$ rpki-client -vvf rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft File: Iq_UzdnE9MODdis-k-7PGub_nRY.mft (raw, json) Hash identifier: uaTrjRxrNhfj8aYJBTCn1gifpov+G1D5rShQbtpvT2g= Subject key identifier: AB:49:F9:38:33:36:1B:AB:20:60:7B:AA:96:18:69:FA:55:4E:29:AD Authority key identifier: 22:AF:D4:CD:D9:C4:F4:C3:83:76:2B:3E:93:EE:CF:1A:E6:FF:9D:16 Certificate issuer: /CN=A917DFDA/serialNumber=22AFD4CDD9C4F4C383762B3E93EECF1AE6FF9D16 Certificate serial: AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iq_UzdnE9MODdis-k-7PGub_nRY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft Manifest number: A8 Signing time: Sun 27 Apr 2025 04:58:41 +0000 Manifest this update: Sun 27 Apr 2025 04:58:40 +0000 Manifest next update: Sun 04 May 2025 04:58:40 +0000 Files and hashes: 1: Iq_UzdnE9MODdis-k-7PGub_nRY.crl (hash: osqg/3DR+LvVcqoP08mMzsYMjBQBo7tFTZeLEJ6Za7g=) 2: 493F98CE230111EFB4355F5FC4F9AE02.roa (hash: UxAygpfGpi/7LbfgcrDHteILaaTojTUKGBKpExRn4ds=) 3: 1E85ABA6231E11EFA893585AC4F9AE02.roa (hash: tT0U7je/lStzl+Gd03/CVrFPBnBeNuZUlfzB9Ibn9Ho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.crl rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iq_UzdnE9MODdis-k-7PGub_nRY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 170 (0xaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DFDA, serialNumber=22AFD4CDD9C4F4C383762B3E93EECF1AE6FF9D16 Validity Not Before: Apr 27 04:58:40 2025 GMT Not After : May 4 04:58:40 2025 GMT Subject: CN=680db980-ac2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6f:62:89:ad:a3:eb:a2:8d:14:98:96:30:ed: f5:60:27:9a:a6:1b:8b:5e:de:b6:70:4d:6b:0a:26: 1d:00:4e:a4:59:1f:0f:4f:1e:35:12:be:38:bb:c2: 28:3e:d4:b8:d0:a5:61:8e:6d:b2:c8:83:12:f3:f3: ac:e1:2c:5d:14:4f:0b:e2:30:3d:c9:0b:a7:05:02: 43:55:db:41:d9:23:e7:ef:bb:36:33:06:15:97:c4: 99:b0:dc:bc:5b:ff:3a:15:18:8e:da:4e:b2:62:cb: 40:77:41:9c:46:82:38:93:02:c0:9b:24:53:c0:2d: b3:55:f2:ff:70:5f:57:2f:53:1b:cf:6a:aa:b7:9a: 3e:03:f3:8f:db:e1:c0:15:c2:d0:17:d5:8f:68:a8: 8a:7c:d0:3d:4c:9f:45:68:ef:47:73:26:35:19:9b: 94:01:de:c7:7b:5e:1f:fd:49:71:00:7b:65:f6:3f: 77:37:3b:db:26:95:26:5d:eb:37:08:9a:7a:df:bd: bd:e5:b3:45:ca:a6:1d:f4:6e:e4:3e:48:1e:e5:f7: 31:67:77:35:63:78:f8:1c:51:35:e7:23:49:24:b2: cb:7c:ff:bb:1e:fd:d5:8e:10:c0:e2:c4:f8:b9:45: cc:2d:47:7c:7e:55:bd:b1:1a:26:bc:24:4c:a3:82: a7:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:49:F9:38:33:36:1B:AB:20:60:7B:AA:96:18:69:FA:55:4E:29:AD X509v3 Authority Key Identifier: