$ rpki-client -vvf rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft File: FN2GhClPGzOjE6-48OuhyKADeAk.mft (raw, json) Hash identifier: qoOj3ln7BlVpxwhL7XF7Pg53pj/P1C6bsnCPnIG0mjo= Subject key identifier: CA:A4:52:74:D5:A5:C1:AB:57:92:BE:0A:D7:1E:EF:38:CF:29:71:2E Authority key identifier: 14:DD:86:84:29:4F:1B:33:A3:13:AF:B8:F0:EB:A1:C8:A0:03:78:09 Certificate issuer: /CN=A9160A05/serialNumber=14DD8684294F1B33A313AFB8F0EBA1C8A0037809 Certificate serial: 77 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FN2GhClPGzOjE6-48OuhyKADeAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft Manifest number: 72 Signing time: Wed 23 Apr 2025 05:58:56 +0000 Manifest this update: Wed 23 Apr 2025 05:58:55 +0000 Manifest next update: Wed 30 Apr 2025 05:58:55 +0000 Files and hashes: 1: FN2GhClPGzOjE6-48OuhyKADeAk.crl (hash: 1yt3KO9W9ggeAnm4AstcijE+49vDXyVVka5mpUu8uzo=) 2: F7981812F38811EFAC05053AC4F9AE02.roa (hash: 5lT3BqV6fkCasuiMvgjtWS+QEDtMQ2WoJeVX5lRFOMY=) 3: E9B0903AF38811EF81B8CE39C4F9AE02.roa (hash: fdQ7jvoBEvlEALSb2JWdt2czQvJjt/S2kzFg/FmzHag=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.crl rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FN2GhClPGzOjE6-48OuhyKADeAk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 119 (0x77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160A05, serialNumber=14DD8684294F1B33A313AFB8F0EBA1C8A0037809 Validity Not Before: Apr 23 05:58:55 2025 GMT Not After : Apr 30 05:58:55 2025 GMT Subject: CN=680881a0-8870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:60:a3:ef:c2:5e:6d:2e:c2:98:e5:59:3e:4b: 88:b5:38:7c:2f:99:44:6a:c5:e8:9a:ea:66:80:9c: 87:1e:91:fa:92:c7:52:97:97:34:83:21:a9:54:b9: 40:02:47:f9:c8:52:fb:a5:f6:38:32:cd:c6:5f:fa: aa:f4:5c:1a:5d:e3:26:a6:3c:0f:0e:18:c4:bb:4f: 4f:fd:83:22:d4:b2:dc:d6:14:f7:7a:93:a9:8d:07: 56:89:43:e0:eb:1d:9f:38:9d:5b:a9:cf:8e:f9:4f: cb:d7:a8:30:76:1b:8c:14:65:12:19:f4:f0:ca:22: 93:e0:d6:02:b3:f3:0d:66:52:b6:d7:f7:f4:81:ee: bf:ae:bc:2a:d6:af:f7:38:45:03:b2:f6:85:59:ea: dc:ef:38:67:43:d1:c5:a9:05:b5:06:c8:7a:85:cb: 65:55:bd:68:2d:28:49:e7:16:ba:7e:48:1b:99:b0: 92:c0:2a:c4:39:fa:c6:f6:14:38:ea:cd:5e:b1:4b: 93:f8:04:18:8c:a2:b2:56:7e:0b:f8:a6:55:9e:da: 1b:10:06:3e:2e:69:c6:96:5d:5d:4b:65:1a:79:d0: 2d:a9:2e:85:5c:89:54:0a:b7:dc:e0:72:60:63:09: 9a:8e:8a:d3:d5:a3:7c:d8:66:f6:ce:05:38:d9:01: 7f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:A4:52:74:D5:A5:C1:AB:57:92:BE:0A:D7:1E:EF:38:CF:29:71:2E X509v3 Authority Key Identifier: keyid:14:DD:86:84:29:4F:1B:33:A3:13:AF:B8:F0:EB:A1:C8:A0:03:78:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FN2GhClPGzOjE6-48OuhyKADeAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:fa:a5:3b:ce:c1:c1:ae:ea:56:27:a9:37:ec:02:0d:15:4d: 43:9c:3a:a0:fb:ac:e0:a8:ce:bb:93:e9:c1:8b:b4:9b:79:5e: 01:cc:60:f4:de:b1:d1:3a:55:2b:84:f9:62:5c:f0:57:7f:4a: 18:d4:e1:1a:81:4c:b9:3f:c8:40:78:e2:4b:16:c6:78:67:34: b4:1c:7f:e8:4b:e1:42:81:8f:e1:f2:c7:f6:69:94:a8:18:e2: b6:4a:05:75:fa:73:3f:bf:44:5d:e3:b5:c6:73:9f:fe:27:6b: 10:fd:72:55:78:dc:d4:b3:9b:bd:a3:7c:6d:c1:f0:88:2f:9a: 0c:42:f2:92:bc:35:13:08:5f:65:94:0e:10:72:1b:39:ae:9d: ba:e1:59:99:57:ec:3d:a4:b2:26:84:43:89:63:72:a1:a8:af: d1:5f:cd:e1:86:b6:bf:f1:7c:a5:02:53:8a:7e:ee:99:f3:59: c9:40:e8:80:37:6d:88:ce:a0:c6:ef:c5:33:a8:0b:c5:60:32: 1d:c5:e1:eb:fc:58:e3:a8:5f:a8:63:49:24:18:2a:2f:97:ae: 8b:de:60:be:bd:f7:90:6f:8a:73:25:29:5f:da:84:6f:6c:5a: 8e:4c:e6:9a:fc:0d:89:b7:b7:bd:d9:39:63:af:f6:42:21:39: 5b:ed:81:34 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MEEwNTExMC8GA1UEBRMoMTRERDg2ODQyOTRGMUIzM0EzMTNBRkI4RjBFQkExQzhB MDAzNzgwOTAeFw0yNTA0MjMwNTU4NTVaFw0yNTA0MzAwNTU4NTVaMBgxFjAUBgNV BAMTDTY4MDg4MWEwLTg4NzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD+YKPvwl5tLsKY5Vk+S4i1OHwvmURqxeia6maAnIcekfqSx1KXlzSDIalUuUAC R/nIUvul9jgyzcZf+qr0XBpd4yamPA8OGMS7T0/9gyLUstzWFPd6k6mNB1aJQ+Dr HZ84nVupz475T8vXqDB2G4wUZRIZ9PDKIpPg1gKz8w1mUrbX9/SB7r+uvCrWr/c4 RQOy9oVZ6tzvOGdD0cWpBbUGyHqFy2VVvWgtKEnnFrp+SBuZsJLAKsQ5+sb2FDjq zV6xS5P4BBiMorJWfgv4plWe2hsQBj4uacaWXV1LZRp50C2pLoVciVQKt9zgcmBj CZqOitPVo3zYZvbOBTjZAX+tAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyqRSdNWl watXkr4K1x7vOM8pcS4wHwYDVR0jBBgwFoAUFN2GhClPGzOjE6+48OuhyKADeAkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYwQTA1L0QxN0M4ODY4N0M4 QTExRUY4RkFCNjkwOUM0RjlBRTAyL0ZOMkdoQ2xQR3pPakU2LTQ4T3VoeUtBRGVB ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRk4yR2hDbFBHek9qRTYtNDhPdWh5S0FEZUFrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYw QTA1L0QxN0M4ODY4N0M4QTExRUY4RkFCNjkwOUM0RjlBRTAyL0ZOMkdoQ2xQR3pP akU2LTQ4T3VoeUtBRGVBay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFj6pTvOwcGu6lYnqTfsAg0VTUOcOqD7rOCozruT6cGLtJt5XgHMYPTe sdE6VSuE+WJc8Fd/ShjU4RqBTLk/yEB44ksWxnhnNLQcf+hL4UKBj+Hyx/ZplKgY 4rZKBXX6cz+/RF3jtcZzn/4naxD9clV43NSzm72jfG3B8IgvmgxC8pK8NRMIX2WU DhByGzmunbrhWZlX7D2ksiaEQ4ljcqGor9FfzeGGtr/xfKUCU4p+7pnzWclA6IA3 bYjOoMbvxTOoC8VgMh3F4ev8WOOoX6hjSSQYKi+XroveYL6995BvinMlKV/ahG9s Wo5M5pr8DYm3t73ZOWOv9kIhOVvtgTQ= -----END CERTIFICATE-----Generated at Wed Apr 23 09:02:25 2025 by rpki-client on console.sobornost.net