$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.mft File: XwTABfKMKFbHu_R2uRxioC8vxRw.mft (raw, json) Hash identifier: DmkDki9yXOdjYer7an4L3okNWrh/VZcxnQ6rOWYsra0= Subject key identifier: 73:81:9D:0D:72:7E:AB:50:09:76:DD:40:30:67:BA:9C:DF:C9:C7:5D Authority key identifier: 5F:04:C0:05:F2:8C:28:56:C7:BB:F4:76:B9:1C:62:A0:2F:2F:C5:1C Certificate issuer: /CN=A915A0FB/serialNumber=5F04C005F28C2856C7BBF476B91C62A02F2FC51C Certificate serial: 9D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XwTABfKMKFbHu_R2uRxioC8vxRw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.mft Manifest number: 9B Signing time: Sun 27 Apr 2025 04:44:38 +0000 Manifest this update: Sun 27 Apr 2025 04:44:38 +0000 Manifest next update: Sun 04 May 2025 04:44:38 +0000 Files and hashes: 1: XwTABfKMKFbHu_R2uRxioC8vxRw.crl (hash: sk396qEoqLVE6ys1hAiG00fTi6GFVIbV0hfKGJmGs+I=) 2: 900F4ADA440611EF85166C30C4F9AE02.roa (hash: jYgy4yMQyKQf5VxNbJ2NKQFUgnsZsFyOqLwxVUIrb0I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.crl rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XwTABfKMKFbHu_R2uRxioC8vxRw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 157 (0x9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A0FB, serialNumber=5F04C005F28C2856C7BBF476B91C62A02F2FC51C Validity Not Before: Apr 27 04:44:38 2025 GMT Not After : May 4 04:44:38 2025 GMT Subject: CN=680db636-efdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:46:73:85:01:4d:0d:32:17:1a:cd:a5:59:ad: 85:8c:f6:f8:2c:4e:4e:7b:40:cf:34:0e:04:e7:63: 21:04:eb:3e:54:39:82:d4:4e:00:13:3d:06:4e:97: 38:d2:de:d9:69:fb:db:66:dd:1c:c9:c9:f5:0c:a0: aa:5b:0e:85:0e:7e:3c:47:e2:50:49:c5:13:10:f7: da:bc:cc:91:a6:a5:7a:18:d6:97:9d:3f:4c:44:c6: ac:2d:fa:52:d0:25:3b:99:5c:45:69:aa:0e:aa:15: d0:59:47:a5:28:4a:1a:ba:43:98:1c:87:e5:14:41: 8a:c3:88:83:f7:a8:76:c4:48:9d:16:be:e0:6b:61: 62:07:3c:00:eb:a5:fc:42:6b:2c:cb:3a:77:c6:53: 5b:ff:40:1b:55:86:96:0e:ca:71:85:48:51:19:64: e5:86:16:66:37:d2:a5:b8:f1:c6:f3:b6:83:dc:20: 53:25:88:1c:40:29:43:33:e5:b8:0d:23:7e:c1:61: 7f:76:87:6a:02:bb:e7:23:c2:c1:1e:b5:fc:f3:96: b5:ea:e3:57:57:9f:e7:19:06:db:7a:69:dd:82:6c: 9e:3b:78:28:f6:da:8e:2b:d7:bc:d4:88:46:73:eb: 57:f9:56:1b:de:27:61:2b:c6:30:c6:64:6d:98:40: 49:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:81:9D:0D:72:7E:AB:50:09:76:DD:40:30:67:BA:9C:DF:C9:C7:5D X509v3 Authority Key Identifier: