$ rpki-client -vvf rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft File: SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft (raw, json) Hash identifier: /C7FQPG0t5g8gd9bZ4ecvSPQRGmcgnbYM6S0NQ3utuo= Subject key identifier: 37:CC:6D:9B:64:AE:1D:58:6B:F3:22:08:68:21:A1:81:F5:F6:B4:F0 Authority key identifier: 48:E9:98:51:C1:89:FA:92:1B:86:66:4E:30:BC:57:C2:0E:D1:A8:C4 Certificate issuer: /CN=A9174EB5/serialNumber=48E99851C189FA921B86664E30BC57C20ED1A8C4 Certificate serial: 0C9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft Manifest number: 0C5A Signing time: Sat 26 Apr 2025 18:20:52 +0000 Manifest this update: Sat 26 Apr 2025 18:20:52 +0000 Manifest next update: Sat 03 May 2025 18:20:52 +0000 Files and hashes: 1: SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl (hash: 8yzoUUrs5fqSiDlIUW19daUHVddpPsJ/tK+ltbU6Sos=) 2: 0EF9BE4E276F11EEB328204AC4F9AE02.roa (hash: ySE2YBsbAXt0k1PEdiGam1s5GhhHLonIBlG28ashrzw=) 3: 451C283AFE4911ED9352E438C4F9AE02.roa (hash: 9xj2eLyG/tdesiN53tFy07gS2PXLIBFRo+Pfj6Aj7f4=) 4: D47B21C24FFE11EAA0E4ED42C4F9AE02.roa (hash: dJZrsN09jQhR1tV/MBGDtF9J2z2S5+/G8ySEaBQlIWI=) 5: 76BF7682061B11EAAD56521BC4F9AE02.roa (hash: 5k3lhIIOE5jK/yOHyIZ8i0wDdX2SrJVnqaK6Nl9SYpA=) 6: 430342A4C02B11EA85244830C4F9AE02.roa (hash: 0bKIGEsq8hLfPMAMaZjPiHvxpIZHU52fzssXfn7yiXU=) 7: E397AB78866F11EBA76EED3EC4F9AE02.roa (hash: DBPGuu5yRvDvP4FC/IjV2H3T+xTKFbXciVMjwanRb/4=) 8: E0848D606F7611EDB491621FC4F9AE02.roa (hash: /EuxmPPRYBaK5xLwAa5WDWDWOcYmzlBlj89Amjexk/E=) 9: CF257402276E11EEBE7B7B49C4F9AE02.roa (hash: DfS1XhJ0VY2l1Vl6FaTOWiiwrvVb4J6NRESIx8xEXkI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 18:20:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3227 (0xc9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174EB5, serialNumber=48E99851C189FA921B86664E30BC57C20ED1A8C4 Validity Not Before: Apr 26 18:20:52 2025 GMT Not After : May 3 18:20:52 2025 GMT Subject: CN=680d2404-e13a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:38:2f:21:34:e6:ba:a7:c4:78:42:6a:91:72: d1:c0:26:3c:45:40:a4:8c:29:d0:48:8a:dd:07:b7: 18:36:b1:49:68:d2:8f:ac:b6:c0:47:6f:06:03:cb: 69:4e:46:6a:61:3b:ed:4a:f1:44:04:ff:72:2c:70: 87:b7:ef:b4:36:75:e5:59:83:94:1e:82:e1:1c:4c: d6:25:f1:46:14:8a:c0:ad:ef:f1:6e:bb:4a:cf:13: 61:53:d8:3c:12:5c:37:30:5f:49:44:e3:1d:93:94: c9:cf:06:5e:b5:14:ed:a3:6d:dd:0a:60:37:38:40: 96:2f:cc:db:80:4e:89:d6:6a:d1:37:6a:08:14:d1: 23:e5:80:81:d2:88:b4:de:3b:9c:52:0a:99:b7:eb: 81:e5:70:a1:29:69:26:0d:94:11:cf:28:2c:eb:d6: 0f:53:8e:1a:57:03:e4:9b:53:6a:04:56:b4:86:53: 22:2c:16:d4:3a:9e:1f:9c:7c:e0:ed:dc:ed:30:2b: 44:a2:32:ed:ee:eb:4b:75:51:57:3b:c9:23:f7:45: 85:b7:b3:64:dd:06:86:52:52:80:e8:6f:00:42:9a: 68:0a:8c:81:76:83:95:74:9f:9a:25:f2:9d:04:aa: 