEY5QUUwMi9SREUyT0JXOFhRdTNwQ3RoMlNNTFRhNGl4 VHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JERTJPQlc4WFF1M3BDdGgyU01MVGE0aXhUdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUFEQi84MUYzODg4NkM3OEMxMUVFOTdFNDM4MkZDNEY5QUUwMi9SREUyT0JXOFhR dTNwQ3RoMlNNTFRhNGl4VHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6TRZvOwsndhuiNMyGM0FMpUeUm86EXGjKMAKZLgwF6pbgsSD8HWBJ odI53MMIpwiR2HvhApcgn8zq97bhGiOfq/2YrhLc8OBCKlCO4GbDPfvJe0VKlVRl qiWgwOMEYuGkwQazk0UIPyxCGyAMRaS8eOVMdzAK6ZIARFmAUxeKgO1jZCzYMtzV i9mOKJsXfWEWSh9vMQlrfvEt5NDa8V9wSSpVwLftgyiBF0DY/5Q7UJaBSVBaLYBH C0dl6Tl9YwyvEdzL/mCUZx6RKyqBCfj9A9twUtn/flpGEywMV4sVwP0DjPZdzBZY gwM/VsrRyIWX4JTzM4pQDKN6uq6d+g9m -----END CERTIFICATE-----Generated at Wed Apr 23 06:35:31 2025 by rpki-client on console.sobornost.net