$ rpki-client -vvf rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft File: xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft (raw, json) Hash identifier: wGjCwE3nsfC4xrXdKy7HFBDaSuCUFfhB9X03l1OicWE= Subject key identifier: 9E:C6:21:6B:F3:65:85:DA:6D:36:6D:39:E6:77:C5:4C:20:2F:B4:8D Authority key identifier: C4:17:15:FE:F2:00:13:3D:91:23:25:0F:BB:65:31:E8:8A:4A:99:DA Certificate issuer: /CN=A9169ADA/serialNumber=C41715FEF200133D9123250FBB6531E88A4A99DA Certificate serial: 0E3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft Manifest number: 0E1F Signing time: Mon 28 Apr 2025 18:02:02 +0000 Manifest this update: Mon 28 Apr 2025 18:02:01 +0000 Manifest next update: Mon 05 May 2025 18:02:01 +0000 Files and hashes: 1: xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl (hash: E6UuuuOxp9uqFnzdEl+bUZQXMm0pEtKTc9WRiHO8Afo=) 2: C16E8E16256511EA98F3D465C4F9AE02.roa (hash: K0BpqfADIAgpRrVb5VAxiR5k6a1N4eJk58+OYvAmefI=) 3: AF573166309511EABE9B5934C4F9AE02.roa (hash: wBVLudr4r1jyDPH+Ghnt4yYJmAXvAyl8ooTj+H1Y8oI=) 4: BBE075C6906911EF97FA0D58C4F9AE02.roa (hash: JffyrCPpCuKQ4JV9hKAHpBOYaMhGWQal4zN+8n2snKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 18:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3645 (0xe3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169ADA, serialNumber=C41715FEF200133D9123250FBB6531E88A4A99DA Validity Not Before: Apr 28 18:02:01 2025 GMT Not After : May 5 18:02:01 2025 GMT Subject: CN=680fc299-0454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:cd:a4:3e:c2:34:fe:30:f4:dd:71:e8:6c:ce: 0c:de:86:e6:92:bf:1d:73:5d:47:8f:24:0a:bb:53: 93:75:11:f0:95:1f:41:ac:ed:46:5d:e6:f0:4e:d6: 53:3a:e9:b3:0f:ee:56:14:0c:72:c7:fa:c5:40:df: 19:5c:85:49:50:3f:4c:7b:5b:57:9a:30:b4:1c:8a: 5a:9f:3d:01:f6:48:94:a1:e6:00:79:42:4d:c9:01: fc:ae:65:c3:88:f5:75:ed:f6:43:a2:20:48:56:d9: 99:37:d3:20:32:b4:78:a0:89:2e:87:d1:4b:df:0e: 72:b7:34:83:e2:86:e9:16:3c:50:69:89:37:94:5d: fe:cd:8e:53:8b:14:99:e7:f6:99:10:54:17:5c:ea: 98:fd:55:8d:20:3b:03:16:c5:f3:f4:ba:b5:b3:99: 6e:9c:4f:db:f9:f4:c8:d4:17:06:3c:42:fa:8a:21: 59:65:1f:02:42:6f:ff:a9:6c:c3:c1:d6:54:b2:f9: a5:f8:71:ee:be:09:3b:eb:6c:ec:c8:3e:6e:81:ac: 46:61:67:1d:25:e9:f7:0c:17:29:46:c5:bc:53:30: 9f:dc:03:1e:d2:ff:0b:a0:7c:41:6e:72:1d:50:f7: ac:ff:bb:18:ee:87:88:bd:bc:4f:ce:1e:d0:17:34: dc:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:C6:21:6B:F3:65:85:DA:6D:36:6D:39:E6:77:C5:4C:20:2F:B4:8D X509v3 Authority Key Identifier: