$ rpki-client -vvf rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.mft File: ehMEShEYWGwP2hOLs-vdSEiRTjc.mft (raw, json) Hash identifier: QK716lGmt9Nox46c7xBHPzkct/TdsrK2e3AEdq3IYHo= Subject key identifier: 1F:00:24:97:29:85:C9:CD:BC:42:98:C1:BA:FE:42:00:A4:60:AC:93 Authority key identifier: 7A:13:04:4A:11:18:58:6C:0F:DA:13:8B:B3:EB:DD:48:48:91:4E:37 Certificate issuer: /CN=A9154EAF/serialNumber=7A13044A1118586C0FDA138BB3EBDD4848914E37 Certificate serial: 0250 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ehMEShEYWGwP2hOLs-vdSEiRTjc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.mft Manifest number: 024D Signing time: Fri 25 Apr 2025 01:36:51 +0000 Manifest this update: Fri 25 Apr 2025 01:36:50 +0000 Manifest next update: Fri 02 May 2025 01:36:50 +0000 Files and hashes: 1: ehMEShEYWGwP2hOLs-vdSEiRTjc.crl (hash: u4NRHllIZkPw6WylgEkOTb/CR015f5ll4s6LhLWti0A=) 2: 62A0C17A16C511ED91E80F56C4F9AE02.roa (hash: kng6fCGLTbPsbCoI7dxHc95AMq1MgoPXW3QCzJfYN0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.crl rsync://rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ehMEShEYWGwP2hOLs-vdSEiRTjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:36:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 592 (0x250) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154EAF, serialNumber=7A13044A1118586C0FDA138BB3EBDD4848914E37 Validity Not Before: Apr 25 01:36:50 2025 GMT Not After : May 2 01:36:50 2025 GMT Subject: CN=680ae733-09fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:27:bd:19:37:8c:be:8f:a0:0c:b6:b4:33:ab: be:6b:00:e5:04:de:1b:59:0c:6b:24:94:44:0c:df: bd:72:27:da:46:23:bc:32:16:12:03:37:fc:84:a3: 60:ec:5c:8c:a7:e9:b4:82:ad:23:76:08:d4:34:24: c5:f9:08:0c:72:35:aa:99:4e:50:06:da:91:a4:c3: 49:fc:52:3a:78:f4:d5:2f:9a:f1:df:7b:b1:1f:86: df:38:d1:9d:26:79:e9:71:5c:ae:e5:20:f3:2e:9c: 3e:e2:53:7e:07:04:e8:b1:e4:c8:cd:62:43:b5:cf: 33:03:d8:03:3f:ec:06:3a:6c:68:26:82:11:a9:d4: 53:4f:a2:68:e4:a6:72:cc:8d:63:89:e3:04:4d:a7: 6f:47:99:5c:2d:28:1b:36:f8:a0:98:39:9e:c7:2c: e5:0d:e5:9c:5f:a9:67:fb:53:c0:2a:2d:ce:8b:a1: 53:07:d4:dd:7e:af:ef:b9:73:fe:3c:f8:13:4d:68: 06:17:52:e2:b8:88:0e:73:89:e0:45:30:f9:9d:82: e0:bc:6d:96:d3:ec:47:4c:f8:6b:4f:2e:4e:bf:43: 7b:e0:ed:af:37:56:95:01:fd:37:ec:e1:02:41:4c: a7:14:6d:3f:8b:78:60:51:65:f4:fe:e6:e8:d3:f0: 9a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:00:24:97:29:85:C9:CD:BC:42:98:C1:BA:FE:42:00:A4:60:AC:93 X509v3 Authority Key Identifier: