$ rpki-client -vvf rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft File: rwJRH3yA38Do7VBvZjD2e9ZADgk.mft (raw, json) Hash identifier: L0aojyt2zh/4QCNyDz7CTk3qaXc69JgjwXBYx2dAuw0= Subject key identifier: 9A:69:02:8E:8B:DE:34:66:B5:05:98:C5:BD:1E:CE:3E:6C:E1:BC:57 Authority key identifier: AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09 Certificate issuer: /CN=A9168B4A/serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09 Certificate serial: 140B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft Manifest number: 13F8 Signing time: Mon 28 Apr 2025 17:10:14 +0000 Manifest this update: Mon 28 Apr 2025 17:10:13 +0000 Manifest next update: Mon 05 May 2025 17:10:13 +0000 Files and hashes: 1: rwJRH3yA38Do7VBvZjD2e9ZADgk.crl (hash: 0XoYfZYe/1sYqxJrgQnSZFm3hd7K9rgi8HVgj9+uGR4=) 2: 4C6227D2B69B11EFA181E00AC4F9AE02.roa (hash: 3UDqux2pyFF/Bk7qZfNBKUplKVtNPBgZPpnXk8snk4g=) 3: 26F19BD2EFFE11EDA34BD84DC4F9AE02.roa (hash: OwQjzjq4z1p3OKHRKYKyS/M55XVWZ+v6tClUy+yiWnc=) 4: 7F444842C3A411ED8EFA6F13C4F9AE02.roa (hash: PdnkTM08eG2sjPAy8+yW/MtnozIOdAkbD6OPtta7i0w=) 5: 7EA2ADC0C3A411ED8EFA6F13C4F9AE02.roa (hash: TNsMJFZbcdKegim5sz+iSFbDGvmlLTbjneRhrtC2NlE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 17:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5131 (0x140b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168B4A, serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09 Validity Not Before: Apr 28 17:10:13 2025 GMT Not After : May 5 17:10:13 2025 GMT Subject: CN=680fb675-89be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8b:42:cf:24:45:a5:72:c5:95:c4:87:1d:6e: 33:bb:c6:1d:71:41:94:16:ec:5c:e6:3f:cd:bc:a7: b9:94:76:10:1d:98:b0:07:a3:f1:12:67:05:d3:85: ed:e9:bb:40:74:08:a0:83:a5:cf:ed:2c:0b:38:80: 14:4a:f7:7f:96:76:87:06:d6:42:40:e0:05:69:6b: d3:0b:5a:2a:b0:2e:f5:ee:53:f8:06:37:48:08:c7: 0c:08:2f:ab:5f:dc:58:33:6e:37:a3:9b:e5:98:ea: f1:35:63:81:47:fb:fa:00:6c:12:03:65:0e:fd:a5: 46:39:17:42:c9:af:2b:b7:61:d5:cb:b2:e0:3a:d9: 3c:25:ac:65:07:27:3e:8d:81:2b:a0:73:e8:15:d3: f1:5e:83:08:5f:aa:aa:6d:81:d4:f7:16:4b:aa:d1: f7:92:02:b2:88:8a:15:c5:d5:12:6f:9c:2f:2b:d7: 39:f7:c3:e2:61:24:50:8c:32:2d:6d:8b:d5:d0:d4: d3:1b:b5:ce:17:5d:03:91:9e:09:a5:b6:9c:66:e2: 98:08:9d:50:29:eb:b6:83:4a:76:1b:8b:13:a3:3d: 9c:a8:47:01:c0:5a:ba:c5:3b:69:2a:26:92:f7:4f: 80:1d:f5:7c:ed:3e:e3:f6:ec:ac:dd:02:5f:81:2c: d8:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:69:02:8E:8B:DE:34:66:B5:05:98:C5:BD:1E:CE:3E:6C:E1:BC:57 X509v3 Authority Key