keyid:C4:17:15:FE:F2:00:13:3D:91:23:25:0F:BB:65:31:E8:8A:4A:99:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:f8:60:6d:22:89:bc:b0:34:82:29:94:7f:24:c9:09:9a:7d: 06:e9:32:32:a7:77:be:10:9c:1c:2a:a4:14:3a:a8:11:63:7e: 68:37:fa:a7:f8:e3:61:96:8e:cd:8b:56:5f:85:88:46:28:73: 12:3e:2c:da:d0:6c:1d:e9:d4:be:a6:83:3f:6b:7f:b0:75:92: 4c:6a:bb:15:e8:95:32:e0:23:2b:a0:a6:8b:fd:92:30:aa:a7: ec:0b:44:6a:b7:50:ad:d3:7e:7a:f3:9c:58:33:01:3b:e8:6a: bd:0a:19:90:26:79:f6:12:ba:ff:a9:88:51:8f:a6:8d:58:c6: b7:5c:bb:3e:50:c6:15:e5:9e:ac:b4:c6:81:e1:c4:c3:09:ed: 12:d9:01:ee:93:a5:9f:81:00:40:01:8b:6f:31:8a:21:de:77: a9:ee:04:cb:6e:be:88:ac:08:d9:de:c6:1e:3f:3c:31:df:ce: c9:ff:99:11:13:8d:3b:b9:9a:a7:66:29:a5:c8:57:bb:21:f8: 23:47:a3:ab:72:bd:3d:17:98:f9:a6:4e:dd:fc:e9:d0:3e:8e: 05:7f:30:ca:8a:f2:bd:96:62:6f:4f:47:57:a1:b4:8a:ed:7c: db:7c:b4:25:72:68:eb:75:5c:33:82:38:44:4a:10:fa:eb:1d: 16:f3:4f:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlBREExMTAvBgNVBAUTKEM0MTcxNUZFRjIwMDEzM0Q5MTIzMjUwRkJCNjUzMUU4 OEE0QTk5REEwHhcNMjUwNDI4MTgwMjAxWhcNMjUwNTA1MTgwMjAxWjAYMRYwFAYD VQQDEw02ODBmYzI5OS0wNDU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7M2kPsI0/jD03XHobM4M3obmkr8dc11HjyQKu1OTdRHwlR9BrO1GXebwTtZT OumzD+5WFAxyx/rFQN8ZXIVJUD9Me1tXmjC0HIpanz0B9kiUoeYAeUJNyQH8rmXD iPV17fZDoiBIVtmZN9MgMrR4oIkuh9FL3w5ytzSD4obpFjxQaYk3lF3+zY5TixSZ 5/aZEFQXXOqY/VWNIDsDFsXz9Lq1s5lunE/b+fTI1BcGPEL6iiFZZR8CQm//qWzD wdZUsvml+HHuvgk762zsyD5ugaxGYWcdJen3DBcpRsW8UzCf3AMe0v8LoHxBbnId UPes/7sY7oeIvbxPzh7QFzTc0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ7GIWvz ZYXabTZtOeZ3xUwgL7SNMB8GA1UdIwQYMBaAFMQXFf7yABM9kSMlD7tlMeiKSpna MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUFEQS9GRjMyMDFDRUE2 QjIxMUU5OEQyQjE4NjBDNEY5QUUwMi94QmNWX3ZJQUV6MlJJeVVQdTJVeDZJcEtt ZG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hCY1ZfdklBRXoyUkl5VVB1MlV4NklwS21kby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUFEQS9GRjMyMDFDRUE2QjIxMUU5OEQyQjE4NjBDNEY5QUUwMi94QmNWX3ZJQUV6 MlJJeVVQdTJVeDZJcEttZG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCW+GBtIom8sDSCKZR/JMkJmn0G6TIyp3e+EJwcKqQUOqgRY35oN/qn +ONhlo7Ni1ZfhYhGKHMSPiza0Gwd6dS+poM/a3+wdZJMarsV6JUy4CMroKaL/ZIw qqfsC0Rqt1Ct035685xYMwE76Gq9ChmQJnn2Err/qYhRj6aNWMa3XLs+UMYV5Z6s tMaB4cTDCe0S2QHuk6WfgQBAAYtvMYoh3nep7gTLbr6IrAjZ3sYePzwx387J/5kR E407uZqnZimlyFe7IfgjR6Orcr09F5j5pk7d/OnQPo4FfzDKivK9lmJvT0dXobSK 7XzbfLQlcmjrdVwzgjhEShD66x0W809y -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:39 2025 by rpki-client on console.sobornost.net