$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft File: EAXM1eGCMPuprdPSf4XaOPE-QXI.mft (raw, json) Hash identifier: IHMKJYGqFngYaFFh3zHg89b90U3B10Lj/IqYjdgPiPI= Subject key identifier: 02:A1:39:70:DF:09:95:39:09:81:9C:F7:34:B1:66:66:23:90:75:4A Authority key identifier: 10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72 Certificate issuer: /CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172 Certificate serial: 0391 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft Manifest number: 0335 Signing time: Fri 25 Apr 2025 01:07:27 +0000 Manifest this update: Fri 25 Apr 2025 01:07:26 +0000 Manifest next update: Fri 02 May 2025 01:07:26 +0000 Files and hashes: 1: EAXM1eGCMPuprdPSf4XaOPE-QXI.crl (hash: klCAWZuC9+j5npKtlv8UcHHsEV3zR0A6LCwyaR1cwZE=) 2: 90D0D0C4932111EE9C797C3DC4F9AE02.roa (hash: Vm6eiRV2m0h3o2+tYd1FGFjgp9pdQts4H72lNl2Xi7I=) 3: 010342748FE911EDA6F5922AC4F9AE02.roa (hash: rkgFtN+easpfj80zyIh12NHa5YIf9/kqUBTz88A9U+0=) 4: 1B2129BEA89C11EFB7509755C4F9AE02.roa (hash: /vpSWryezgfmh7uLcv4slqDui8iJtG2ruMNhN0QZXtc=) 5: 3BFEA04CB6A611EDAF611B68C4F9AE02.roa (hash: M/8mU5tu1PDehqyIIfEx5AYfNXgF7DfZkAdJsClKh+E=) 6: 5BE270E26BBC11EFA9584A4EC4F9AE02.roa (hash: VDDXKbmYyHiDMEmj/oJ4TvJLlQHLiEO+FJwD/8ZvU6g=) 7: 7CCE329266F711EF86880681C4F9AE02.roa (hash: EW0QjHa3f/l7itSF2nJAhlAqPXddC/qNYI4p2ArGlrs=) 8: 21B7F8F2932111EEA205F93BC4F9AE02.roa (hash: 62eTjhzKKDQnWJh0GyzAO6zcuQ50THYJAAnB/eSa0lE=) 9: 118AD6DE11C611EEA9D06D11C4F9AE02.roa (hash: cnWBWlYvUnH20i9EZRcahtVtdBdKx0j0wv6eUp45kns=) 10: DBEED4E0B44911EEA11B100BC4F9AE02.roa (hash: bP0i0QbndVMqRZ4Mv5nqCwuWNS0FREH9OqWOj8GCqK8=) 11: C68D1AE69B9611EFB95B8038C4F9AE02.roa (hash: m4mGRpOEYOVe+6oiKGj+nK4AgwsmVEPed7LrVSPSa4M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:07:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 913 (0x391) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178AF2, serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172 Validity Not Before: Apr 25 01:07:26 2025 GMT Not After : May 2 01:07:26 2025 GMT Subject: CN=680ae04e-b5fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:36:4a:d3:b2:0f:5e:ae:c5:4a:31:88:13:29: 8b:9a:44:f1:c0:26:3f:92:60:7e:9b:31:4a:43:2d: 09:a6:e4:90:ee:05:a6:90:c7:aa:c5:4d:d3:cb:fe: ab:52:59:19:4a:99:26:8d:02:d5:3d:c9:05:c2:18: d8:6d:94:e3:e3:8a:f6:4f:e5:3d:fd:68:5b:84:7e: 23:b6:c1:60:1d:ce:2c:f3:0c:41:60:71:53:0e:36: a1:c4:a6:ce:a8:b4:33:f3:91:75:18:06:8e:b6:3b: 1b:a9:f2:f1:93:02:4d:f3:a2:9c:52:00:e0:b6:51: f3:25:31:f0:5b:24:ef:96:ca:47:d1:fd:ff:b5:28: 78:7e:68:86:11:fd:84:d5:a8:ac:8a:18:00:03:13: 7d:e5:10:2c:fc:0b:3e:34:a8:58:e2:ae:11:12:4e: 6d:0a:1f:d2:a2:36:96:2c:96:8f:f5:de:4c:02:46: ad:fb:e1:45:89:0e:80:d0:61:c7:e9:4c:b9:4a:9a: c4:5b:a1:d0:bd:22:e5:82:94:a4:8d:7e:b7:d8:3c: f6:f9:3c:f3:d8:18:78:31:76:9a:ed:72:9f:da:3b: 5a:1f:9d:64:e3:fd:bc:6f:80:1d:8e:2e:f4:61:b3: ef:82:1d:fb:3e:98:e9:c7:4b:99:2a:71:d9:ef:a6: 95:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:A1:39:70:DF:09:95:39:09:81:9C:F7:34:B1:66:66:23:90:75:4A X509v3 Authority Key Identifier: keyid:10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:fd:f0:d3:f6:8a:f0:fd:87:fa:c7:1c:df:45:60:ab:85:0a: 7d:25:7c:df:35:ee:bf:3d:a9:81:25:d8:fe:f6:7b:8a:a4:da: 13:c6:75:3c:b0:6b:8d:c3:5c:83:7a:9f:da:c4:3d:a0:e7:ee: 4c:75:fe:b7:60:e2:69:6e:02:87:5c:cb:17:e5:f0:16:02:53: 95:e5:c5:65:ab:dc:7e:10:77:fc:05:c2:31:87:03:2f:5e:59: 3c:42:4e:59:af:95:43:57:b5:6e:3e:f2:36:60:7f:96:38:df: 60:89:95:89:7c:2a:be:f0:f5:f8:51:99:b7:66:f9:42:1d:11: e3:84:4a:23:37:b0:b8:09:a9:49:f5:6c:5f:d7:25:a7:eb:a9: 2d:4f:a4:c0:a5:21:81:3b:bf:f4:92:26:48:c3:95:d4:a5:e0: 10:6b:c1:70:86:c0:51:d6:c8:96:31:54:c9:e2:e2:12:0e:ce: 0a:56:77:0f:6e:41:08:e7:13:51:fb:a4:99:dd:67:03:a5:a2: 96:54:b9:21:44:93:3e:36:d5:0c:1c:94:77:c4:79:29:13:c9: 1c:a9:8b:76:44:da:d2:68:ec:fe:e7:4b:c8:3c:e6:92:f7:5b: b0:f7:29:e5:ba:e1:c2:d5:8e:4f:5c:a6:e3:01:0a:a3:7c:d9: f7:19:d8:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhBRjIxMTAvBgNVBAUTKDEwMDVDQ0Q1RTE4MjMwRkJBOUFERDNEMjdGODVEQTM4 RjEzRTQxNzIwHhcNMjUwNDI1MDEwNzI2WhcNMjUwNTAyMDEwNzI2WjAYMRYwFAYD VQQDEw02ODBhZTA0ZS1iNWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtTZK07IPXq7FSjGIEymLmkTxwCY/kmB+mzFKQy0JpuSQ7gWmkMeqxU3Ty/6r UlkZSpkmjQLVPckFwhjYbZTj44r2T+U9/WhbhH4jtsFgHc4s8wxBYHFTDjahxKbO qLQz85F1GAaOtjsbqfLxkwJN86KcUgDgtlHzJTHwWyTvlspH0f3/tSh4fmiGEf2E 1aisihgAAxN95RAs/As+NKhY4q4REk5tCh/SojaWLJaP9d5MAkat++FFiQ6A0GHH 6Uy5SprEW6HQvSLlgpSkjX632Dz2+Tzz2Bh4MXaa7XKf2jtaH51k4/28b4Adji70 YbPvgh37Ppjpx0uZKnHZ76aVNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAKhOXDf CZU5CYGc9zSxZmYjkHVKMB8GA1UdIwQYMBaAFBAFzNXhgjD7qa3T0n+F2jjxPkFy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEFGMi83M0M4ODc5MkUw NjcxMUVDQjlEMkZGODFDNEY5QUUwMi9FQVhNMWVHQ01QdXByZFBTZjRYYU9QRS1R WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VBWE0xZUdDTVB1cHJkUFNmNFhhT1BFLVFYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEFGMi83M0M4ODc5MkUwNjcxMUVDQjlEMkZGODFDNEY5QUUwMi9FQVhNMWVHQ01Q dXByZFBTZjRYYU9QRS1RWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2/fDT9orw/Yf6xxzfRWCrhQp9JXzfNe6/PamBJdj+9nuKpNoTxnU8 sGuNw1yDep/axD2g5+5Mdf63YOJpbgKHXMsX5fAWAlOV5cVlq9x+EHf8BcIxhwMv Xlk8Qk5Zr5VDV7VuPvI2YH+WON9giZWJfCq+8PX4UZm3ZvlCHRHjhEojN7C4CalJ 9Wxf1yWn66ktT6TApSGBO7/0kiZIw5XUpeAQa8FwhsBR1siWMVTJ4uISDs4KVncP bkEI5xNR+6SZ3WcDpaKWVLkhRJM+NtUMHJR3xHkpE8kcqYt2RNrSaOz+50vIPOaS 91uw9ynluuHC1Y5PXKbjAQqjfNn3Gdg5 -----END CERTIFICATE-----Generated at Fri Apr 25 08:24:00 2025 by rpki-client on console.sobornost.net