$ rpki-client -vvf rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.mft File: 9U-AgBarS7BveWqJRmfHC91I-_Y.mft (raw, json) Hash identifier: iNknU34rnuEw3x2wy4Ng0nyMWbIGW6fx2HZ6vOp0uAo= Subject key identifier: 67:1E:BE:2D:76:96:2F:34:D1:EF:A8:4F:F8:EB:ED:36:92:37:A1:2B Authority key identifier: F5:4F:80:80:16:AB:4B:B0:6F:79:6A:89:46:67:C7:0B:DD:48:FB:F6 Certificate issuer: /CN=A9151932/serialNumber=F54F808016AB4BB06F796A894667C70BDD48FBF6 Certificate serial: 78 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9U-AgBarS7BveWqJRmfHC91I-_Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.mft Manifest number: 77 Signing time: Sun 27 Apr 2025 05:37:23 +0000 Manifest this update: Sun 27 Apr 2025 05:37:22 +0000 Manifest next update: Sun 04 May 2025 05:37:22 +0000 Files and hashes: 1: 9U-AgBarS7BveWqJRmfHC91I-_Y.crl (hash: dLpGdWIiqI1BWGW+9r4hG/RJvCnk4qcm5Qh0DcCI1xw=) 2: 21642FDA720811EF8F352D23C4F9AE02.roa (hash: 3wZO5NpUkTFN/tJddHseNs+Usy8EJHQkjD9s+ZGedQk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.crl rsync://rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9U-AgBarS7BveWqJRmfHC91I-_Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151932, serialNumber=F54F808016AB4BB06F796A894667C70BDD48FBF6 Validity Not Before: Apr 27 05:37:22 2025 GMT Not After : May 4 05:37:22 2025 GMT Subject: CN=680dc293-108f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4d:a9:45:fb:9b:4a:db:45:93:62:30:65:c7: 95:00:db:bf:8a:93:71:ff:75:d2:08:32:6a:37:77: 6d:e9:8a:0f:4d:fe:f3:6f:af:f1:75:1f:44:10:b6: b4:fb:39:e2:2a:a4:2e:d5:4a:68:1f:d5:fc:f2:16: 98:1d:c2:e0:ff:df:f8:ca:7a:b0:05:c2:83:83:16: e4:65:77:b5:75:78:3a:14:4e:d7:4e:8c:cd:e9:2a: c6:10:c0:ab:46:34:34:84:00:f2:6d:ba:43:74:f0: 0a:10:a2:7b:bd:78:d1:7e:4d:33:43:e1:01:e1:dc: 5e:43:2e:c6:70:85:43:a7:e9:28:b1:96:73:ba:8b: 6d:d6:01:f2:9d:6e:a0:f9:c7:27:f6:09:f1:9c:63: 62:f3:29:6f:dc:dd:4b:4c:fe:1d:6f:ad:93:73:43: 95:d3:30:97:a0:c1:da:24:60:e0:1e:18:b4:0b:64: 45:e5:ef:05:28:36:f0:2c:6e:a4:47:b3:84:1a:0a: 12:e2:2a:92:c4:da:12:36:09:93:b9:73:31:d3:5a: 4b:07:8f:16:3f:7a:a3:ca:a6:41:25:7a:3e:95:5e: 49:e3:4e:28:7c:60:c8:59:ff:ac:1f:c5:0f:25:71: 8d:2f:03:3d:2a:bc:1a:7c:6c:f0:a6:a9:02:e0:92: af:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:1E:BE:2D:76:96:2F:34:D1:EF:A8:4F:F8:EB:ED:36:92:37:A1:2B X509v3 Authority Key Identifier: keyid:F5:4F:80:80:16:AB:4B:B0:6F:79:6A:89:46:67:C7:0B:DD:48:FB:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9U-AgBarS7BveWqJRmfHC91I-_Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:d4:9e:de:43:dc:da:07:78:84:15:06:64:c7:ef:6a:f4:fd: da:75:c1:0d:33:86:e9:8f:5a:ab:e2:50:18:bf:92:81:56:13: ec:d8:1d:a9:c3:58:5f:86:0e:93:cf:2f:5a:9a:2f:ea:ef:65: 87:15:0e:fa:4f:37:cb:d1:a7:cb:49:ee:f3:20:6a:25:de:cb: 48:9a:70:bf:0c:ba:82:74:d7:21:d9:56:f5:86:42:52:03:a7: eb:66:88:96:23:c5:26:41:33:41:e7:b5:7d:fc:13:1f:be:05: f6:de:53:fb:44:30:cf:c8:e8:b3:bc:35:f4:b8:2b:f8:b4:32: df:cc:a3:b0:05:95:59:82:4e:68:83:4d:5e:56:5d:0b:fb:82: 18:ec:6a:13:cf:4d:b8:6b:fa:7e:17:07:59:7c:2b:27:36:0f: 7e:ee:e9:e4:cf:0f:07:98:6f:cc:aa:1c:ae:02:c1:45:a4:9d: 79:76:83:77:8e:9d:a9:5e:5d:98:cd:2e:8d:e5:b0:31:f3:f9: ef:d1:27:ba:ce:25:48:76:0a:55:05:cf:ce:77:e2:77:d2:ec: ce:e8:e6:bb:61:46:79:b0:e1:1a:f9:b7:b7:2b:f4:91:ef:c3: 00:60:97:49:9f:f4:c3:04:5c:35:f4:a3:30:7d:90:2f:cd:d4: a9:54:53:e1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MTkzMjExMC8GA1UEBRMoRjU0RjgwODAxNkFCNEJCMDZGNzk2QTg5NDY2N0M3MEJE RDQ4RkJGNjAeFw0yNTA0MjcwNTM3MjJaFw0yNTA1MDQwNTM3MjJaMBgxFjAUBgNV BAMTDTY4MGRjMjkzLTEwOGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHTalF+5tK20WTYjBlx5UA27+Kk3H/ddIIMmo3d23pig9N/vNvr/F1H0QQtrT7 OeIqpC7VSmgf1fzyFpgdwuD/3/jKerAFwoODFuRld7V1eDoUTtdOjM3pKsYQwKtG NDSEAPJtukN08AoQonu9eNF+TTND4QHh3F5DLsZwhUOn6SixlnO6i23WAfKdbqD5 xyf2CfGcY2LzKW/c3UtM/h1vrZNzQ5XTMJegwdokYOAeGLQLZEXl7wUoNvAsbqRH s4QaChLiKpLE2hI2CZO5czHTWksHjxY/eqPKpkElej6VXknjTih8YMhZ/6wfxQ8l cY0vAz0qvBp8bPCmqQLgkq+1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZx6+LXaW LzTR76hP+OvtNpI3oSswHwYDVR0jBBgwFoAU9U+AgBarS7BveWqJRmfHC91I+/Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUxOTMyLzQ3Q0EzNUU0NzIw NzExRUY5REM4QkEyMUM0RjlBRTAyLzlVLUFnQmFyUzdCdmVXcUpSbWZIQzkxSS1f WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvOVUtQWdCYXJTN0J2ZVdxSlJtZkhDOTFJLV9ZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUx OTMyLzQ3Q0EzNUU0NzIwNzExRUY5REM4QkEyMUM0RjlBRTAyLzlVLUFnQmFyUzdC dmVXcUpSbWZIQzkxSS1fWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHfUnt5D3NoHeIQVBmTH72r0/dp1wQ0zhumPWqviUBi/koFWE+zYHanD WF+GDpPPL1qaL+rvZYcVDvpPN8vRp8tJ7vMgaiXey0iacL8MuoJ01yHZVvWGQlID p+tmiJYjxSZBM0HntX38Ex++BfbeU/tEMM/I6LO8NfS4K/i0Mt/Mo7AFlVmCTmiD TV5WXQv7ghjsahPPTbhr+n4XB1l8Kyc2D37u6eTPDweYb8yqHK4CwUWknXl2g3eO naleXZjNLo3lsDHz+e/RJ7rOJUh2ClUFz8534nfS7M7o5rthRnmw4Rr5t7cr9JHv wwBgl0mf9MMEXDX0ozB9kC/N1KlUU+E= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:46 2025 by rpki-client on console.sobornost.net