$ rpki-client -vvf rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft File: siw9CrzTkZSGo-YejXiJI5Ir9qU.mft (raw, json) Hash identifier: Lwr8kFboKf4E5vB10lJkc6d/uBlnLOXlATIDw6EAOrQ= Subject key identifier: 29:09:F9:07:17:AE:8C:12:1B:17:45:8C:A0:B0:D9:F2:94:04:BF:76 Authority key identifier: B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5 Certificate issuer: /CN=A917A66F/serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5 Certificate serial: 0126 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft Manifest number: 0107 Signing time: Sun 27 Apr 2025 04:20:04 +0000 Manifest this update: Sun 27 Apr 2025 04:20:04 +0000 Manifest next update: Sun 04 May 2025 04:20:04 +0000 Files and hashes: 1: siw9CrzTkZSGo-YejXiJI5Ir9qU.crl (hash: dvPFkPNQKA8oGYTA7l9MdRq7Yl139j/oiA5+oYxRoII=) 2: A0BD00DEF5B311EFA334BB67C4F9AE02.roa (hash: VGbwSs+xYuuT82QPTEDjBRASIfWEGELF9LE6WDBK6Cw=) 3: B4B6C2B0C1AA11EF83A31D6CC4F9AE02.roa (hash: bw0f6KbJYjRey2+KDVpK9dBW3Yh7Jdgva8k4Bt7aCcM=) 4: 4C7C5ECCE1B211EE84F03918C4F9AE02.roa (hash: LTeECQk5/azIOJTf8rGaT2gWz1Gmd2inlmhftO85Egc=) 5: BB982DDC211611F08D31C34DC4F9AE02.roa (hash: FkwQRUxW28jIhJPhgvAtX7RxgLtIHLVcqsk+XhOm1NE=) 6: E26269722E3811EFA4AF2445C4F9AE02.roa (hash: stQvqSgEe9eoYY5+iLzps6D0J/Yk9AXd8PNpZXOA3CY=) 7: BB17221E211611F08D31C34DC4F9AE02.roa (hash: fycljHXNnk59uPrb51pHFnfOpO9Hxutgas1w6IAJ3gA=) 8: 555E0D90B71F11EFBBE56410C4F9AE02.roa (hash: Yun2AD2EJLYSRV9yxmCnTJUpxZFk9/O+PcxovQCtz2I=) 9: 6E1519E8E1B211EEB4706E18C4F9AE02.roa (hash: xaEZeRSS7SPLQpFTKRrqHdI+Z44FtJElJm/n+VPX6m4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 294 (0x126) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A66F, serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5 Validity Not Before: Apr 27 04:20:04 2025 GMT Not After : May 4 04:20:04 2025 GMT Subject: CN=680db074-c97d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:65:1f:d9:75:3f:94:a3:01:3d:da:8d:dd:6e: 9a:94:ae:b7:0b:7b:7f:18:5c:7d:21:6f:5b:35:80: 11:53:86:d2:3a:76:87:80:1a:7f:1c:9f:35:e0:7d: ac:cc:70:ae:fa:e7:6b:4d:f2:93:5d:88:e2:2d:b1: 52:ac:b8:2a:5f:86:09:02:30:43:7a:b5:25:f1:59: 8e:e2:33:e2:0f:cc:08:82:16:58:c6:43:ec:fe:0d: 68:0d:05:f0:2b:d8:1b:49:bd:56:69:cb:2b:7e:b2: 90:6f:c0:f5:8f:64:e2:d7:fd:85:aa:83:b2:d7:03: 99:17:95:0f:25:bc:54:d5:bc:3a:ef:26:9a:af:d6: ad:dd:4c:8d:28:dc:06:09:47:12:c0:a3:66:48:5d: f3:f8:48:33:26:ed:5b:91:70:a3:3d:a9:df:eb:38: 91:0b:ad:7b:3c:78:6f:3a:c6:bd:4f:a1:28:d1:52: b9:f5:6f:b4:be:0c:22:37:3d:09:d7:01:81:0d:be: 43:43:73:ba:1f:5b:a4:bf:36:61:8f:f6:f1:f5:1c: 41:95:db:cb:8f:fb:fd:c4:d2:3e:62:d7:09:ed:64: 02:93:65:75:62:f2:e6:80:0a:a1:78:d2:b7:84:8b: a7:28:30:57:22:05:c2:8f:af:31:b0:86:9f:d5:eb: 83:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:09:F9:07:17:AE:8C:12:1B:17:45:8C:A0:B0:D9:F2:94:04:BF:76 X509v3 Authority Key Identifier: keyid:B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:4a:e2:1a:2e:e1:9d:53:af:0c:f6:b0:a9:43:b4:bb:7b:2e: 74:1f:41:c1:cd:1c:98:e5:db:ba:fa:78:91:36:82:87:e9:82: ac:42:ff:7b:8e:66:62:92:ed:ca:4a:f3:09:94:65:98:69:86: db:83:08:ac:81:0a:4b:bd:a1:75:8c:89:30:8a:3f:9b:47:f7: 18:ea:db:98:0e:c2:6f:80:bd:78:39:34:ae:c0:b9:ee:6d:c2: 1b:99:2b:47:c1:b4:c9:24:68:88:38:e4:65:53:dc:5e:61:7d: d0:fc:7c:44:6f:57:5d:85:20:7f:bb:7a:81:39:c1:f4:1e:56: 25:c6:88:b1:52:40:56:7f:8b:9d:61:79:ba:a0:4d:21:79:25: 9b:60:7e:e0:d9:63:bf:5d:3e:5c:39:0a:2b:e0:9e:51:79:6f: d8:c9:95:4a:01:af:a3:c3:4c:66:ba:e2:7e:a5:df:4e:c9:7a: 9e:de:43:b6:9b:43:00:e1:e5:23:93:43:d6:ac:c6:cb:87:c9: 4f:d6:76:b9:52:8b:a3:84:7e:70:5f:dc:2c:1f:19:f8:45:bf: fa:8a:28:43:aa:e0:9d:3a:d7:ee:9f:7d:98:f9:8a:f5:ee:58: 87:2c:21:7a:28:93:a8:03:97:51:0f:ca:6d:09:d5:43:4b:cf: f9:22:f1:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E2NkYxMTAvBgNVBAUTKEIyMkMzRDBBQkNEMzkxOTQ4NkEzRTYxRThENzg4OTIz OTIyQkY2QTUwHhcNMjUwNDI3MDQyMDA0WhcNMjUwNTA0MDQyMDA0WjAYMRYwFAYD VQQDEw02ODBkYjA3NC1jOTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4GUf2XU/lKMBPdqN3W6alK63C3t/GFx9IW9bNYARU4bSOnaHgBp/HJ814H2s zHCu+udrTfKTXYjiLbFSrLgqX4YJAjBDerUl8VmO4jPiD8wIghZYxkPs/g1oDQXw K9gbSb1WacsrfrKQb8D1j2Ti1/2FqoOy1wOZF5UPJbxU1bw67yaar9at3UyNKNwG CUcSwKNmSF3z+EgzJu1bkXCjPanf6ziRC617PHhvOsa9T6Eo0VK59W+0vgwiNz0J 1wGBDb5DQ3O6H1ukvzZhj/bx9RxBldvLj/v9xNI+YtcJ7WQCk2V1YvLmgAqheNK3 hIunKDBXIgXCj68xsIaf1euDXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCkJ+QcX rowSGxdFjKCw2fKUBL92MB8GA1UdIwQYMBaAFLIsPQq805GUhqPmHo14iSOSK/al MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTY2Ri84RkNDOUQyOEM2 RjkxMUVFOTdFNkZCMURDNEY5QUUwMi9zaXc5Q3J6VGtaU0dvLVllalhpSkk1SXI5 cVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NpdzlDcnpUa1pTR28tWWVqWGlKSTVJcjlxVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTY2Ri84RkNDOUQyOEM2RjkxMUVFOTdFNkZCMURDNEY5QUUwMi9zaXc5Q3J6VGta U0dvLVllalhpSkk1SXI5cVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZSuIaLuGdU68M9rCpQ7S7ey50H0HBzRyY5du6+niRNoKH6YKsQv97 jmZiku3KSvMJlGWYaYbbgwisgQpLvaF1jIkwij+bR/cY6tuYDsJvgL14OTSuwLnu bcIbmStHwbTJJGiIOORlU9xeYX3Q/HxEb1ddhSB/u3qBOcH0HlYlxoixUkBWf4ud YXm6oE0heSWbYH7g2WO/XT5cOQor4J5ReW/YyZVKAa+jw0xmuuJ+pd9OyXqe3kO2 m0MA4eUjk0PWrMbLh8lP1na5UoujhH5wX9wsHxn4Rb/6iihDquCdOtfun32Y+Yr1 7liHLCF6KJOoA5dRD8ptCdVDS8/5IvGm -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:50 2025 by rpki-client on console.sobornost.net