$ rpki-client -vvf rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.mft File: m0YBtrC3j7j-njkzSoG1pd1ZVik.mft (raw, json) Hash identifier: IoYLkY5FIyyiYv4z/Jn0/nTjaOFBsmFAiO4IzcIcA88= Subject key identifier: 94:30:25:AE:8D:51:16:9D:3A:3C:EB:2B:EB:BC:C1:C5:E2:C9:2A:77 Authority key identifier: 9B:46:01:B6:B0:B7:8F:B8:FE:9E:39:33:4A:81:B5:A5:DD:59:56:29 Certificate issuer: /CN=A9157BF7/serialNumber=9B4601B6B0B78FB8FE9E39334A81B5A5DD595629 Certificate serial: 07CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0YBtrC3j7j-njkzSoG1pd1ZVik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.mft Manifest number: 07A8 Signing time: Sat 26 Apr 2025 20:54:48 +0000 Manifest this update: Sat 26 Apr 2025 20:54:47 +0000 Manifest next update: Sat 03 May 2025 20:54:47 +0000 Files and hashes: 1: m0YBtrC3j7j-njkzSoG1pd1ZVik.crl (hash: 2vqz1E/J0J2g4CO2wvn1xXyTFyUvNa9HJAgn8Omi0/g=) 2: 1F88812AAD5311EBA93CEB69C4F9AE02.roa (hash: JxqBCjBT9K2ryaUj1ZqNSpK/pt6W0FIjzbMts6xP/O4=) 3: 1F046D5EAD5311EBA93CEB69C4F9AE02.roa (hash: QsOZtg7wgKPEMzZpQNjN0cwc1dkJJaHe5vPoUHzDi2E=) 4: 2B67707C449911EC873EEE33C4F9AE02.roa (hash: dfHP081F3AjgTxtk/Kol9IWl1ohuGadWFkcTnhyHleE=) 5: 1E69B82CAD5311EBA93CEB69C4F9AE02.roa (hash: BiwvJd+dCFyWKlGsVpLMc1ZbpjUFsliw37pP+lj/D+c=) 6: 202D8382AD5311EBA93CEB69C4F9AE02.roa (hash: 9CVFCRxGd96rDHgxt1WsX71RS0A2IwtDONeOpXumo3o=) 7: F4DFF910CB0311EC817AED0BC4F9AE02.roa (hash: 3EaaIhegA520f9Jq9jn6VCkgAQsJfc5446BLnaSLsuo=) 8: 1DC10D94AD5311EBA93CEB69C4F9AE02.roa (hash: lLU3brsFcJmxfza+HPsqiH2/FCfohQp/aB2RU3YA2bQ=) 9: 20BC506CAD5311EBA93CEB69C4F9AE02.roa (hash: FAebLgMlFuIn+Jv3/Kno5dJ1sOWIko5p1IcZ8bmbDwE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.crl rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0YBtrC3j7j-njkzSoG1pd1ZVik.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1998 (0x7ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157BF7, serialNumber=9B4601B6B0B78FB8FE9E39334A81B5A5DD595629 Validity Not Before: Apr 26 20:54:47 2025 GMT Not After : May 3 20:54:47 2025 GMT Subject: CN=680d4818-e0d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b2:a9:17:32:91:ce:b2:d9:c2:09:f6:b2:28: d2:da:89:4e:5b:c4:52:07:e1:fc:cc:89:8d:e3:96: f4:a0:0a:ee:45:b6:4e:f6:b2:5c:9a:01:ab:79:17: 9b:c2:cc:28:9f:f0:4d:94:08:74:a1:c9:e8:fc:1d: 2d:34:5d:2b:f8:58:9d:b9:56:4e:fd:1c:59:eb:53: c6:86:b2:ad:22:b7:9d:0b:61:b4:8a:dc:23:0f:90: 9f:49:8b:26:9b:ae:4f:97:88:9b:64:ee:6a:4a:72: 57:3e:be:4e:3f:0c:fd:18:c4:2f:30:0e:7e:f1:c3: 4b:1f:94:d2:90:3f:9d:10:23:1b:6b:ef:f3:38:5f: 76:b5:a4:d7:ab:7e:9d:b5:39:ef:3c:3c:2b:23:8c: 84:5d:eb:ed:0b:d3:dd:21:a2:2f:42:25:9b:b9:ed: 04:3f:29:68:4d:40:ce:0e:3e:90:e9:12:5f:1f:12: ac:b1:92:83:32:53:4f:90:17:c3:48:1b:37:c5:29: f3:f7:c2:45:7f:c4:b8:0a:84:6d:5f:ae:a3:cd:2c: e6:ab:f8:c6:a5:6e:ef:f6:42:e0:36:b0:bd:c9:2e: 02:53:5a:a1:24:77:0f:1e:04:ca:40:d7:ee:40:99: 