$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft File: OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft (raw, json) Hash identifier: PTE7E6HJzLGC8IsJrvL6TPKzSk7eke6BGAj3VlgZ1DA= Subject key identifier: 51:7D:AD:B1:44:76:91:DA:D9:7E:70:23:D1:44:61:59:A5:84:CF:9B Authority key identifier: 39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD Certificate issuer: /CN=A9157D67/serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD Certificate serial: 0B17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft Manifest number: 096C Signing time: Sat 26 Apr 2025 21:39:36 +0000 Manifest this update: Sat 26 Apr 2025 21:39:35 +0000 Manifest next update: Sat 03 May 2025 21:39:35 +0000 Files and hashes: 1: OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl (hash: MFwrE8l8sTNvWH6wk30gG2PN8HFuHkTR6J9QI+av2bI=) 2: 93EE047E4BB511EE9309AA4EC4F9AE02.roa (hash: cKLqzBD3UNEjua94H34t+S8hZV/aOFg8bXhQVhmFTLs=) 3: 72C9BE36950211EFAC892C5EC4F9AE02.roa (hash: Bpq9dhCpjI1cT2kel0jPo45D0NBWXD/qIfwghmBzSyI=) 4: 263DB02C4BB611EE9B959267C4F9AE02.roa (hash: Sc37SATsVjDUvoeuant9XpguxSfk6BLAFRWRVkPZh+Q=) 5: 01A34AA220D911F08E8B910BC4F9AE02.roa (hash: rRSZwuyNniJRhYgMcIbEH1c39jOVJWRBcxSW3fXY+nI=) 6: 183EB332F56911EFA13C606AC4F9AE02.roa (hash: /9QKDX3FStORICkoflQCZVxfwpI3R14TnJXoMA+IsWE=) 7: AB96EF3852CD11ECAB209C5FC4F9AE02.roa (hash: PTN3D9DukvxulJCnZfplXeEJi7h63+XDY8ZJvEz9E/c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2839 (0xb17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D67, serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD Validity Not Before: Apr 26 21:39:35 2025 GMT Not After : May 3 21:39:35 2025 GMT Subject: CN=680d5297-7162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b1:87:88:bb:63:18:d5:54:f7:22:a7:19:45: 6d:e4:fd:db:8d:c8:54:e4:50:ac:99:6a:4e:25:10: 4d:9c:74:a7:de:9e:f5:4c:a7:45:8f:be:bb:ea:75: 62:69:3c:ec:9a:2c:79:a9:4f:06:e4:d1:f5:00:a0: 87:29:b5:60:23:2d:cf:83:e1:7d:93:cc:15:04:bc: f5:60:93:f4:c7:28:1f:64:63:9f:b0:0a:fc:20:c8: 73:36:fe:f5:e9:bc:7d:58:0a:1d:5d:66:85:b5:47: f6:fc:c1:5f:c1:61:d4:16:ff:84:a9:5f:86:09:33: c4:51:de:47:b1:09:53:67:23:fa:02:87:e9:fb:1f: 77:d8:cc:d5:f1:a4:b2:d0:62:d3:44:24:c0:61:81: 0a:76:e7:90:f1:e8:e1:78:a2:c7:d8:6b:28:17:17: 02:5b:53:95:12:5b:24:0b:b2:5c:85:17:35:5f:0d: 0f:59:59:ef:a1:04:28:00:3d:74:40:02:c5:9a:4b: a2:df:2a:5c:76:a2:a4:31:5e:a5:af:83:24:9e:68: 63:00:61:3a:3a:6f:35:e2:60:71:f5:f3:e4:ae:c6: d0:e5:8e:fa:67:8e:a8:52:02:b3:29:c3:29:31:5f: 4b:bc:1d:48:5a:03:52:9a:ea:6b:ed:a0:db:70:d5: bc:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:7D:AD:B1:44:76:91:DA:D9:7E:70:23:D1:44:61:59:A5:84:CF:9B