$ rpki-client -vvf rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/9HpCypKdg34XkyvKB9ZfgiyWRMs.mft File: 9HpCypKdg34XkyvKB9ZfgiyWRMs.mft (raw, json) Hash identifier: QrGq9vnbd0GgyA9C/JyCOq3GnxFAqGvKAgHFx3P/LQA= Subject key identifier: D0:70:90:E2:8C:F3:84:D7:73:86:BC:02:22:0C:D0:88:64:19:5F:86 Authority key identifier: F4:7A:42:CA:92:9D:83:7E:17:93:2B:CA:07:D6:5F:82:2C:96:44:CB Certificate issuer: /CN=A9169A9C/serialNumber=F47A42CA929D837E17932BCA07D65F822C9644CB Certificate serial: F0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9HpCypKdg34XkyvKB9ZfgiyWRMs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/9HpCypKdg34XkyvKB9ZfgiyWRMs.mft Manifest number: EE Signing time: Sun 27 Apr 2025 03:18:30 +0000 Manifest this update: Sun 27 Apr 2025 03:18:30 +0000 Manifest next update: Sun 04 May 2025 03:18:30 +0000 Files and hashes: 1: 9HpCypKdg34XkyvKB9ZfgiyWRMs.crl (hash: nCmwQZVB0bH1odfxrmkemDRpw97ZgeMq/Wp+d9N8TZU=) 2: 79A50468BCA911EE8F42E684C4F9AE02.roa (hash: WCxfAGIVMH/a++ZJ4jx3iPBs/9NLSjs9q4Xkq6Czo34=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/9HpCypKdg34XkyvKB9ZfgiyWRMs.crl rsync://rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/9HpCypKdg34XkyvKB9ZfgiyWRMs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9HpCypKdg34XkyvKB9ZfgiyWRMs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 240 (0xf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169A9C, serialNumber=F47A42CA929D837E17932BCA07D65F822C9644CB Validity Not Before: Apr 27 03:18:30 2025 GMT Not After : May 4 03:18:30 2025 GMT Subject: CN=680da206-3302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ef:f4:e5:16:b0:0d:03:be:b1:ac:b3:72:56: cb:54:0d:e0:fe:e4:32:25:ed:dd:3a:f1:28:e3:96: 57:82:bd:79:4f:59:58:e7:77:82:88:7a:cd:e7:d4: fe:24:d7:8e:ed:f2:3a:c7:79:a1:55:d6:38:e6:f1: d0:03:e2:d8:5a:16:ec:33:02:8d:f8:fb:a1:3f:fd: 6e:78:ed:8d:45:99:c0:54:d6:ab:ea:d8:67:61:44: f3:26:18:b4:e7:6c:43:00:c7:93:6a:bf:f2:e3:66: c3:b0:46:ce:93:f8:3c:63:19:44:40:e4:8b:90:ac: b1:b8:bf:3b:30:7a:f5:24:92:8b:f6:2f:1f:93:da: 84:17:f1:95:49:4c:ee:9c:9e:9d:71:d8:62:62:49: 8d:f5:6e:d9:8a:0b:5a:9f:d0:2a:c5:f1:84:08:bd: ed:4d:f6:be:49:c5:1e:9f:ad:33:34:44:80:f4:12: d9:5f:e1:5b:3d:6b:3e:35:f1:06:eb:a8:9c:0e:b5: bb:85:2b:c5:bf:b2:82:15:7c:6b:24:55:f3:07:9a: 5e:b6:18:02:9c:2a:fe:0d:51:6d:50:a0:2b:3d:13: 8c:d0:6c:0d:2a:56:ce:ef:7d:2d:36:96:44:01:35: 9c:2b:25:05:fe:0f:ac:2a:41:8d:26:26:81:ec:9c: 3b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:70:90:E2:8C:F3:84:D7:73:86:BC:02:22:0C:D0:88:64:19:5F:86 X509v3 Authority Key Identifier: keyid:F4:7A:42:CA:92:9D:83:7E:17:93:2B:CA:07:D6:5F:82:2C:96:44:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/9HpCypKdg34XkyvKB9ZfgiyWRMs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9HpCypKdg34XkyvKB9ZfgiyWRMs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/9HpCypKdg34XkyvKB9ZfgiyWRMs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:a1:49:00:3e:2f:f1:d1:0b:0f:e6:0d:e1:61:03:61:e5:09: b2:db:e2:1c:e3:91:1a:68:6d:8e:87:74:ed:aa:11:68:50:95: 36:81:55:e6:8e:9a:7a:6a:7e:62:5f:c3:ba:1d:2d:7f:31:f7: 0c:2a:3a:94:5f:3c:c8:64:0d:7b:57:dd:56:ad:f6:1c:2d:aa: c0:53:b2:96:41:79:6f:fe:8b:d4:d1:fe:c6:d4:66:55:41:25: 04:bb:32:cb:65:98:bc:f9:a1:07:66:ed:ed:7d:8b:4a:67:fe: 17:32:c5:53:d5:ee:84:ea:4c:01:d9:2b:bb:d9:df:4c:a1:35: 0c:d2:f2:ee:46:b9:94:6e:4b:41:75:ec:9c:28:8d:bc:28:a2: e8:b8:17:d2:6e:33:21:35:e4:55:e6:cf:66:75:a0:8a:02:76: ae:72:02:4b:9c:4a:9b:21:d0:ef:98:c2:bd:02:b6:17:c3:93: ea:12:30:0a:6e:05:25:b2:e4:b1:c6:d6:1e:cf:18:44:11:80: 93:33:55:b1:66:e0:8a:e2:c2:c1:e7:82:8b:b6:44:c0:49:d7: 22:3c:f8:b7:dd:7f:f1:a4:c1:0e:d8:b4:72:6d:90:35:3f:24: 0c:57:45:c0:5e:e9:d0:b4:71:dd:e1:d2:f7:f0:b3:4e:35:32: b6:bf:0a:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlBOUMxMTAvBgNVBAUTKEY0N0E0MkNBOTI5RDgzN0UxNzkzMkJDQTA3RDY1Rjgy MkM5NjQ0Q0IwHhcNMjUwNDI3MDMxODMwWhcNMjUwNTA0MDMxODMwWjAYMRYwFAYD VQQDEw02ODBkYTIwNi0zMzAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAve/05RawDQO+sayzclbLVA3g/uQyJe3dOvEo45ZXgr15T1lY53eCiHrN59T+ JNeO7fI6x3mhVdY45vHQA+LYWhbsMwKN+PuhP/1ueO2NRZnAVNar6thnYUTzJhi0 52xDAMeTar/y42bDsEbOk/g8YxlEQOSLkKyxuL87MHr1JJKL9i8fk9qEF/GVSUzu nJ6dcdhiYkmN9W7Zigtan9AqxfGECL3tTfa+ScUen60zNESA9BLZX+FbPWs+NfEG 66icDrW7hSvFv7KCFXxrJFXzB5pethgCnCr+DVFtUKArPROM0GwNKlbO730tNpZE ATWcKyUF/g+sKkGNJiaB7Jw7NwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNBwkOKM 84TXc4a8AiIM0IhkGV+GMB8GA1UdIwQYMBaAFPR6QsqSnYN+F5MrygfWX4IslkTL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUE5Qy83MTE0ODQzRUJD MzgxMUVFQTUxNTMxM0JDNEY5QUUwMi85SHBDeXBLZGczNFhreXZLQjlaZmdpeVdS TXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzlIcEN5cEtkZzM0WGt5dktCOVpmZ2l5V1JNcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUE5Qy83MTE0ODQzRUJDMzgxMUVFQTUxNTMxM0JDNEY5QUUwMi85SHBDeXBLZGcz NFhreXZLQjlaZmdpeVdSTXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3oUkAPi/x0QsP5g3hYQNh5Qmy2+Ic45EaaG2Oh3TtqhFoUJU2gVXm jpp6an5iX8O6HS1/MfcMKjqUXzzIZA17V91WrfYcLarAU7KWQXlv/ovU0f7G1GZV QSUEuzLLZZi8+aEHZu3tfYtKZ/4XMsVT1e6E6kwB2Su72d9MoTUM0vLuRrmUbktB deycKI28KKLouBfSbjMhNeRV5s9mdaCKAnaucgJLnEqbIdDvmMK9ArYXw5PqEjAK bgUlsuSxxtYezxhEEYCTM1WxZuCK4sLB54KLtkTASdciPPi33X/xpMEO2LRybZA1 PyQMV0XAXunQtHHd4dL38LNONTK2vwpC -----END CERTIFICATE-----Generated at Sun Apr 27 05:42:00 2025 by rpki-client on console.sobornost.net