$ rpki-client -vvf rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft File: 5xSoFJfIF3hoy7TNszjD72zp6VM.mft (raw, json) Hash identifier: 6id1Esj8t8/grMNnzie3Q/4gKrjsPUL2/q2WpSRZqqI= Subject key identifier: 2A:42:46:DE:1C:8A:98:04:74:04:C8:7E:F7:9A:05:59:5C:7C:A2:D4 Authority key identifier: E7:14:A8:14:97:C8:17:78:68:CB:B4:CD:B3:38:C3:EF:6C:E9:E9:53 Certificate issuer: /CN=A9172C8D/serialNumber=E714A81497C8177868CBB4CDB338C3EF6CE9E953 Certificate serial: 0A3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xSoFJfIF3hoy7TNszjD72zp6VM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft Manifest number: 0A32 Signing time: Mon 28 Apr 2025 20:10:25 +0000 Manifest this update: Mon 28 Apr 2025 20:10:24 +0000 Manifest next update: Mon 05 May 2025 20:10:24 +0000 Files and hashes: 1: 5xSoFJfIF3hoy7TNszjD72zp6VM.crl (hash: ekJ4On215h1gk7VhO8z33mbjGLJILNr/53R7Y5lTaK0=) 2: 9085F6C0B78911EFB9994180C4F9AE02.roa (hash: KPuYYAQ14XpM20WTZh+zfqEqRXqFeAhCtZEHNEUGMw8=) 3: CDD96B60B78911EF9BD3EF80C4F9AE02.roa (hash: sDoqH+F903pEZfTL5CZCahrin5P/dPEPc5OIr03Af9w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.crl rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xSoFJfIF3hoy7TNszjD72zp6VM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:10:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2619 (0xa3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172C8D, serialNumber=E714A81497C8177868CBB4CDB338C3EF6CE9E953 Validity Not Before: Apr 28 20:10:24 2025 GMT Not After : May 5 20:10:24 2025 GMT Subject: CN=680fe0b0-aa55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a8:cb:e3:e0:9c:46:74:49:f7:94:03:a5:e5: 27:6c:02:a9:1a:21:8c:de:d2:07:e2:b9:5a:7b:66: c6:e9:a0:d6:53:e7:8d:26:a4:c2:db:73:4e:b0:91: 3a:c4:96:01:eb:ba:da:eb:00:b6:e7:54:4a:b5:00: 52:c3:a1:89:12:0e:8d:95:d0:e3:25:6e:76:eb:58: 06:62:e3:0d:5a:15:0a:96:83:81:b8:7f:57:04:37: 6f:4d:78:11:fd:b2:9f:d8:0e:57:c7:3e:f8:49:95: f0:3c:03:c0:f9:41:cb:50:d1:ed:9c:5c:23:e8:0e: dd:e2:e3:44:86:77:33:1f:c9:0d:f5:b2:6c:76:d8: b4:49:c3:88:16:09:fe:8d:a4:6f:df:e9:38:92:c6: eb:6d:55:c2:c5:26:14:9f:6a:c7:a5:8f:93:25:27: 9c:c9:1c:61:54:eb:92:f5:a5:03:28:de:75:b0:9f: c9:26:8a:14:32:21:02:ea:ba:a9:fc:df:18:3d:f8: e4:6a:ff:ab:34:b9:0f:5e:ec:ab:fc:66:fb:dd:62: bf:d3:3d:cf:00:10:36:81:2c:2d:46:e6:11:1d:c4: a2:79:78:c7:84:86:f2:15:b6:59:64:5e:9b:00:6c: ce:40:d8:57:d4:45:ed:97:cb:4e:23:c8:72:8b:a6: 13:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:42:46:DE:1C:8A:98:04:74:04:C8:7E:F7:9A:05:59:5C:7C:A2:D4 X509v3 Authority Key Identifier: keyid:E7:14:A8:14:97:C8:17:78:68:CB:B4:CD:B3:38:C3:EF:6C:E9:E9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xSoFJfIF3hoy7TNszjD72zp6VM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:8b:40:dd:1e:a8:0e:1c:a1:df:10:76:c4:7d:0c:ff:d2:9d: f6:2c:1d:d5:96:2b:4c:8c:f0:17:5d:44:3c:39:e1:6f:54:76: e6:ce:ce:2b:30:6e:bc:26:49:9c:00:b7:8a:af:56:2a:71:17: a6:76:9d:4b:0d:1b:58:ed:8b:7f:62:cd:a7:71:02:c7:a8:f6: 86:47:e5:25:8c:2a:02:79:00:32:0a:ee:93:3c:bf:f0:bd:ad: 3e:b1:90:94:bc:a7:84:11:cf:ea:fb:ee:20:aa:28:ad:1a:92: 1c:6f:c3:9c:26:71:86:e1:4d:f9:ff:5c:b3:a4:08:e7:60:b5: 45:05:2e:6e:71:42:62:7c:5c:b3:e4:c8:37:17:9f:8b:1f:71: f2:08:6e:59:f7:2b:0e:2c:1c:b9:30:8a:76:dd:fb:a8:87:50: bb:c6:24:0e:e3:3b:b0:3d:8d:65:9d:0c:95:49:5b:d7:bd:1a: 4e:8e:bc:3c:50:4a:b5:72:0e:29:40:a0:bd:3a:b8:bb:f6:1f: 78:e0:6a:4f:0c:83:3c:5a:50:d7:89:b7:f0:3e:31:fa:92:d1: ae:1f:a6:17:03:4b:0f:a5:41:c7:8b:f0:41:ea:14:97:86:6f: fd:99:b1:a6:b2:94:6a:e5:1e:d5:f7:61:ec:a5:6d:34:8c:a2: d4:b6:e8:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJDOEQxMTAvBgNVBAUTKEU3MTRBODE0OTdDODE3Nzg2OENCQjRDREIzMzhDM0VG NkNFOUU5NTMwHhcNMjUwNDI4MjAxMDI0WhcNMjUwNTA1MjAxMDI0WjAYMRYwFAYD VQQDEw02ODBmZTBiMC1hYTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqKjL4+CcRnRJ95QDpeUnbAKpGiGM3tIH4rlae2bG6aDWU+eNJqTC23NOsJE6 xJYB67ra6wC251RKtQBSw6GJEg6NldDjJW5261gGYuMNWhUKloOBuH9XBDdvTXgR /bKf2A5Xxz74SZXwPAPA+UHLUNHtnFwj6A7d4uNEhnczH8kN9bJsdti0ScOIFgn+ jaRv3+k4ksbrbVXCxSYUn2rHpY+TJSecyRxhVOuS9aUDKN51sJ/JJooUMiEC6rqp /N8YPfjkav+rNLkPXuyr/Gb73WK/0z3PABA2gSwtRuYRHcSieXjHhIbyFbZZZF6b AGzOQNhX1EXtl8tOI8hyi6YTtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCpCRt4c ipgEdATIfveaBVlcfKLUMB8GA1UdIwQYMBaAFOcUqBSXyBd4aMu0zbM4w+9s6elT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkM4RC85QTExMDg2NDY5 QkExMUVBQkMwQkQ4NjNDNEY5QUUwMi81eFNvRkpmSUYzaG95N1ROc3pqRDcyenA2 Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV4U29GSmZJRjNob3k3VE5zempENzJ6cDZWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkM4RC85QTExMDg2NDY5QkExMUVBQkMwQkQ4NjNDNEY5QUUwMi81eFNvRkpmSUYz aG95N1ROc3pqRDcyenA2Vk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSi0DdHqgOHKHfEHbEfQz/0p32LB3VlitMjPAXXUQ8OeFvVHbmzs4r MG68JkmcALeKr1YqcRemdp1LDRtY7Yt/Ys2ncQLHqPaGR+UljCoCeQAyCu6TPL/w va0+sZCUvKeEEc/q++4gqiitGpIcb8OcJnGG4U35/1yzpAjnYLVFBS5ucUJifFyz 5Mg3F5+LH3HyCG5Z9ysOLBy5MIp23fuoh1C7xiQO4zuwPY1lnQyVSVvXvRpOjrw8 UEq1cg4pQKC9Ori79h944GpPDIM8WlDXibfwPjH6ktGuH6YXA0sPpUHHi/BB6hSX hm/9mbGmspRq5R7V92HspW00jKLUtugk -----END CERTIFICATE-----Generated at Mon Apr 28 23:05:25 2025 by rpki-client on console.sobornost.net