$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.mft File: qDvPbbKI6WRw000Yr7PkqBJ5GGc.mft (raw, json) Hash identifier: YgcF6DO2PikiM9bx9j3Mr/Aw+F6ywcvQAUo0duwl0jA= Subject key identifier: 77:68:05:00:D8:5F:47:84:E1:68:37:19:39:62:FB:AD:2C:30:C3:B4 Authority key identifier: A8:3B:CF:6D:B2:88:E9:64:70:D3:4D:18:AF:B3:E4:A8:12:79:18:67 Certificate issuer: /CN=A9167F95/serialNumber=A83BCF6DB288E96470D34D18AFB3E4A812791867 Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDvPbbKI6WRw000Yr7PkqBJ5GGc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.mft Manifest number: 0F Signing time: Sun 27 Apr 2025 06:55:08 +0000 Manifest this update: Sun 27 Apr 2025 06:55:08 +0000 Manifest next update: Sun 04 May 2025 06:55:08 +0000 Files and hashes: 1: qDvPbbKI6WRw000Yr7PkqBJ5GGc.crl (hash: rt0z7UNwZ1C4dJG+1RV6K+M9RovSbm5ryubXf2zpbrc=) 2: CB67B90812E811F0B8DAD875C4F9AE02.roa (hash: ghA9EEgI0e+9HlkDLrK1eM2MR4ZuQ4ALmiWbqOT3M5E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.crl rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDvPbbKI6WRw000Yr7PkqBJ5GGc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167F95, serialNumber=A83BCF6DB288E96470D34D18AFB3E4A812791867 Validity Not Before: Apr 27 06:55:08 2025 GMT Not After : May 4 06:55:08 2025 GMT Subject: CN=680dd4cc-34de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:07:ab:1e:3f:00:ae:11:7c:00:57:d1:2c:aa: be:35:6b:94:c3:33:b6:64:5e:29:8f:36:fd:56:e6: d5:b9:c6:eb:35:c5:e7:47:57:90:6b:92:90:36:b6: 1a:a2:b3:da:97:8e:29:82:90:2c:4c:80:f9:ae:2a: 9c:91:13:69:72:80:29:f2:cd:e6:b8:c2:c2:95:8a: 3c:a9:f5:1e:25:af:ea:99:53:02:9e:52:16:9e:e9: 92:f5:28:af:f8:ee:6a:2f:5d:ad:33:5c:5b:1e:96: e6:62:bd:72:8b:67:2b:ef:fa:64:e9:bb:15:24:81: 17:8f:f0:c4:9c:7d:57:06:bc:55:e1:df:b8:30:45: 22:c8:73:97:5d:65:0c:46:ef:b3:63:a3:96:70:26: 7e:57:9b:cb:97:77:77:cc:a5:0c:b0:04:f1:fe:ef: 8e:69:ba:3d:8e:6f:fa:ae:40:21:5a:d4:32:a0:00: 70:1f:40:7f:05:fd:3a:a2:ff:26:54:8e:7a:be:65: e5:19:59:7d:bb:fc:94:87:90:28:a0:7c:09:5a:12: f3:11:9c:cf:e9:91:fb:db:d6:bc:0b:ac:1f:cb:14: a3:e0:1e:93:4f:fb:0f:71:4a:5f:bf:9f:b0:9c:61: f0:a6:63:ee:2a:1f:8d:26:a9:a4:19:6c:bb:c3:92: 4b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:68:05:00:D8:5F:47:84:E1:68:37:19:39:62:FB:AD:2C:30:C3:B4 X509v3 Authority Key Identifier: keyid:A8:3B:CF:6D:B2:88:E9:64:70:D3:4D:18:AF:B3:E4:A8:12:79:18:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDvPbbKI6WRw000Yr7PkqBJ5GGc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:d9:f2:3e:b6:2f:cc:b9:d4:19:7c:ae:b3:61:00:b3:a2:f7: 