keyid:5F:04:C0:05:F2:8C:28:56:C7:BB:F4:76:B9:1C:62:A0:2F:2F:C5:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XwTABfKMKFbHu_R2uRxioC8vxRw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:25:4e:02:d3:55:73:d1:46:4c:19:2d:3c:c5:39:4a:97:d0: 42:c3:f8:ae:b4:c7:f7:c2:2b:9c:48:bd:e4:2b:3d:9e:5e:44: 83:7a:f1:20:a3:a5:3c:40:8c:cb:98:06:31:6b:d6:9b:ba:0e: 60:c5:9f:12:77:88:30:48:84:dc:e9:1a:25:15:aa:a3:3c:43: 12:16:80:32:96:6e:ee:db:bd:6b:30:c9:04:7e:9f:35:40:9c: b8:9f:e3:b6:81:60:53:c7:2d:e9:f6:58:9e:7f:fe:c0:f0:e0: b5:0e:38:45:3f:ab:d8:4f:a1:aa:22:8d:75:53:27:e5:e2:ab: c0:29:56:ac:20:6e:ae:0d:57:f8:b7:2c:c4:cc:93:b8:95:b8: 5e:57:15:1f:25:69:29:8a:5f:4d:1f:8d:05:56:cd:ed:67:25: 4b:89:b0:83:8c:b7:3b:4b:61:69:b0:6b:73:0d:48:a9:a4:56: f4:15:48:ff:6b:64:df:98:a7:84:5f:b3:69:3d:2d:01:92:c2: 45:d0:9f:8b:6f:3f:a5:ee:74:a1:0c:63:a5:35:a0:af:14:19: c4:f4:0e:bf:8f:79:7a:94:a3:55:71:ee:b6:92:a9:bc:6f:69: 11:3c:99:d3:de:3f:05:3d:15:1a:63:b2:74:f2:8e:8f:d1:53: 5c:20:8a:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEwRkIxMTAvBgNVBAUTKDVGMDRDMDA1RjI4QzI4NTZDN0JCRjQ3NkI5MUM2MkEw MkYyRkM1MUMwHhcNMjUwNDI3MDQ0NDM4WhcNMjUwNTA0MDQ0NDM4WjAYMRYwFAYD VQQDEw02ODBkYjYzNi1lZmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA40ZzhQFNDTIXGs2lWa2FjPb4LE5Oe0DPNA4E52MhBOs+VDmC1E4AEz0GTpc4 0t7ZafvbZt0cycn1DKCqWw6FDn48R+JQScUTEPfavMyRpqV6GNaXnT9MRMasLfpS 0CU7mVxFaaoOqhXQWUelKEoaukOYHIflFEGKw4iD96h2xEidFr7ga2FiBzwA66X8 Qmssyzp3xlNb/0AbVYaWDspxhUhRGWTlhhZmN9KluPHG87aD3CBTJYgcQClDM+W4 DSN+wWF/dodqArvnI8LBHrX885a16uNXV5/nGQbbemndgmyeO3go9tqOK9e81IhG c+tX+VYb3idhK8YwxmRtmEBJRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHOBnQ1y fqtQCXbdQDBnupzfycddMB8GA1UdIwQYMBaAFF8EwAXyjChWx7v0drkcYqAvL8Uc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBGQi9FMTcxOTM2MjNE OEQxMUVGODcwNTNCMEZDNEY5QUUwMi9Yd1RBQmZLTUtGYkh1X1IydVJ4aW9DOHZ4 UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1h3VEFCZktNS0ZiSHVfUjJ1Unhpb0M4dnhSdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTBGQi9FMTcxOTM2MjNEOEQxMUVGODcwNTNCMEZDNEY5QUUwMi9Yd1RBQmZLTUtG Ykh1X1IydVJ4aW9DOHZ4UncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSJU4C01Vz0UZMGS08xTlKl9BCw/iutMf3wiucSL3kKz2eXkSDevEg o6U8QIzLmAYxa9abug5gxZ8Sd4gwSITc6RolFaqjPEMSFoAylm7u271rMMkEfp81 QJy4n+O2gWBTxy3p9lief/7A8OC1DjhFP6vYT6GqIo11Uyfl4qvAKVasIG6uDVf4 tyzEzJO4lbheVxUfJWkpil9NH40FVs3tZyVLibCDjLc7S2FpsGtzDUippFb0FUj/ a2TfmKeEX7NpPS0BksJF0J+Lbz+l7nShDGOlNaCvFBnE9A6/j3l6lKNVce62kqm8 b2kRPJnT3j8FPRUaY7J08o6P0VNcIIqG -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:47 2025 by rpki-client on console.sobornost.net