$ rpki-client -vvf rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft File: rEGRrDoak5bnjWEvN026zI8tkbU.mft (raw, json) Hash identifier: dbvjv/z87i42exHED1vghO3NAIRsCp4pdpK+nVbPEhA= Subject key identifier: 66:F4:27:88:B5:1F:0F:74:FB:8A:3C:27:62:01:7C:A2:7D:9C:34:27 Authority key identifier: AC:41:91:AC:3A:1A:93:96:E7:8D:61:2F:37:4D:BA:CC:8F:2D:91:B5 Certificate issuer: /CN=A9169CD3/serialNumber=AC4191AC3A1A9396E78D612F374DBACC8F2D91B5 Certificate serial: 248E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft Manifest number: 2475 Signing time: Mon 28 Apr 2025 15:53:09 +0000 Manifest this update: Mon 28 Apr 2025 15:53:08 +0000 Manifest next update: Mon 05 May 2025 15:53:08 +0000 Files and hashes: 1: rEGRrDoak5bnjWEvN026zI8tkbU.crl (hash: TdbWy4H9kYfy3iXGMWZapvjnsz3SS2w/7QSXkgzFPHA=) 2: 842CE8807AE311EF91F51E42C4F9AE02.roa (hash: EQJEwI6hBDPCVTYBcU1MDA5dcAO+zNo1IBrEYTkEo78=) 3: 6FEB20F0EF3011EFB4C15420C4F9AE02.roa (hash: rk5n7G9m4WZW7jLcqxF5X+WaA+gvkbnGPhX3dWrSEeA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.crl rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 15:53:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9358 (0x248e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169CD3, serialNumber=AC4191AC3A1A9396E78D612F374DBACC8F2D91B5 Validity Not Before: Apr 28 15:53:08 2025 GMT Not After : May 5 15:53:08 2025 GMT Subject: CN=680fa464-6e0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:13:94:df:c1:f4:29:bf:ea:f4:70:a4:ea:d8: c3:13:da:e6:9b:29:f6:76:a4:17:ff:fc:85:fb:0f: 7f:e1:b5:4f:b6:47:d3:02:97:97:d1:2e:71:81:19: ff:44:b5:18:66:86:b1:cb:4c:15:9d:8a:b6:87:b4: 8c:7a:25:e6:6d:ff:f7:39:66:6d:06:00:bd:fd:97: bb:35:83:08:f3:fb:ac:22:eb:de:3a:d1:ed:7e:7b: 9e:0c:6e:12:47:2a:60:a9:fc:47:c9:73:05:36:67: ef:49:b0:a2:10:f8:94:5a:75:ba:d2:38:aa:78:26: d9:12:6f:fe:ad:da:ff:0b:c9:3b:86:00:3c:3f:36: d6:6a:54:10:d7:80:fb:0c:b8:b0:fb:89:30:d9:7b: 8f:41:19:ec:2b:d4:74:5b:3c:8c:15:10:05:47:6d: 7c:ec:9d:f5:1b:b2:23:97:93:af:5c:cf:56:a2:77: 1a:11:bf:85:54:49:09:02:21:0f:15:ce:f1:4b:e9: 66:9c:60:06:6e:59:c2:56:c4:b6:f8:c8:3c:d9:b6: 04:7c:df:c9:75:5d:80:41:52:62:ea:74:d6:1e:21: b5:9b:06:81:cb:91:81:76:14:94:8c:d6:72:0b:e1: cd:ff:72:e0:77:57:ac:06:74:db:48:50:f9:ff:d0: 8e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:F4:27:88:B5:1F:0F:74:FB:8A:3C:27:62:01:7C:A2:7D:9C:34:27 X509v3 Authority Key Identifier: keyid:AC:41:91:AC:3A:1A:93:96:E7:8D:61:2F:37:4D:BA:CC:8F:2D:91:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:dc:5e:d0:57:a0:e4:3d:54:38:23:2d:3f:e0:17:4f:fc:e5: 1b:04:4e:ff:5c:55:b1:43:03:e7:da:3e:6a:06:5b:fe:34:74: b4:aa:e4:2c:3c:2d:96:c5:15:6d:b1:95:01:c4:3d:d5:7f:9d: e1:19:84:0a:b3:07:88:8b:a5:d3:01:ab:34:2f:f9:d7:4a:17: fb:76:29:b7:87:6a:5b:4c:49:d8:f3:65:95:e8:f7:5c:6a:74: 94:0e:2b:39:0c:77:50:8a:99:ac:0e:98:7e:af:0c:65:5d:76: 29:b2:8b:62:b6:28:8a:0c:b1:35:18:49:ff:35:d5:36:29:db: 03:6e:1f:75:d0:a4:b2:d7:df:c2:17:90:6f:16:1c:85:d9:c7: d2:2d:11:65:2c:29:ea:0e:d0:48:7c:ba:b1:10:8b:6d:a7:ee: 37:2e:0c:ab:c8:35:3d:32:9e:23:9b:7d:3c:c1:d0:57:2b:99: b7:f9:0d:54:d6:b2:bf:d7:fc:f1:8f:43:00:1a:80:3c:ed:7d: 20:e7:ee:bf:91:d2:3a:6e:64:d5:8b:53:98:45:0b:8a:4e:ce: 05:79:6c:b0:ee:24:21:c1:cb:93:55:27:d4:51:4b:73:38:6d: 9b:72:49:9e:91:ee:35:fb:26:46:2b:5f:d9:39:97:80:18:ae: 63:e2:7e:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlDRDMxMTAvBgNVBAUTKEFDNDE5MUFDM0ExQTkzOTZFNzhENjEyRjM3NERCQUND OEYyRDkxQjUwHhcNMjUwNDI4MTU1MzA4WhcNMjUwNTA1MTU1MzA4WjAYMRYwFAYD VQQDEw02ODBmYTQ2NC02ZTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzROU38H0Kb/q9HCk6tjDE9rmmyn2dqQX//yF+w9/4bVPtkfTApeX0S5xgRn/ RLUYZoaxy0wVnYq2h7SMeiXmbf/3OWZtBgC9/Ze7NYMI8/usIuveOtHtfnueDG4S RypgqfxHyXMFNmfvSbCiEPiUWnW60jiqeCbZEm/+rdr/C8k7hgA8PzbWalQQ14D7 DLiw+4kw2XuPQRnsK9R0WzyMFRAFR2187J31G7Ijl5OvXM9WoncaEb+FVEkJAiEP Fc7xS+lmnGAGblnCVsS2+Mg82bYEfN/JdV2AQVJi6nTWHiG1mwaBy5GBdhSUjNZy C+HN/3Lgd1esBnTbSFD5/9COmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGb0J4i1 Hw90+4o8J2IBfKJ9nDQnMB8GA1UdIwQYMBaAFKxBkaw6GpOW541hLzdNusyPLZG1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUNEMy84MTIyODZEMjQ3 MTExMUU1QTQ0OTYzMzVDNEY5QUUwMi9yRUdSckRvYWs1Ym5qV0V2TjAyNnpJOHRr YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JFR1JyRG9hazVibmpXRXZOMDI2ekk4dGtiVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUNEMy84MTIyODZEMjQ3MTExMUU1QTQ0OTYzMzVDNEY5QUUwMi9yRUdSckRvYWs1 Ym5qV0V2TjAyNnpJOHRrYlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCr3F7QV6DkPVQ4Iy0/4BdP/OUbBE7/XFWxQwPn2j5qBlv+NHS0quQs PC2WxRVtsZUBxD3Vf53hGYQKsweIi6XTAas0L/nXShf7dim3h2pbTEnY82WV6Pdc anSUDis5DHdQipmsDph+rwxlXXYpsotitiiKDLE1GEn/NdU2KdsDbh910KSy19/C F5BvFhyF2cfSLRFlLCnqDtBIfLqxEIttp+43LgyryDU9Mp4jm308wdBXK5m3+Q1U 1rK/1/zxj0MAGoA87X0g5+6/kdI6bmTVi1OYRQuKTs4FeWyw7iQhwcuTVSfUUUtz OG2bckmeke41+yZGK1/ZOZeAGK5j4n40 -----END CERTIFICATE-----Generated at Mon Apr 28 17:45:09 2025 by rpki-client on console.sobornost.net