X509v3 Authority Key Identifier: keyid:39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:58:38:b0:8e:f2:56:1f:44:fe:22:87:e2:65:20:c4:db:21: d6:35:bf:16:89:26:32:d9:33:5c:ed:a0:07:7e:1c:4f:f1:a2: fe:00:16:1a:c9:3b:a6:37:df:f0:8d:97:27:74:a3:06:93:22: fb:c4:8f:5b:f7:f8:ec:a3:49:7d:85:dd:08:4c:b3:16:d4:31: 78:7b:af:16:eb:af:e7:f4:60:45:30:78:bc:2e:99:8c:28:fd: ba:e0:1f:3c:cf:4f:a9:2e:1f:87:9d:8a:43:37:50:d2:44:43: a9:16:26:f8:54:a6:7e:60:6b:c4:23:a1:21:f4:82:9a:45:18: e8:e6:1e:92:a2:56:da:3c:71:d5:e6:9a:91:9a:25:31:9f:13: 50:4a:6f:9a:b6:a8:e5:b7:53:7e:f0:3d:8a:c2:b1:40:04:27: 7c:80:a7:0c:d3:1e:12:1d:cb:28:59:52:7b:98:d9:e8:0d:55: 10:57:95:f6:20:56:0a:a3:64:e9:03:1e:70:d9:2e:71:4b:17: 48:8b:4f:43:36:4a:f7:98:4c:23:ae:f1:3c:f7:1d:11:27:b5: 97:11:54:19:41:b1:77:30:95:54:a7:de:89:84:ac:27:02:0c: 41:65:d6:80:00:d3:d4:c4:8d:26:35:ec:f8:97:a3:41:30:ed: e8:8e:74:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCxcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdENjcxMTAvBgNVBAUTKDM5QzQzOTY3NTcwMDg3RjU4M0U0MjVBOUZFOUI2OUI5 NTA2QTU5QkQwHhcNMjUwNDI2MjEzOTM1WhcNMjUwNTAzMjEzOTM1WjAYMRYwFAYD VQQDEw02ODBkNTI5Ny03MTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt7GHiLtjGNVU9yKnGUVt5P3bjchU5FCsmWpOJRBNnHSn3p71TKdFj7676nVi aTzsmix5qU8G5NH1AKCHKbVgIy3Pg+F9k8wVBLz1YJP0xygfZGOfsAr8IMhzNv71 6bx9WAodXWaFtUf2/MFfwWHUFv+EqV+GCTPEUd5HsQlTZyP6Aofp+x932MzV8aSy 0GLTRCTAYYEKdueQ8ejheKLH2GsoFxcCW1OVElskC7JchRc1Xw0PWVnvoQQoAD10 QALFmkui3ypcdqKkMV6lr4MknmhjAGE6Om814mBx9fPkrsbQ5Y76Z46oUgKzKcMp MV9LvB1IWgNSmupr7aDbcNW8YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFF9rbFE dpHa2X5wI9FEYVmlhM+bMB8GA1UdIwQYMBaAFDnEOWdXAIf1g+Qlqf6bablQalm9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q2Ny82OUU2QzE2QTQ0 MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9PY1E1WjFjQWhfV0Q1Q1dwX3B0cHVWQnFX YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09jUTVaMWNBaF9XRDVDV3BfcHRwdVZCcVdiMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0Q2Ny82OUU2QzE2QTQ0MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9PY1E1WjFjQWhf V0Q1Q1dwX3B0cHVWQnFXYjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+WDiwjvJWH0T+IofiZSDE2yHWNb8WiSYy2TNc7aAHfhxP8aL+ABYa yTumN9/wjZcndKMGkyL7xI9b9/jso0l9hd0ITLMW1DF4e68W66/n9GBFMHi8LpmM KP264B88z0+pLh+HnYpDN1DSREOpFib4VKZ+YGvEI6Eh9IKaRRjo5h6SolbaPHHV 5pqRmiUxnxNQSm+atqjlt1N+8D2KwrFABCd8gKcM0x4SHcsoWVJ7mNnoDVUQV5X2 IFYKo2TpAx5w2S5xSxdIi09DNkr3mEwjrvE89x0RJ7WXEVQZQbF3MJVUp96JhKwn AgxBZdaAANPUxI0mNez4l6NBMO3ojnR1 -----END CERTIFICATE-----Generated at Sun Apr 27 00:13:59 2025 by rpki-client on console.sobornost.net