$ rpki-client -vvf rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.mft File: rRYSQOl6MtEDCZunigKM0J9fW5M.mft (raw, json) Hash identifier: ExzCk0ix9MC+c60H9rAOyg7hyeAwzABKJgRFZ7sF3vo= Subject key identifier: A2:62:6F:2B:BB:96:3B:B2:14:72:82:12:4F:3F:3C:BE:20:B0:35:77 Authority key identifier: AD:16:12:40:E9:7A:32:D1:03:09:9B:A7:8A:02:8C:D0:9F:5F:5B:93 Certificate issuer: /CN=A9169BAF/serialNumber=AD161240E97A32D103099BA78A028CD09F5F5B93 Certificate serial: DE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rRYSQOl6MtEDCZunigKM0J9fW5M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.mft Manifest number: DB Signing time: Sun 27 Apr 2025 04:25:59 +0000 Manifest this update: Sun 27 Apr 2025 04:25:58 +0000 Manifest next update: Sun 04 May 2025 04:25:58 +0000 Files and hashes: 1: rRYSQOl6MtEDCZunigKM0J9fW5M.crl (hash: zAzGpZRn34orhyyvgum5W8rNJLpAX6VKllLl4lxwB7U=) 2: 122C6942D9CE11EEB6EA7F6CC4F9AE02.roa (hash: p/CKDmdi14SpnAXglq6STJnT5JwJ1Aph3AE4B1BxPGM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.crl rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rRYSQOl6MtEDCZunigKM0J9fW5M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 222 (0xde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169BAF, serialNumber=AD161240E97A32D103099BA78A028CD09F5F5B93 Validity Not Before: Apr 27 04:25:58 2025 GMT Not After : May 4 04:25:58 2025 GMT Subject: CN=680db1d6-974b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:57:6f:fc:9d:d9:f4:11:8b:f5:b0:88:74:39: f3:1d:b7:81:9a:6e:64:18:ab:bb:d4:2b:5b:18:e3: 4a:ac:f9:fb:1b:8e:b8:1a:d6:21:f2:26:b7:fe:4f: 82:8f:83:37:bd:66:87:3f:4e:f0:2d:d7:9a:04:25: fe:99:50:f0:cc:23:59:fa:9d:61:b7:a8:cf:e3:3e: 6e:02:0b:a0:ad:8f:cc:44:98:cb:80:a3:55:14:da: 6a:42:1c:bd:21:95:a3:ed:69:c7:1b:12:bb:86:5a: 1b:c9:01:0a:50:18:16:f1:d9:b9:32:f1:18:e4:a8: 3e:b6:c3:d9:77:be:81:39:d9:c3:58:ae:f6:6d:5f: 4f:3a:91:49:d1:53:30:29:c8:be:a0:53:4e:4b:e0: 81:f5:7a:2b:5b:52:65:7e:bc:33:8d:43:a4:7c:aa: ca:34:ad:5d:b6:e0:c3:0a:61:6c:dc:0a:b5:a0:bd: e7:81:f8:fe:53:08:9a:22:49:ba:29:86:49:90:2d: cc:97:05:06:0c:72:df:e8:9e:cd:3e:0e:be:c7:cc: f4:0e:92:f9:ee:9e:71:34:ba:9e:fa:32:3f:f9:0c: 18:98:29:b9:2b:1d:09:67:cb:a2:59:ae:c8:63:ce: 52:90:ad:9a:28:47:b7:3f:58:41:a6:01:43:0b:5b: 5c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:62:6F:2B:BB:96:3B:B2:14:72:82:12:4F:3F:3C:BE:20:B0:35:77 X509v3 Authority Key Identifier: keyid:AD:16:12:40:E9:7A:32:D1:03:09:9B:A7:8A:02:8C:D0:9F:5F:5B:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rRYSQOl6MtEDCZunigKM0J9fW5M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:1e:d1:77:0e:b4:a4:8d:e8:b9:71:00:e4:bd:55:4f:2a:08: 2d:58:5c:d2:8f:13:e7:b1:42:65:7e:22:2a:de:9d:70:65:2a: d1:1b:b3:f7:d4:ba:84:60:fc:98:d9:d2:5d:93:db:ea:ef:90: 4d:de:cc:bf:c4:16:76:86:67:83:80:56:24:cd:a4:13:2b:e6: c5:4c:72:4e:30:39:2a:9b:ab:8e:d1:a1:19:d9:1b:51:26:73: 77:41:8d:37:34:12:43:8d:ca:55:b6:cf:ab:d5:27:d9:b2:4f: f0:5c:16:75:37:e6:d1:c8:47:f6:89:7c:40:bb:1e:c1:e6:21: 5f:3c:50:16:43:86:27:65:8f:13:ff:4a:20:13:ed:8f:1f:e2: b2:68:68:fa:68:13:93:00:0d:df:99:41:a6:46:e2:63:35:1e: 72:03:19:af:8b:86:42:46:36:6f:f3:5c:71:90:6b:47:17:83: a8:50:5c:93:93:86:9c:da:11:f9:d1:e9:37:b3:f0:42:3f:c0: bc:49:94:dc:1d:6c:9b:c4:d2:96:54:4d:41:81:f0:f8:c5:1c: 3d:75:27:c7:f5:a2:34:14:6f:b3:b7:d0:21:42:df:a6:15:4b: e7:59:0a:44:a3:7d:37:bd:1a:06:aa:6d:5f:14:f9:fd:11:4e: ab:a9:6f:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlCQUYxMTAvBgNVBAUTKEFEMTYxMjQwRTk3QTMyRDEwMzA5OUJBNzhBMDI4Q0Qw OUY1RjVCOTMwHhcNMjUwNDI3MDQyNTU4WhcNMjUwNTA0MDQyNTU4WjAYMRYwFAYD VQQDEw02ODBkYjFkNi05NzRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArFdv/J3Z9BGL9bCIdDnzHbeBmm5kGKu71CtbGONKrPn7G464GtYh8ia3/k+C j4M3vWaHP07wLdeaBCX+mVDwzCNZ+p1ht6jP4z5uAgugrY/MRJjLgKNVFNpqQhy9 IZWj7WnHGxK7hlobyQEKUBgW8dm5MvEY5Kg+tsPZd76BOdnDWK72bV9POpFJ0VMw Kci+oFNOS+CB9XorW1JlfrwzjUOkfKrKNK1dtuDDCmFs3Aq1oL3ngfj+UwiaIkm6 KYZJkC3MlwUGDHLf6J7NPg6+x8z0DpL57p5xNLqe+jI/+QwYmCm5Kx0JZ8uiWa7I Y85SkK2aKEe3P1hBpgFDC1tcdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKJibyu7 ljuyFHKCEk8/PL4gsDV3MB8GA1UdIwQYMBaAFK0WEkDpejLRAwmbp4oCjNCfX1uT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUJBRi9BRUY3MDQ5MEQ5 QkUxMUVFQUM1QkQzNkRDNEY5QUUwMi9yUllTUU9sNk10RURDWnVuaWdLTTBKOWZX NU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3JSWVNRT2w2TXRFRENadW5pZ0tNMEo5Zlc1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUJBRi9BRUY3MDQ5MEQ5QkUxMUVFQUM1QkQzNkRDNEY5QUUwMi9yUllTUU9sNk10 RURDWnVuaWdLTTBKOWZXNU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDHtF3DrSkjei5cQDkvVVPKggtWFzSjxPnsUJlfiIq3p1wZSrRG7P3 1LqEYPyY2dJdk9vq75BN3sy/xBZ2hmeDgFYkzaQTK+bFTHJOMDkqm6uO0aEZ2RtR JnN3QY03NBJDjcpVts+r1SfZsk/wXBZ1N+bRyEf2iXxAux7B5iFfPFAWQ4YnZY8T /0ogE+2PH+KyaGj6aBOTAA3fmUGmRuJjNR5yAxmvi4ZCRjZv81xxkGtHF4OoUFyT k4ac2hH50ek3s/BCP8C8SZTcHWybxNKWVE1BgfD4xRw9dSfH9aI0FG+zt9AhQt+m FUvnWQpEo303vRoGqm1fFPn9EU6rqW8K -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:48 2025 by rpki-client on console.sobornost.net