$ rpki-client -vvf rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft File: qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft (raw, json) Hash identifier: xUmuaQMgOc6MzamnH5qjqjPSHNAeLfnCL4zXmS6R3s4= Subject key identifier: 58:5D:56:91:DD:74:ED:B4:9C:35:4F:10:B2:FE:2D:DF:EC:45:66:59 Authority key identifier: A8:73:72:01:FA:4C:64:FA:00:56:40:22:DB:06:F6:0E:7E:E2:CD:0D Certificate issuer: /CN=A9164164/serialNumber=A8737201FA4C64FA00564022DB06F60E7EE2CD0D Certificate serial: 57 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft Manifest number: 56 Signing time: Sun 27 Apr 2025 05:59:57 +0000 Manifest this update: Sun 27 Apr 2025 05:59:56 +0000 Manifest next update: Sun 04 May 2025 05:59:56 +0000 Files and hashes: 1: qHNyAfpMZPoAVkAi2wb2Dn7izQ0.crl (hash: Po+/uzzt6cMYDHe4mSk77Kk5zB4mKQoYj1Gtj7sTJik=) 2: F1487C2AA18211EFA2B7E923C4F9AE02.roa (hash: ow0JlSSKtHwrzhAKotnC4Hb7SPL+BmK/kbudjjYhQGA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.crl rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 87 (0x57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164164, serialNumber=A8737201FA4C64FA00564022DB06F60E7EE2CD0D Validity Not Before: Apr 27 05:59:56 2025 GMT Not After : May 4 05:59:56 2025 GMT Subject: CN=680dc7dc-f924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:4d:eb:c8:f3:75:d2:8e:ee:e4:ee:81:eb:33: 1d:70:98:02:ac:32:e1:42:fb:d8:cc:40:d6:d5:68: 43:b4:03:b3:e2:56:6d:80:1c:d6:04:fa:48:e9:05: ca:0b:d5:b2:10:6e:7b:e1:45:2e:bf:c5:d6:8a:af: 70:50:8c:9b:ac:1f:51:f1:87:c9:c1:9c:c9:1f:7a: 93:53:9e:59:98:58:4b:94:0f:fa:b5:d4:46:26:50: e6:69:6b:fb:0e:1c:6b:43:c7:79:6c:c4:d6:d4:39: 1d:d4:2a:f0:1d:5c:62:34:aa:2f:19:f9:76:bb:f6: 84:8e:e7:97:4f:25:5d:50:e3:0d:49:08:d4:bc:05: 77:b1:26:1f:2c:36:df:92:cd:4f:e3:71:e4:61:bb: 30:b9:94:56:17:57:89:97:fb:3b:03:a5:a7:c8:ba: 78:f1:5d:88:53:a1:d1:21:e4:2e:c0:c8:4d:1d:95: 6b:bc:b0:ec:32:9b:81:00:75:60:c7:d0:9d:ae:c6: 6d:7f:8e:e0:05:b5:1b:1d:24:41:e4:06:c0:b1:a4: 26:6b:50:57:8f:27:d2:ba:f4:ce:be:19:d0:d7:19: 11:7b:1f:d0:71:3f:57:d8:b1:26:87:07:37:d6:db: ad:67:b1:33:2b:d6:c6:f5:68:7c:ee:fc:42:17:a6: 37:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:5D:56:91:DD:74:ED:B4:9C:35:4F:10:B2:FE:2D:DF:EC:45:66:59 X509v3 Authority Key Identifier: keyid:A8:73:72:01:FA:4C:64:FA:00:56:40:22:DB:06:F6:0E:7E:E2:CD:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:03:cb:8e:d3:60:3d:4f:a8:23:71:05:4a:4e:21:69:33:6a: 