$ rpki-client -vvf rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.mft File: scNHRW5UpGYuEJfs0zSsEcAs4As.mft (raw, json) Hash identifier: +nuN2/k/ss+UM9xeg0reoq23pFW8gUHw3mrPe7Fe0tc= Subject key identifier: 0C:57:19:EB:AA:B8:85:23:40:06:E1:4B:5E:83:5D:66:02:86:0A:07 Authority key identifier: B1:C3:47:45:6E:54:A4:66:2E:10:97:EC:D3:34:AC:11:C0:2C:E0:0B Certificate issuer: /CN=A9160438/serialNumber=B1C347456E54A4662E1097ECD334AC11C02CE00B Certificate serial: 06BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scNHRW5UpGYuEJfs0zSsEcAs4As.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.mft Manifest number: 06AC Signing time: Sat 26 Apr 2025 21:50:14 +0000 Manifest this update: Sat 26 Apr 2025 21:50:14 +0000 Manifest next update: Sat 03 May 2025 21:50:14 +0000 Files and hashes: 1: scNHRW5UpGYuEJfs0zSsEcAs4As.crl (hash: TdDwBIAkbEP4cTdcrty5PBlMcp15GLtbKuKC0fLd89E=) 2: 31D902165E7311EB8B143F3BC4F9AE02.roa (hash: H1d0qtWMbN/ZLehnM+qkk/9VJSqY96iabdAlvpWRnf8=) 3: 31137FAA5E7311EB8B143F3BC4F9AE02.roa (hash: YNpH5Q9f52SuXXmbgomoqSZtciJ+QBf4TgDm3Z8IhyI=) 4: 3263B6905E7311EB8B143F3BC4F9AE02.roa (hash: IRUZ+HQ+rrY+P2Ftx4LEZSfF4IIIe7sj7QLj+A7Ieao=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.crl rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scNHRW5UpGYuEJfs0zSsEcAs4As.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 21:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1724 (0x6bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160438, serialNumber=B1C347456E54A4662E1097ECD334AC11C02CE00B Validity Not Before: Apr 26 21:50:14 2025 GMT Not After : May 3 21:50:14 2025 GMT Subject: CN=680d5516-2253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:8c:ea:11:97:fa:aa:40:95:f3:65:68:d7:90: 6a:ef:49:0b:8f:4b:ef:2b:25:84:00:96:63:9e:6c: 01:80:b3:3f:25:bc:b0:cb:1c:e6:8b:04:1a:77:55: 04:8a:ba:ff:39:b4:bd:33:3b:45:a9:a4:05:3f:8e: 0e:0a:a8:56:81:4f:45:69:f8:5b:8e:4d:9b:b6:71: cc:44:1d:e3:48:d2:7f:43:b2:72:70:02:f5:7a:ea: 93:24:09:f5:ec:e1:39:40:b3:9b:be:7d:04:c7:12: 9e:58:99:1f:b2:d4:b8:9e:6b:f4:cb:30:18:ca:b9: 60:81:95:34:1b:64:19:07:10:1e:89:b9:49:c9:8a: 73:6b:b9:ef:69:5f:11:85:ad:bc:fe:69:c7:d2:ec: ba:a8:cd:b9:2f:6e:4d:03:03:09:77:31:ae:de:28: 69:48:63:bd:1c:5a:a6:1e:38:52:14:a9:05:db:c4: 3a:42:dc:65:a6:a7:61:1c:8e:43:43:9e:0c:92:e2: ed:2d:25:d9:eb:3e:18:93:16:93:6e:c8:34:33:31: db:eb:25:fb:fd:a0:bd:99:b3:10:58:20:d2:d9:98: 05:7d:5f:2d:0a:47:2a:88:e2:06:65:6e:80:8d:a5: 28:71:9e:86:e5:a2:73:c2:c1:92:00:dc:2b:93:97: a3:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:57:19:EB:AA:B8:85:23:40:06:E1:4B:5E:83:5D:66:02:86:0A:07 X509v3 Authority Key Identifier: keyid:B1:C3:47:45:6E:54:A4:66:2E:10:97:EC:D3:34:AC:11:C0:2C:E0:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scNHRW5UpGYuEJfs0zSsEcAs4As.