$ rpki-client -vvf rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft File: DihwYx-g7-rpRTHbDiYEXKO8gZs.mft (raw, json) Hash identifier: xpoiThobUKLn1HqsMcGTH7j3QbvTOkOjR7oO//8cNhI= Subject key identifier: 32:13:7F:C2:4C:0E:C3:16:19:F9:AA:07:B7:5A:3F:7E:3D:63:73:3F Authority key identifier: 0E:28:70:63:1F:A0:EF:EA:E9:45:31:DB:0E:26:04:5C:A3:BC:81:9B Certificate issuer: /CN=A9162DD6/serialNumber=0E2870631FA0EFEAE94531DB0E26045CA3BC819B Certificate serial: 103A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DihwYx-g7-rpRTHbDiYEXKO8gZs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft Manifest number: 1025 Signing time: Mon 28 Apr 2025 17:40:07 +0000 Manifest this update: Mon 28 Apr 2025 17:40:06 +0000 Manifest next update: Mon 05 May 2025 17:40:06 +0000 Files and hashes: 1: DihwYx-g7-rpRTHbDiYEXKO8gZs.crl (hash: WC0kX7FV7k0HZWHEY6TVKaYMkCQdELjbRoHzIH9N8t0=) 2: D97D5F6A3FEB11E9882E830FC4F9AE02.roa (hash: RQ9qhLaDGLXZG82auuWSpjUE055Bze4DBt1aGvXRSH4=) 3: DA3261943FEB11E9882E830FC4F9AE02.roa (hash: n6tSSqkwRgmQdmtW0qPK7myv2yYZQso++P1D8QIVPvs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.crl rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DihwYx-g7-rpRTHbDiYEXKO8gZs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 17:40:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4154 (0x103a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162DD6, serialNumber=0E2870631FA0EFEAE94531DB0E26045CA3BC819B Validity Not Before: Apr 28 17:40:06 2025 GMT Not After : May 5 17:40:06 2025 GMT Subject: CN=680fbd76-61cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5f:da:6a:cd:13:b8:80:a5:79:be:68:f0:b5: fb:fd:7f:2e:18:45:e8:5e:a8:b6:1d:80:cb:21:22: 10:7a:7e:5f:d8:78:8b:a2:6e:dd:9c:90:68:c9:13: fc:6c:d5:79:f6:2e:9d:ec:47:a0:e3:d7:16:d0:8d: e1:9d:f1:1a:de:cd:6e:13:4f:a9:e0:f9:57:20:01: 1c:6b:e5:82:ee:0e:5c:c7:18:21:6b:ee:b8:30:94: b8:da:40:4f:56:c7:ac:d4:9c:97:e2:ef:87:ed:f5: a8:df:82:86:06:72:a5:40:b0:28:e1:02:b7:92:e3: ed:5a:54:51:91:a2:e6:37:73:13:b7:5e:a9:41:7c: 5c:25:7f:5c:13:c5:e4:15:c5:6a:cb:1b:cb:1b:55: 8c:73:fc:13:28:1e:12:4e:31:35:6e:be:6c:b8:ad: 67:9f:25:b7:a0:94:e1:2f:a8:f0:c4:86:87:99:97: ea:fe:a9:4d:f4:8b:3c:c5:9a:18:86:af:d7:b3:c1: c8:a0:23:50:42:75:cc:81:0e:07:9e:12:11:56:44: 57:5a:60:e0:0c:a6:91:9a:fb:c2:f2:6a:45:ae:a0: e5:79:da:62:fd:56:94:3d:41:be:b3:63:f9:27:62: bb:ec:65:e0:9c:ad:11:b9:ca:08:4c:a0:8a:77:2b: 86:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:13:7F:C2:4C:0E:C3:16:19:F9:AA:07:B7:5A:3F:7E:3D:63:73:3F X509v3 Authority Key Identifier: keyid:0E:28:70:63:1F:A0:EF:EA:E9:45:31:DB:0E:26:04:5C:A3:BC:81:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DihwYx-g7-rpRTHbDiYEXKO8gZs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:2e:c4:20:d7:8d:09:b4:43:c8:03:bf:fb:1d:d7:d2:87:7b: b2:21:1f:e2:61:10:1b:2e:d7:b6:d6:b3:9e:58:f7:22:a0:e8: 25:4b:cd:1a:7e:a9:5e:ff:50:b9:bd:29:31:47:96:d3:d6:a6: 01:fd:e0:ff:5e:df:48:5c:a4:13:ae:9d:2c:45:ad:67:27:38: 7f:78:5c:3c:15:77:1d:65:47:32:c4:38:7b:a9:2c:12:ae:dd: ac:39:f3:f3:33:93:84:ae:20:b1:02:0e:dd:6d:42:db:9b:89: 13:e0:0d:07:4c:ab:41:ae:61:c1:3f:9e:7d:aa:b7:05:46:18: 2e:41:c3:24:44:d9:67:ed:d7:52:41:b5:76:75:bf:ce:a7:3b: b6:26:5a:a6:88:31:57:a4:e3:f1:00:cf:a0:9c:f6:65:0f:09: ce:65:42:ec:9c:52:1f:c1:fa:27:2e:66:90:78:f5:ab:18:04: 84:32:d3:36:0e:15:b0:86:2f:c9:4c:7c:fe:e5:f5:0c:3a:8e: 61:87:cd:92:41:c2:d7:c2:4a:dd:4d:97:6e:0e:fc:8c:dc:bd: 11:47:44:f3:14:a0:9c:79:d9:8a:89:90:8f:87:42:a2:ac:83: 42:81:2b:24:de:2d:1e:5c:59:55:8e:88:e6:b4:f7:6c:df:99: 2e:72:07:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEDowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjJERDYxMTAvBgNVBAUTKDBFMjg3MDYzMUZBMEVGRUFFOTQ1MzFEQjBFMjYwNDVD QTNCQzgxOUIwHhcNMjUwNDI4MTc0MDA2WhcNMjUwNTA1MTc0MDA2WjAYMRYwFAYD VQQDEw02ODBmYmQ3Ni02MWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy1/aas0TuICleb5o8LX7/X8uGEXoXqi2HYDLISIQen5f2HiLom7dnJBoyRP8 bNV59i6d7Eeg49cW0I3hnfEa3s1uE0+p4PlXIAEca+WC7g5cxxgha+64MJS42kBP Vses1JyX4u+H7fWo34KGBnKlQLAo4QK3kuPtWlRRkaLmN3MTt16pQXxcJX9cE8Xk FcVqyxvLG1WMc/wTKB4STjE1br5suK1nnyW3oJThL6jwxIaHmZfq/qlN9Is8xZoY hq/Xs8HIoCNQQnXMgQ4HnhIRVkRXWmDgDKaRmvvC8mpFrqDledpi/VaUPUG+s2P5 J2K77GXgnK0RucoITKCKdyuGlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDITf8JM DsMWGfmqB7daP349Y3M/MB8GA1UdIwQYMBaAFA4ocGMfoO/q6UUx2w4mBFyjvIGb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MkRENi85Q0Q3Q0IwQTNG RUExMUU5OTE4MzlEMERDNEY5QUUwMi9EaWh3WXgtZzctcnBSVEhiRGlZRVhLTzhn WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RpaHdZeC1nNy1ycFJUSGJEaVlFWEtPOGdacy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MkRENi85Q0Q3Q0IwQTNGRUExMUU5OTE4MzlEMERDNEY5QUUwMi9EaWh3WXgtZzct cnBSVEhiRGlZRVhLTzhnWnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeLsQg140JtEPIA7/7HdfSh3uyIR/iYRAbLte21rOeWPcioOglS80a fqle/1C5vSkxR5bT1qYB/eD/Xt9IXKQTrp0sRa1nJzh/eFw8FXcdZUcyxDh7qSwS rt2sOfPzM5OEriCxAg7dbULbm4kT4A0HTKtBrmHBP559qrcFRhguQcMkRNln7ddS QbV2db/Opzu2JlqmiDFXpOPxAM+gnPZlDwnOZULsnFIfwfonLmaQePWrGASEMtM2 DhWwhi/JTHz+5fUMOo5hh82SQcLXwkrdTZduDvyM3L0RR0TzFKCcedmKiZCPh0Ki rINCgSsk3i0eXFlVjojmtPds35kucgf8 -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:38 2025 by rpki-client on console.sobornost.net