$ rpki-client -vvf rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.mft File: cgOKiKYdJcT0BlAl_Ca4zjuKegI.mft (raw, json) Hash identifier: 5OA+HBe+MBvuZaPtp2VvdrAfVHBcd64+nywOJenm7JQ= Subject key identifier: 32:D5:4C:F7:40:A4:5B:74:79:30:F3:A7:B0:AC:94:E8:A2:77:A5:DB Authority key identifier: 72:03:8A:88:A6:1D:25:C4:F4:06:50:25:FC:26:B8:CE:3B:8A:7A:02 Certificate issuer: /CN=A9169411/serialNumber=72038A88A61D25C4F4065025FC26B8CE3B8A7A02 Certificate serial: 025F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cgOKiKYdJcT0BlAl_Ca4zjuKegI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.mft Manifest number: 0257 Signing time: Mon 05 May 2025 01:24:46 +0000 Manifest this update: Mon 05 May 2025 01:24:46 +0000 Manifest next update: Mon 12 May 2025 01:24:46 +0000 Files and hashes: 1: cgOKiKYdJcT0BlAl_Ca4zjuKegI.crl (hash: 137whePyknQKo5cm8R383Pxgv19onC4e3Pkf0qbgVQc=) 2: DD976958C2A611EFBB1B9264C4F9AE02.roa (hash: afDoQTBXFlKBM9yUFVyCep64AS8jLGn8fXLF8BGp1Hk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.crl rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cgOKiKYdJcT0BlAl_Ca4zjuKegI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 01:24:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 607 (0x25f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169411, serialNumber=72038A88A61D25C4F4065025FC26B8CE3B8A7A02 Validity Not Before: May 5 01:24:46 2025 GMT Not After : May 12 01:24:46 2025 GMT Subject: CN=6818135e-3903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6c:e4:f3:95:80:32:d3:22:2c:3d:c2:ce:3b: e3:ef:9c:32:1c:db:fe:e4:b8:7d:70:f5:73:c8:4f: 4d:63:9d:95:48:24:b3:81:15:3a:52:92:0a:e6:8c: 7e:28:c3:d0:a7:89:17:87:c6:5e:69:f4:f8:01:e2: 90:95:04:d2:88:82:36:08:4a:1a:a0:78:1d:55:37: 69:50:86:f8:f7:ec:85:73:53:84:ed:79:3e:a7:46: 22:63:50:b2:b5:39:af:1b:e7:f4:cc:ce:3e:b0:a7: ab:ee:0d:fe:c5:f7:7a:22:60:d2:15:39:ff:de:19: 22:cb:56:27:d2:a0:e8:cc:68:1c:67:f7:16:b5:7a: de:c7:0c:60:9f:67:47:8a:34:a2:bf:2c:05:cc:a8: 7c:46:bd:87:9d:61:8c:28:8a:ac:47:24:03:06:0e: d1:de:8c:0b:88:8a:81:70:b3:30:75:7f:f3:be:d9: da:ee:63:43:ca:4a:72:b2:da:0c:fc:6f:cd:43:ee: 88:7f:30:76:f6:81:dd:65:bc:8e:1a:30:64:8f:a3: 1b:4f:ce:62:d5:d3:8a:63:81:8a:b2:d8:27:7b:42: e3:14:48:38:b1:a9:d6:87:c2:5b:95:42:19:fc:fe: fd:ef:95:ee:53:37:5b:2d:2b:a7:7a:56:a8:4a:f5: e4:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:D5:4C:F7:40:A4:5B:74:79:30:F3:A7:B0:AC:94:E8:A2:77:A5:DB X509v3 Authority Key Identifier: keyid:72:03:8A:88:A6:1D:25:C4:F4:06:50:25:FC:26:B8:CE:3B:8A:7A:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cgOKiKYdJcT0BlAl_Ca4zjuKegI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:2b:09:34:c3:16:c9:eb:7b:38:0d:4a:d9:5d:6a:5a:cb:89: 3a:b9:fb:8f:41:b7:45:a3:f0:00:23:9e:e9:a7:60:33:94:63: 7d:bf:c3:64:fc:37:95:e2:68:6d:37:a8:0a:94:17:a7:4f:51: b8:37:e8:15:89:79:f7:7b:72:a7:f1:91:d2:26:9a:10:42:a5: 92:b2:ad:79:98:5e:60:4a:5d:ad:d7:d5:9d:0a:73:2c:7d:05: 34:0c:d9:61:5a:33:2e:86:49:ba:dc:72:4a:c8:67:40:22:8e: 3b:26:31:51:77:e1:c3:b3:d7:c8:51:0a:c6:da:23:4e:17:4c: 6d:cf:ea:69:3a:87:e4:ec:84:a3:54:70:7f:27:1c:7c:52:91: 59:8e:1b:4b:83:ef:c7:68:7d:47:58:d8:31:6c:80:0c:d1:6a: 28:91:dd:fe:38:7d:c8:7a:b0:07:5e:97:a8:77:28:1c:79:cd: 9f:1c:db:ff:aa:e1:06:33:7f:58:51:bc:c8:6d:20:ef:74:5e: d6:2c:86:b0:ee:4c:c8:ce:7a:a6:52:a2:36:f3:f6:2d:37:60: bb:f0:ac:53:10:55:94:9d:6f:7a:26:8b:61:08:b9:25:cd:97: 8a:c8:e9:00:90:90:97:8c:86:48:94:c0:46:bb:6b:8c:c6:27: 30:fa:a4:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk0MTExMTAvBgNVBAUTKDcyMDM4QTg4QTYxRDI1QzRGNDA2NTAyNUZDMjZCOENF M0I4QTdBMDIwHhcNMjUwNTA1MDEyNDQ2WhcNMjUwNTEyMDEyNDQ2WjAYMRYwFAYD VQQDEw02ODE4MTM1ZS0zOTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp2zk85WAMtMiLD3Czjvj75wyHNv+5Lh9cPVzyE9NY52VSCSzgRU6UpIK5ox+ KMPQp4kXh8ZeafT4AeKQlQTSiII2CEoaoHgdVTdpUIb49+yFc1OE7Xk+p0YiY1Cy tTmvG+f0zM4+sKer7g3+xfd6ImDSFTn/3hkiy1Yn0qDozGgcZ/cWtXrexwxgn2dH ijSivywFzKh8Rr2HnWGMKIqsRyQDBg7R3owLiIqBcLMwdX/zvtna7mNDykpystoM /G/NQ+6IfzB29oHdZbyOGjBkj6MbT85i1dOKY4GKstgne0LjFEg4sanWh8JblUIZ /P7975XuUzdbLSunelaoSvXkpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDLVTPdA pFt0eTDzp7CslOiid6XbMB8GA1UdIwQYMBaAFHIDioimHSXE9AZQJfwmuM47inoC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTQxMS85MTg1M0EwNjE4 QkYxMUVEQUREQzkyM0FDNEY5QUUwMi9jZ09LaUtZZEpjVDBCbEFsX0NhNHpqdUtl Z0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NnT0tpS1lkSmNUMEJsQWxfQ2E0emp1S2VnSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTQxMS85MTg1M0EwNjE4QkYxMUVEQUREQzkyM0FDNEY5QUUwMi9jZ09LaUtZZEpj VDBCbEFsX0NhNHpqdUtlZ0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZKwk0wxbJ63s4DUrZXWpay4k6ufuPQbdFo/AAI57pp2AzlGN9v8Nk /DeV4mhtN6gKlBenT1G4N+gViXn3e3Kn8ZHSJpoQQqWSsq15mF5gSl2t19WdCnMs fQU0DNlhWjMuhkm63HJKyGdAIo47JjFRd+HDs9fIUQrG2iNOF0xtz+ppOofk7ISj VHB/Jxx8UpFZjhtLg+/HaH1HWNgxbIAM0Wookd3+OH3IerAHXpeodygcec2fHNv/ quEGM39YUbzIbSDvdF7WLIaw7kzIznqmUqI28/YtN2C78KxTEFWUnW96JothCLkl zZeKyOkAkJCXjIZIlMBGu2uMxicw+qRH -----END CERTIFICATE-----Generated at Mon May 5 09:46:36 2025 by rpki-client on console.sobornost.net