$ rpki-client -vvf rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft File: -KpwkWtspYPANj63qaX38mJ9c2A.mft (raw, json) Hash identifier: kByC6P7EE1CF1eCGtPqF4TGdkK0nmdlC3rLhgcVha0Q= Subject key identifier: 13:B5:DA:BB:2D:AA:A0:78:FE:49:BD:D9:FD:1B:5D:C6:EE:CF:3B:AA Authority key identifier: F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60 Certificate issuer: /CN=A915EE53/serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360 Certificate serial: 262B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft Manifest number: 252D Signing time: Mon 28 Apr 2025 15:52:44 +0000 Manifest this update: Mon 28 Apr 2025 15:52:44 +0000 Manifest next update: Mon 05 May 2025 15:52:44 +0000 Files and hashes: 1: -KpwkWtspYPANj63qaX38mJ9c2A.crl (hash: iYHkmh8P9jaqL1KqPrUlBEz0Ai7Z8zj8u6G7l7Sc6KA=) 2: 9DBB8670790211EC9EE24885C4F9AE02.roa (hash: ZeH6ECuQSQ7jbEvsw/ti8Ne5hW6qGOm2ObSN2ziSRtc=) 3: 5CCAC7F8528C11ECB6101B10C4F9AE02.roa (hash: 1dZ/PYF2y/rA4g03VyVZaVZy6CLwb/t5eX6QNNHBKU4=) 4: 86D13B7E571C11EC81276481C4F9AE02.roa (hash: /OIV93XTmaqNcQdoy+u+KBTNCx5sq1KiAVNHrTFDsPk=) 5: 63C97CBAC49E11EBAC936D7AC4F9AE02.roa (hash: Iw9+JOdav50YSnSQXp9Mgjc+tFnSJTCmgJVv03j+03E=) 6: CFF5A20078E011EC8357FA15C4F9AE02.roa (hash: a8WMRrKXqOWpbHlU3tbV4FzyKQszu4zB5F1ouGdfBCA=) 7: 15812F82C4A111EBAE6C7F49C4F9AE02.roa (hash: 3xgwAlFAD++SNOBnqBO1zaeR1ssuXDrrYrvWI6Sll60=) 8: 6E042EFCABF011EC92152E22C4F9AE02.roa (hash: ffEWhmrNXjBc0Nb4WuWVQZiVVzyHTO8bmJ3skIR6GwI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 15:52:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9771 (0x262b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EE53, serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360 Validity Not Before: Apr 28 15:52:44 2025 GMT Not After : May 5 15:52:44 2025 GMT Subject: CN=680fa44c-6877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:af:88:1e:c1:91:a0:77:da:59:c8:31:88:50: 37:9a:f9:13:67:74:d9:72:d5:26:d6:d2:91:2c:23: 6b:53:55:8d:e9:be:36:9a:82:33:2c:44:09:a6:c5: 97:28:c1:c8:92:32:1c:e5:6c:02:f4:1e:b3:12:d2: 17:48:da:5f:61:e5:d8:fa:c4:81:62:26:ef:da:24: 9c:9f:37:6e:a6:cd:37:85:4e:aa:de:cc:93:b2:dd: f5:ad:05:b0:d8:cc:a3:b2:70:1e:bc:91:84:eb:64: 3b:dd:39:e2:b6:17:4e:ad:c1:e3:dd:6f:d3:d1:c0: 9c:0e:52:0f:7f:38:2e:40:08:4b:6c:cb:d1:cd:2f: d1:ec:6e:cf:30:95:f7:d7:ea:7b:cd:39:0c:de:22: ef:bc:bd:65:12:fb:e7:44:3d:89:07:0a:b1:6a:df: c8:84:69:2c:74:16:18:7a:b7:42:1a:78:18:91:f7: f7:b5:fa:01:17:3d:70:70:40:a3:28:d2:55:ed:11: cf:84:52:6d:1f:ba:38:cc:26:a9:0e:bf:e8:78:5a: 96:66:e8:8e:bd:57:d4:44:9c:64:40:32:f5:56:3c: b4:a0:33:24:cf:1c:6e:53:fa:b5:f1:35:81:c4:ff: 