$ rpki-client -vvf rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft File: PX_qy2M6a4KTI7HplE1K-Y3do3I.mft (raw, json) Hash identifier: AoHJjNOVTk0U7LRz9cE/yRW2AMQNlFrH2lSS+GeKHoc= Subject key identifier: 89:7A:C8:6A:28:D3:FF:7F:50:DB:F5:30:72:66:06:19:18:42:43:25 Authority key identifier: 3D:7F:EA:CB:63:3A:6B:82:93:23:B1:E9:94:4D:4A:F9:8D:DD:A3:72 Certificate issuer: /CN=A9172BD3/serialNumber=3D7FEACB633A6B829323B1E9944D4AF98DDDA372 Certificate serial: FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft Manifest number: F7 Signing time: Sun 27 Apr 2025 04:10:07 +0000 Manifest this update: Sun 27 Apr 2025 04:10:07 +0000 Manifest next update: Sun 04 May 2025 04:10:06 +0000 Files and hashes: 1: PX_qy2M6a4KTI7HplE1K-Y3do3I.crl (hash: oc84b22U5n2Nz7SMwjnH+8sGFVCrc6BOE0TTUmd9mGA=) 2: 78321A66068D11EF92608943C4F9AE02.roa (hash: blVnz565/hVxOKVO1xLhYGke1dIuGSft6BcnljQwFaw=) 3: 97F15FD8068D11EF839A3054C4F9AE02.roa (hash: mLl/OI3EV7/JM4Fr1G9RnDxTwZqnfUJgsg+LaOLb7Wc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.crl rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 251 (0xfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172BD3, serialNumber=3D7FEACB633A6B829323B1E9944D4AF98DDDA372 Validity Not Before: Apr 27 04:10:07 2025 GMT Not After : May 4 04:10:06 2025 GMT Subject: CN=680dae1f-860f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6a:d4:a7:6c:34:41:08:d2:ac:61:d8:85:ac: 0c:ea:8e:02:d6:a5:83:06:0f:36:51:bd:38:05:e0: 10:47:a0:87:29:68:68:40:52:e4:ca:7f:eb:e9:a2: 13:1d:3f:88:6e:35:f3:d0:97:a0:39:a1:a3:a8:68: 58:9a:61:cb:ae:bb:91:b7:a1:a6:d7:1d:63:c8:a4: 83:e4:72:d7:04:26:56:5d:c8:5c:53:8c:e5:d7:51: df:8c:a2:23:a7:f6:b9:39:5d:7b:a9:ba:e4:c6:e9: af:39:90:a0:90:ee:aa:08:6d:aa:39:b7:46:4f:8c: 5c:4e:38:4b:e4:8b:61:a9:08:07:02:0a:36:de:36: a5:26:8d:af:0a:92:83:6f:ab:e6:b1:b5:5b:79:14: 58:8e:16:93:d3:82:cd:1c:c7:df:95:d4:4d:2a:71: b4:a2:fc:b4:44:10:8d:43:1c:99:52:ab:fc:42:ce: 19:a2:e0:52:19:be:63:e2:41:49:9a:49:73:c5:09: 7b:4b:06:09:d9:fe:75:34:14:e5:63:3f:33:e3:4f: b5:b8:63:5b:67:b0:e0:6d:01:51:54:ad:c0:f8:96: 93:8d:f3:fe:27:00:ac:c3:96:be:e5:b9:a9:24:38: e5:b9:07:fc:69:5e:ea:81:59:2a:77:8d:ae:dd:6a: b3:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:7A:C8:6A:28:D3:FF:7F:50:DB:F5:30:72:66:06:19:18:42:43:25 X509v3 Authority Key Identifier: keyid:3D:7F:EA:CB:63:3A:6B:82:93:23:B1:E9:94:4D:4A:F9:8D:DD:A3:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e3:18:3c:e6:c2:89:35:da:80:2d:3f:f1:ca:3f:44:1a:40:43: 