$ rpki-client -vvf rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft File: 5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft (raw, json) Hash identifier: OxVayeIFdA5bQmjN19YBMzCWpc4srXE8mn8oS000pBc= Subject key identifier: C0:F6:95:B4:DB:9A:35:71:45:C1:76:EF:91:89:A8:0A:2B:EA:B2:44 Authority key identifier: E6:B5:4D:02:7C:E3:49:8B:F3:5E:4D:06:5B:C4:78:A9:36:C1:61:69 Certificate issuer: /CN=A9170DD8/serialNumber=E6B54D027CE3498BF35E4D065BC478A936C16169 Certificate serial: 84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rVNAnzjSYvzXk0GW8R4qTbBYWk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft Manifest number: 80 Signing time: Sun 27 Apr 2025 05:31:33 +0000 Manifest this update: Sun 27 Apr 2025 05:31:33 +0000 Manifest next update: Sun 04 May 2025 05:31:33 +0000 Files and hashes: 1: 5rVNAnzjSYvzXk0GW8R4qTbBYWk.crl (hash: lkmSJW1Rh1KLGxc0c6Pap6oD2bOpc+5+2JlOiUKnvB0=) 2: 4D06CD2C667411EF8E723587C4F9AE02.roa (hash: 4PdtbIsL2ZotyQ7lOujn962oNOjC34OWUPtAk2nb5/I=) 3: 4CA4BE8E667411EF8E723587C4F9AE02.roa (hash: 8qwHnAzkWpQMSqbxW4gRTYW6uWniUVjWaHfJJJJlxJ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.crl rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rVNAnzjSYvzXk0GW8R4qTbBYWk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 132 (0x84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170DD8, serialNumber=E6B54D027CE3498BF35E4D065BC478A936C16169 Validity Not Before: Apr 27 05:31:33 2025 GMT Not After : May 4 05:31:33 2025 GMT Subject: CN=680dc135-af23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b8:6d:c3:c4:40:ed:17:a7:96:92:91:7f:80: 23:ed:04:d2:72:cd:19:da:3a:aa:90:8a:a1:00:04: d4:99:34:c6:8c:c6:bc:1f:b7:ad:de:57:c2:14:c2: fb:9d:29:6e:ef:81:dd:1b:52:91:30:59:af:ea:a0: f5:5d:58:8b:d0:ed:ff:c2:66:24:8a:a2:ba:1f:ae: 9c:0a:91:ef:f7:a1:60:62:30:7a:47:0b:71:f2:e8: 40:8b:e0:7a:82:63:a4:1b:6b:66:0e:cf:71:9c:dc: 3d:42:ca:d9:e4:d0:65:c9:31:d1:38:1e:06:0a:9b: 5b:4f:1a:06:12:7a:f2:8d:00:7a:0e:3a:8e:b3:66: 56:68:35:23:65:0e:dc:1e:4c:4f:8f:1c:be:f4:97: a4:67:cb:b3:87:fa:43:a2:f6:7b:63:88:c7:6e:47: b1:6e:11:9f:e5:db:08:e1:68:04:28:53:97:7e:3c: ba:79:e9:76:3f:1d:28:85:ac:09:0e:dc:ad:c7:fb: f8:cb:69:e8:59:37:f4:a9:51:44:8c:4e:a8:01:6a: 59:0f:d6:e5:be:4f:79:1a:4f:83:9c:67:cf:c9:41: 7a:60:54:15:47:76:fa:2a:d0:d7:5b:c6:a4:94:f8: c1:cd:44:87:5f:f5:7f:e6:36:0f:3f:4e:8e:60:80: 48:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:F6:95:B4:DB:9A:35:71:45:C1:76:EF:91:89:A8:0A:2B:EA:B2:44 X509v3 Authority Key Identifier: