$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft File: tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft (raw, json) Hash identifier: mN57tAVskwZGfrIYa1uFNF+Bi5HEIay8EDOFBD5d8zU= Subject key identifier: 77:36:FB:F2:AE:AF:0E:D9:34:60:ED:96:B2:E8:62:3E:7B:4C:0C:0F Authority key identifier: B6:A2:3E:32:B4:53:59:51:61:5C:EA:4A:B1:B6:81:65:0D:69:4C:B7 Certificate issuer: /CN=A9185B41/serialNumber=B6A23E32B4535951615CEA4AB1B681650D694CB7 Certificate serial: 0A38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft Manifest number: 1228 Signing time: Sun 04 May 2025 19:32:08 +0000 Manifest this update: Sun 04 May 2025 19:32:07 +0000 Manifest next update: Sun 11 May 2025 19:32:07 +0000 Files and hashes: 1: tqI-MrRTWVFhXOpKsbaBZQ1pTLc.crl (hash: acTiclkBKJJl7Kkzq6TWm/jWR8M7iBFfAS/aNOfZeug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.crl rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 18:51:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2616 (0xa38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185B41, serialNumber=B6A23E32B4535951615CEA4AB1B681650D694CB7 Validity Not Before: May 4 19:32:07 2025 GMT Not After : May 11 19:32:07 2025 GMT Subject: CN=6817c0b7-ecf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:cb:f1:2a:4e:79:0d:f1:2c:bd:cc:b4:72:e8: b0:d6:fe:63:fe:f7:f3:8f:fe:7f:bf:78:fc:20:b5: 7a:b3:9b:4e:6f:d0:90:fa:a0:a9:da:47:6c:88:0c: 41:c2:ad:c2:8e:f5:e2:38:13:56:c2:9c:36:9a:e7: 33:d6:b6:41:c0:13:84:48:52:0f:c0:54:8d:36:22: aa:da:b1:c3:2f:56:23:9c:a0:78:81:ec:47:91:9f: 6b:57:f5:88:0b:9f:d0:a9:01:70:2f:91:44:33:74: 2c:b1:aa:8a:70:62:b7:fe:75:7b:a6:8b:53:ff:64: 26:c2:74:69:8a:e3:d7:95:27:6b:5e:2f:9d:a5:cc: cc:00:44:c5:d9:cc:2a:cd:d2:94:04:3a:22:11:2b: fb:e2:80:43:13:61:a0:6f:c0:f1:9e:f2:bb:5c:de: cf:a5:39:ff:9d:a6:82:14:df:18:04:1c:52:0f:39: ee:9c:ce:d4:64:b7:88:c1:21:c1:e8:ab:a9:ad:35: c8:d8:79:22:fd:a4:c9:73:59:95:df:82:88:08:26: 55:80:7e:3b:1e:c2:f0:8b:5a:35:28:1e:6b:30:1a: 98:90:28:2a:37:e5:4f:20:29:1e:4f:b8:05:90:1b: 1d:19:bf:86:30:a0:2b:07:da:4f:ae:fa:ba:45:1c: 5b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:36:FB:F2:AE:AF:0E:D9:34:60:ED:96:B2:E8:62:3E:7B:4C:0C:0F X509v3 Authority Key Identifier: keyid:B6:A2:3E:32:B4:53:59:51:61:5C:EA:4A:B1:B6:81:65:0D:69:4C:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:7a:46:5d:91:89:15:e3:72:f6:99:bd:6a:f5:db:11:64:8e: 