3f:28:34:65:bd:12:90:81:2d:e6:2b:ff:31:50:8f:f5:ec:dc: b5:51:5f:b2:29:e9:b7:a4:69:5e:3e:01:47:b7:01:fd:78:d6: 84:f9:9b:71:23:22:7f:07:17:90:e8:6b:97:a4:92:4c:f0:59: 6a:e1:9d:01:55:74:c8:0e:05:61:72:10:32:fe:1b:26:69:5f: f8:69:c9:ad:3b:6c:53:58:4f:7c:f3:55:c5:88:16:b4:f1:7e: bd:64:3d:7f:d9:af:c0:01:13:d0:b0:3c:05:f5:0d:e1:e1:a7: cb:f2:0f:62:ba:aa:71:ce:a6:1e:9f:52:3f:40:66:6e:13:40: 17:63:a7:34:2f:85:ac:a3:24:80:59:e8:b7:44:4b:71:2e:d1: 21:6e:6d:7b:97:92:37:97:96:30:bb:d6:49:b6:35:d0:c7:6a: 6f:31:aa:c3:e7:e0:65:f6:62:a6:b6:e3:db:5e:f8:2d:85:19: 1d:4f:07:9d:47:9f:f6:d3:59:82:d3:0b:48:2e:74:e9:07:26: 74:76:90:4e:89:0a:b5:f1:f1:df:1a:04:f1:a8:f7:1f:98:cb: 80:ac:95:a0:a0:14:bc:40:b8:c3:22:e1:06:8a:57:c0:de:30: 0f:ce:10:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJCRDMxMTAvBgNVBAUTKDNEN0ZFQUNCNjMzQTZCODI5MzIzQjFFOTk0NEQ0QUY5 OEREREEzNzIwHhcNMjUwNDI3MDQxMDA3WhcNMjUwNTA0MDQxMDA2WjAYMRYwFAYD VQQDEw02ODBkYWUxZi04NjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy2rUp2w0QQjSrGHYhawM6o4C1qWDBg82Ub04BeAQR6CHKWhoQFLkyn/r6aIT HT+IbjXz0JegOaGjqGhYmmHLrruRt6Gm1x1jyKSD5HLXBCZWXchcU4zl11HfjKIj p/a5OV17qbrkxumvOZCgkO6qCG2qObdGT4xcTjhL5IthqQgHAgo23jalJo2vCpKD b6vmsbVbeRRYjhaT04LNHMffldRNKnG0ovy0RBCNQxyZUqv8Qs4ZouBSGb5j4kFJ mklzxQl7SwYJ2f51NBTlYz8z40+1uGNbZ7DgbQFRVK3A+JaTjfP+JwCsw5a+5bmp JDjluQf8aV7qgVkqd42u3Wqz5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIl6yGoo 0/9/UNv1MHJmBhkYQkMlMB8GA1UdIwQYMBaAFD1/6stjOmuCkyOx6ZRNSvmN3aNy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkJEMy82NEJGRjE0RUIz RjcxMUVFOTJBNDc3MTdDNEY5QUUwMi9QWF9xeTJNNmE0S1RJN0hwbEUxSy1ZM2Rv M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BYX3F5Mk02YTRLVEk3SHBsRTFLLVkzZG8zSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkJEMy82NEJGRjE0RUIzRjcxMUVFOTJBNDc3MTdDNEY5QUUwMi9QWF9xeTJNNmE0 S1RJN0hwbEUxSy1ZM2RvM0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDjGDzmwok12oAtP/HKP0QaQEM/KDRlvRKQgS3mK/8xUI/17Ny1UV+y Kem3pGlePgFHtwH9eNaE+ZtxIyJ/BxeQ6GuXpJJM8Flq4Z0BVXTIDgVhchAy/hsm aV/4acmtO2xTWE9881XFiBa08X69ZD1/2a/AARPQsDwF9Q3h4afL8g9iuqpxzqYe n1I/QGZuE0AXY6c0L4WsoySAWei3REtxLtEhbm17l5I3l5Ywu9ZJtjXQx2pvMarD 5+Bl9mKmtuPbXvgthRkdTwedR5/201mC0wtILnTpByZ0dpBOiQq18fHfGgTxqPcf mMuArJWgoBS8QLjDIuEGilfA3jAPzhAb -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:49 2025 by rpki-client on console.sobornost.net