$ rpki-client -vvf rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft File: tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft (raw, json) Hash identifier: xteoyhbnKjKRWn8gM/V7L8jjrLiZ/mZvIRd0JRDX2RI= Subject key identifier: 02:43:EF:33:B0:56:15:44:97:34:AF:FA:F5:AB:57:0E:80:44:6C:30 Authority key identifier: B4:9B:2B:11:D3:87:6D:EC:DE:13:F5:E8:F5:9E:64:1A:7D:09:3F:B9 Certificate issuer: /CN=A9173161/serialNumber=B49B2B11D3876DECDE13F5E8F59E641A7D093FB9 Certificate serial: 38 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft Manifest number: 35 Signing time: Sun 27 Apr 2025 06:28:14 +0000 Manifest this update: Sun 27 Apr 2025 06:28:13 +0000 Manifest next update: Sun 04 May 2025 06:28:13 +0000 Files and hashes: 1: tJsrEdOHbezeE_Xo9Z5kGn0JP7k.crl (hash: EV5hh7M+9FfDFNuPM7+54iOTC0KQA6CiNZzimHE5SW8=) 2: 240B1914D90B11EF95020982C4F9AE02.roa (hash: FjkNGrENcSIvFxBilAn18yNNIFNeTLoQBLQNAUhyMb0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.crl rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173161, serialNumber=B49B2B11D3876DECDE13F5E8F59E641A7D093FB9 Validity Not Before: Apr 27 06:28:13 2025 GMT Not After : May 4 06:28:13 2025 GMT Subject: CN=680dce7d-f1dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:18:8c:60:7a:48:ec:f3:2c:78:58:1c:3b:4f: dc:53:cd:d6:af:25:65:97:99:40:29:c1:a9:d8:11: 3e:7e:81:7f:92:c9:e1:eb:7f:63:37:d2:f1:f0:76: da:b7:94:0e:9e:8e:06:16:94:23:b9:a8:06:ae:2e: 9d:74:1d:c4:5b:f3:0a:7f:68:8b:07:fb:67:3c:55: 3d:a4:0e:43:e3:d2:ba:df:49:d0:c5:29:0e:a3:1e: 76:de:99:15:fc:c7:63:7c:65:97:bc:d1:53:9b:f0: fc:6f:e4:cf:a3:d9:19:8a:ad:be:6f:e7:f8:8b:8f: a6:12:46:19:fc:16:42:8b:5b:cb:55:b8:82:83:ed: e4:2d:8a:0d:18:c5:07:ef:b7:ed:76:4f:b1:7f:0f: a5:62:08:60:f3:53:ef:4e:19:b4:0d:73:00:d5:20: 55:d4:30:30:8e:4f:b6:01:ae:89:8a:86:f9:fa:cf: 45:66:2e:d8:8d:cc:f1:ba:2c:88:e0:5f:b1:69:aa: 8c:fc:64:4b:c4:5d:5a:91:48:12:42:a4:3e:42:30: 21:b1:4b:b8:e3:be:90:54:6a:b0:a0:9f:30:1d:bc: 80:73:da:01:25:84:8a:08:9c:53:53:85:a4:ca:79: 0d:64:28:7c:0a:a2:b2:b1:20:0c:6e:3f:6f:45:89: 23:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:43:EF:33:B0:56:15:44:97:34:AF:FA:F5:AB:57:0E:80:44:6C:30 X509v3 Authority Key Identifier: keyid:B4:9B:2B:11:D3:87:6D:EC:DE:13:F5:E8:F5:9E:64:1A:7D:09:3F:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:08:4a:23:7f:14:50:a8:a8:f6:c4:78:94:ec:a1:29:9f:cd: 