$ rpki-client -vvf rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.mft File: xVGHsAsaczdfhFaIX2oQfuHZNc8.mft (raw, json) Hash identifier: ewCSlPsf4ElKS7WTHviuUO7TvVD5Qbtmjk2lTV+3kbE= Subject key identifier: 87:57:15:B0:08:2D:93:38:7F:49:47:7D:6A:FB:5B:6B:AB:90:24:45 Authority key identifier: C5:51:87:B0:0B:1A:73:37:5F:84:56:88:5F:6A:10:7E:E1:D9:35:CF Certificate issuer: /CN=A9173B29/serialNumber=C55187B00B1A73375F8456885F6A107EE1D935CF Certificate serial: D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVGHsAsaczdfhFaIX2oQfuHZNc8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.mft Manifest number: D2 Signing time: Sun 27 Apr 2025 04:35:00 +0000 Manifest this update: Sun 27 Apr 2025 04:34:59 +0000 Manifest next update: Sun 04 May 2025 04:34:59 +0000 Files and hashes: 1: xVGHsAsaczdfhFaIX2oQfuHZNc8.crl (hash: rOmKIIIxtClyIjCkc7+IV11IjznMMPv62IJmo2Z+cvE=) 2: C9FDEC12E82411EE81065223C4F9AE02.roa (hash: w8SNcu2W86NVWJqOd27to5fWU6al9qmk5VnBP7mMOjs=) 3: EF1E7F70E82411EE9005BA2DC4F9AE02.roa (hash: q12pisfHJtoL9XkqG0on+CXyPl8Ax23nksmjhCAQXBQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.crl rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVGHsAsaczdfhFaIX2oQfuHZNc8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 216 (0xd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173B29, serialNumber=C55187B00B1A73375F8456885F6A107EE1D935CF Validity Not Before: Apr 27 04:34:59 2025 GMT Not After : May 4 04:34:59 2025 GMT Subject: CN=680db3f4-5f34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:01:12:4f:7b:25:e7:6b:4b:79:cd:74:7a:d8: a9:f5:dc:f1:bb:b0:ec:aa:85:45:88:f5:14:07:64: 5e:40:ea:95:46:08:eb:16:6a:87:f0:00:cf:8c:f8: 71:64:ce:98:fc:bc:63:af:43:42:11:d4:70:0e:97: 99:83:8a:fa:e3:ff:a6:e2:65:47:a8:be:1a:bf:d6: cd:c4:17:e0:e0:f1:b4:2f:9d:09:a2:6f:3a:60:a4: cc:14:a5:2e:be:48:8f:6b:cd:69:5e:11:32:3a:23: 20:0c:2d:09:23:47:f2:c8:5e:00:aa:bd:37:a6:3e: a6:6f:bc:a6:11:0f:a6:97:b0:f3:2c:f2:da:d8:0b: 1a:b6:bf:8a:f2:10:81:70:d9:30:94:cc:2e:4a:96: 0c:5f:63:70:d2:43:d6:33:d7:fe:ac:c4:65:7c:18: 82:5b:b1:fe:15:1e:38:3d:9d:1f:38:a5:ca:df:80: 9d:ca:b6:2d:fa:50:75:e3:11:57:da:10:47:61:88: df:c0:24:b4:e5:20:27:b2:dd:f6:1c:30:ec:09:19: df:5d:4b:77:80:08:71:f2:6c:b5:cb:47:42:e8:0f: 01:a2:47:08:f5:09:53:f1:9a:17:de:70:7f:2e:e5: fc:29:a2:d0:27:38:ab:c1:a7:b0:76:e4:9c:73:2c: 94:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:57:15:B0:08:2D:93:38:7F:49:47:7D:6A:FB:5B:6B:AB:90:24:45 X509v3 Authority Key Identifier: