$ rpki-client -vvf rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft File: EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft (raw, json) Hash identifier: gxcBfOEgod1oQ9O4/fxSUEnAUIsPO4wRmm/1BD5ya6c= Subject key identifier: B0:0C:A8:09:7A:99:BB:40:A7:B3:6C:3C:A6:4C:D1:F4:42:A3:8C:88 Authority key identifier: 10:0D:9A:EE:91:D2:27:FE:47:59:34:F2:97:8C:36:17:D8:CF:A8:EE Certificate issuer: /CN=A9160C9E/serialNumber=100D9AEE91D227FE475934F2978C3617D8CFA8EE Certificate serial: 75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft Manifest number: 71 Signing time: Sun 27 Apr 2025 05:49:28 +0000 Manifest this update: Sun 27 Apr 2025 05:49:27 +0000 Manifest next update: Sun 04 May 2025 05:49:27 +0000 Files and hashes: 1: EA2a7pHSJ_5HWTTyl4w2F9jPqO4.crl (hash: 7OqQEEhwV39HswRXpLtCAmGiPwiGJSFVrQYD4ddqSDM=) 2: 44B65A3890FF11EFA6BECB58C4F9AE02.roa (hash: GUv+bR0jB5xe+4YguFwkCK8B685+o0kSH52XBLyO1zw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.crl rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 117 (0x75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160C9E, serialNumber=100D9AEE91D227FE475934F2978C3617D8CFA8EE Validity Not Before: Apr 27 05:49:27 2025 GMT Not After : May 4 05:49:27 2025 GMT Subject: CN=680dc567-afd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5e:4d:5c:cf:fd:b0:72:4b:bf:b4:ef:5b:74: 12:41:9d:c8:46:f9:fe:b2:9c:f9:dd:96:6f:6c:ee: 6e:db:48:de:93:00:db:e0:ce:1a:ef:bf:2e:d3:85: 76:d2:1f:a7:6f:8f:16:08:38:72:d4:2e:28:35:82: 91:75:18:49:1e:e2:e3:ff:79:a7:0b:50:b0:19:fb: 9e:fb:0a:01:e2:27:67:5f:6e:a3:cb:0f:32:9f:65: bf:0e:12:18:2e:8e:04:25:ce:3a:94:b6:7b:56:f7: db:2d:e8:eb:40:81:94:f4:85:7d:17:6b:c0:17:91: 26:d3:44:de:7e:07:e9:74:58:55:5f:f8:f6:62:50: 6b:f4:db:b4:a9:f9:1d:2b:ec:8c:7c:a6:97:57:cd: 50:2e:7e:0f:fd:3c:81:c4:66:2b:ba:59:0c:e7:cd: 31:7a:bb:ec:78:4b:59:29:c4:a7:32:d3:d3:62:5e: 62:38:32:44:5e:b0:ab:0a:d9:29:4a:98:5a:0c:e2: 91:bf:81:55:02:20:69:a8:48:80:12:5e:40:6a:70: dd:50:a1:64:32:64:ce:46:9b:26:b7:f1:07:db:d4: 64:f3:77:6d:71:47:30:3d:a1:09:b0:e2:25:9e:99: df:a8:24:9e:fc:d4:a5:a4:dc:34:26:91:80:54:89: 03:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:0C:A8:09:7A:99:BB:40:A7:B3:6C:3C:A6:4C:D1:F4:42:A3:8C:88 X509v3 Authority Key Identifier: keyid:10:0D:9A:EE:91:D2:27:FE:47:59:34:F2:97:8C:36:17:D8:CF:A8:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:87:44:21:7d:12:5f:bd:d5:ef:df:2a:cd:e2:1c:f6:2d:73: 