$ rpki-client -vvf rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.mft File: KL7nBASyQwlkwwKSkNPqYEyRDrE.mft (raw, json) Hash identifier: 8+eI/UgbIaOtoAXpfiEen8rMbDzu9WELNJs0pMRiokM= Subject key identifier: AB:A3:F0:84:92:2E:9D:88:72:7D:CC:5A:5D:25:79:5F:23:37:7C:7B Authority key identifier: 28:BE:E7:04:04:B2:43:09:64:C3:02:92:90:D3:EA:60:4C:91:0E:B1 Certificate issuer: /CN=A9154E3F/serialNumber=28BEE70404B2430964C3029290D3EA604C910EB1 Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KL7nBASyQwlkwwKSkNPqYEyRDrE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.mft Manifest number: 0C Signing time: Sat 03 May 2025 07:25:08 +0000 Manifest this update: Sat 03 May 2025 07:25:07 +0000 Manifest next update: Sat 10 May 2025 07:25:07 +0000 Files and hashes: 1: KL7nBASyQwlkwwKSkNPqYEyRDrE.crl (hash: Zya4gEJghGsI1nwN+62/LgRlU0x23Y8iy8syLsIl24U=) 2: C028C06E18E211F081A75558C4F9AE02.roa (hash: +HdHyMhgt4vT3DS5nsB5YQiE8tKIuj7aqeWwrUFKUm0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.crl rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KL7nBASyQwlkwwKSkNPqYEyRDrE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 05:26:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154E3F, serialNumber=28BEE70404B2430964C3029290D3EA604C910EB1 Validity Not Before: May 3 07:25:07 2025 GMT Not After : May 10 07:25:07 2025 GMT Subject: CN=6815c4d3-e8cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:84:6e:b4:90:32:dc:e8:a8:6c:f5:a8:b3:9b: f6:48:c7:68:40:b0:df:b3:69:86:17:c5:a3:cb:fe: e2:27:15:d3:f4:15:83:0a:43:c4:19:7a:18:3f:e8: 87:d7:29:78:fb:53:45:f7:a3:2b:3c:dc:61:e4:07: 5e:79:41:f9:e8:ad:01:8d:e0:d2:46:19:b6:a3:7d: aa:1b:dd:8e:c4:5d:4b:35:9a:9a:a6:60:22:4e:f4: de:b5:3d:28:92:67:e3:e8:88:ac:28:ce:30:53:f3: 26:d7:66:59:2f:66:d8:2a:c6:87:ca:33:d9:aa:e0: 4e:7d:a7:85:08:04:30:5c:98:93:3e:1b:7a:30:78: 6c:d2:3c:74:cf:fd:9e:ed:d8:ea:04:97:85:7a:5c: 75:e2:38:58:95:3f:25:61:75:62:bb:a1:a0:fe:ea: d7:54:6d:58:ef:88:ba:58:4d:a8:20:9d:32:bc:ad: 66:2b:33:50:e3:95:ab:d5:b8:a1:e1:23:00:01:dc: d9:75:46:0c:b3:8e:61:e8:71:78:90:93:d7:35:ee: 3c:51:33:66:92:50:f4:32:a3:00:27:fb:d2:77:c6: 9e:7e:73:9e:85:e9:31:42:6c:a1:21:36:01:55:96: 35:7d:bb:f9:57:e0:86:93:4d:7d:4b:dd:7f:1e:7e: f2:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:A3:F0:84:92:2E:9D:88:72:7D:CC:5A:5D:25:79:5F:23:37:7C:7B X509v3 Authority Key Identifier: keyid:28:BE:E7:04:04:B2:43:09:64:C3:02:92:90:D3:EA:60:4C:91:0E:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KL7nBASyQwlkwwKSkNPqYEyRDrE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:36:4d:02:93:9f:54:0b:73:ad:02:4e:9b:d6:54:53:6c:24: 9d:6e:58:07:0d:98:ed:f7:df:62:8d:83:d6:f8:d3:84:c5:d6: a6:61:11:28:96:e5:fb:bf:d9:97:37:7a:ae:62:0f:fa:a2:6d: fa:e8:1b:d5:de:79:98:9c:55:a5:a3:fa:a9:ce:5b:5b:6a:3c: 57:ac:73:01:d9:db:b1:a0:6a:1f:1a:6d:5d:e0:52:c9:7e:57: 71:1d:39:19:7e:c4:7f:8d:0c:eb:f3:6e:dd:2b:47:98:d4:b1: aa:05:60:49:7b:f1:8b:ad:da:76:d7:21:26:2b:94:78:a0:a3: 99:5d:57:b2:cc:78:79:19:bb:33:a9:fb:16:59:7f:e1:c7:a3: 2d:1b:56:a2:f0:33:e9:76:6a:be:9d:d5:0a:0f:21:92:9a:88: ac:e3:a0:fd:b7:1f:27:40:a2:75:b6:e4:f2:df:87:80:eb:0e: c0:c3:f2:79:8a:d5:9f:1f:b5:0e:d3:51:a7:5c:05:92:73:7f: e5:63:cd:08:f3:e6:d5:62:10:28:be:b1:30:a7:e0:8b:63:be: c9:85:f8:1e:7b:6b:18:90:e1:bf:72:e6:09:82:6e:1c:cf:8f: fb:a2:02:95:b3:f3:31:40:19:5a:1f:54:61:4a:15:ad:44:1e: 2e:24:c6:e8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NEUzRjExMC8GA1UEBRMoMjhCRUU3MDQwNEIyNDMwOTY0QzMwMjkyOTBEM0VBNjA0 QzkxMEVCMTAeFw0yNTA1MDMwNzI1MDdaFw0yNTA1MTAwNzI1MDdaMBgxFjAUBgNV BAMTDTY4MTVjNGQzLWU4Y2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+hG60kDLc6Khs9aizm/ZIx2hAsN+zaYYXxaPL/uInFdP0FYMKQ8QZehg/6IfX KXj7U0X3oys83GHkB155QfnorQGN4NJGGbajfaob3Y7EXUs1mpqmYCJO9N61PSiS Z+PoiKwozjBT8ybXZlkvZtgqxofKM9mq4E59p4UIBDBcmJM+G3oweGzSPHTP/Z7t 2OoEl4V6XHXiOFiVPyVhdWK7oaD+6tdUbVjviLpYTaggnTK8rWYrM1DjlavVuKHh IwAB3Nl1RgyzjmHocXiQk9c17jxRM2aSUPQyowAn+9J3xp5+c56F6TFCbKEhNgFV ljV9u/lX4IaTTX1L3X8efvKxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUq6PwhJIu nYhyfcxaXSV5XyM3fHswHwYDVR0jBBgwFoAUKL7nBASyQwlkwwKSkNPqYEyRDrEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0RTNGLzNDM0U2MjBFMThF MjExRjA5QkU5OTU1N0M0RjlBRTAyL0tMN25CQVN5UXdsa3d3S1NrTlBxWUV5UkRy RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvS0w3bkJBU3lRd2xrd3dLU2tOUHFZRXlSRHJFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0 RTNGLzNDM0U2MjBFMThFMjExRjA5QkU5OTU1N0M0RjlBRTAyL0tMN25CQVN5UXds a3d3S1NrTlBxWUV5UkRyRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHg2TQKTn1QLc60CTpvWVFNsJJ1uWAcNmO3332KNg9b404TF1qZhESiW 5fu/2Zc3eq5iD/qibfroG9XeeZicVaWj+qnOW1tqPFescwHZ27Ggah8abV3gUsl+ V3EdORl+xH+NDOvzbt0rR5jUsaoFYEl78Yut2nbXISYrlHigo5ldV7LMeHkZuzOp +xZZf+HHoy0bVqLwM+l2ar6d1QoPIZKaiKzjoP23HydAonW25PLfh4DrDsDD8nmK 1Z8ftQ7TUadcBZJzf+VjzQjz5tViECi+sTCn4ItjvsmF+B57axiQ4b9y5gmCbhzP j/uiApWz8zFAGVofVGFKFa1EHi4kxug= -----END CERTIFICATE-----Generated at Sat May 3 10:57:32 2025 by rpki-client on console.sobornost.net