99:45:87:31:4f:d0:bb:89:42:37:2c:a7:a8:e2:b4:83:5d:78: 73:f8:d7:16:0e:e0:b5:c4:48:06:dd:1e:b0:29:91:3b:5b:1f: ad:7d:ae:00:c8:55:ba:18:e1:bb:f5:68:f8:e4:1f:00:c2:e3: fd:b3:c8:8a:f5:d9:fd:5c:ec:c8:d3:bb:80:1a:9c:5e:93:bb: e4:6e:46:42:b0:81:e9:92:ec:5a:0c:5b:ec:42:3e:52:8a:27: b8:2b:06:7a:ef:7e:02:37:f3:73:b7:90:b2:2a:85:eb:aa:e2: 22:02:a5:ae:c6:5a:c0:fa:41:a3:3d:aa:e4:b4:73:98:70:05: 4f:21:0a:2f:d8:c6:a2:20:fe:55:16:80:2c:7d:d3:78:ff:6b: c8:75:35:2c:42:29:53:7e:5b:33:f9:9d:8b:ea:09:47:66:fd: c5:6e:9e:63:35:2e:cd:29:ed:34:c9:1c:36:9a:61:93:b2:01: 03:1c:ea:ec:ff:d5:86:f0:ad:d1:95:a1:ee:00:3e:e3:4c:c9: 56:e9:5e:f0:12:ae:da:8b:9d:e5:64:45:c5:b8:a1:10:f5:e9: 8c:f3:92:bd:fb:61:9a:e8:46:3a:87:8b:11:18:94:f4:bc:84: d8:3c:11:df -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NDE2NDExMC8GA1UEBRMoQTg3MzcyMDFGQTRDNjRGQTAwNTY0MDIyREIwNkY2MEU3 RUUyQ0QwRDAeFw0yNTA0MjcwNTU5NTZaFw0yNTA1MDQwNTU5NTZaMBgxFjAUBgNV BAMTDTY4MGRjN2RjLWY5MjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSTevI83XSju7k7oHrMx1wmAKsMuFC+9jMQNbVaEO0A7PiVm2AHNYE+kjpBcoL 1bIQbnvhRS6/xdaKr3BQjJusH1Hxh8nBnMkfepNTnlmYWEuUD/q11EYmUOZpa/sO HGtDx3lsxNbUOR3UKvAdXGI0qi8Z+Xa79oSO55dPJV1Q4w1JCNS8BXexJh8sNt+S zU/jceRhuzC5lFYXV4mX+zsDpafIunjxXYhTodEh5C7AyE0dlWu8sOwym4EAdWDH 0J2uxm1/juAFtRsdJEHkBsCxpCZrUFePJ9K69M6+GdDXGRF7H9BxP1fYsSaHBzfW 261nsTMr1sb1aHzu/EIXpjfbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWF1Wkd10 7bScNU8Qsv4t3+xFZlkwHwYDVR0jBBgwFoAUqHNyAfpMZPoAVkAi2wb2Dn7izQ0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0MTY0L0E2OEUyNjRFQTE4 MjExRUY4RjRFMTYyM0M0RjlBRTAyL3FITnlBZnBNWlBvQVZrQWkyd2IyRG43aXpR MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcUhOeUFmcE1aUG9BVmtBaTJ3YjJEbjdpelEwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0 MTY0L0E2OEUyNjRFQTE4MjExRUY4RjRFMTYyM0M0RjlBRTAyL3FITnlBZnBNWlBv QVZrQWkyd2IyRG43aXpRMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACsDy47TYD1PqCNxBUpOIWkzaplFhzFP0LuJQjcsp6jitINdeHP41xYO 4LXESAbdHrApkTtbH619rgDIVboY4bv1aPjkHwDC4/2zyIr12f1c7MjTu4AanF6T u+RuRkKwgemS7FoMW+xCPlKKJ7grBnrvfgI383O3kLIqheuq4iICpa7GWsD6QaM9 quS0c5hwBU8hCi/YxqIg/lUWgCx903j/a8h1NSxCKVN+WzP5nYvqCUdm/cVunmM1 Ls0p7TTJHDaaYZOyAQMc6uz/1YbwrdGVoe4APuNMyVbpXvASrtqLneVkRcW4oRD1 6Yzzkr37YZroRjqHixEYlPS8hNg8Ed8= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:48 2025 by rpki-client on console.sobornost.net