6a:de:3d:50:35:7e:03:a4:00:22:15:25:b4:3b:20:3d:dc:5e: 6a:95:e7:d0:16:71:7d:e5:f3:d8:ae:70:8f:ac:2a:75:dc:83: d0:f6:44:cf:2d:11:31:71:3b:af:81:78:cf:f9:a8:82:e4:c0: db:36:8b:94:67:03:d2:e0:45:11:82:3a:6d:2b:0a:d8:b0:06: 1f:45:74:d4:5e:5f:ed:2a:fe:47:b1:62:03:ea:cf:89:14:57: 9a:c4:01:88:7d:8b:b8:fc:a3:1a:de:0c:33:05:bd:6e:cc:89: 09:40:38:a6:df:a3:22:5b:ef:77:37:82:34:f4:3e:19:5e:6e: 23:d9:4b:0a:17:80:84:0e:8a:cc:6b:e3:ba:2e:50:48:e5:00: 47:8b:71:f8:57:af:2a:9e:92:a4:c9:f4:34:a8:ff:f1:45:33: 2c:e5:31:ed:69:13:fc:14:88:81:eb:15:65:30:25:5b:c8:f6: 6d:38:cb:f1:42:4d:3e:05:97:b1:09:2b:84:c2:fc:e1:3c:32: be:69:ce:72:db:37:85:6a:3f:92:2c:d6:6e:33:42:49:00:3a: 9e:0a:e9:cd:9c:7c:94:11:33:b0:e4:e3:55:ff:7d:a4:35:26: 1f:de:86:89 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MEM5RTExMC8GA1UEBRMoMTAwRDlBRUU5MUQyMjdGRTQ3NTkzNEYyOTc4QzM2MTdE OENGQThFRTAeFw0yNTA0MjcwNTQ5MjdaFw0yNTA1MDQwNTQ5MjdaMBgxFjAUBgNV BAMTDTY4MGRjNTY3LWFmZDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9Xk1cz/2wcku/tO9bdBJBnchG+f6ynPndlm9s7m7bSN6TANvgzhrvvy7ThXbS H6dvjxYIOHLULig1gpF1GEke4uP/eacLULAZ+577CgHiJ2dfbqPLDzKfZb8OEhgu jgQlzjqUtntW99st6OtAgZT0hX0Xa8AXkSbTRN5+B+l0WFVf+PZiUGv027Sp+R0r 7Ix8ppdXzVAufg/9PIHEZiu6WQznzTF6u+x4S1kpxKcy09NiXmI4MkResKsK2SlK mFoM4pG/gVUCIGmoSIASXkBqcN1QoWQyZM5Gmya38Qfb1GTzd21xRzA9oQmw4iWe md+oJJ781KWk3DQmkYBUiQPzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsAyoCXqZ u0Cns2w8pkzR9EKjjIgwHwYDVR0jBBgwFoAUEA2a7pHSJ/5HWTTyl4w2F9jPqO4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYwQzlFLzU3RkY0QkNBOEJD QTExRUZBQkZDMUEzOUM0RjlBRTAyL0VBMmE3cEhTSl81SFdUVHlsNHcyRjlqUHFP NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRUEyYTdwSFNKXzVIV1RUeWw0dzJGOWpQcU80LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYw QzlFLzU3RkY0QkNBOEJDQTExRUZBQkZDMUEzOUM0RjlBRTAyL0VBMmE3cEhTSl81 SFdUVHlsNHcyRjlqUHFPNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACeHRCF9El+91e/fKs3iHPYtc2rePVA1fgOkACIVJbQ7ID3cXmqV59AW cX3l89iucI+sKnXcg9D2RM8tETFxO6+BeM/5qILkwNs2i5RnA9LgRRGCOm0rCtiw Bh9FdNReX+0q/kexYgPqz4kUV5rEAYh9i7j8oxreDDMFvW7MiQlAOKbfoyJb73c3 gjT0PhlebiPZSwoXgIQOisxr47ouUEjlAEeLcfhXryqekqTJ9DSo//FFMyzlMe1p E/wUiIHrFWUwJVvI9m04y/FCTT4Fl7EJK4TC/OE8Mr5pznLbN4VqP5Is1m4zQkkA Op4K6c2cfJQRM7Dk41X/faQ1Jh/ehok= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:48 2025 by rpki-client on console.sobornost.net