$ rpki-client -vvf rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft File: 8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft (raw, json) Hash identifier: frSeofGhjTqs+JpzKUNSxacb2fBRnRsprQatKMqoLxQ= Subject key identifier: A8:4B:F5:70:CB:AF:9B:B2:14:63:8A:67:57:C5:EA:3A:CC:50:5A:63 Authority key identifier: F1:BA:94:3C:30:36:C6:9B:44:A7:59:70:A4:4D:92:90:56:89:A9:0F Certificate issuer: /CN=A9159ECD/serialNumber=F1BA943C3036C69B44A75970A44D92905689A90F Certificate serial: 051E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bqUPDA2xptEp1lwpE2SkFaJqQ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft Manifest number: 0516 Signing time: Sat 26 Apr 2025 23:17:16 +0000 Manifest this update: Sat 26 Apr 2025 23:17:16 +0000 Manifest next update: Sat 03 May 2025 23:17:16 +0000 Files and hashes: 1: 8bqUPDA2xptEp1lwpE2SkFaJqQ8.crl (hash: mC1fh+Va3tDXTkQyOA4SafCeJMfAWicmvcPPlWeDHMM=) 2: C309F5BA017011ECB98B2F33C4F9AE02.roa (hash: aXSQnMlRqYHjlA+sWyHQ/h8SKDapqi9yLmH+QCm7j5U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.crl rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bqUPDA2xptEp1lwpE2SkFaJqQ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 23:17:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1310 (0x51e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159ECD, serialNumber=F1BA943C3036C69B44A75970A44D92905689A90F Validity Not Before: Apr 26 23:17:16 2025 GMT Not After : May 3 23:17:16 2025 GMT Subject: CN=680d697c-34bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e4:44:78:7b:20:05:7b:e2:a3:6c:72:c6:3f: c9:f3:f5:6e:a4:82:0e:c7:d2:f0:39:e3:e3:59:56: 62:68:ef:4b:97:53:b0:c0:5f:49:00:ac:f8:65:df: 70:b7:f2:4c:ad:cd:67:24:dc:e4:72:c4:22:5b:46: f8:9f:aa:3e:d5:f6:9a:f1:33:5a:44:dd:59:f8:4b: 3f:9b:33:1f:7c:39:31:16:cb:51:d9:99:99:1e:66: 96:d0:e9:1d:81:3d:22:69:33:59:47:b1:e5:04:cd: 99:58:d9:1b:f2:19:4e:9c:8a:0a:40:86:76:54:b2: f0:8e:fa:45:6b:a6:b7:d6:82:40:e6:f0:32:98:8f: ff:f1:ad:18:87:7a:ad:4c:ca:07:97:22:1d:fe:dd: f6:1d:43:17:63:3c:f3:bf:6e:dc:2b:b5:18:c9:4b: 5d:c6:d8:86:f8:6e:10:91:31:e3:90:47:4b:97:e6: d0:44:f7:5c:f8:83:bc:ed:9c:ab:a1:9a:b6:7d:4c: c8:33:64:45:15:0a:0a:25:94:01:73:97:b5:3c:d1: 21:9b:57:5c:01:c4:b9:17:d0:8c:e0:02:c2:0c:5d: 65:54:f1:a0:0f:cb:58:49:4e:b3:8b:4b:77:8e:84: e7:cd:c6:a9:f2:98:bc:a1:34:59:dc:d9:0a:c7:1c: 11:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:4B:F5:70:CB:AF:9B:B2:14:63:8A:67:57:C5:EA:3A:CC:50:5A:63 X509v3 Authority Key Identifier: keyid:F1:BA:94:3C:30:36:C6:9B:44:A7:59:70:A4:4D:92:90:56:89:A9:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bqUPDA2xptEp1lwpE2SkFaJqQ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:ce:dd:d0:3a:20:72:42:44:f2:45:72:ed:63:77:79:19:25: e5:75:26:90:ae:52:36:a8:8c:83:2f:a5:a1:24:5d:a2:c1:88: 29:f1:eb:8b:b1:a6:45:6a:64:0e:5a:b4:e2:9b:0c:03:c0:9e: b5:15:b5:0c:f6:1a:4e:58:58:de:1a:f8:b2:d8:5e:c3:22:73: 3c:55:48:a3:5b:18:d2:11:27:f1:6e:1b:62:ec:1c:26:f6:e2: 37:86:66:25:69:01:8c:21:40:1d:66:66:dc:73:0f:0b:b1:ca: 25:2c:85:ca:04:e6:51:dd:16:92:03:ec:ba:ea:1e:29:81:bc: 5d:66:ae:83:ea:58:ab:90:a5:eb:d8:92:46:43:51:ef:89:2a: a7:50:c2:02:09:ed:3d:3f:20:54:64:db:b6:79:49:0b:a4:47: 07:7d:0a:56:06:c8:d5:c4:59:ec:74:76:89:02:1d:1e:c3:72: 3c:90:c4:29:d0:bc:f0:b0:12:2c:58:8e:a2:90:5a:44:de:c7: ba:2c:6e:ee:e0:ad:31:30:6a:68:b9:fc:27:5e:76:bd:54:76: 09:e3:12:fc:3c:ec:15:69:91:d1:a9:c5:fc:35:2a:f3:0d:50: 98:ea:77:cc:9f:bd:c1:95:4f:e9:05:4b:88:e0:5d:1e:fc:ca: 66:3b:ed:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTlFQ0QxMTAvBgNVBAUTKEYxQkE5NDNDMzAzNkM2OUI0NEE3NTk3MEE0NEQ5Mjkw NTY4OUE5MEYwHhcNMjUwNDI2MjMxNzE2WhcNMjUwNTAzMjMxNzE2WjAYMRYwFAYD VQQDEw02ODBkNjk3Yy0zNGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqeREeHsgBXvio2xyxj/J8/VupIIOx9LwOePjWVZiaO9Ll1OwwF9JAKz4Zd9w t/JMrc1nJNzkcsQiW0b4n6o+1faa8TNaRN1Z+Es/mzMffDkxFstR2ZmZHmaW0Okd gT0iaTNZR7HlBM2ZWNkb8hlOnIoKQIZ2VLLwjvpFa6a31oJA5vAymI//8a0Yh3qt TMoHlyId/t32HUMXYzzzv27cK7UYyUtdxtiG+G4QkTHjkEdLl+bQRPdc+IO87Zyr oZq2fUzIM2RFFQoKJZQBc5e1PNEhm1dcAcS5F9CM4ALCDF1lVPGgD8tYSU6zi0t3 joTnzcap8pi8oTRZ3NkKxxwRDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKhL9XDL r5uyFGOKZ1fF6jrMUFpjMB8GA1UdIwQYMBaAFPG6lDwwNsabRKdZcKRNkpBWiakP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OUVDRC83QUM1MTU0QzAx NkExMUVDQjJCMDBDMzdDNEY5QUUwMi84YnFVUERBMnhwdEVwMWx3cEUyU2tGYUpx UTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhicVVQREEyeHB0RXAxbHdwRTJTa0ZhSnFROC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OUVDRC83QUM1MTU0QzAxNkExMUVDQjJCMDBDMzdDNEY5QUUwMi84YnFVUERBMnhw dEVwMWx3cEUyU2tGYUpxUTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKzt3QOiByQkTyRXLtY3d5GSXldSaQrlI2qIyDL6WhJF2iwYgp8euL saZFamQOWrTimwwDwJ61FbUM9hpOWFjeGviy2F7DInM8VUijWxjSESfxbhti7Bwm 9uI3hmYlaQGMIUAdZmbccw8LscolLIXKBOZR3RaSA+y66h4pgbxdZq6D6lirkKXr 2JJGQ1HviSqnUMICCe09PyBUZNu2eUkLpEcHfQpWBsjVxFnsdHaJAh0ew3I8kMQp 0LzwsBIsWI6ikFpE3se6LG7u4K0xMGpoufwnXna9VHYJ4xL8POwVaZHRqcX8NSrz DVCY6nfMn73BlU/pBUuI4F0e/MpmO+2m -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:49 2025 by rpki-client on console.sobornost.net