keyid:C5:51:87:B0:0B:1A:73:37:5F:84:56:88:5F:6A:10:7E:E1:D9:35:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVGHsAsaczdfhFaIX2oQfuHZNc8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:c6:7d:ab:be:30:70:5f:59:a1:11:cb:10:d4:a2:df:f8:02: d0:7c:ff:84:d6:4f:43:f3:0e:91:24:58:ab:fa:4d:6a:d3:0f: 84:41:b3:3a:0a:35:ea:9a:28:02:46:70:dd:f3:0a:63:02:66: 19:c5:35:6d:44:bd:e7:44:d2:0c:9f:3d:0d:3a:5b:37:f4:82: b3:11:f5:79:5b:4e:47:d4:89:bb:ee:56:6e:78:d4:fa:40:ba: af:8b:e3:42:47:3a:3f:99:97:eb:f5:b1:0d:94:9d:5c:eb:62: 4b:f6:52:24:99:0e:8c:f6:32:a9:e0:e9:7f:cd:a9:0e:2c:7b: b6:8d:81:b6:81:34:5b:90:9f:4f:0f:38:15:b6:ec:07:51:4a: 01:2a:e3:47:ce:9b:f9:eb:ea:24:60:1f:6d:81:ef:af:1c:e5: 82:c0:5c:5b:ae:61:5d:14:4f:84:75:bc:54:db:c4:60:b5:45: 6c:f4:6a:0b:6e:83:cf:b1:7e:bd:a2:44:ca:7a:85:48:d7:3b: 98:45:10:38:50:75:ad:cd:ef:9b:a3:52:81:da:2a:66:f4:6d: 10:ed:fb:8a:f9:32:22:aa:68:51:5e:8f:1a:13:dc:9c:8f:dd: 0c:70:98:8d:08:fb:5a:18:45:f0:7c:e3:cb:99:d7:7f:c5:4a: 20:5d:c4:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNCMjkxMTAvBgNVBAUTKEM1NTE4N0IwMEIxQTczMzc1Rjg0NTY4ODVGNkExMDdF RTFEOTM1Q0YwHhcNMjUwNDI3MDQzNDU5WhcNMjUwNTA0MDQzNDU5WjAYMRYwFAYD VQQDEw02ODBkYjNmNC01ZjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuwEST3sl52tLec10etip9dzxu7DsqoVFiPUUB2ReQOqVRgjrFmqH8ADPjPhx ZM6Y/Lxjr0NCEdRwDpeZg4r64/+m4mVHqL4av9bNxBfg4PG0L50Jom86YKTMFKUu vkiPa81pXhEyOiMgDC0JI0fyyF4Aqr03pj6mb7ymEQ+ml7DzLPLa2Asatr+K8hCB cNkwlMwuSpYMX2Nw0kPWM9f+rMRlfBiCW7H+FR44PZ0fOKXK34CdyrYt+lB14xFX 2hBHYYjfwCS05SAnst32HDDsCRnfXUt3gAhx8my1y0dC6A8BokcI9QlT8ZoX3nB/ LuX8KaLQJzirwaewduSccyyUpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIdXFbAI LZM4f0lHfWr7W2urkCRFMB8GA1UdIwQYMBaAFMVRh7ALGnM3X4RWiF9qEH7h2TXP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0IyOS82MTdFOTQ0OEU4 MjQxMUVFQUZCN0RBN0RDNEY5QUUwMi94VkdIc0FzYWN6ZGZoRmFJWDJvUWZ1SFpO YzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hWR0hzQXNhY3pkZmhGYUlYMm9RZnVIWk5jOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0IyOS82MTdFOTQ0OEU4MjQxMUVFQUZCN0RBN0RDNEY5QUUwMi94VkdIc0FzYWN6 ZGZoRmFJWDJvUWZ1SFpOYzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAixn2rvjBwX1mhEcsQ1KLf+ALQfP+E1k9D8w6RJFir+k1q0w+EQbM6 CjXqmigCRnDd8wpjAmYZxTVtRL3nRNIMnz0NOls39IKzEfV5W05H1Im77lZueNT6 QLqvi+NCRzo/mZfr9bENlJ1c62JL9lIkmQ6M9jKp4Ol/zakOLHu2jYG2gTRbkJ9P DzgVtuwHUUoBKuNHzpv56+okYB9tge+vHOWCwFxbrmFdFE+EdbxU28RgtUVs9GoL boPPsX69okTKeoVI1zuYRRA4UHWtze+bo1KB2ipm9G0Q7fuK+TIiqmhRXo8aE9yc j90McJiNCPtaGEXwfOPLmdd/xUogXcTq -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:49 2025 by rpki-client on console.sobornost.net