3d:69:ec:80:30:d9:97:31:33:fb:d1:3b:8f:51:e3: dd:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:30:25:AE:8D:51:16:9D:3A:3C:EB:2B:EB:BC:C1:C5:E2:C9:2A:77 X509v3 Authority Key Identifier: keyid:9B:46:01:B6:B0:B7:8F:B8:FE:9E:39:33:4A:81:B5:A5:DD:59:56:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0YBtrC3j7j-njkzSoG1pd1ZVik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:40:fc:fb:52:2f:0c:63:b2:90:97:de:ee:1b:a2:39:e5:9a: 8b:47:d5:27:02:04:e4:cd:f2:e7:4b:87:cd:88:dc:55:21:bb: ce:bf:b8:df:ad:ab:16:e3:2c:b5:af:9d:a1:c7:35:bd:2f:1e: 99:ba:60:21:ae:f1:92:10:64:6f:b4:e3:b0:53:08:6b:9b:f6: 8f:e0:b4:18:7f:1d:87:6e:d4:5b:95:0e:83:2b:f4:e5:7f:12: 88:18:b7:88:25:c1:14:49:e6:7e:2a:32:6c:42:74:24:af:58: 90:4e:19:e8:eb:06:40:a4:c1:6d:88:3b:08:9d:b0:7f:a7:3a: c7:6e:da:fe:4e:b2:45:37:f7:b0:82:45:dc:92:a5:b6:e7:ca: 71:15:19:f9:82:dd:c3:36:45:3c:82:1a:62:c1:aa:f1:73:57: 82:14:9b:a4:19:83:6b:9a:a0:e2:81:1f:fb:eb:d9:5b:62:09: 2a:c3:7e:39:db:83:27:75:44:67:f1:11:65:67:1a:d3:46:88: 84:b3:68:d9:73:1f:89:43:dd:0d:52:9d:32:1d:72:d5:2a:79: 9b:08:ae:e4:25:bb:9f:ff:f6:8b:05:54:9c:26:a8:c4:77:16: aa:55:49:b0:89:8a:2f:17:ba:aa:c4:45:6f:98:6c:4a:45:06: e2:77:02:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB84wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdCRjcxMTAvBgNVBAUTKDlCNDYwMUI2QjBCNzhGQjhGRTlFMzkzMzRBODFCNUE1 REQ1OTU2MjkwHhcNMjUwNDI2MjA1NDQ3WhcNMjUwNTAzMjA1NDQ3WjAYMRYwFAYD VQQDEw02ODBkNDgxOC1lMGQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvrKpFzKRzrLZwgn2sijS2olOW8RSB+H8zImN45b0oAruRbZO9rJcmgGreReb wswon/BNlAh0ocno/B0tNF0r+FiduVZO/RxZ61PGhrKtIredC2G0itwjD5CfSYsm m65Pl4ibZO5qSnJXPr5OPwz9GMQvMA5+8cNLH5TSkD+dECMba+/zOF92taTXq36d tTnvPDwrI4yEXevtC9PdIaIvQiWbue0EPyloTUDODj6Q6RJfHxKssZKDMlNPkBfD SBs3xSnz98JFf8S4CoRtX66jzSzmq/jGpW7v9kLgNrC9yS4CU1qhJHcPHgTKQNfu QJk9aeyAMNmXMTP70TuPUePdHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJQwJa6N URadOjzrK+u8wcXiySp3MB8GA1UdIwQYMBaAFJtGAbawt4+4/p45M0qBtaXdWVYp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0JGNy9BRDJBQzcyRUZC RUExMUVBQTBBQzMzMUFDNEY5QUUwMi9tMFlCdHJDM2o3ai1uamt6U29HMXBkMVpW aWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL20wWUJ0ckMzajdqLW5qa3pTb0cxcGQxWlZpay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0JGNy9BRDJBQzcyRUZCRUExMUVBQTBBQzMzMUFDNEY5QUUwMi9tMFlCdHJDM2o3 ai1uamt6U29HMXBkMVpWaWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgQPz7Ui8MY7KQl97uG6I55ZqLR9UnAgTkzfLnS4fNiNxVIbvOv7jf rasW4yy1r52hxzW9Lx6ZumAhrvGSEGRvtOOwUwhrm/aP4LQYfx2HbtRblQ6DK/Tl fxKIGLeIJcEUSeZ+KjJsQnQkr1iQThno6wZApMFtiDsInbB/pzrHbtr+TrJFN/ew gkXckqW258pxFRn5gt3DNkU8ghpiwarxc1eCFJukGYNrmqDigR/769lbYgkqw345 24MndURn8RFlZxrTRoiEs2jZcx+JQ90NUp0yHXLVKnmbCK7kJbuf//aLBVScJqjE dxaqVUmwiYovF7qqxEVvmGxKRQbidwKr -----END CERTIFICATE-----Generated at Sun Apr 27 00:13:58 2025 by rpki-client on console.sobornost.net