80:91:0f:30:4a:11:21:99:98:b7:e5:9c:12:28:46: 3c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:B5:DA:BB:2D:AA:A0:78:FE:49:BD:D9:FD:1B:5D:C6:EE:CF:3B:AA X509v3 Authority Key Identifier: keyid:F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:1b:3a:56:ac:42:9d:c7:2c:31:8d:bb:83:73:a2:fe:87:d3: 39:23:9c:16:2f:f0:96:f7:29:38:91:c5:2a:f3:f8:ed:1d:7c: 6c:29:b7:a5:5d:cd:7a:00:f9:67:32:33:1f:10:e9:c0:26:5a: 11:ca:f0:e5:71:92:cd:4c:07:97:2e:8a:14:ec:50:b5:07:30: 5f:09:f2:63:97:f9:74:4a:9c:90:b4:2a:37:06:c3:f5:6d:31: bc:46:3b:36:4b:5a:f8:d5:23:c7:0c:5c:11:ff:14:62:60:ca: f2:b9:ef:15:5f:ad:f1:5f:08:3d:bc:67:39:d3:f8:c4:31:f1: 45:ce:ab:fa:80:16:48:bb:ea:c9:ca:3a:d2:0d:0d:a7:c3:30: 97:a6:15:b3:40:19:94:a4:33:0d:ac:a3:31:4d:33:1e:b8:35: 5f:6d:1d:22:2f:2a:7a:22:36:92:01:c3:7c:4c:3b:19:b9:05: 14:0b:05:78:e9:4f:ce:8d:ba:49:de:36:e3:b5:7f:d2:d2:17: 00:4c:89:06:81:0c:d3:16:3f:f9:7e:54:11:91:2c:07:a7:0e: f6:dd:0f:2c:03:6e:ee:71:68:86:91:bd:c5:67:d5:71:65:04: d5:ec:d0:c9:55:e2:11:f9:82:d6:ff:55:0a:24:6c:ac:84:c9: d7:c7:f0:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVFNTMxMTAvBgNVBAUTKEY4QUE3MDkxNkI2Q0E1ODNDMDM2M0VCN0E5QTVGN0Yy NjI3RDczNjAwHhcNMjUwNDI4MTU1MjQ0WhcNMjUwNTA1MTU1MjQ0WjAYMRYwFAYD VQQDEw02ODBmYTQ0Yy02ODc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2K+IHsGRoHfaWcgxiFA3mvkTZ3TZctUm1tKRLCNrU1WN6b42moIzLEQJpsWX KMHIkjIc5WwC9B6zEtIXSNpfYeXY+sSBYibv2iScnzdups03hU6q3syTst31rQWw 2MyjsnAevJGE62Q73TnithdOrcHj3W/T0cCcDlIPfzguQAhLbMvRzS/R7G7PMJX3 1+p7zTkM3iLvvL1lEvvnRD2JBwqxat/IhGksdBYYerdCGngYkff3tfoBFz1wcECj KNJV7RHPhFJtH7o4zCapDr/oeFqWZuiOvVfURJxkQDL1Vjy0oDMkzxxuU/q18TWB xP+AkQ8wShEhmZi35ZwSKEY84QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBO12rst qqB4/km92f0bXcbuzzuqMB8GA1UdIwQYMBaAFPiqcJFrbKWDwDY+t6ml9/JifXNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUU1My8zODUxMTg0MDQ1 ODgxMUU1OUIyRDgzNzFDNEY5QUUwMi8tS3B3a1d0c3BZUEFOajYzcWFYMzhtSjlj MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1LcHdrV3RzcFlQQU5qNjNxYVgzOG1KOWMyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RUU1My8zODUxMTg0MDQ1ODgxMUU1OUIyRDgzNzFDNEY5QUUwMi8tS3B3a1d0c3BZ UEFOajYzcWFYMzhtSjljMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdGzpWrEKdxywxjbuDc6L+h9M5I5wWL/CW9yk4kcUq8/jtHXxsKbel Xc16APlnMjMfEOnAJloRyvDlcZLNTAeXLooU7FC1BzBfCfJjl/l0SpyQtCo3BsP1 bTG8Rjs2S1r41SPHDFwR/xRiYMryue8VX63xXwg9vGc50/jEMfFFzqv6gBZIu+rJ yjrSDQ2nwzCXphWzQBmUpDMNrKMxTTMeuDVfbR0iLyp6IjaSAcN8TDsZuQUUCwV4 6U/OjbpJ3jbjtX/S0hcATIkGgQzTFj/5flQRkSwHpw723Q8sA27ucWiGkb3FZ9Vx ZQTV7NDJVeIR+YLW/1UKJGyshMnXx/CQ -----END CERTIFICATE-----Generated at Mon Apr 28 17:45:07 2025 by rpki-client on console.sobornost.net