$ rpki-client -vvf rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.mft File: DL7Sere2gbyZZqziRPy_KX5lyhk.mft (raw, json) Hash identifier: 4pEwb8yTKfL+6ty1ldYIGOa/h0NgCsWXaEYmYTVwO+o= Subject key identifier: E5:BB:D4:5F:53:A9:92:A0:58:23:AA:49:F3:AC:C8:86:F8:95:86:8A Authority key identifier: 0C:BE:D2:7A:B7:B6:81:BC:99:66:AC:E2:44:FC:BF:29:7E:65:CA:19 Certificate issuer: /CN=A9163BEF/serialNumber=0CBED27AB7B681BC9966ACE244FCBF297E65CA19 Certificate serial: 04BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DL7Sere2gbyZZqziRPy_KX5lyhk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.mft Manifest number: 04B6 Signing time: Sat 26 Apr 2025 23:31:33 +0000 Manifest this update: Sat 26 Apr 2025 23:31:33 +0000 Manifest next update: Sat 03 May 2025 23:31:33 +0000 Files and hashes: 1: DL7Sere2gbyZZqziRPy_KX5lyhk.crl (hash: PCcQzZi8Qv96Chhgb/dTLfV1jBJMhRlDexh9MrzqsFU=) 2: 8A9545AE6D1011EFA13D6E2BC4F9AE02.roa (hash: 6texudPJbHfd6J0MPN1D5Oqp/jznw5zyBOIDtk3K0JM=) 3: 8A190AB66D1011EFA13D6E2BC4F9AE02.roa (hash: JXwBxiGEkFaFWVz8HbHFVp2nlp17eTZBvyxAVrqYWhk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.crl rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DL7Sere2gbyZZqziRPy_KX5lyhk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 23:31:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1212 (0x4bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163BEF, serialNumber=0CBED27AB7B681BC9966ACE244FCBF297E65CA19 Validity Not Before: Apr 26 23:31:33 2025 GMT Not After : May 3 23:31:33 2025 GMT Subject: CN=680d6cd5-f117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:1b:6b:74:f3:be:50:1f:5c:f0:ea:93:7c:fa: 21:0a:2d:6c:ff:82:0a:12:c7:bc:62:47:12:d0:aa: 24:d1:3d:f3:07:8a:f5:b9:1d:8a:71:93:8e:53:c3: 0a:17:d3:63:b4:59:34:2d:86:7a:1e:71:b6:09:72: 5c:99:40:b5:85:83:d2:04:ae:91:43:75:8d:01:36: 36:c2:6b:eb:0c:c9:ba:b9:dc:ea:7f:24:a3:10:62: 47:f3:3a:8c:a5:96:28:54:ad:35:72:cb:34:e6:24: dc:3e:c9:8f:36:f0:32:22:57:f4:8d:29:f7:12:b6: 6d:82:8d:68:5c:10:9f:06:7b:b0:a9:f4:5b:9f:4e: 6b:09:08:43:b8:e7:e0:d2:b4:1f:f2:2a:69:73:ca: cf:71:f8:d2:7b:3f:34:49:a1:af:e8:34:27:b7:d3: f9:41:82:7d:e7:34:31:74:61:2e:a7:6a:d6:b0:91: f1:f7:18:ca:59:7b:ef:4c:2f:ed:4e:83:47:ff:19: 77:bc:57:26:d3:cb:2d:40:48:cd:8c:a3:6a:47:79: 18:89:65:f5:50:67:41:12:f3:03:1a:4f:05:37:45: 8e:01:ac:91:73:0d:e5:b9:a2:0f:1e:41:8e:8d:6a: cb:c6:81:ba:e8:90:4f:d2:f3:d9:bc:04:52:5e:00: 4f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:BB:D4:5F:53:A9:92:A0:58:23:AA:49:F3:AC:C8:86:F8:95:86:8A X509v3 Authority Key Identifier: keyid:0C:BE:D2:7A:B7:B6:81:BC:99:66:AC:E2:44:FC:BF:29:7E:65:CA:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DL7Sere2gbyZZqziRPy_KX5lyhk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:17:8b:34:d1:76:db:40:94:9d:7e:5c:9f:62:5b:f5:4a:a9: 15:3a:1c:8e:69:dc:2d:25:cb:73:66:31:a8:4f:b5:eb:76:39: 19:d7:93:84:f6:e0:84:b0:24:e1:1f:94:a2:69:4f:03:32:65: ac:c8:0f:6f:6f:8b:28:6f:29:c3:6c:bb:ce:91:26:ee:a9:45: 2a:e8:d3:b5:2d:e8:18:a3:aa:9d:6b:09:89:07:30:95:16:cf: 73:17:42:46:c6:b8:d4:a1:e0:2c:3f:20:e7:21:f0:39:75:8e: 0a:a1:10:cc:e6:9d:ed:e3:0f:06:c7:fd:1b:7c:a4:ca:c8:4f: 2c:c2:73:03:46:44:52:42:77:db:80:d1:2b:25:0a:ba:73:56: b3:2c:47:5a:48:04:45:10:a2:7a:6d:fa:b5:0f:8c:4b:83:b4: ca:ec:a7:fc:52:38:24:71:54:55:28:d3:06:09:6c:55:57:d6: ad:5a:27:43:2c:7e:ae:7d:17:3a:e4:67:f0:2c:6f:eb:72:4f: f9:57:96:90:11:28:51:a7:bc:9f:82:bb:a2:ca:77:08:5b:9c: 10:3f:44:70:45:dd:61:ec:59:3a:af:ef:6c:53:6f:c1:17:8f: 9a:a5:bb:93:a3:70:99:d1:79:22:7f:76:5b:83:fb:19:5d:80: 3f:0f:c2:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjNCRUYxMTAvBgNVBAUTKDBDQkVEMjdBQjdCNjgxQkM5OTY2QUNFMjQ0RkNCRjI5 N0U2NUNBMTkwHhcNMjUwNDI2MjMzMTMzWhcNMjUwNTAzMjMzMTMzWjAYMRYwFAYD VQQDEw02ODBkNmNkNS1mMTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0htrdPO+UB9c8OqTfPohCi1s/4IKEse8YkcS0Kok0T3zB4r1uR2KcZOOU8MK F9NjtFk0LYZ6HnG2CXJcmUC1hYPSBK6RQ3WNATY2wmvrDMm6udzqfySjEGJH8zqM pZYoVK01css05iTcPsmPNvAyIlf0jSn3ErZtgo1oXBCfBnuwqfRbn05rCQhDuOfg 0rQf8ippc8rPcfjSez80SaGv6DQnt9P5QYJ95zQxdGEup2rWsJHx9xjKWXvvTC/t ToNH/xl3vFcm08stQEjNjKNqR3kYiWX1UGdBEvMDGk8FN0WOAayRcw3luaIPHkGO jWrLxoG66JBP0vPZvARSXgBPhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOW71F9T qZKgWCOqSfOsyIb4lYaKMB8GA1UdIwQYMBaAFAy+0nq3toG8mWas4kT8vyl+ZcoZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2M0JFRi84QUFGRTI4QzI1 Q0YxMUVDOEI0QTk5MkVDNEY5QUUwMi9ETDdTZXJlMmdieVpacXppUlB5X0tYNWx5 aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RMN1NlcmUyZ2J5WlpxemlSUHlfS1g1bHloay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 M0JFRi84QUFGRTI4QzI1Q0YxMUVDOEI0QTk5MkVDNEY5QUUwMi9ETDdTZXJlMmdi eVpacXppUlB5X0tYNWx5aGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbF4s00XbbQJSdflyfYlv1SqkVOhyOadwtJctzZjGoT7XrdjkZ15OE 9uCEsCThH5SiaU8DMmWsyA9vb4sobynDbLvOkSbuqUUq6NO1LegYo6qdawmJBzCV Fs9zF0JGxrjUoeAsPyDnIfA5dY4KoRDM5p3t4w8Gx/0bfKTKyE8swnMDRkRSQnfb gNErJQq6c1azLEdaSARFEKJ6bfq1D4xLg7TK7Kf8UjgkcVRVKNMGCWxVV9atWidD LH6ufRc65GfwLG/rck/5V5aQEShRp7yfgruiyncIW5wQP0RwRd1h7Fk6r+9sU2/B F4+apbuTo3CZ0Xkif3Zbg/sZXYA/D8IB -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:55 2025 by rpki-client on console.sobornost.net