$ rpki-client -vvf rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.mft File: XSeFtU0WPtAepUGLz6NPG3RWtxM.mft (raw, json) Hash identifier: ScVeZk+OwHV5gxzv4wrBFM3rqZRCAycL1Tv9fIfN6iA= Subject key identifier: 5B:5B:4C:9A:F0:6E:95:CC:5B:73:32:AD:B6:16:05:0F:9D:E8:04:92 Authority key identifier: 5D:27:85:B5:4D:16:3E:D0:1E:A5:41:8B:CF:A3:4F:1B:74:56:B7:13 Certificate issuer: /CN=A9167CC5/serialNumber=5D2785B54D163ED01EA5418BCFA34F1B7456B713 Certificate serial: 0484 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XSeFtU0WPtAepUGLz6NPG3RWtxM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.mft Manifest number: 046C Signing time: Sat 26 Apr 2025 23:47:54 +0000 Manifest this update: Sat 26 Apr 2025 23:47:54 +0000 Manifest next update: Sat 03 May 2025 23:47:54 +0000 Files and hashes: 1: XSeFtU0WPtAepUGLz6NPG3RWtxM.crl (hash: CvJrn1VsVmt2T3aDkgn6Jf5xvPKWEGTwRu0+GgFHnKQ=) 2: 6337963E4C3D11ECB5FF844FC4F9AE02.roa (hash: 3KTOI3tChJ1EuHHkZIxY0+a6WeVb+6nR6Jk3wwfwMHU=) 3: ACE844F047AA11ECA0F05026C4F9AE02.roa (hash: xweR0My4YSEWr28C8V1U/OMEuVwH/Ly7NJUba0hYsCg=) 4: 1F77EFA44C4011EC952D5A23C4F9AE02.roa (hash: c5WQ+yUKORBq8d/u8k3An8QJMDIFK4yVXiwWYWbL5qc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.crl rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XSeFtU0WPtAepUGLz6NPG3RWtxM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 23:47:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1156 (0x484) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167CC5, serialNumber=5D2785B54D163ED01EA5418BCFA34F1B7456B713 Validity Not Before: Apr 26 23:47:54 2025 GMT Not After : May 3 23:47:54 2025 GMT Subject: CN=680d70aa-cde7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:85:3d:f2:5c:d0:0c:2c:5b:ab:5a:ba:17:3f: ac:5f:71:e6:5a:8c:12:8f:38:be:27:52:f1:32:a7: b5:22:05:b1:7e:c4:06:4b:09:27:3c:8d:ed:2f:43: ba:b0:a4:f9:18:1f:48:78:b9:00:43:60:6c:1f:e5: 1f:f0:9e:5f:52:8b:1d:16:2f:f4:bc:ee:b1:0f:2b: a3:15:42:8b:4a:16:d1:50:93:7e:b2:92:db:5b:41: 44:ca:1d:eb:c9:7d:b7:5e:e4:84:ce:c9:cc:01:0b: 4f:79:3c:6a:be:7d:96:f1:4d:65:a8:c2:1b:97:a6: 22:f7:78:f3:09:e1:28:32:c0:db:a5:58:bd:aa:a5: 10:2b:c2:ae:d6:24:73:cb:b1:33:fc:36:e4:27:89: a4:21:77:54:b4:14:45:55:39:51:eb:7a:74:af:ad: 26:68:dd:08:5f:cc:5e:05:0e:9c:0f:14:d5:bd:09: 90:f7:2f:41:3f:02:85:70:96:24:63:22:6b:c8:df: 2b:b1:55:8e:3b:4e:1d:72:d6:64:a3:2d:f9:e5:45: f6:79:29:61:ab:7f:2c:c9:34:65:a3:5c:28:43:39: 10:08:f6:79:55:38:c3:44:90:c5:86:b7:1d:0d:89: 3a:a6:78:22:2f:6c:35:d2:0f:24:b1:d4:6a:4e:68: 56:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:5B:4C:9A:F0:6E:95:CC:5B:73:32:AD:B6:16:05:0F:9D:E8:04:92 