65:83:76:82:31:15:2a:df:66:3e:d4:a2:7d:b7:63:e4:ed:27: 20:d0:78:2d:59:1d:29:99:7b:c3:4b:eb:39:11:c8:b9:f4:0e: bb:74:da:e7:7a:0e:9a:24:ca:b2:65:26:89:a7:d6:4b:67:f5: 16:e3:a5:e0:4c:4d:c7:da:be:42:73:06:73:4e:03:40:19:53: c2:e1:22:9e:72:9d:64:c3:eb:07:fb:de:1f:1c:cc:80:6d:b5: a6:bb:41:0d:6e:65:f1:94:8e:cb:7e:47:50:6b:f6:62:4b:a9: f7:53:6a:42:50:d5:d3:92:b4:6b:c4:8f:fc:a5:89:62:3d:b7: 30:76:1d:b8:f0:29:f5:52:36:e4:69:e0:32:92:f1:bd:2e:99: 46:e2:db:63:36:99:90:cb:7f:a7:b2:64:0a:0a:40:58:f1:43: ad:b9:ef:34:70:e3:6a:1f:be:73:c0:8c:c4:4b:57:44:df:70: a2:9b:ed:5c:05:a7:00:72:b4:a7:6b:7e:6a:7b:4f:68:43:cd: 76:23:37:9a:33:94:49:b0:55:b2:0e:3c:35:f8:28:72:03:68: bb:0c:9a:19:23:67:78:eb:81:75:42:2d:2e:73:3a:75:d7:93: 34:cb:b8:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVCNDExMTAvBgNVBAUTKEI2QTIzRTMyQjQ1MzU5NTE2MTVDRUE0QUIxQjY4MTY1 MEQ2OTRDQjcwHhcNMjUwNTA0MTkzMjA3WhcNMjUwNTExMTkzMjA3WjAYMRYwFAYD VQQDEw02ODE3YzBiNy1lY2Y4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAysvxKk55DfEsvcy0cuiw1v5j/vfzj/5/v3j8ILV6s5tOb9CQ+qCp2kdsiAxB wq3CjvXiOBNWwpw2mucz1rZBwBOESFIPwFSNNiKq2rHDL1YjnKB4gexHkZ9rV/WI C5/QqQFwL5FEM3QssaqKcGK3/nV7potT/2QmwnRpiuPXlSdrXi+dpczMAETF2cwq zdKUBDoiESv74oBDE2Ggb8DxnvK7XN7PpTn/naaCFN8YBBxSDznunM7UZLeIwSHB 6KuprTXI2Hki/aTJc1mV34KICCZVgH47HsLwi1o1KB5rMBqYkCgqN+VPICkeT7gF kBsdGb+GMKArB9pPrvq6RRxbzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHc2+/Ku rw7ZNGDtlrLoYj57TAwPMB8GA1UdIwQYMBaAFLaiPjK0U1lRYVzqSrG2gWUNaUy3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUI0MS9BMUVEQ0ZGRTY3 OTkxMUVBQjY3QjM0ODRDNEY5QUUwMi90cUktTXJSVFdWRmhYT3BLc2JhQlpRMXBU TGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RxSS1NclJUV1ZGaFhPcEtzYmFCWlExcFRMYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUI0MS9BMUVEQ0ZGRTY3OTkxMUVBQjY3QjM0ODRDNEY5QUUwMi90cUktTXJSVFdW RmhYT3BLc2JhQlpRMXBUTGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnekZdkYkV43L2mb1q9dsRZI5lg3aCMRUq32Y+1KJ9t2Pk7Scg0Hgt WR0pmXvDS+s5Eci59A67dNrneg6aJMqyZSaJp9ZLZ/UW46XgTE3H2r5CcwZzTgNA GVPC4SKecp1kw+sH+94fHMyAbbWmu0ENbmXxlI7LfkdQa/ZiS6n3U2pCUNXTkrRr xI/8pYliPbcwdh248Cn1UjbkaeAykvG9LplG4ttjNpmQy3+nsmQKCkBY8UOtue80 cONqH75zwIzES1dE33Cim+1cBacAcrSna35qe09oQ812IzeaM5RJsFWyDjw1+Chy A2i7DJoZI2d464F1Qi0uczp115M0y7gE -----END CERTIFICATE-----Generated at Sun May 4 23:49:50 2025 by rpki-client on console.sobornost.net