$ rpki-client -vvf rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft File: 8qiUEKVLBHj2ArcxIAUVHClcc3k.mft (raw, json) Hash identifier: iDFPRjFDK/LLci+yGU9gNddo51ESuphA/N1g/VAceyo= Subject key identifier: A5:29:AA:6A:A6:54:6D:2A:26:89:91:DB:9A:F6:AE:3B:85:E5:43:32 Authority key identifier: F2:A8:94:10:A5:4B:04:78:F6:02:B7:31:20:05:15:1C:29:5C:73:79 Certificate issuer: /CN=A9175300/serialNumber=F2A89410A54B0478F602B7312005151C295C7379 Certificate serial: 0CA4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8qiUEKVLBHj2ArcxIAUVHClcc3k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft Manifest number: 0C9D Signing time: Sat 10 May 2025 17:59:53 +0000 Manifest this update: Sat 10 May 2025 17:59:53 +0000 Manifest next update: Sat 17 May 2025 17:59:53 +0000 Files and hashes: 1: 8qiUEKVLBHj2ArcxIAUVHClcc3k.crl (hash: RqtiMJIZobnT7oHo4FyCHyJtfodGkTuSyQpZBnVn2Oo=) 2: 68EB3B00F18E11E997528762C4F9AE02.roa (hash: ag4btEEr8nwGBlqow86nAvtb1JX6B7t93yhnFSFUrc4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.crl rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8qiUEKVLBHj2ArcxIAUVHClcc3k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 17:35:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3236 (0xca4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175300, serialNumber=F2A89410A54B0478F602B7312005151C295C7379 Validity Not Before: May 10 17:59:53 2025 GMT Not After : May 17 17:59:53 2025 GMT Subject: CN=681f9419-48eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:59:81:64:f0:20:de:f1:a7:5c:51:35:f1:3c: 47:c2:4c:55:f0:64:3f:ad:0c:5d:cf:4f:c5:93:3e: 32:5d:a2:6e:13:78:81:37:0a:a6:d0:99:01:ba:d9: 73:86:88:9a:bd:49:e5:53:1d:6a:f7:75:d0:17:5e: 52:88:fd:39:45:86:66:4a:5c:da:69:82:40:1d:34: 53:1b:06:41:53:3f:ed:21:b8:47:1f:0d:b3:77:cb: 89:6c:db:7d:f2:30:be:05:73:53:5f:a3:78:fc:93: d6:43:1c:bd:20:e0:58:7e:de:cf:a1:e4:12:7a:9e: 49:f3:82:46:11:0f:ee:df:2b:5a:2e:30:49:c4:95: 98:92:f8:6f:67:39:2a:11:29:d3:54:21:17:25:b7: b0:e9:5d:a3:ae:d5:8a:30:ea:7a:8d:18:81:09:46: ac:9d:22:77:34:99:8a:ae:2a:90:43:40:81:84:5e: fc:d7:b0:72:0b:d5:27:a0:82:95:95:09:13:d4:5c: c6:dc:d3:6b:f2:5c:16:45:a3:3b:fd:17:42:d3:9b: 79:a4:69:e6:64:d2:03:1d:f3:aa:82:f3:cb:ee:8e: ce:98:bc:9e:ad:cf:f0:c1:1e:6a:c5:18:29:92:16: 81:21:02:c3:7f:f0:7c:fc:2c:2b:10:1e:bc:70:1e: 13:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:29:AA:6A:A6:54:6D:2A:26:89:91:DB:9A:F6:AE:3B:85:E5:43:32 X509v3 Authority Key Identifier: keyid:F2:A8:94:10:A5:4B:04:78:F6:02:B7:31:20:05:15:1C:29:5C:73:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8qiUEKVLBHj2ArcxIAUVHClcc3k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:de:34:e8:bd:f8:21:81:eb:bf:15:66:78:bf:5e:a0:83:0f: 1a:82:1b:f8:52:6e:af:13:e3:c8:30:ce:1f:83:df:d2:ea:d4: b3:cf:47:d4:64:04:d1:73:03:36:90:ad:a2:e5:e9:64:73:75: 90:53:32:6e:4a:c0:b6:8f:0a:63:dd:fe:ef:88:80:39:b0:c3: 55:06:7e:cc:0c:d2:64:41:9a:a6:36:17:86:42:b9:78:d7:f8: c2:91:15:ac:19:16:3d:5d:eb:c8:99:6b:14:59:c9:25:4b:10: 98:05:68:eb:d7:72:c5:cd:ce:b5:07:4c:6e:80:82:8c:8d:90: a7:e2:5d:ae:88:3b:2a:36:9d:c4:be:fc:c5:ae:91:6a:8b:bc: 33:75:8d:b9:21:95:e0:13:c5:2e:31:a8:ad:71:12:8f:96:f0: 79:70:f5:94:3e:a6:c7:c2:b6:04:7c:25:68:53:20:32:df:d6: 20:01:a2:5e:c6:e0:ff:7e:db:15:89:f6:49:c0:ad:1b:d3:12: 41:a1:c4:85:33:d5:49:42:6e:e8:49:fa:de:4d:e8:30:da:12: b8:9c:5d:86:a6:b5:60:fa:ba:71:0c:4d:33:06:17:19:45:e1: 33:56:20:88:d2:e8:30:68:32:4d:5b:7e:e3:a4:ed:a2:f0:51: 3a:f3:f8:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUzMDAxMTAvBgNVBAUTKEYyQTg5NDEwQTU0QjA0NzhGNjAyQjczMTIwMDUxNTFD Mjk1QzczNzkwHhcNMjUwNTEwMTc1OTUzWhcNMjUwNTE3MTc1OTUzWjAYMRYwFAYD VQQDEw02ODFmOTQxOS00OGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzFmBZPAg3vGnXFE18TxHwkxV8GQ/rQxdz0/Fkz4yXaJuE3iBNwqm0JkButlz hoiavUnlUx1q93XQF15SiP05RYZmSlzaaYJAHTRTGwZBUz/tIbhHHw2zd8uJbNt9 8jC+BXNTX6N4/JPWQxy9IOBYft7PoeQSep5J84JGEQ/u3ytaLjBJxJWYkvhvZzkq ESnTVCEXJbew6V2jrtWKMOp6jRiBCUasnSJ3NJmKriqQQ0CBhF7817ByC9UnoIKV lQkT1FzG3NNr8lwWRaM7/RdC05t5pGnmZNIDHfOqgvPL7o7OmLyerc/wwR5qxRgp khaBIQLDf/B8/CwrEB68cB4TuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKUpqmqm VG0qJomR25r2rjuF5UMyMB8GA1UdIwQYMBaAFPKolBClSwR49gK3MSAFFRwpXHN5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTMwMC81RUZBRDc2NEYx OEQxMUU5QUQ3NUI4NjBDNEY5QUUwMi84cWlVRUtWTEJIajJBcmN4SUFVVkhDbGNj M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhxaVVFS1ZMQkhqMkFyY3hJQVVWSENsY2Mzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTMwMC81RUZBRDc2NEYxOEQxMUU5QUQ3NUI4NjBDNEY5QUUwMi84cWlVRUtWTEJI ajJBcmN4SUFVVkhDbGNjM2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBG3jTovfghgeu/FWZ4v16ggw8aghv4Um6vE+PIMM4fg9/S6tSzz0fU ZATRcwM2kK2i5elkc3WQUzJuSsC2jwpj3f7viIA5sMNVBn7MDNJkQZqmNheGQrl4 1/jCkRWsGRY9XevImWsUWcklSxCYBWjr13LFzc61B0xugIKMjZCn4l2uiDsqNp3E vvzFrpFqi7wzdY25IZXgE8UuMaitcRKPlvB5cPWUPqbHwrYEfCVoUyAy39YgAaJe xuD/ftsVifZJwK0b0xJBocSFM9VJQm7oSfreTegw2hK4nF2GprVg+rpxDE0zBhcZ ReEzViCI0ugwaDJNW37jpO2i8FE68/hv -----END CERTIFICATE-----Generated at Sat May 10 20:02:13 2025 by rpki-client on console.sobornost.net