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:e0:75:f6:9f:22:b7:89:b6:e2:59:56:73:2d:2d:f6:0b:b4: 30:6b:cc:e7:3f:74:40:f9:3c:6a:e7:fd:be:12:ef:0b:c9:34: ff:46:ba:ad:80:91:08:8c:35:b4:bf:10:6e:07:f8:2d:ef:f8: 38:d8:dc:fe:90:a6:62:ea:78:17:54:de:15:d7:d1:2f:78:a5: c9:90:83:74:62:5c:be:72:50:7b:73:81:2a:75:bd:47:b0:35: e6:f1:d4:e8:4f:9d:77:d4:8f:28:1e:53:fe:f4:ed:52:9e:fd: e2:d6:b5:44:38:18:a0:75:b8:e1:25:87:34:b6:61:8f:c7:05: 46:5e:32:f1:73:ed:9e:fd:cd:97:b9:a3:50:1f:a1:ec:08:53: ad:01:2d:77:65:e8:05:42:56:21:21:0f:fb:58:6c:70:28:30: ba:0a:1b:1b:04:96:e3:d3:71:5c:9c:7e:ea:11:08:5b:39:7b: c6:e6:60:3c:12:92:a2:3e:d3:de:69:41:5b:8a:33:5d:17:9a: f0:87:ab:bc:8f:26:e9:f6:62:fe:40:30:84:e6:ce:4d:a4:89: 1f:08:9c:e0:36:14:72:38:0b:d7:c7:41:c9:07:ec:5f:5b:e3: 97:dc:fb:5e:2a:50:5f:ea:a8:27:43:c3:93:de:70:a4:2c:57: 69:b1:df:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA0MzgxMTAvBgNVBAUTKEIxQzM0NzQ1NkU1NEE0NjYyRTEwOTdFQ0QzMzRBQzEx QzAyQ0UwMEIwHhcNMjUwNDI2MjE1MDE0WhcNMjUwNTAzMjE1MDE0WjAYMRYwFAYD VQQDEw02ODBkNTUxNi0yMjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0IzqEZf6qkCV82Vo15Bq70kLj0vvKyWEAJZjnmwBgLM/JbywyxzmiwQad1UE irr/ObS9MztFqaQFP44OCqhWgU9Fafhbjk2btnHMRB3jSNJ/Q7JycAL1euqTJAn1 7OE5QLObvn0ExxKeWJkfstS4nmv0yzAYyrlggZU0G2QZBxAeiblJyYpza7nvaV8R ha28/mnH0uy6qM25L25NAwMJdzGu3ihpSGO9HFqmHjhSFKkF28Q6QtxlpqdhHI5D Q54MkuLtLSXZ6z4YkxaTbsg0MzHb6yX7/aC9mbMQWCDS2ZgFfV8tCkcqiOIGZW6A jaUocZ6G5aJzwsGSANwrk5ej+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAxXGeuq uIUjQAbhS16DXWYChgoHMB8GA1UdIwQYMBaAFLHDR0VuVKRmLhCX7NM0rBHALOAL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDQzOC9DNDUwOUQ1NDVF NzExMUVCODQ5QzMzM0FDNEY5QUUwMi9zY05IUlc1VXBHWXVFSmZzMHpTc0VjQXM0 QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NjTkhSVzVVcEdZdUVKZnMwelNzRWNBczRBcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDQzOC9DNDUwOUQ1NDVFNzExMUVCODQ5QzMzM0FDNEY5QUUwMi9zY05IUlc1VXBH WXVFSmZzMHpTc0VjQXM0QXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCm4HX2nyK3ibbiWVZzLS32C7Qwa8znP3RA+Txq5/2+Eu8LyTT/Rrqt gJEIjDW0vxBuB/gt7/g42Nz+kKZi6ngXVN4V19EveKXJkIN0Yly+clB7c4Eqdb1H sDXm8dToT5131I8oHlP+9O1Snv3i1rVEOBigdbjhJYc0tmGPxwVGXjLxc+2e/c2X uaNQH6HsCFOtAS13ZegFQlYhIQ/7WGxwKDC6ChsbBJbj03FcnH7qEQhbOXvG5mA8 EpKiPtPeaUFbijNdF5rwh6u8jybp9mL+QDCE5s5NpIkfCJzgNhRyOAvXx0HJB+xf W+OX3PteKlBf6qgnQ8OT3nCkLFdpsd9i -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:52 2025 by rpki-client on console.sobornost.net