X509v3 Authority Key Identifier: keyid:5D:27:85:B5:4D:16:3E:D0:1E:A5:41:8B:CF:A3:4F:1B:74:56:B7:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XSeFtU0WPtAepUGLz6NPG3RWtxM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:cb:65:94:e2:dd:11:c4:4e:71:08:ce:26:23:64:86:66:e8: 96:66:04:d0:c7:fe:25:50:e6:b2:83:ac:78:cb:f0:9d:9f:5d: 3d:17:92:9c:ea:29:e3:51:87:f6:23:3b:76:f1:b1:36:58:f9: 37:fd:b6:a5:94:7b:16:9c:4a:c5:69:fa:a2:76:d1:17:b6:43: fb:a1:06:18:da:5e:df:fa:2a:3d:5e:57:a9:cc:0b:04:a7:00: 36:98:63:57:e4:93:d8:d3:09:b7:bf:35:4e:d1:0b:bb:b3:7a: 29:00:a5:cb:3b:bd:3f:1c:cb:44:ee:71:48:56:cc:8d:33:87: 2c:87:42:a7:36:e4:b9:b4:3e:52:92:b2:99:29:d0:8c:0e:2c: c5:da:29:a4:12:19:41:0e:0f:48:ca:d6:ab:6e:b4:14:59:cc: 95:ca:cf:2d:3d:de:a2:8f:64:05:1d:99:bd:8e:54:3b:8c:63: af:46:3d:7a:a5:3f:94:c1:f0:d3:46:77:55:75:84:1d:d0:44: ec:6e:a8:9a:bf:37:54:94:bc:8e:3a:4f:74:f4:03:64:63:51: 39:b5:80:50:85:8f:7a:f9:dc:ed:30:3d:44:f2:92:39:c0:1f: db:38:a4:c5:a7:13:15:d2:a5:73:a8:ce:93:d8:ab:ee:2f:68: 76:2b:56:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdDQzUxMTAvBgNVBAUTKDVEMjc4NUI1NEQxNjNFRDAxRUE1NDE4QkNGQTM0RjFC NzQ1NkI3MTMwHhcNMjUwNDI2MjM0NzU0WhcNMjUwNTAzMjM0NzU0WjAYMRYwFAYD VQQDEw02ODBkNzBhYS1jZGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv4U98lzQDCxbq1q6Fz+sX3HmWowSjzi+J1LxMqe1IgWxfsQGSwknPI3tL0O6 sKT5GB9IeLkAQ2BsH+Uf8J5fUosdFi/0vO6xDyujFUKLShbRUJN+spLbW0FEyh3r yX23XuSEzsnMAQtPeTxqvn2W8U1lqMIbl6Yi93jzCeEoMsDbpVi9qqUQK8Ku1iRz y7Ez/DbkJ4mkIXdUtBRFVTlR63p0r60maN0IX8xeBQ6cDxTVvQmQ9y9BPwKFcJYk YyJryN8rsVWOO04dctZkoy355UX2eSlhq38syTRlo1woQzkQCPZ5VTjDRJDFhrcd DYk6pngiL2w10g8ksdRqTmhW7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFtbTJrw bpXMW3MyrbYWBQ+d6ASSMB8GA1UdIwQYMBaAFF0nhbVNFj7QHqVBi8+jTxt0VrcT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0NDNS8yQUM0RDMzRTQ2 QjExMUVDOTQ1QjRGNTdDNEY5QUUwMi9YU2VGdFUwV1B0QWVwVUdMejZOUEczUld0 eE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hTZUZ0VTBXUHRBZXBVR0x6Nk5QRzNSV3R4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0NDNS8yQUM0RDMzRTQ2QjExMUVDOTQ1QjRGNTdDNEY5QUUwMi9YU2VGdFUwV1B0 QWVwVUdMejZOUEczUld0eE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAny2WU4t0RxE5xCM4mI2SGZuiWZgTQx/4lUOayg6x4y/Cdn109F5Kc 6injUYf2Izt28bE2WPk3/ballHsWnErFafqidtEXtkP7oQYY2l7f+io9XlepzAsE pwA2mGNX5JPY0wm3vzVO0Qu7s3opAKXLO70/HMtE7nFIVsyNM4csh0KnNuS5tD5S krKZKdCMDizF2imkEhlBDg9IytarbrQUWcyVys8tPd6ij2QFHZm9jlQ7jGOvRj16 pT+UwfDTRndVdYQd0ETsbqiavzdUlLyOOk909ANkY1E5tYBQhY96+dztMD1E8pI5 wB/bOKTFpxMV0qVzqM6T2KvuL2h2K1bm -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:58 2025 by rpki-client on console.sobornost.net