45:f8:a6:23:eb:59:11:4f:e2:e6:f4:84:1e:5a:8d: d7:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:CC:6D:9B:64:AE:1D:58:6B:F3:22:08:68:21:A1:81:F5:F6:B4:F0 X509v3 Authority Key Identifier: keyid:48:E9:98:51:C1:89:FA:92:1B:86:66:4E:30:BC:57:C2:0E:D1:A8:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:1b:fc:96:0d:a4:5a:e8:e3:4e:96:ee:cc:6e:28:62:76:e9: 03:e1:49:08:95:0d:c7:69:c8:d8:82:da:9a:5f:97:db:5e:47: 5c:36:36:40:d7:55:a1:db:cc:7a:45:70:69:23:31:57:b1:69: 61:02:ee:53:f7:7f:85:db:4d:af:c2:4d:4c:9b:61:f1:35:05: 8e:94:37:01:20:63:94:df:40:b8:01:3b:35:16:08:1e:ee:6f: 56:e2:7d:21:d9:c1:be:9c:39:40:e2:c6:40:48:cc:34:67:a1: e1:b2:4b:e3:67:91:19:3c:38:88:1b:0c:2a:7e:8f:13:d1:d6: 6b:1f:c6:57:ae:53:74:7a:87:e6:e3:80:ac:6e:c0:d5:d4:2d: e9:d2:92:4e:d0:3b:9f:5f:f2:d2:53:9b:c0:6a:36:d4:2d:77: 7f:c5:8c:3d:95:12:e3:65:19:2a:58:e9:48:e1:af:cb:33:98: 4e:75:53:3d:64:cc:69:5f:2a:5d:38:69:5a:14:65:75:bc:0e: 55:39:de:44:88:cd:1b:03:6e:c6:3a:0f:dc:1a:db:13:2b:2c: 20:ef:08:ca:61:e0:b6:c3:59:f0:d4:0f:58:31:9d:54:6d:45: b7:df:0c:7b:f5:63:72:a5:df:a8:fd:8d:c3:58:b3:db:00:85: a1:b0:58:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRFQjUxMTAvBgNVBAUTKDQ4RTk5ODUxQzE4OUZBOTIxQjg2NjY0RTMwQkM1N0My MEVEMUE4QzQwHhcNMjUwNDI2MTgyMDUyWhcNMjUwNTAzMTgyMDUyWjAYMRYwFAYD VQQDEw02ODBkMjQwNC1lMTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyjgvITTmuqfEeEJqkXLRwCY8RUCkjCnQSIrdB7cYNrFJaNKPrLbAR28GA8tp TkZqYTvtSvFEBP9yLHCHt++0NnXlWYOUHoLhHEzWJfFGFIrAre/xbrtKzxNhU9g8 Elw3MF9JROMdk5TJzwZetRTto23dCmA3OECWL8zbgE6J1mrRN2oIFNEj5YCB0oi0 3jucUgqZt+uB5XChKWkmDZQRzygs69YPU44aVwPkm1NqBFa0hlMiLBbUOp4fnHzg 7dztMCtEojLt7utLdVFXO8kj90WFt7Nk3QaGUlKA6G8AQppoCoyBdoOVdJ+aJfKd BKpF+KYj61kRT+Lm9IQeWo3XoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDfMbZtk rh1Ya/MiCGghoYH19rTwMB8GA1UdIwQYMBaAFEjpmFHBifqSG4ZmTjC8V8IO0ajE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEVCNS9BRkVBMjlDMjA2 MTkxMUVBODU0QTM1MTZDNEY5QUUwMi9TT21ZVWNHSi1wSWJobVpPTUx4WHdnN1Jx TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NPbVlVY0dKLXBJYmhtWk9NTHhYd2c3UnFNUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEVCNS9BRkVBMjlDMjA2MTkxMUVBODU0QTM1MTZDNEY5QUUwMi9TT21ZVWNHSi1w SWJobVpPTUx4WHdnN1JxTVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaG/yWDaRa6ONOlu7MbihidukD4UkIlQ3HacjYgtqaX5fbXkdcNjZA 11Wh28x6RXBpIzFXsWlhAu5T93+F202vwk1Mm2HxNQWOlDcBIGOU30C4ATs1Fgge 7m9W4n0h2cG+nDlA4sZASMw0Z6HhskvjZ5EZPDiIGwwqfo8T0dZrH8ZXrlN0eofm 44CsbsDV1C3p0pJO0DufX/LSU5vAajbULXd/xYw9lRLjZRkqWOlI4a/LM5hOdVM9 ZMxpXypdOGlaFGV1vA5VOd5EiM0bA27GOg/cGtsTKywg7wjKYeC2w1nw1A9YMZ1U bUW33wx79WNypd+o/Y3DWLPbAIWhsFgQ -----END CERTIFICATE-----Generated at Sat Apr 26 21:01:55 2025 by rpki-client on console.sobornost.net