$ rpki-client -vvf rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.mft File: o9XPQ95bPYucND7UScFpDr40Fw4.mft (raw, json) Hash identifier: XI33yd3km9HlskmrKMaw2AkY0vvYnZc5BxGMVRvZ80A= Subject key identifier: 71:C4:83:56:78:45:8B:37:8E:85:1D:3B:47:C3:93:E5:5F:2F:19:60 Authority key identifier: A3:D5:CF:43:DE:5B:3D:8B:9C:34:3E:D4:49:C1:69:0E:BE:34:17:0E Certificate issuer: /CN=A914CCD1/serialNumber=A3D5CF43DE5B3D8B9C343ED449C1690EBE34170E Certificate serial: 05E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9XPQ95bPYucND7UScFpDr40Fw4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.mft Manifest number: 05C0 Signing time: Sat 26 Apr 2025 22:53:36 +0000 Manifest this update: Sat 26 Apr 2025 22:53:35 +0000 Manifest next update: Sat 03 May 2025 22:53:35 +0000 Files and hashes: 1: o9XPQ95bPYucND7UScFpDr40Fw4.crl (hash: DyNbG71TpS8ffQMUUwyAXhIIM7y9Ef62jxlbc/8lCpo=) 2: 96E3EB58B2B711EEAE882255C4F9AE02.roa (hash: tzTNsTyay71DnZ6Tdbo+sDlbNh8WzoY7t1vlYqQ5Tec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.crl rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9XPQ95bPYucND7UScFpDr40Fw4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 22:53:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1508 (0x5e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CCD1, serialNumber=A3D5CF43DE5B3D8B9C343ED449C1690EBE34170E Validity Not Before: Apr 26 22:53:35 2025 GMT Not After : May 3 22:53:35 2025 GMT Subject: CN=680d63ef-db8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:dd:75:4c:76:fc:38:57:6a:d0:8b:ab:53:d8: 96:bf:59:80:66:b0:87:0d:e2:1a:52:cd:49:76:c2: 4d:4f:64:87:96:58:6a:69:a8:cb:4f:13:29:9e:75: ee:10:33:5a:7c:e1:83:d7:8d:c0:cc:ff:60:06:a0: 4f:01:d1:22:62:5f:24:bb:7b:db:28:b9:9e:a5:ae: 27:13:ab:7e:95:b3:eb:b7:2b:96:a6:12:9c:ab:e1: cc:77:3d:d7:76:65:21:b6:20:9b:c8:f0:e9:14:42: e0:77:bc:c6:5e:a1:11:84:a8:ba:00:a1:ce:ca:ca: fd:e4:d1:41:c7:0e:02:9d:2a:67:28:12:e5:3d:d5: 47:85:0a:fe:32:53:48:3b:b4:6b:33:56:d8:8c:f0: 7e:f9:a0:e7:8b:1d:a2:a0:44:a0:9d:1e:af:4d:1f: 08:33:ae:f1:bf:67:0e:ef:83:c2:97:8a:ab:61:eb: 28:a1:05:e5:2d:48:93:75:6d:ce:62:9f:1e:c2:4c: 1c:8f:2b:b1:2e:2a:75:ce:c0:a4:74:54:15:30:15: e1:37:45:b6:2e:c5:54:1d:74:3f:eb:94:84:c2:93: 57:47:5e:98:2a:8c:a9:17:13:75:c7:7d:dc:9f:7c: b1:0b:f3:e8:80:78:d5:d3:f9:37:0a:b0:e9:60:13: 24:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:C4:83:56:78:45:8B:37:8E:85:1D:3B:47:C3:93:E5:5F:2F:19:60 X509v3 Authority Key Identifier: keyid:A3:D5:CF:43:DE:5B:3D:8B:9C:34:3E:D4:49:C1:69:0E:BE:34:17:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9XPQ95bPYucND7UScFpDr40Fw4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:87:67:ee:62:75:5c:fe:c8:40:63:df:4d:7e:44:c0:95:b6: 2e:64:64:8f:ac:e3:16:f4:37:46:76:21:fe:85:09:f7:b3:ef: c7:5b:df:36:2a:75:c0:cd:3c:58:23:97:de:f5:d8:33:9f:35: 05:67:b0:4f:cf:cf:99:7d:b5:71:35:b6:0f:db:ca:2a:de:88: 87:6f:35:7e:66:5f:04:6c:ca:e9:fc:c2:c0:e0:3c:57:2a:24: bc:15:1a:86:b7:63:51:3e:39:85:d2:38:3a:57:6e:7b:43:92: cc:fb:58:b7:9d:93:6e:a8:e1:77:60:e3:fa:ee:25:6f:55:67: ce:30:2e:dc:32:f3:ec:33:b5:73:f2:57:88:86:59:2a:0c:e7: 65:65:e6:77:ac:35:ca:05:f3:07:b7:e0:a5:6b:bb:03:ce:79: bd:1d:9f:c9:ac:aa:33:33:df:4a:6b:3f:ba:1d:7a:01:a1:4a: aa:8f:f8:80:7d:a6:b1:1c:bb:b6:e1:65:82:ad:c7:24:a8:ff: 90:5c:af:a7:d3:a1:43:d4:eb:6e:fc:11:f7:05:39:3c:2c:e2: c0:41:e7:cb:18:7e:ac:93:a4:64:bb:cc:f4:26:ea:41:9c:46: dd:c4:59:79:b0:6e:43:9c:92:9c:13:00:61:f6:a3:9d:35:fb: d7:2f:11:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENDRDExMTAvBgNVBAUTKEEzRDVDRjQzREU1QjNEOEI5QzM0M0VENDQ5QzE2OTBF QkUzNDE3MEUwHhcNMjUwNDI2MjI1MzM1WhcNMjUwNTAzMjI1MzM1WjAYMRYwFAYD VQQDEw02ODBkNjNlZi1kYjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2d11THb8OFdq0IurU9iWv1mAZrCHDeIaUs1JdsJNT2SHllhqaajLTxMpnnXu EDNafOGD143AzP9gBqBPAdEiYl8ku3vbKLmepa4nE6t+lbPrtyuWphKcq+HMdz3X dmUhtiCbyPDpFELgd7zGXqERhKi6AKHOysr95NFBxw4CnSpnKBLlPdVHhQr+MlNI O7RrM1bYjPB++aDnix2ioESgnR6vTR8IM67xv2cO74PCl4qrYesooQXlLUiTdW3O Yp8ewkwcjyuxLip1zsCkdFQVMBXhN0W2LsVUHXQ/65SEwpNXR16YKoypFxN1x33c n3yxC/PogHjV0/k3CrDpYBMkhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHHEg1Z4 RYs3joUdO0fDk+VfLxlgMB8GA1UdIwQYMBaAFKPVz0PeWz2LnDQ+1EnBaQ6+NBcO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0NEMS9BRDdGNDVBNENE QzQxMUVCQjVGNDgzNTVDNEY5QUUwMi9vOVhQUTk1YlBZdWNORDdVU2NGcERyNDBG dzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL285WFBROTViUFl1Y05EN1VTY0ZwRHI0MEZ3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0NEMS9BRDdGNDVBNENEQzQxMUVCQjVGNDgzNTVDNEY5QUUwMi9vOVhQUTk1YlBZ dWNORDdVU2NGcERyNDBGdzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdh2fuYnVc/shAY99NfkTAlbYuZGSPrOMW9DdGdiH+hQn3s+/HW982 KnXAzTxYI5fe9dgznzUFZ7BPz8+ZfbVxNbYP28oq3oiHbzV+Zl8EbMrp/MLA4DxX KiS8FRqGt2NRPjmF0jg6V257Q5LM+1i3nZNuqOF3YOP67iVvVWfOMC7cMvPsM7Vz 8leIhlkqDOdlZeZ3rDXKBfMHt+Cla7sDznm9HZ/JrKozM99Kaz+6HXoBoUqqj/iA faaxHLu24WWCrcckqP+QXK+n06FD1Otu/BH3BTk8LOLAQefLGH6sk6Rku8z0JupB nEbdxFl5sG5DnJKcEwBh9qOdNfvXLxGC -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:42 2025 by rpki-client on console.sobornost.net