2f:ed:bb:9b:e5:d8:34:9b:1c:f1:0a:15:3a:df:24:15:e8:b9: 92:2d:1f:7c:df:a2:7b:58:4c:43:e9:9d:90:60:b3:de:a9:5d: f5:79:f9:e7:d8:e2:9e:1c:37:48:6a:6d:28:d4:dc:de:0c:44: 75:05:d2:41:9a:74:13:46:65:59:36:9e:3c:73:67:b8:3f:c2: f6:4d:87:56:5e:3c:3b:20:40:0e:41:a5:53:d6:da:7c:59:5f: 94:71:24:e8:22:3f:43:f9:16:39:2c:f1:4b:96:e3:5a:34:9b: 57:da:0d:87:42:66:24:73:39:6c:b1:49:3c:5a:e1:8c:5c:6d: 06:ed:27:a5:8f:28:0a:80:a1:26:b7:b8:4b:0e:8d:b4:e0:d5: 60:91:77:34:ee:1d:0c:c9:8e:b7:41:02:6b:5b:d5:e1:12:5d: a1:94:13:52:78:15:da:9c:a7:30:1b:fe:49:99:58:e7:03:0b: a9:49:1a:12:f0:2a:fd:8a:ff:cf:5b:6e:81:f9:3b:1d:8b:52: 36:32:a3:3d:33:af:0f:d8:38:c4:e4:e6:7d:5c:ab:80:14:66: 02:8f:73:6e:a6:bc:0a:c0:af:5b:54:1f:a1:b8:70:e6:15:01: c4:f7:30:de -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 N0Y5NTExMC8GA1UEBRMoQTgzQkNGNkRCMjg4RTk2NDcwRDM0RDE4QUZCM0U0QTgx Mjc5MTg2NzAeFw0yNTA0MjcwNjU1MDhaFw0yNTA1MDQwNjU1MDhaMBgxFjAUBgNV BAMTDTY4MGRkNGNjLTM0ZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLB6sePwCuEXwAV9Esqr41a5TDM7ZkXimPNv1W5tW5xus1xedHV5BrkpA2thqi s9qXjimCkCxMgPmuKpyRE2lygCnyzea4wsKVijyp9R4lr+qZUwKeUhae6ZL1KK/4 7movXa0zXFseluZivXKLZyvv+mTpuxUkgReP8MScfVcGvFXh37gwRSLIc5ddZQxG 77Njo5ZwJn5Xm8uXd3fMpQywBPH+745puj2Ob/quQCFa1DKgAHAfQH8F/Tqi/yZU jnq+ZeUZWX27/JSHkCigfAlaEvMRnM/pkfvb1rwLrB/LFKPgHpNP+w9xSl+/n7Cc YfCmY+4qH40mqaQZbLvDkktHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUd2gFANhf R4ThaDcZOWL7rSwww7QwHwYDVR0jBBgwFoAUqDvPbbKI6WRw000Yr7PkqBJ5GGcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3Rjk1LzdEMzNGRDM4MTJF NzExRjBCREI5NDU0REM0RjlBRTAyL3FEdlBiYktJNldSdzAwMFlyN1BrcUJKNUdH Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcUR2UGJiS0k2V1J3MDAwWXI3UGtxQko1R0djLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3 Rjk1LzdEMzNGRDM4MTJFNzExRjBCREI5NDU0REM0RjlBRTAyL3FEdlBiYktJNldS dzAwMFlyN1BrcUJKNUdHYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHzZ8j62L8y51Bl8rrNhALOi9y/tu5vl2DSbHPEKFTrfJBXouZItH3zf ontYTEPpnZBgs96pXfV5+efY4p4cN0hqbSjU3N4MRHUF0kGadBNGZVk2njxzZ7g/ wvZNh1ZePDsgQA5BpVPW2nxZX5RxJOgiP0P5Fjks8UuW41o0m1faDYdCZiRzOWyx STxa4YxcbQbtJ6WPKAqAoSa3uEsOjbTg1WCRdzTuHQzJjrdBAmtb1eESXaGUE1J4 FdqcpzAb/kmZWOcDC6lJGhLwKv2K/89bboH5Ox2LUjYyoz0zrw/YOMTk5n1cq4AU ZgKPc26mvArAr1tUH6G4cOYVAcT3MN4= -----END CERTIFICATE-----Generated at Sun Apr 27 10:27:18 2025 by rpki-client on console.sobornost.net