keyid:7A:13:04:4A:11:18:58:6C:0F:DA:13:8B:B3:EB:DD:48:48:91:4E:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ehMEShEYWGwP2hOLs-vdSEiRTjc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:4f:47:eb:c6:c6:5e:93:97:d1:4e:7d:9c:21:cc:d1:f1:9f: de:6c:92:ba:ca:66:53:eb:3d:60:7e:97:ba:22:a8:c7:48:bd: 33:67:79:10:6e:82:6c:92:cb:6d:24:86:c2:c9:46:b7:33:1d: f1:96:b3:54:20:88:d6:b3:46:97:24:2d:3d:95:88:1a:08:63: 8a:66:b6:87:b3:b0:ec:0d:af:dc:f0:9b:ad:51:c7:d0:ba:af: 40:1a:86:68:19:54:0c:f1:e9:de:1b:21:8c:bb:44:04:60:ce: f6:ee:8a:a8:48:8f:a8:cc:8a:3f:ef:43:f2:d0:39:e3:98:2b: 59:f2:19:2e:d9:2e:a2:99:8b:64:94:ac:0b:1b:5e:b4:27:22: 37:ed:d1:0c:bc:db:ad:2c:d5:14:14:e5:03:ca:5a:79:6b:7a: ad:db:f1:e5:32:da:cb:96:ec:ae:6d:05:3e:ef:be:b8:7f:94: fc:7e:f1:3e:3b:29:29:23:9b:ea:30:b7:cb:ce:23:07:d4:c9: e3:0b:c9:25:e6:30:e0:fb:85:a9:ef:50:6a:48:c7:17:a6:4c: 89:4b:94:6f:7d:04:f7:04:4c:7f:05:fe:0e:b7:2d:c9:ae:af: 90:84:e3:5c:99:3c:72:6d:03:8d:46:67:6b:04:7e:e0:db:87: c8:cf:f7:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTRFQUYxMTAvBgNVBAUTKDdBMTMwNDRBMTExODU4NkMwRkRBMTM4QkIzRUJERDQ4 NDg5MTRFMzcwHhcNMjUwNDI1MDEzNjUwWhcNMjUwNTAyMDEzNjUwWjAYMRYwFAYD VQQDEw02ODBhZTczMy0wOWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Se9GTeMvo+gDLa0M6u+awDlBN4bWQxrJJREDN+9cifaRiO8MhYSAzf8hKNg 7FyMp+m0gq0jdgjUNCTF+QgMcjWqmU5QBtqRpMNJ/FI6ePTVL5rx33uxH4bfONGd JnnpcVyu5SDzLpw+4lN+BwToseTIzWJDtc8zA9gDP+wGOmxoJoIRqdRTT6Jo5KZy zI1jieMETadvR5lcLSgbNvigmDmexyzlDeWcX6ln+1PAKi3Oi6FTB9Tdfq/vuXP+ PPgTTWgGF1LiuIgOc4ngRTD5nYLgvG2W0+xHTPhrTy5Ov0N74O2vN1aVAf037OEC QUynFG0/i3hgUWX0/ubo0/CaOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB8AJJcp hcnNvEKYwbr+QgCkYKyTMB8GA1UdIwQYMBaAFHoTBEoRGFhsD9oTi7Pr3UhIkU43 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEVBRi80N0Q1QTdFMDE2 QzMxMUVEQUU3RUI5NTVDNEY5QUUwMi9laE1FU2hFWVdHd1AyaE9Mcy12ZFNFaVJU amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VoTUVTaEVZV0d3UDJoT0xzLXZkU0VpUlRqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NEVBRi80N0Q1QTdFMDE2QzMxMUVEQUU3RUI5NTVDNEY5QUUwMi9laE1FU2hFWVdH d1AyaE9Mcy12ZFNFaVJUamMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPT0frxsZek5fRTn2cIczR8Z/ebJK6ymZT6z1gfpe6IqjHSL0zZ3kQ boJsksttJIbCyUa3Mx3xlrNUIIjWs0aXJC09lYgaCGOKZraHs7DsDa/c8JutUcfQ uq9AGoZoGVQM8eneGyGMu0QEYM727oqoSI+ozIo/70Py0DnjmCtZ8hku2S6imYtk lKwLG160JyI37dEMvNutLNUUFOUDylp5a3qt2/HlMtrLluyubQU+7764f5T8fvE+ OykpI5vqMLfLziMH1MnjC8kl5jDg+4Wp71BqSMcXpkyJS5RvfQT3BEx/Bf4Oty3J rq+QhONcmTxybQONRmdrBH7g24fIz/dU -----END CERTIFICATE-----Generated at Fri Apr 25 08:23:49 2025 by rpki-client on console.sobornost.net