$ rpki-client -vvf rpki.apnic.net/member_repository/A9152329/C7FAD368A26811EF9D914118C4F9AE02/KTrGQFMJ3pSVFof-Fylq3c2Vcvw.mft File: KTrGQFMJ3pSVFof-Fylq3c2Vcvw.mft (raw, json) Hash identifier: gIWbYQyypLZX9XvRF28Zr8I9yM5l8FoMNkDyJbKOz74= Subject key identifier: B5:9C:E5:00:9A:22:7A:9B:44:40:00:6C:75:C3:53:43:05:E8:8C:F8 Authority key identifier: 29:3A:C6:40:53:09:DE:94:95:16:87:FE:17:29:6A:DD:CD:95:72:FC Certificate issuer: /CN=A9152329/serialNumber=293AC6405309DE94951687FE17296ADDCD9572FC Certificate serial: 56 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KTrGQFMJ3pSVFof-Fylq3c2Vcvw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152329/C7FAD368A26811EF9D914118C4F9AE02/KTrGQFMJ3pSVFof-Fylq3c2Vcvw.mft Manifest number: 55 Signing time: Fri 25 Apr 2025 06:12:29 +0000 Manifest this update: Fri 25 Apr 2025 06:12:28 +0000 Manifest next update: Fri 02 May 2025 06:12:28 +0000 Files and hashes: 1: KTrGQFMJ3pSVFof-Fylq3c2Vcvw.crl (hash: KnXp+hi0ak8ELGvA1T7fJNA1TU6TIf3oRkBL0NtBg/Q=) 2: 38161248A26911EFBF6D0319C4F9AE02.roa (hash: ask+BZFU8F8z7xA+3YaObHPYrB9zSG3srAnnNSVnzDc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152329/C7FAD368A26811EF9D914118C4F9AE02/KTrGQFMJ3pSVFof-Fylq3c2Vcvw.crl rsync://rpki.apnic.net/member_repository/A9152329/C7FAD368A26811EF9D914118C4F9AE02/KTrGQFMJ3pSVFof-Fylq3c2Vcvw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KTrGQFMJ3pSVFof-Fylq3c2Vcvw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86 (0x56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152329, serialNumber=293AC6405309DE94951687FE17296ADDCD9572FC Validity Not Before: Apr 25 06:12:28 2025 GMT Not After : May 2 06:12:28 2025 GMT Subject: CN=680b27cc-e6f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:cc:de:1a:4a:6b:dc:ab:0a:43:72:0b:93:8c: 44:ba:64:06:01:ee:e3:ef:ff:33:2f:a4:7a:59:b6: 1d:b6:1e:a0:d0:ca:df:3a:ca:85:2f:02:3d:6e:d1: 2c:7e:79:a9:b4:a7:c9:ff:43:52:79:fa:b3:c0:b3: 75:27:7b:6b:91:96:ea:f1:83:ad:11:72:6a:fa:40: 62:f7:45:d6:04:ac:70:0a:1e:e9:fe:c9:0b:43:3c: 4b:1a:ca:4f:29:8a:4a:3e:76:0f:f0:d1:53:08:88: 9d:89:48:9c:57:92:94:77:47:f4:c3:05:78:f4:6d: 82:45:a6:8f:02:d3:c4:61:07:cb:e0:0a:94:47:a8: a6:b9:d5:e5:90:68:7c:63:de:dd:d7:93:3f:5f:5e: d8:c4:67:05:0c:d4:2b:06:10:f9:1c:81:7a:ac:f0: 70:07:e9:b0:2b:e2:24:30:5a:7e:c3:5f:37:8f:bd: 74:9a:34:c8:7f:21:d5:dc:92:c7:3b:dd:3b:43:7b: 67:3c:d3:ea:87:9a:5c:72:4e:be:0f:f6:e3:82:46: 18:73:71:62:2d:c9:4f:79:fd:ea:72:c0:19:31:08: 31:10:2b:cd:a3:2e:42:cf:6d:18:74:78:9d:90:fd: c4:2c:10:d2:b4:93:ab:7f:85:89:53:9b:e8:03:0f: b2:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:9C:E5:00:9A:22:7A:9B:44:40:00:6C:75:C3:53:43:05:E8:8C:F8 X509v3 Authority Key Identifier: keyid:29:3A:C6:40:53:09:DE:94:95:16:87:FE:17:29:6A:DD:CD:95:72:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152329/C7FAD368A26811EF9D914118C4F9AE02/KTrGQFMJ3pSVFof-Fylq3c2Vcvw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KTrGQFMJ3pSVFof-Fylq3c2Vcvw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152329/C7FAD368A26811EF9D914118C4F9AE02/KTrGQFMJ3pSVFof-Fylq3c2Vcvw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption de:35:81:ac:ba:97:19:3f:7b:73:2b:d0:e8:19:56:97:cf:4c: 48:b4:e8:03:bc:31:1a:d5:ab:5b:3b:55:1b:db:36:58:0f:11: ad:47:0d:e4:6b:3b:c8:3a:b3:86:0b:84:cc:0b:e3:a8:4a:91: 12:68:f5:fb:98:cd:b0:56:cb:98:b2:a2:b2:58:3f:e2:17:70: ff:d1:f4:de:75:f8:47:32:04:97:68:99:3e:c2:e8:9d:3f:a3: b2:88:f8:71:78:12:2d:b8:82:2a:75:f5:ec:df:17:05:c2:ca: 5c:7a:eb:7c:b2:8f:36:48:60:64:ae:26:4a:84:4a:a3:fe:39: df:b9:14:8d:c7:a9:fc:99:cb:80:c7:72:83:d4:78:21:9a:b1: 73:08:71:d1:4c:1b:1c:ab:c1:25:a3:d1:c4:9c:bd:26:1e:7a: 77:23:3b:88:7d:35:a8:48:d1:c6:81:8c:0d:8a:ce:bc:e8:73: 4b:64:cb:4c:90:b7:c4:ee:b7:a0:12:3e:d0:55:9c:6b:3a:1c: 65:6a:3b:49:30:58:3f:16:d9:93:82:f3:68:ca:26:68:69:58: 4e:11:25:55:c4:0a:bf:56:52:b5:26:6a:98:d3:cd:89:bd:5c: 30:92:52:ff:fc:5a:0f:c2:56:05:d4:20:6a:c1:7c:40:1c:d8: e6:71:6f:5f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MjMyOTExMC8GA1UEBRMoMjkzQUM2NDA1MzA5REU5NDk1MTY4N0ZFMTcyOTZBRERD RDk1NzJGQzAeFw0yNTA0MjUwNjEyMjhaFw0yNTA1MDIwNjEyMjhaMBgxFjAUBgNV BAMTDTY4MGIyN2NjLWU2ZjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCzN4aSmvcqwpDcguTjES6ZAYB7uPv/zMvpHpZth22HqDQyt86yoUvAj1u0Sx+ eam0p8n/Q1J5+rPAs3Une2uRlurxg60Rcmr6QGL3RdYErHAKHun+yQtDPEsayk8p iko+dg/w0VMIiJ2JSJxXkpR3R/TDBXj0bYJFpo8C08RhB8vgCpRHqKa51eWQaHxj 3t3Xkz9fXtjEZwUM1CsGEPkcgXqs8HAH6bAr4iQwWn7DXzePvXSaNMh/IdXcksc7 3TtDe2c80+qHmlxyTr4P9uOCRhhzcWItyU95/epywBkxCDEQK82jLkLPbRh0eJ2Q /cQsENK0k6t/hYlTm+gDD7LLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUtZzlAJoi eptEQABsdcNTQwXojPgwHwYDVR0jBBgwFoAUKTrGQFMJ3pSVFof+Fylq3c2Vcvww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUyMzI5L0M3RkFEMzY4QTI2 ODExRUY5RDkxNDExOEM0RjlBRTAyL0tUckdRRk1KM3BTVkZvZi1GeWxxM2MyVmN2 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvS1RyR1FGTUozcFNWRm9mLUZ5bHEzYzJWY3Z3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUy MzI5L0M3RkFEMzY4QTI2ODExRUY5RDkxNDExOEM0RjlBRTAyL0tUckdRRk1KM3BT VkZvZi1GeWxxM2MyVmN2dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAN41gay6lxk/e3Mr0OgZVpfPTEi06AO8MRrVq1s7VRvbNlgPEa1HDeRr O8g6s4YLhMwL46hKkRJo9fuYzbBWy5iyorJYP+IXcP/R9N51+EcyBJdomT7C6J0/ o7KI+HF4Ei24gip19ezfFwXCylx663yyjzZIYGSuJkqESqP+Od+5FI3HqfyZy4DH coPUeCGasXMIcdFMGxyrwSWj0cScvSYeencjO4h9NahI0caBjA2Kzrzoc0tky0yQ t8Tut6ASPtBVnGs6HGVqO0kwWD8W2ZOC82jKJmhpWE4RJVXECr9WUrUmapjTzYm9 XDCSUv/8Wg/CVgXUIGrBfEAc2OZxb18= -----END CERTIFICATE-----Generated at Fri Apr 25 08:23:48 2025 by rpki-client on console.sobornost.net