$ rpki-client -vvf rpki.apnic.net/member_repository/A9164860/6BEAE0887B3911EE9E91845FC4F9AE02/QP0nMwGov44nCXYsZPSuom0q4LQ.mft File: QP0nMwGov44nCXYsZPSuom0q4LQ.mft (raw, json) Hash identifier: jnVhIfvtXJhRwFx1+gAR76TpSf7PseGspalNUIdy8OM= Subject key identifier: BD:9B:CB:47:3F:D4:DE:27:15:5E:79:05:D5:74:76:CB:A7:71:E5:60 Authority key identifier: 40:FD:27:33:01:A8:BF:8E:27:09:76:2C:64:F4:AE:A2:6D:2A:E0:B4 Certificate issuer: /CN=A9164860/serialNumber=40FD273301A8BF8E2709762C64F4AEA26D2AE0B4 Certificate serial: 011E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QP0nMwGov44nCXYsZPSuom0q4LQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164860/6BEAE0887B3911EE9E91845FC4F9AE02/QP0nMwGov44nCXYsZPSuom0q4LQ.mft Manifest number: 011B Signing time: Sat 26 Apr 2025 17:06:50 +0000 Manifest this update: Sat 26 Apr 2025 17:06:49 +0000 Manifest next update: Sat 03 May 2025 17:06:49 +0000 Files and hashes: 1: QP0nMwGov44nCXYsZPSuom0q4LQ.crl (hash: LD6xLxvqs4BanJkJSo5nWZXcryc1l+Kbh2MIviHoRxA=) 2: 26BFE5FE841611EEB980955AC4F9AE02.roa (hash: mR7p6xLL+eywaq3IEYtE5q1FtrVRKFEpVD4lZkW4skg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164860/6BEAE0887B3911EE9E91845FC4F9AE02/QP0nMwGov44nCXYsZPSuom0q4LQ.crl rsync://rpki.apnic.net/member_repository/A9164860/6BEAE0887B3911EE9E91845FC4F9AE02/QP0nMwGov44nCXYsZPSuom0q4LQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QP0nMwGov44nCXYsZPSuom0q4LQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 14:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 286 (0x11e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164860, serialNumber=40FD273301A8BF8E2709762C64F4AEA26D2AE0B4 Validity Not Before: Apr 26 17:06:49 2025 GMT Not After : May 3 17:06:49 2025 GMT Subject: CN=680d12aa-a166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:90:ab:0b:96:34:00:be:c7:c6:0c:a8:4e:7f: f8:3d:bc:23:db:e8:23:63:7b:42:18:91:b6:2e:9d: ba:8d:87:0a:ab:5a:37:2e:a5:f4:71:47:c9:bb:b9: 2f:66:48:69:38:66:46:df:ed:33:3a:61:13:fc:7b: 17:68:6a:cc:0a:c7:ab:e2:16:97:68:89:8e:ab:da: aa:62:0b:24:14:8a:59:a2:e3:41:3f:ec:51:65:04: cf:5d:d2:31:58:47:cf:f7:c7:10:69:46:02:e1:da: 15:6b:ab:b5:f6:4d:d3:d0:30:b8:57:d7:fd:b1:03: 52:6d:f0:42:a0:ca:ad:22:f2:9d:f1:84:1c:91:82: 5e:b0:fd:c0:ab:da:2a:7a:ed:bb:dc:ce:9f:ca:30: e8:31:50:34:37:53:9e:ae:de:7e:33:ce:9b:bb:45: 28:f2:06:90:37:40:57:63:cd:e8:8a:aa:ec:9c:62: c1:28:fa:d4:31:65:c9:9c:26:3b:7a:ae:58:de:06: 71:59:10:6e:a0:8a:7e:8d:30:c6:ab:de:45:6d:4f: 4c:3b:72:5e:8f:72:9d:fc:1f:b2:9b:38:40:10:98: 9b:5e:7d:c0:03:55:14:52:4f:1a:22:d7:a1:13:db: 05:2a:c9:a2:27:03:23:a7:5a:b6:31:6f:e6:85:b5: 21:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:9B:CB:47:3F:D4:DE:27:15:5E:79:05:D5:74:76:CB:A7:71:E5:60 X509v3 Authority Key Identifier: keyid:40:FD:27:33:01:A8:BF:8E:27:09:76:2C:64:F4:AE:A2:6D:2A:E0:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164860/6BEAE0887B3911EE9E91845FC4F9AE02/QP0nMwGov44nCXYsZPSuom0q4LQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QP0nMwGov44nCXYsZPSuom0q4LQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164860/6BEAE0887B3911EE9E91845FC4F9AE02/QP0nMwGov44nCXYsZPSuom0q4LQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:3c:7c:09:66:92:da:5d:d0:76:bd:e5:f8:8b:ff:db:26:f1: 2a:33:1a:1e:dd:ed:30:02:35:04:db:cc:b1:ba:70:4d:2c:63: 4a:5c:60:b8:cc:00:04:21:af:85:3b:d9:88:8f:59:4a:08:88: ac:9c:14:a7:47:c4:0a:9c:60:06:66:b5:d5:d0:49:84:89:89: 13:d9:60:88:96:36:3c:58:74:32:be:1e:a0:11:75:35:34:2f: 54:8c:af:60:55:14:26:b4:54:14:7e:e7:12:fd:66:d2:8c:e5: fe:77:ef:cc:be:ad:75:8d:f5:3c:56:5a:4f:a4:6e:62:bc:e0: f1:47:11:31:b5:a6:b2:83:00:e2:d5:54:06:1e:43:f2:f9:3c: dd:b2:d9:4e:5d:7f:97:65:2e:b0:62:70:57:9a:05:85:8e:41: b2:ac:98:5d:3f:ac:1d:49:fe:66:b2:91:4e:d4:d6:31:3d:4a: 04:20:17:06:d6:44:01:2c:43:25:13:08:7a:71:64:2c:92:5a: 27:ed:3e:df:33:cb:d7:0c:35:6d:31:a7:6a:01:7c:61:70:14: ee:5e:15:b8:14:4c:33:a7:f4:f2:f2:a8:bb:8b:28:9b:f7:54: 0c:5e:91:00:57:0e:0d:3e:77:a8:47:e3:9c:c0:81:d9:62:79: 8d:54:42:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ4NjAxMTAvBgNVBAUTKDQwRkQyNzMzMDFBOEJGOEUyNzA5NzYyQzY0RjRBRUEy NkQyQUUwQjQwHhcNMjUwNDI2MTcwNjQ5WhcNMjUwNTAzMTcwNjQ5WjAYMRYwFAYD VQQDEw02ODBkMTJhYS1hMTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu5CrC5Y0AL7HxgyoTn/4Pbwj2+gjY3tCGJG2Lp26jYcKq1o3LqX0cUfJu7kv ZkhpOGZG3+0zOmET/HsXaGrMCser4haXaImOq9qqYgskFIpZouNBP+xRZQTPXdIx WEfP98cQaUYC4doVa6u19k3T0DC4V9f9sQNSbfBCoMqtIvKd8YQckYJesP3Aq9oq eu273M6fyjDoMVA0N1Oert5+M86bu0Uo8gaQN0BXY83oiqrsnGLBKPrUMWXJnCY7 eq5Y3gZxWRBuoIp+jTDGq95FbU9MO3Jej3Kd/B+ymzhAEJibXn3AA1UUUk8aIteh E9sFKsmiJwMjp1q2MW/mhbUh4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL2by0c/ 1N4nFV55BdV0dsunceVgMB8GA1UdIwQYMBaAFED9JzMBqL+OJwl2LGT0rqJtKuC0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDg2MC82QkVBRTA4ODdC MzkxMUVFOUU5MTg0NUZDNEY5QUUwMi9RUDBuTXdHb3Y0NG5DWFlzWlBTdW9tMHE0 TFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FQMG5Nd0dvdjQ0bkNYWXNaUFN1b20wcTRMUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDg2MC82QkVBRTA4ODdCMzkxMUVFOUU5MTg0NUZDNEY5QUUwMi9RUDBuTXdHb3Y0 NG5DWFlzWlBTdW9tMHE0TFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEPHwJZpLaXdB2veX4i//bJvEqMxoe3e0wAjUE28yxunBNLGNKXGC4 zAAEIa+FO9mIj1lKCIisnBSnR8QKnGAGZrXV0EmEiYkT2WCIljY8WHQyvh6gEXU1 NC9UjK9gVRQmtFQUfucS/WbSjOX+d+/Mvq11jfU8VlpPpG5ivODxRxExtaaygwDi 1VQGHkPy+TzdstlOXX+XZS6wYnBXmgWFjkGyrJhdP6wdSf5mspFO1NYxPUoEIBcG 1kQBLEMlEwh6cWQsklon7T7fM8vXDDVtMadqAXxhcBTuXhW4FEwzp/Ty8qi7iyib 91QMXpEAVw4NPneoR+OcwIHZYnmNVEKw -----END CERTIFICATE-----Generated at Sat Apr 26 21:01:54 2025 by rpki-client on console.sobornost.net