$ rpki-client -vvf rpki.apnic.net/member_repository/A9172CE3/5D7899F4405911ECA0AFAA4DC4F9AE02/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.mft File: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.mft (raw, json) Hash identifier: SUfeVQ9UYMfDbtgoSPn4TOFhWZJotI2DoagVa7RVeHY= Subject key identifier: F5:E2:09:87:31:69:27:51:5B:A6:7F:CF:50:5A:C1:1B:27:99:FC:0A Authority key identifier: AB:C6:FB:A4:B7:84:28:38:79:19:0D:C7:17:E3:4B:4C:D8:82:DA:08 Certificate issuer: /CN=A9172CE3/serialNumber=ABC6FBA4B784283879190DC717E34B4CD882DA08 Certificate serial: 047F Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172CE3/5D7899F4405911ECA0AFAA4DC4F9AE02/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.mft Manifest number: 0479 Signing time: Sat 26 Apr 2025 23:44:17 +0000 Manifest this update: Sat 26 Apr 2025 23:44:17 +0000 Manifest next update: Sat 03 May 2025 23:44:17 +0000 Files and hashes: 1: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.crl (hash: dGB4S7U2nC9wnDQ4HoND1PfD44HO+y6CljDd23guWcs=) 2: 887BE0D0405D11ECA642D813C4F9AE02.roa (hash: qxVcUGlCZn4SUG82SOAXq9RSMSYslC+bAGjT3ytadTQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172CE3/5D7899F4405911ECA0AFAA4DC4F9AE02/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.crl rsync://rpki.apnic.net/member_repository/A9172CE3/5D7899F4405911ECA0AFAA4DC4F9AE02/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 23:44:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1151 (0x47f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172CE3, serialNumber=ABC6FBA4B784283879190DC717E34B4CD882DA08 Validity Not Before: Apr 26 23:44:17 2025 GMT Not After : May 3 23:44:17 2025 GMT Subject: CN=680d6fd1-191f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3e:d1:06:d9:ef:10:7d:92:d1:43:a1:7b:85: cf:a7:4a:c5:0b:14:c7:58:69:4a:9f:f8:bf:1f:0b: 6b:f0:05:f5:0d:5e:f3:79:d2:95:2e:e8:69:dd:f5: aa:b0:37:9b:4d:6a:e5:6c:7a:a6:d4:ca:9c:fe:38: da:3c:5b:92:da:d9:b8:2c:98:b2:96:44:10:bf:97: 48:de:17:2c:cc:a3:ed:7b:00:b1:d9:c9:8c:03:cd: 52:10:79:f9:66:71:54:fb:af:12:17:8e:ec:2f:ef: bb:9d:f8:df:36:4a:a4:87:82:be:26:1f:7d:12:e6: 45:3d:84:c3:4d:d1:01:f7:68:ff:21:89:6e:a2:68: 19:d4:9b:28:f1:c1:c9:b5:da:1a:e3:6c:d8:aa:c2: 3c:92:cc:ff:6b:5b:27:42:d6:4b:b5:a6:bf:f9:65: 28:10:c2:da:0d:23:2c:20:af:ee:0f:e0:d8:9a:65: 7a:34:1b:2a:f8:42:ef:0d:2c:95:22:7a:f3:27:40: dd:98:c5:b8:d1:50:80:b3:29:ae:37:c1:0f:31:9b: e6:9b:b3:de:a4:7c:3c:40:4a:97:1d:31:9e:de:3d: f8:d2:67:d0:75:68:05:c2:45:fb:80:5e:71:e0:1a: 9e:53:6d:de:6a:44:8e:37:65:55:90:25:d3:77:1d: cf:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:E2:09:87:31:69:27:51:5B:A6:7F:CF:50:5A:C1:1B:27:99:FC:0A X509v3 Authority Key Identifier: keyid:AB:C6:FB:A4:B7:84:28:38:79:19:0D:C7:17:E3:4B:4C:D8:82:DA:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172CE3/5D7899F4405911ECA0AFAA4DC4F9AE02/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172CE3/5D7899F4405911ECA0AFAA4DC4F9AE02/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:5a:78:7d:86:38:41:85:a7:b8:29:77:15:73:c1:ee:b6:63: 50:f1:ce:aa:fd:37:a5:7d:7b:98:90:ab:24:bf:fe:02:b9:56: 9f:90:6e:b6:cf:0e:dd:66:10:11:95:85:30:c6:81:be:0c:07: ed:79:34:45:72:a4:d1:a1:40:a6:b9:1b:a4:d6:f1:de:a4:72: 7c:7f:b2:b5:25:33:8c:41:11:b0:4f:8e:2f:32:b4:4d:77:c5: ad:5b:23:68:28:97:04:51:a4:af:8f:ec:32:b9:1f:a4:37:8f: 50:31:e0:45:03:8d:8f:d3:58:91:70:34:b0:2b:e7:8e:9f:f0: c5:13:8e:fc:39:75:d0:79:9b:0b:b0:fe:50:98:89:8d:27:f8: 2c:8d:7f:c1:9c:56:be:ab:0b:a4:92:a9:48:08:45:65:56:0b: 4a:5b:4a:24:ba:a4:13:15:d0:23:c7:0a:d0:7b:9d:3a:dd:1d: 4b:5a:e8:f4:54:e6:be:47:9f:1a:67:c0:e4:28:a4:ba:0e:97: bc:10:7d:5b:f7:cb:b9:dd:f5:46:58:9e:16:b6:65:c9:02:14: 10:4b:b6:e1:42:4a:2c:9a:b7:c5:8e:cc:e0:ee:ec:f7:fc:4a: c4:97:8d:fb:9a:35:42:8e:9d:d8:ef:70:17:08:75:4f:b5:f2: 28:df:ac:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBH8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJDRTMxMTAvBgNVBAUTKEFCQzZGQkE0Qjc4NDI4Mzg3OTE5MERDNzE3RTM0QjRD RDg4MkRBMDgwHhcNMjUwNDI2MjM0NDE3WhcNMjUwNTAzMjM0NDE3WjAYMRYwFAYD VQQDEw02ODBkNmZkMS0xOTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtj7RBtnvEH2S0UOhe4XPp0rFCxTHWGlKn/i/Hwtr8AX1DV7zedKVLuhp3fWq sDebTWrlbHqm1Mqc/jjaPFuS2tm4LJiylkQQv5dI3hcszKPtewCx2cmMA81SEHn5 ZnFU+68SF47sL++7nfjfNkqkh4K+Jh99EuZFPYTDTdEB92j/IYluomgZ1Jso8cHJ tdoa42zYqsI8ksz/a1snQtZLtaa/+WUoEMLaDSMsIK/uD+DYmmV6NBsq+ELvDSyV InrzJ0DdmMW40VCAsymuN8EPMZvmm7PepHw8QEqXHTGe3j340mfQdWgFwkX7gF5x 4BqeU23eakSON2VVkCXTdx3P8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPXiCYcx aSdRW6Z/z1BawRsnmfwKMB8GA1UdIwQYMBaAFKvG+6S3hCg4eRkNxxfjS0zYgtoI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkNFMy81RDc4OTlGNDQw NTkxMUVDQTBBRkFBNERDNEY5QUUwMi9xOGI3cExlRUtEaDVHUTNIRi1OTFROaUMy Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL3E4YjdwTGVFS0RoNUdRM0hGLU5MVE5pQzJnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkNFMy81RDc4OTlGNDQwNTkxMUVDQTBBRkFBNERDNEY5QUUwMi9xOGI3cExlRUtE aDVHUTNIRi1OTFROaUMyZ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqWnh9hjhBhae4KXcVc8HutmNQ8c6q/TelfXuYkKskv/4CuVafkG62 zw7dZhARlYUwxoG+DAfteTRFcqTRoUCmuRuk1vHepHJ8f7K1JTOMQRGwT44vMrRN d8WtWyNoKJcEUaSvj+wyuR+kN49QMeBFA42P01iRcDSwK+eOn/DFE478OXXQeZsL sP5QmImNJ/gsjX/BnFa+qwukkqlICEVlVgtKW0okuqQTFdAjxwrQe5063R1LWuj0 VOa+R58aZ8DkKKS6Dpe8EH1b98u53fVGWJ4WtmXJAhQQS7bhQkosmrfFjszg7uz3 /ErEl437mjVCjp3Y73AXCHVPtfIo36x2 -----END CERTIFICATE-----Generated at Sun Apr 27 05:42:03 2025 by rpki-client on console.sobornost.net