Identifier: keyid:AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:8b:9c:3f:5a:84:96:51:f0:a7:0e:14:78:c5:a4:29:f3:c2: 5b:7e:d9:8d:ae:ee:6e:81:0b:25:0a:9b:92:bc:6b:c2:3f:4f: 17:80:2e:b0:a9:3d:2c:60:36:f2:6b:3b:8a:71:24:48:fd:74: 8d:90:fc:6e:6a:42:09:37:ec:c6:a1:c0:89:68:43:17:c2:38: e4:63:1f:ba:a5:ac:8d:9f:95:70:5c:ca:1a:69:83:70:df:68: 43:16:eb:af:ec:14:c3:14:c8:7d:b5:1c:1a:e3:a4:ac:7b:66: 77:2b:d1:06:bc:40:7d:ee:46:63:7d:00:fb:f7:23:f2:0a:ed: 78:5c:b1:8e:de:89:59:63:dc:d9:68:2e:f7:b2:61:01:b8:33: be:ea:c0:30:52:36:ab:7a:1f:43:f4:39:80:e6:0a:fe:06:3d: ab:53:28:4f:aa:8a:54:c6:e5:ad:69:5f:59:dd:03:82:1b:b5: 37:34:fb:78:73:36:57:5b:1c:f3:98:23:92:c8:5f:0e:d1:06: 6a:52:a0:97:cb:65:d3:db:3b:ea:f8:10:13:a7:9f:ef:68:b5: 14:5a:4a:53:f1:99:10:97:9b:c2:39:62:6a:dd:21:54:9b:2c: 42:42:8f:f5:73:cb:b4:c8:52:5f:85:40:f9:6a:ba:e4:88:30: c3:63:2e:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFAswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhCNEExMTAvBgNVBAUTKEFGMDI1MTFGN0M4MERGQzBFOEVENTA2RjY2MzBGNjdC RDY0MDBFMDkwHhcNMjUwNDI4MTcxMDEzWhcNMjUwNTA1MTcxMDEzWjAYMRYwFAYD VQQDEw02ODBmYjY3NS04OWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt4tCzyRFpXLFlcSHHW4zu8YdcUGUFuxc5j/NvKe5lHYQHZiwB6PxEmcF04Xt 6btAdAigg6XP7SwLOIAUSvd/lnaHBtZCQOAFaWvTC1oqsC717lP4BjdICMcMCC+r X9xYM243o5vlmOrxNWOBR/v6AGwSA2UO/aVGORdCya8rt2HVy7LgOtk8JaxlByc+ jYEroHPoFdPxXoMIX6qqbYHU9xZLqtH3kgKyiIoVxdUSb5wvK9c598PiYSRQjDIt bYvV0NTTG7XOF10DkZ4JpbacZuKYCJ1QKeu2g0p2G4sToz2cqEcBwFq6xTtpKiaS 90+AHfV87T7j9uys3QJfgSzYCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJppAo6L 3jRmtQWYxb0ezj5s4bxXMB8GA1UdIwQYMBaAFK8CUR98gN/A6O1Qb2Yw9nvWQA4J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEI0QS8wQURCMTdDMDgw MEExMUU4OUI0ODNFN0NDNEY5QUUwMi9yd0pSSDN5QTM4RG83VkJ2WmpEMmU5WkFE Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3J3SlJIM3lBMzhEbzdWQnZaakQyZTlaQURnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OEI0QS8wQURCMTdDMDgwMEExMUU4OUI0ODNFN0NDNEY5QUUwMi9yd0pSSDN5QTM4 RG83VkJ2WmpEMmU5WkFEZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7i5w/WoSWUfCnDhR4xaQp88JbftmNru5ugQslCpuSvGvCP08XgC6w qT0sYDbyazuKcSRI/XSNkPxuakIJN+zGocCJaEMXwjjkYx+6payNn5VwXMoaaYNw 32hDFuuv7BTDFMh9tRwa46Sse2Z3K9EGvEB97kZjfQD79yPyCu14XLGO3olZY9zZ aC73smEBuDO+6sAwUjareh9D9DmA5gr+Bj2rUyhPqopUxuWtaV9Z3QOCG7U3NPt4 czZXWxzzmCOSyF8O0QZqUqCXy2XT2zvq+BATp5/vaLUUWkpT8ZkQl5vCOWJq3SFU myxCQo/1c8u0yFJfhUD5arrkiDDDYy4p -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:39 2025 by rpki-client on console.sobornost.net