$ rpki-client -vvf rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft File: IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft (raw, json) Hash identifier: lhgZn8U5k+xW4Tc5/I3rpxpKZVGvqSxuI8Nlcswugu4= Subject key identifier: 47:D9:3B:12:23:C1:F5:E4:36:BD:90:DF:E3:57:37:E1:28:DC:1C:57 Authority key identifier: 21:0F:F1:66:68:DF:96:3B:E0:FC:A9:06:93:39:17:FF:ED:ED:9F:95 Certificate issuer: /CN=A9170BBF/serialNumber=210FF16668DF963BE0FCA906933917FFEDED9F95 Certificate serial: 04A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQ_xZmjfljvg_KkGkzkX_-3tn5U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft Manifest number: 049C Signing time: Sat 26 Apr 2025 23:37:55 +0000 Manifest this update: Sat 26 Apr 2025 23:37:54 +0000 Manifest next update: Sat 03 May 2025 23:37:54 +0000 Files and hashes: 1: IQ_xZmjfljvg_KkGkzkX_-3tn5U.crl (hash: 7HAU01WM/iarhkA6iaX9OgmKC/1Pnxu1Ltz44LAh1tw=) 2: 06CAA9C230C211ECBB5A4116C4F9AE02.roa (hash: CU8ZA4/4TdlPTUdktMFTY7GCuwd/QCyrxC7+CMDATDo=) 3: 0628D74630C211ECBB5A4116C4F9AE02.roa (hash: yUQWHT36J9pLE1kpKGBgRzyjB4VNhd4/HCHR7qeOtAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.crl rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQ_xZmjfljvg_KkGkzkX_-3tn5U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 23:37:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1190 (0x4a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170BBF, serialNumber=210FF16668DF963BE0FCA906933917FFEDED9F95 Validity Not Before: Apr 26 23:37:54 2025 GMT Not After : May 3 23:37:54 2025 GMT Subject: CN=680d6e53-8e9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:93:99:f8:46:84:8d:51:7e:2b:75:57:85:e8: 23:6f:10:01:9d:cc:88:43:c8:56:ec:ba:ac:1b:c1: 59:d8:aa:c3:5a:8e:cc:fc:f1:50:1d:d1:d4:59:5a: 6d:ce:57:34:34:b9:10:89:ce:91:4b:49:41:a8:4d: 2a:a4:5b:bb:d1:17:32:c8:bd:13:f4:ea:a6:c3:e9: 4d:fa:9b:94:f6:23:41:08:f3:80:b9:88:44:c4:e2: cf:92:39:c1:4a:2f:95:ac:d2:16:73:9c:a0:47:51: b5:60:d9:b1:55:d9:54:48:f4:38:1f:aa:05:3f:2c: 5a:98:47:90:72:34:2a:f5:02:6c:f9:86:27:7f:1c: 96:65:58:de:f0:85:98:79:94:82:b1:8d:26:56:61: 69:d9:ef:66:90:8f:59:99:14:fa:ea:8b:2e:2b:2a: e3:96:0d:fb:27:66:ea:66:df:f4:df:cc:3f:a1:8d: 19:34:2a:cc:2d:94:27:d4:ab:4d:6c:96:09:af:f7: a0:67:c9:fa:d0:d1:ce:0a:b2:5e:54:a1:1a:27:a0: 68:cf:f9:e6:af:f8:c6:d4:66:0a:88:2f:35:27:0b: 4c:52:b0:b9:27:fa:f0:5d:d9:d8:cc:ba:72:24:a3: d1:6d:a0:96:ed:aa:7d:d1:d5:4f:4e:4f:da:ca:75: 3f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:D9:3B:12:23:C1:F5:E4:36:BD:90:DF:E3:57:37:E1:28:DC:1C:57 X509v3 Authority Key Identifier: keyid:21:0F:F1:66:68:DF:96:3B:E0:FC:A9:06:93:39:17:FF:ED:ED:9F:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQ_xZmjfljvg_KkGkzkX_-3tn5U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:d3:e7:84:61:bb:c5:56:06:1b:25:af:8e:37:ae:b2:31:55: 1d:f9:5e:72:d2:18:65:f9:56:50:28:c7:e4:36:7e:b9:da:97: e3:d9:20:fd:ac:11:42:e6:23:e8:ec:cc:7a:83:b4:a7:2e:43: be:c8:3a:3f:f6:a1:f1:bc:1f:47:c5:26:da:21:18:85:e0:d8: 20:72:9b:89:f1:24:62:b9:60:e0:60:2d:42:ff:55:80:49:f4: 7a:03:7a:b7:75:83:7f:4f:b2:60:25:69:e6:1e:1e:6e:83:d1: 39:0b:e5:aa:c8:dd:1e:4e:3e:de:44:f7:22:47:ed:c1:8f:a2: d3:ef:d0:29:13:4d:0d:e1:07:27:3f:e6:d3:d0:17:5b:76:5f: 5d:60:5c:2a:f5:18:5b:eb:4e:6a:9a:4e:bf:50:9a:6c:b4:82: 06:76:5c:38:33:07:78:48:b0:8d:11:ba:21:65:23:30:f4:3a: af:50:a6:2f:b9:c6:2a:e6:63:4f:5c:9a:21:17:37:2b:0e:4b: c3:c4:b4:00:79:10:1e:e8:49:07:f0:f9:4d:c1:36:9b:75:68: 2f:48:fd:4f:7a:43:4d:6a:f0:fd:04:7d:f7:9d:80:9b:55:02: ea:4c:9f:05:ce:bd:9c:21:40:65:0b:47:21:db:44:f1:db:a3: 0b:dc:a7:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBCQkYxMTAvBgNVBAUTKDIxMEZGMTY2NjhERjk2M0JFMEZDQTkwNjkzMzkxN0ZG RURFRDlGOTUwHhcNMjUwNDI2MjMzNzU0WhcNMjUwNTAzMjMzNzU0WjAYMRYwFAYD VQQDEw02ODBkNmU1My04ZTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4pOZ+EaEjVF+K3VXhegjbxABncyIQ8hW7LqsG8FZ2KrDWo7M/PFQHdHUWVpt zlc0NLkQic6RS0lBqE0qpFu70RcyyL0T9Oqmw+lN+puU9iNBCPOAuYhExOLPkjnB Si+VrNIWc5ygR1G1YNmxVdlUSPQ4H6oFPyxamEeQcjQq9QJs+YYnfxyWZVje8IWY eZSCsY0mVmFp2e9mkI9ZmRT66osuKyrjlg37J2bqZt/038w/oY0ZNCrMLZQn1KtN bJYJr/egZ8n60NHOCrJeVKEaJ6Boz/nmr/jG1GYKiC81JwtMUrC5J/rwXdnYzLpy JKPRbaCW7ap90dVPTk/aynU/LwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEfZOxIj wfXkNr2Q3+NXN+Eo3BxXMB8GA1UdIwQYMBaAFCEP8WZo35Y74PypBpM5F//t7Z+V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEJCRi9FNDkxMTIzQTMw QkYxMUVDQTg1QzQ0MTRDNEY5QUUwMi9JUV94Wm1qZmxqdmdfS2tHa3prWF8tM3Ru NVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lRX3habWpmbGp2Z19La0dremtYXy0zdG41VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEJCRi9FNDkxMTIzQTMwQkYxMUVDQTg1QzQ0MTRDNEY5QUUwMi9JUV94Wm1qZmxq dmdfS2tHa3prWF8tM3RuNVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB80+eEYbvFVgYbJa+ON66yMVUd+V5y0hhl+VZQKMfkNn652pfj2SD9 rBFC5iPo7Mx6g7SnLkO+yDo/9qHxvB9HxSbaIRiF4NggcpuJ8SRiuWDgYC1C/1WA SfR6A3q3dYN/T7JgJWnmHh5ug9E5C+WqyN0eTj7eRPciR+3Bj6LT79ApE00N4Qcn P+bT0Bdbdl9dYFwq9Rhb605qmk6/UJpstIIGdlw4Mwd4SLCNEbohZSMw9DqvUKYv ucYq5mNPXJohFzcrDkvDxLQAeRAe6EkH8PlNwTabdWgvSP1PekNNavD9BH33nYCb VQLqTJ8Fzr2cIUBlC0ch20Tx26ML3KdZ -----END CERTIFICATE-----Generated at Sun Apr 27 05:42:03 2025 by rpki-client on console.sobornost.net