keyid:E6:B5:4D:02:7C:E3:49:8B:F3:5E:4D:06:5B:C4:78:A9:36:C1:61:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rVNAnzjSYvzXk0GW8R4qTbBYWk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:1f:4f:49:37:8c:57:b5:d6:43:1f:b4:2b:c0:a2:ef:93:21: 43:aa:c9:95:a1:35:db:f1:21:3c:ef:36:0d:5c:d7:87:5f:b2: b6:f3:8d:6e:de:92:3f:ec:d9:0a:cc:5a:4a:ae:9e:8c:0a:47: 80:98:11:d5:9b:42:11:63:b8:9c:1e:29:0f:54:68:4c:22:2e: 41:f5:f0:7a:14:76:89:15:ec:c1:cc:3a:22:8c:a1:c9:9d:e0: 3f:40:d8:9f:46:b9:96:6d:96:29:8f:89:fe:b1:49:d5:c1:88: 24:e8:04:56:41:06:72:30:48:ac:2b:9e:28:be:8d:40:9f:84: 25:46:5c:5c:e0:d6:03:6b:ec:88:4e:40:d3:a6:3c:ba:fc:2e: 5f:39:77:05:79:99:00:96:31:a4:e2:04:a7:1c:8a:b5:50:4f: 47:65:14:48:4a:63:bf:47:f0:4c:33:32:f5:fe:a9:9d:12:d6: e0:2f:d3:fd:0d:83:76:18:c5:aa:83:d4:dc:c4:0d:c3:a7:31: 82:91:87:f0:c0:6c:42:4f:08:b7:89:b8:d4:03:a5:0f:08:77: cc:08:91:17:01:84:c7:67:00:60:c3:28:b9:89:10:85:3a:3c: 03:50:42:d6:e4:42:10:38:77:f2:a7:52:60:63:46:f1:8b:7d: 31:30:e6:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBERDgxMTAvBgNVBAUTKEU2QjU0RDAyN0NFMzQ5OEJGMzVFNEQwNjVCQzQ3OEE5 MzZDMTYxNjkwHhcNMjUwNDI3MDUzMTMzWhcNMjUwNTA0MDUzMTMzWjAYMRYwFAYD VQQDEw02ODBkYzEzNS1hZjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1rhtw8RA7RenlpKRf4Aj7QTScs0Z2jqqkIqhAATUmTTGjMa8H7et3lfCFML7 nSlu74HdG1KRMFmv6qD1XViL0O3/wmYkiqK6H66cCpHv96FgYjB6Rwtx8uhAi+B6 gmOkG2tmDs9xnNw9QsrZ5NBlyTHROB4GCptbTxoGEnryjQB6DjqOs2ZWaDUjZQ7c HkxPjxy+9JekZ8uzh/pDovZ7Y4jHbkexbhGf5dsI4WgEKFOXfjy6eel2Px0ohawJ Dtytx/v4y2noWTf0qVFEjE6oAWpZD9blvk95Gk+DnGfPyUF6YFQVR3b6KtDXW8ak lPjBzUSHX/V/5jYPP06OYIBIzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMD2lbTb mjVxRcF275GJqAor6rJEMB8GA1UdIwQYMBaAFOa1TQJ840mL815NBlvEeKk2wWFp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEREOC9BNjZBNzVFRTY1 QkIxMUVGQUZBMzJGODJDNEY5QUUwMi81clZOQW56alNZdnpYazBHVzhSNHFUYkJZ V2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVyVk5BbnpqU1l2elhrMEdXOFI0cVRiQllXay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEREOC9BNjZBNzVFRTY1QkIxMUVGQUZBMzJGODJDNEY5QUUwMi81clZOQW56alNZ dnpYazBHVzhSNHFUYkJZV2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDPH09JN4xXtdZDH7QrwKLvkyFDqsmVoTXb8SE87zYNXNeHX7K2841u 3pI/7NkKzFpKrp6MCkeAmBHVm0IRY7icHikPVGhMIi5B9fB6FHaJFezBzDoijKHJ neA/QNifRrmWbZYpj4n+sUnVwYgk6ARWQQZyMEisK54ovo1An4QlRlxc4NYDa+yI TkDTpjy6/C5fOXcFeZkAljGk4gSnHIq1UE9HZRRISmO/R/BMMzL1/qmdEtbgL9P9 DYN2GMWqg9TcxA3DpzGCkYfwwGxCTwi3ibjUA6UPCHfMCJEXAYTHZwBgwyi5iRCF OjwDUELW5EIQOHfyp1JgY0bxi30xMObz -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:49 2025 by rpki-client on console.sobornost.net