55:0f:b8:2a:44:1c:2b:54:e3:54:8f:4b:04:ac:79:28:8a:b1: e7:8c:d3:e3:65:72:dd:19:43:60:9a:58:cf:2d:ef:9e:b3:12: 96:48:6b:f6:3d:c2:d3:4b:49:3d:eb:55:22:ac:78:b0:91:28: 99:4c:c8:20:08:a8:84:2b:56:b0:4e:66:fb:b5:ef:95:0f:c7: 0e:90:c0:bf:74:09:dc:84:0e:43:7c:ce:c1:fc:1b:61:d7:99: 33:d1:4c:2b:16:9e:a3:89:22:dd:3b:41:d7:b0:3f:0f:a9:e6: 1e:45:62:ea:30:09:01:34:4a:d9:3d:bf:1e:f9:bd:ac:e5:ff: ef:74:f0:1f:3a:2f:60:e7:fc:19:ce:b5:bc:a7:6e:41:84:0b: 08:74:38:f0:7e:71:1b:18:b0:89:37:e4:1e:40:73:4d:82:ab: 42:99:43:2d:3c:d7:64:5e:74:8a:31:a6:bb:4a:28:b9:c9:be: 30:ab:74:c8:f0:cd:3d:d9:b0:5b:29:7c:2a:83:94:d2:52:f0: 3b:88:bf:3f:28:a8:e3:a8:90:c0:8e:26:2a:b1:e6:27:08:ca: 15:6b:a9:2e:b1:c1:ad:46:21:14:ff:55:95:06:fa:2c:df:8d: df:c2:4a:78 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MzE2MTExMC8GA1UEBRMoQjQ5QjJCMTFEMzg3NkRFQ0RFMTNGNUU4RjU5RTY0MUE3 RDA5M0ZCOTAeFw0yNTA0MjcwNjI4MTNaFw0yNTA1MDQwNjI4MTNaMBgxFjAUBgNV BAMTDTY4MGRjZTdkLWYxZGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwGIxgekjs8yx4WBw7T9xTzdavJWWXmUApwanYET5+gX+SyeHrf2M30vHwdtq3 lA6ejgYWlCO5qAauLp10HcRb8wp/aIsH+2c8VT2kDkPj0rrfSdDFKQ6jHnbemRX8 x2N8ZZe80VOb8Pxv5M+j2RmKrb5v5/iLj6YSRhn8FkKLW8tVuIKD7eQtig0YxQfv t+12T7F/D6ViCGDzU+9OGbQNcwDVIFXUMDCOT7YBromKhvn6z0VmLtiNzPG6LIjg X7Fpqoz8ZEvEXVqRSBJCpD5CMCGxS7jjvpBUarCgnzAdvIBz2gElhIoInFNThaTK eQ1kKHwKorKxIAxuP29FiSMtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUAkPvM7BW FUSXNK/69atXDoBEbDAwHwYDVR0jBBgwFoAUtJsrEdOHbezeE/Xo9Z5kGn0JP7kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTczMTYxLzcxMzJFRjlBRDkw NzExRUZCMjdGNzg1N0M0RjlBRTAyL3RKc3JFZE9IYmV6ZUVfWG85WjVrR24wSlA3 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdEpzckVkT0hiZXplRV9YbzlaNWtHbjBKUDdrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcz MTYxLzcxMzJFRjlBRDkwNzExRUZCMjdGNzg1N0M0RjlBRTAyL3RKc3JFZE9IYmV6 ZUVfWG85WjVrR24wSlA3ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGEISiN/FFCoqPbEeJTsoSmfzVUPuCpEHCtU41SPSwSseSiKseeM0+Nl ct0ZQ2CaWM8t756zEpZIa/Y9wtNLST3rVSKseLCRKJlMyCAIqIQrVrBOZvu175UP xw6QwL90CdyEDkN8zsH8G2HXmTPRTCsWnqOJIt07QdewPw+p5h5FYuowCQE0Stk9 vx75vazl/+908B86L2Dn/BnOtbynbkGECwh0OPB+cRsYsIk35B5Ac02Cq0KZQy08 12RedIoxprtKKLnJvjCrdMjwzT3ZsFspfCqDlNJS8DuIvz8oqOOokMCOJiqx5icI yhVrqS6xwa1GIRT/VZUG+izfjd/CSng= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:49 2025 by rpki-client on console.sobornost.net