$ rpki-client -vvf rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft File: 6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft (raw, json) Hash identifier: xtdE6dNeGGeR6dGTH/KjtoN3oRBXqHKkJ1ZZDFmKIx8= Subject key identifier: 0E:4D:F3:49:07:59:EB:68:57:10:EE:E0:80:97:70:5E:CD:82:A8:F7 Authority key identifier: E9:C4:10:C7:DD:D5:26:70:AB:8F:82:16:C8:76:14:B1:0E:C3:17:7A Certificate issuer: /CN=A9171560/serialNumber=E9C410C7DDD52670AB8F8216C87614B10EC3177A Certificate serial: 0CF0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft Manifest number: 0CE5 Signing time: Mon 28 Apr 2025 18:19:35 +0000 Manifest this update: Mon 28 Apr 2025 18:19:35 +0000 Manifest next update: Mon 05 May 2025 18:19:35 +0000 Files and hashes: 1: 6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl (hash: GxpO6bqlg4KtRCvPLf9aIOXhkObi5fpNdRd41aopq44=) 2: 65AF30D422D211EAB3ABA447C4F9AE02.roa (hash: N5g6jdfkVyESUIZ9NbhjHN5A/zAKL0uPzj31oHqn/fU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 14:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3312 (0xcf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171560, serialNumber=E9C410C7DDD52670AB8F8216C87614B10EC3177A Validity Not Before: Apr 28 18:19:35 2025 GMT Not After : May 5 18:19:35 2025 GMT Subject: CN=680fc6b7-6e46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d2:a8:3e:45:f5:b0:ed:7a:f1:46:4b:df:5d: 8f:6a:46:a8:82:71:7a:37:17:ba:39:44:fe:e3:f3: 9b:58:de:55:ff:e9:4d:90:2e:8f:ae:ab:93:61:93: af:59:5e:3c:82:b9:3c:19:aa:89:57:45:14:f9:ba: b7:be:7a:04:b2:c0:f6:05:96:c0:41:78:1e:4c:c8: 87:79:37:d1:72:50:a2:c4:7f:bd:94:b7:49:41:41: bc:9b:7b:e6:f7:8d:c7:18:26:72:d6:62:76:86:74: dc:d9:0e:2f:44:76:53:15:1b:0c:a9:11:07:3b:ef: c7:eb:e7:c3:fe:b5:04:57:ad:2e:12:03:78:18:97: 97:ba:00:cf:df:f8:55:6d:86:62:7b:7c:54:d5:26: e1:d1:19:7a:51:d9:78:9f:a5:7e:d4:a2:e5:fe:c7: 66:ed:37:f7:7c:47:a5:02:01:78:cf:6c:71:5f:d3: 0f:8a:5d:2e:d5:8d:ed:fb:02:de:7c:cd:ce:06:20: 03:be:92:e0:80:47:15:80:64:0d:10:3b:f4:1e:ce: c7:e6:a8:92:3c:38:b9:1a:5a:44:8b:3b:96:75:14: 5c:21:55:67:5c:3e:ef:51:bb:50:03:eb:cb:bc:68: ce:25:ae:e7:81:39:56:7e:3c:a9:29:6a:87:24:2a: 7b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:4D:F3:49:07:59:EB:68:57:10:EE:E0:80:97:70:5E:CD:82:A8:F7 X509v3 Authority Key Identifier: keyid:E9:C4:10:C7:DD:D5:26:70:AB:8F:82:16:C8:76:14:B1:0E:C3:17:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:30:ec:5a:58:ec:4e:3c:1b:b6:ee:e6:33:90:5a:8d:13:b6: b8:08:c5:02:47:d2:76:13:97:29:e6:15:40:2c:56:15:2b:6b: 5c:70:b6:58:b0:f4:1e:dc:d9:a8:77:c6:38:29:c1:7a:fd:6f: 96:cc:e4:55:cf:be:f3:ef:8b:f0:50:24:c6:c6:bd:ee:88:28: cc:9c:db:86:1e:1c:ce:3d:15:1e:17:66:57:51:21:65:b4:bd: e8:ee:69:a6:ee:b8:a5:aa:f9:7f:5b:c2:36:f1:eb:dd:6d:c1: 48:c3:dc:b7:0f:df:ba:16:ad:18:69:03:5e:b6:0b:dc:b3:ee: 16:eb:e4:1b:b7:25:d0:6e:7b:e5:b2:e1:cb:f5:bf:4d:36:3f: 69:0a:40:55:c3:3d:7f:11:b2:36:6d:8a:a0:a2:0f:54:40:f5: 57:f1:71:71:a6:b1:86:88:2d:d5:22:f8:14:df:2c:a6:69:84: 77:8c:fc:24:93:62:da:88:ad:4a:76:a2:58:cb:78:1a:e0:93: 85:d1:bc:0f:2d:a2:43:af:1a:23:bf:25:a2:31:82:35:0f:99: b7:87:98:29:47:63:ef:11:91:1c:18:25:90:81:0c:f1:69:51: fe:85:d3:bc:91:c5:2c:66:be:94:95:58:2d:07:4d:fc:42:f4: 56:09:a3:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE1NjAxMTAvBgNVBAUTKEU5QzQxMEM3RERENTI2NzBBQjhGODIxNkM4NzYxNEIx MEVDMzE3N0EwHhcNMjUwNDI4MTgxOTM1WhcNMjUwNTA1MTgxOTM1WjAYMRYwFAYD VQQDEw02ODBmYzZiNy02ZTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtNKoPkX1sO168UZL312PakaognF6Nxe6OUT+4/ObWN5V/+lNkC6PrquTYZOv WV48grk8GaqJV0UU+bq3vnoEssD2BZbAQXgeTMiHeTfRclCixH+9lLdJQUG8m3vm 943HGCZy1mJ2hnTc2Q4vRHZTFRsMqREHO+/H6+fD/rUEV60uEgN4GJeXugDP3/hV bYZie3xU1Sbh0Rl6Udl4n6V+1KLl/sdm7Tf3fEelAgF4z2xxX9MPil0u1Y3t+wLe fM3OBiADvpLggEcVgGQNEDv0Hs7H5qiSPDi5GlpEizuWdRRcIVVnXD7vUbtQA+vL vGjOJa7ngTlWfjypKWqHJCp7SQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA5N80kH WetoVxDu4ICXcF7Ngqj3MB8GA1UdIwQYMBaAFOnEEMfd1SZwq4+CFsh2FLEOwxd6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTU2MC9BNzcwM0U5RUU0 MUQxMUU5OEY1Qjk4MTlDNEY5QUUwMi82Y1FReDkzVkpuQ3JqNElXeUhZVXNRN0RG M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZjUVF4OTNWSm5Dcmo0SVd5SFlVc1E3REYzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTU2MC9BNzcwM0U5RUU0MUQxMUU5OEY1Qjk4MTlDNEY5QUUwMi82Y1FReDkzVkpu Q3JqNElXeUhZVXNRN0RGM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAMOxaWOxOPBu27uYzkFqNE7a4CMUCR9J2E5cp5hVALFYVK2tccLZY sPQe3Nmod8Y4KcF6/W+WzORVz77z74vwUCTGxr3uiCjMnNuGHhzOPRUeF2ZXUSFl tL3o7mmm7rilqvl/W8I28evdbcFIw9y3D9+6Fq0YaQNetgvcs+4W6+QbtyXQbnvl suHL9b9NNj9pCkBVwz1/EbI2bYqgog9UQPVX8XFxprGGiC3VIvgU3yymaYR3jPwk k2LaiK1KdqJYy3ga4JOF0bwPLaJDrxojvyWiMYI1D5m3h5gpR2PvEZEcGCWQgQzx aVH+hdO8kcUsZr6UlVgtB038QvRWCaNR -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:41 2025 by rpki-client on console.sobornost.net