$ rpki-client -vvf rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.mft File: -IHZTXommvaISDplHTc5GOeGUB4.mft (raw, json) Hash identifier: gOd7AZ1zzhaayQTCrhxlWL7AaA0OSyRoQXllGQ50dPI= Subject key identifier: 9A:36:FA:F6:17:EF:D8:15:94:CC:CC:29:A2:A1:BF:51:36:5D:D3:F4 Authority key identifier: F8:81:D9:4D:7A:26:9A:F6:88:48:3A:65:1D:37:39:18:E7:86:50:1E Certificate issuer: /CN=A9182644/serialNumber=F881D94D7A269AF688483A651D373918E786501E Certificate serial: 014C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IHZTXommvaISDplHTc5GOeGUB4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.mft Manifest number: 0148 Signing time: Sun 27 Apr 2025 03:11:18 +0000 Manifest this update: Sun 27 Apr 2025 03:11:18 +0000 Manifest next update: Sun 04 May 2025 03:11:18 +0000 Files and hashes: 1: -IHZTXommvaISDplHTc5GOeGUB4.crl (hash: 1eHfI3ikPOHVFgt0kKWN2xJE2RApFwzZKRn5T4EpDRI=) 2: 8A50B69C2F2B11EE8CD3F880C4F9AE02.roa (hash: 749u4lopn9W/FVK2H662IjT0Y70cK7ANdEZnlQh0KN8=) 3: 89E0172A2F2B11EE8CD3F880C4F9AE02.roa (hash: JpEflAmkAjQw8fDsB0P7evpxNWtbBcByQzIhr/Rv/Wo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.crl rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IHZTXommvaISDplHTc5GOeGUB4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 332 (0x14c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182644, serialNumber=F881D94D7A269AF688483A651D373918E786501E Validity Not Before: Apr 27 03:11:18 2025 GMT Not After : May 4 03:11:18 2025 GMT Subject: CN=680da056-4958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7e:77:da:54:9b:42:c3:90:51:81:f4:bf:14: d1:b0:87:46:23:53:1f:7d:ec:5d:90:a3:6b:f8:1f: 4b:c7:4d:be:a8:cf:ac:0e:fb:5e:7c:eb:93:c6:27: 02:36:b4:0f:ec:5b:91:8d:70:7c:38:30:c0:e0:1b: 59:60:98:65:ff:9f:24:68:5b:79:df:2f:2b:df:2c: 61:04:c5:ce:47:ed:6d:ca:5a:4f:5a:df:1f:5a:73: 61:a9:71:21:21:54:e3:4d:79:bb:d9:25:27:b6:9f: 1b:22:da:da:4b:ea:bc:76:b8:bd:d4:8c:44:7d:31: 3b:bf:f1:11:04:c2:6b:8c:9c:f5:5a:ff:71:81:b2: cd:59:bf:01:d4:97:d4:4d:fb:67:9d:66:ee:46:d4: f8:55:e8:ef:f9:cb:7a:78:26:b8:57:28:e5:00:03: da:c1:2d:2d:3b:4e:d0:4b:a2:4a:ba:c2:65:1b:d2: 47:b9:78:95:78:91:00:9d:52:ff:c5:78:da:38:65: 79:96:61:c5:80:e1:6b:8a:7a:0e:fb:c0:65:f6:78: cf:3d:28:9f:3c:b8:1f:1c:f8:99:a0:84:60:9b:8d: 78:96:78:47:1d:e6:53:58:b3:c4:5c:4a:d9:b1:7b: 56:b5:13:c8:73:b9:81:a4:fc:62:b8:ed:a5:10:17: 4f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:36:FA:F6:17:EF:D8:15:94:CC:CC:29:A2:A1:BF:51:36:5D:D3:F4 X509v3 Authority Key Identifier: keyid:F8:81:D9:4D:7A:26:9A:F6:88:48:3A:65:1D:37:39:18:E7:86:50:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IHZTXommvaISDplHTc5GOeGUB4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:31:55:d3:f8:1c:b6:84:de:97:b4:d3:aa:c7:5f:b1:4f:3c: 65:21:41:88:31:b9:8a:61:d7:0e:41:03:01:a6:60:38:ba:4a: 81:e3:f2:1c:66:c2:e2:55:48:8a:f4:d5:c7:dc:e0:ee:e6:55: e4:4e:3c:4d:bc:b8:23:3e:f0:2c:f3:52:be:3a:e8:10:73:fe: 01:15:13:48:46:11:76:7d:af:f6:c7:f2:52:a4:30:e9:cf:7c: 13:63:e8:43:4c:f3:4c:da:2f:e1:47:8a:43:23:28:4b:91:5f: 9b:d8:e3:b3:34:06:d3:ab:53:d5:49:53:00:e9:e5:1b:b4:6a: ab:08:3a:6c:87:ca:87:54:3f:3b:f8:2a:73:c9:48:ce:dd:ee: 2d:8f:a1:d4:fb:1b:b3:25:a9:93:f2:9e:c1:b7:ef:b5:8a:68: 4a:cc:60:dc:2b:74:fd:1d:2b:e1:d6:a4:c7:e3:83:e2:e7:83: 0d:5e:9b:47:ac:a1:39:fd:2c:5c:79:3e:d5:5c:f8:72:0a:0a: 15:cf:47:30:68:d3:3a:1b:3c:59:a1:ca:1d:c5:d6:78:e6:69: 0d:e5:19:20:1a:ad:6c:38:03:48:3d:6b:0d:74:21:20:82:c9: 86:1d:1c:c3:ac:a0:cb:55:7c:ac:46:b0:0e:fe:2f:4f:2e:7c: 32:a9:0b:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI2NDQxMTAvBgNVBAUTKEY4ODFEOTREN0EyNjlBRjY4ODQ4M0E2NTFEMzczOTE4 RTc4NjUwMUUwHhcNMjUwNDI3MDMxMTE4WhcNMjUwNTA0MDMxMTE4WjAYMRYwFAYD VQQDEw02ODBkYTA1Ni00OTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvH532lSbQsOQUYH0vxTRsIdGI1MffexdkKNr+B9Lx02+qM+sDvtefOuTxicC NrQP7FuRjXB8ODDA4BtZYJhl/58kaFt53y8r3yxhBMXOR+1tylpPWt8fWnNhqXEh IVTjTXm72SUntp8bItraS+q8dri91IxEfTE7v/ERBMJrjJz1Wv9xgbLNWb8B1JfU TftnnWbuRtT4Vejv+ct6eCa4VyjlAAPawS0tO07QS6JKusJlG9JHuXiVeJEAnVL/ xXjaOGV5lmHFgOFrinoO+8Bl9njPPSifPLgfHPiZoIRgm414lnhHHeZTWLPEXErZ sXtWtRPIc7mBpPxiuO2lEBdPnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJo2+vYX 79gVlMzMKaKhv1E2XdP0MB8GA1UdIwQYMBaAFPiB2U16Jpr2iEg6ZR03ORjnhlAe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjY0NC9CRjEzMUQzNDJE MDAxMUVFOUQxMEZGMThDNEY5QUUwMi8tSUhaVFhvbW12YUlTRHBsSFRjNUdPZUdV QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1JSFpUWG9tbXZhSVNEcGxIVGM1R09lR1VCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjY0NC9CRjEzMUQzNDJEMDAxMUVFOUQxMEZGMThDNEY5QUUwMi8tSUhaVFhvbW12 YUlTRHBsSFRjNUdPZUdVQjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaMVXT+By2hN6XtNOqx1+xTzxlIUGIMbmKYdcOQQMBpmA4ukqB4/Ic ZsLiVUiK9NXH3ODu5lXkTjxNvLgjPvAs81K+OugQc/4BFRNIRhF2fa/2x/JSpDDp z3wTY+hDTPNM2i/hR4pDIyhLkV+b2OOzNAbTq1PVSVMA6eUbtGqrCDpsh8qHVD87 +CpzyUjO3e4tj6HU+xuzJamT8p7Bt++1imhKzGDcK3T9HSvh1qTH44Pi54MNXptH rKE5/SxceT7VXPhyCgoVz0cwaNM6GzxZocodxdZ45mkN5RkgGq1sOANIPWsNdCEg gsmGHRzDrKDLVXysRrAO/i9PLnwyqQsv -----END CERTIFICATE-----Generated at Sun Apr 27 05:42:11 2025 by rpki-client on console.sobornost.net