keyid:22:AF:D4:CD:D9:C4:F4:C3:83:76:2B:3E:93:EE:CF:1A:E6:FF:9D:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iq_UzdnE9MODdis-k-7PGub_nRY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:01:6d:de:9d:6f:9a:be:00:f8:f6:7d:de:b8:1e:51:c5:66: 1d:f5:40:26:f3:34:c7:77:b8:af:ae:81:64:89:ae:2b:7f:b5: f9:e8:39:93:43:28:26:47:06:1d:9b:1f:41:30:f2:d6:04:5e: a6:cd:d6:d6:c0:32:18:b6:1c:02:ed:40:8c:86:51:31:12:85: 63:a4:b9:e0:af:cd:02:20:35:fa:92:35:eb:cd:55:50:5b:2d: f4:d6:37:62:bf:c7:17:5b:c3:a4:47:0a:ab:5f:7a:9b:86:36: 9d:dd:c6:d8:96:94:ce:ba:01:36:4e:2d:d6:f3:6c:7b:c2:d1: bc:db:e9:01:94:7e:94:bb:fa:81:e0:94:13:55:13:e7:fc:1f: 0a:40:ee:67:12:53:fa:ef:94:2d:56:44:7c:9f:bc:89:d7:a7: 02:e6:79:fd:e2:ef:70:30:4e:5f:ec:7d:db:9d:b8:43:f8:a1: ca:cf:f5:64:5c:33:a6:c3:7b:fd:5a:29:b9:0e:de:da:12:55: fc:d1:90:e4:20:f9:58:ae:9e:ba:b3:4a:70:d3:0f:c9:94:e5: 03:96:6a:11:fe:ce:26:5e:59:a1:8c:c4:d1:9b:62:e2:bb:70: 78:44:bd:88:3c:ce:d4:1f:7a:38:8a:ba:7c:7e:59:25:81:c5: b7:08:04:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RGREExMTAvBgNVBAUTKDIyQUZENENERDlDNEY0QzM4Mzc2MkIzRTkzRUVDRjFB RTZGRjlEMTYwHhcNMjUwNDI3MDQ1ODQwWhcNMjUwNTA0MDQ1ODQwWjAYMRYwFAYD VQQDEw02ODBkYjk4MC1hYzJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArG9iia2j66KNFJiWMO31YCeaphuLXt62cE1rCiYdAE6kWR8PTx41Er44u8Io PtS40KVhjm2yyIMS8/Os4SxdFE8L4jA9yQunBQJDVdtB2SPn77s2MwYVl8SZsNy8 W/86FRiO2k6yYstAd0GcRoI4kwLAmyRTwC2zVfL/cF9XL1Mbz2qqt5o+A/OP2+HA FcLQF9WPaKiKfNA9TJ9FaO9HcyY1GZuUAd7He14f/UlxAHtl9j93NzvbJpUmXes3 CJp637295bNFyqYd9G7kPkge5fcxZ3c1Y3j4HFE15yNJJLLLfP+7Hv3VjhDA4sT4 uUXMLUd8flW9sRomvCRMo4KnpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKtJ+Tgz NhurIGB7qpYYafpVTimtMB8GA1UdIwQYMBaAFCKv1M3ZxPTDg3YrPpPuzxrm/50W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REZEQS9BRjJENTBFNjIz MDAxMUVGOTQ1REUzODJDNEY5QUUwMi9JcV9VemRuRTlNT0RkaXMtay03UEd1Yl9u UlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lxX1V6ZG5FOU1PRGRpcy1rLTdQR3ViX25SWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 REZEQS9BRjJENTBFNjIzMDAxMUVGOTQ1REUzODJDNEY5QUUwMi9JcV9VemRuRTlN T0RkaXMtay03UEd1Yl9uUlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXAW3enW+avgD49n3euB5RxWYd9UAm8zTHd7ivroFkia4rf7X56DmT QygmRwYdmx9BMPLWBF6mzdbWwDIYthwC7UCMhlExEoVjpLngr80CIDX6kjXrzVVQ Wy301jdiv8cXW8OkRwqrX3qbhjad3cbYlpTOugE2Ti3W82x7wtG82+kBlH6Uu/qB 4JQTVRPn/B8KQO5nElP675QtVkR8n7yJ16cC5nn94u9wME5f7H3bnbhD+KHKz/Vk XDOmw3v9Wim5Dt7aElX80ZDkIPlYrp66s0pw0w/JlOUDlmoR/s4mXlmhjMTRm2Li u3B4RL2IPM7UH3o4irp8flklgcW3CATj -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:50 2025 by rpki-client on console.sobornost.net