$ rpki-client -vvf rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft File: 2CKi28iCNPgPcORngrLU2c0_m9w.mft (raw, json) Hash identifier: Af6MZZwhLrTdp6l/RABYx+TketQdZl6L/0coRjPwPIY= Subject key identifier: B3:0F:9C:F6:2E:67:FE:AC:CA:20:DC:FA:6C:DD:E1:14:5A:75:D2:13 Authority key identifier: D8:22:A2:DB:C8:82:34:F8:0F:70:E4:67:82:B2:D4:D9:CD:3F:9B:DC Certificate issuer: /CN=A9176B32/serialNumber=D822A2DBC88234F80F70E46782B2D4D9CD3F9BDC Certificate serial: 021C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft Manifest number: 0216 Signing time: Sun 27 Apr 2025 01:37:01 +0000 Manifest this update: Sun 27 Apr 2025 01:37:00 +0000 Manifest next update: Sun 04 May 2025 01:37:00 +0000 Files and hashes: 1: 2CKi28iCNPgPcORngrLU2c0_m9w.crl (hash: p7t5KsYuGcYNMjSlJd7/tAkj7/brxvvIVDPnWhbTrrI=) 2: 14C5F2A62F3C11ED84084082C4F9AE02.roa (hash: tIgnOUYL9AaMF3o6uRCl3XbHRWVvM0EG7is36EBsHLE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.crl rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 01:36:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 540 (0x21c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176B32, serialNumber=D822A2DBC88234F80F70E46782B2D4D9CD3F9BDC Validity Not Before: Apr 27 01:37:00 2025 GMT Not After : May 4 01:37:00 2025 GMT Subject: CN=680d8a3c-6d36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:00:af:12:d7:90:b8:ca:ac:32:4b:ee:42:a5: 07:10:92:53:fd:da:23:b7:91:be:bb:5d:e7:b0:0b: 61:70:8e:1f:6e:82:28:76:f9:c2:f1:fc:f8:38:4d: 8f:c9:e5:e1:36:3b:ff:c4:41:16:d6:a4:0e:e1:56: e0:45:4d:d3:8c:de:8b:7a:a4:aa:1f:d0:38:cf:18: 76:e1:8e:1e:82:5c:52:c8:49:12:6e:2d:4e:59:c4: 7a:26:fa:5d:90:32:69:c6:fc:88:f2:20:0e:3f:2d: 1b:8c:99:27:44:ec:6a:ad:01:72:77:0b:da:fb:26: f6:74:9e:63:03:1e:7f:ef:46:aa:b0:61:d2:64:1d: 5e:f2:f1:b3:74:01:4b:44:4a:a7:97:ab:0e:ad:83: 31:92:59:8e:a1:c7:bf:ac:a9:d3:ad:73:ed:39:3e: 53:eb:10:98:30:48:ee:bb:8b:8c:d9:14:62:7b:4f: 39:c8:c4:16:37:12:2c:6e:fa:dc:9a:9b:a1:15:a8: 61:7c:1f:04:78:bf:10:13:98:14:ea:56:00:35:eb: 26:95:0c:e3:35:43:fa:60:f4:9b:f0:b0:45:2f:cc: 2c:38:f5:24:c1:ad:a0:38:af:a6:2c:cd:d5:53:c1: a9:57:18:da:19:cb:3b:17:d4:1a:a0:0b:6c:d3:74: 0b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:0F:9C:F6:2E:67:FE:AC:CA:20:DC:FA:6C:DD:E1:14:5A:75:D2:13 X509v3 Authority Key Identifier: keyid:D8:22:A2:DB:C8:82:34:F8:0F:70:E4:67:82:B2:D4:D9:CD:3F:9B:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:ba:b4:97:1e:d2:b6:bb:85:33:3c:01:26:b9:f0:06:19:59: dd:d7:b5:77:cd:02:8b:8e:76:db:95:b7:31:f2:ad:1f:7f:91: e8:61:c2:a2:2f:56:84:49:08:c3:d6:56:17:bd:34:41:ba:37: 27:0e:b6:67:07:9a:54:32:47:e4:92:44:df:68:03:fd:1d:de: 09:63:bb:cd:cc:61:57:e0:90:70:99:82:a0:66:5b:3c:0c:6f: 63:2c:76:02:9e:28:44:51:e5:87:80:25:31:05:26:21:3c:d3: b7:85:61:2e:53:4b:79:e0:55:1b:16:b5:57:b6:90:75:43:2a: 2f:e4:a3:25:1e:af:05:19:3c:94:3e:54:4e:29:7e:43:1e:df: 2b:34:38:1d:72:1d:61:8c:2b:ad:f4:d6:0d:87:d2:69:47:ea: 14:f6:d6:94:26:e1:95:d5:62:2d:fe:28:bb:78:56:e2:93:03: a1:43:8f:76:24:8e:e8:b2:60:88:90:b1:e6:40:d7:ba:f7:47: 36:91:97:81:7b:81:87:cb:94:13:e5:1d:21:72:a9:09:89:96: af:b7:59:7d:94:20:2d:0b:d5:f6:65:7b:10:37:30:1c:76:e3: 80:4a:2e:a3:da:fc:14:1c:85:41:28:ed:20:0c:83:57:04:1e: 90:f2:19:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzZCMzIxMTAvBgNVBAUTKEQ4MjJBMkRCQzg4MjM0RjgwRjcwRTQ2NzgyQjJENEQ5 Q0QzRjlCREMwHhcNMjUwNDI3MDEzNzAwWhcNMjUwNTA0MDEzNzAwWjAYMRYwFAYD VQQDEw02ODBkOGEzYy02ZDM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4wCvEteQuMqsMkvuQqUHEJJT/dojt5G+u13nsAthcI4fboIodvnC8fz4OE2P yeXhNjv/xEEW1qQO4VbgRU3TjN6LeqSqH9A4zxh24Y4eglxSyEkSbi1OWcR6Jvpd kDJpxvyI8iAOPy0bjJknROxqrQFydwva+yb2dJ5jAx5/70aqsGHSZB1e8vGzdAFL REqnl6sOrYMxklmOoce/rKnTrXPtOT5T6xCYMEjuu4uM2RRie085yMQWNxIsbvrc mpuhFahhfB8EeL8QE5gU6lYANesmlQzjNUP6YPSb8LBFL8wsOPUkwa2gOK+mLM3V U8GpVxjaGcs7F9QaoAts03QLsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLMPnPYu Z/6syiDc+mzd4RRaddITMB8GA1UdIwQYMBaAFNgiotvIgjT4D3DkZ4Ky1NnNP5vc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkIzMi83Mzg3OTYxODJG MzgxMUVEOUU3RTAyN0RDNEY5QUUwMi8yQ0tpMjhpQ05QZ1BjT1JuZ3JMVTJjMF9t OXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJDS2kyOGlDTlBnUGNPUm5nckxVMmMwX205dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NkIzMi83Mzg3OTYxODJGMzgxMUVEOUU3RTAyN0RDNEY5QUUwMi8yQ0tpMjhpQ05Q Z1BjT1JuZ3JMVTJjMF9tOXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCurSXHtK2u4UzPAEmufAGGVnd17V3zQKLjnbblbcx8q0ff5HoYcKi L1aESQjD1lYXvTRBujcnDrZnB5pUMkfkkkTfaAP9Hd4JY7vNzGFX4JBwmYKgZls8 DG9jLHYCnihEUeWHgCUxBSYhPNO3hWEuU0t54FUbFrVXtpB1Qyov5KMlHq8FGTyU PlROKX5DHt8rNDgdch1hjCut9NYNh9JpR+oU9taUJuGV1WIt/ii7eFbikwOhQ492 JI7osmCIkLHmQNe690c2kZeBe4GHy5QT5R0hcqkJiZavt1l9lCAtC9X2ZXsQNzAc duOASi6j2vwUHIVBKO0gDINXBB6Q8hna -----END CERTIFICATE-----Generated at Sun Apr 27 05:42:09 2025 by rpki-client on console.sobornost.net