$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft File: 98T1xyjQwEdsUy6sGMKSfB1bgzs.mft (raw, json) Hash identifier: qDmjqkunzj/M6jdzUUOpq4YyEyY3zI8y6GJ0VbnPE3U= Subject key identifier: 1F:3E:AF:45:F5:62:CE:1C:62:3F:E3:AE:15:8C:45:F0:C9:E2:39:91 Authority key identifier: F7:C4:F5:C7:28:D0:C0:47:6C:53:2E:AC:18:C2:92:7C:1D:5B:83:3B Certificate issuer: /CN=A9185D4E/serialNumber=F7C4F5C728D0C0476C532EAC18C2927C1D5B833B Certificate serial: 6E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/98T1xyjQwEdsUy6sGMKSfB1bgzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft Manifest number: 6D Signing time: Sun 27 Apr 2025 05:42:40 +0000 Manifest this update: Sun 27 Apr 2025 05:42:40 +0000 Manifest next update: Sun 04 May 2025 05:42:40 +0000 Files and hashes: 1: 98T1xyjQwEdsUy6sGMKSfB1bgzs.crl (hash: OGCdQ1HzzG57u+k6RLBuno8FxpkhZVaTrAkhAhQozqU=) 2: 5495EE5C9B4311EF87E5073DC4F9AE02.roa (hash: YBs0kfZTY2sABIi/xaIJAg5Ddfxg9MhnEpmdNb3MBps=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.crl rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/98T1xyjQwEdsUy6sGMKSfB1bgzs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 110 (0x6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185D4E, serialNumber=F7C4F5C728D0C0476C532EAC18C2927C1D5B833B Validity Not Before: Apr 27 05:42:40 2025 GMT Not After : May 4 05:42:40 2025 GMT Subject: CN=680dc3d0-f9d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5a:1c:4b:3f:0c:7b:c0:56:0a:25:98:f6:f6: db:e8:3f:ca:71:83:fe:f1:8e:8b:58:b3:c4:30:d6: 7a:10:4f:98:69:4e:e7:9a:8a:8c:14:57:82:0d:26: 7b:b1:4e:d0:16:a8:e2:51:04:da:59:e7:e6:4d:71: c2:06:33:df:87:be:11:49:f0:1d:c2:01:14:c1:44: 69:80:e7:69:e8:e1:3d:7d:8b:fc:55:a0:3f:af:42: 55:53:11:3b:ac:b3:4b:a7:1c:51:f0:54:84:23:ac: 16:86:18:fd:85:14:fc:e3:bc:7b:28:57:8e:e5:22: 33:e1:be:c5:42:c1:c3:5f:b2:37:1f:d7:02:07:fe: ad:b6:4a:cc:91:66:01:07:b4:f6:03:27:a3:3a:3a: 77:4b:8a:5a:d6:53:b4:24:38:8d:c1:20:cc:08:a2: 47:27:60:ca:fe:5f:13:5a:a0:aa:9c:41:dc:3a:5c: 28:1f:da:39:5f:01:e3:fb:f0:c8:89:29:58:9e:c0: 8d:3e:e6:91:12:f8:41:2f:4c:59:c2:19:1c:fd:0a: 2f:20:19:89:1f:57:04:75:a8:16:95:3b:97:30:1e: c4:5e:95:d8:3d:49:2a:ba:1d:2f:bf:38:86:1f:74: c3:54:b6:fc:f3:f6:57:ba:75:2c:51:07:00:da:72: b8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:3E:AF:45:F5:62:CE:1C:62:3F:E3:AE:15:8C:45:F0:C9:E2:39:91 X509v3 Authority Key Identifier: keyid:F7:C4:F5:C7:28:D0:C0:47:6C:53:2E:AC:18:C2:92:7C:1D:5B:83:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/98T1xyjQwEdsUy6sGMKSfB1bgzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:1b:df:e0:a5:c8:76:07:52:1d:08:55:26:05:8f:8d:73:af: 51:2e:7e:35:ff:ba:72:bb:3d:13:5c:76:37:9b:4c:d7:58:f3: 3b:c1:ca:79:79:79:a2:7f:68:f5:b1:49:25:6b:70:be:4f:b0: 27:c4:af:ff:b0:44:28:ed:7a:7b:3d:0b:42:11:ce:b2:e4:7a: d9:49:da:df:86:f6:d1:8c:c1:65:33:44:1d:4b:09:75:59:38: 16:a9:15:4e:be:c8:fe:48:ac:81:4d:e7:58:2b:3b:28:48:8e: 77:08:26:9c:db:e6:b2:ab:ad:01:f9:5c:24:99:99:95:68:f9: 41:77:55:53:f0:2c:b9:e1:41:95:35:5b:e4:b3:d3:5f:b1:ec: a6:f1:ac:f0:9f:4d:80:64:6f:80:54:b7:bf:9c:0b:6f:bd:e2: d9:d6:c3:38:89:31:9d:c3:ac:89:6e:9d:19:79:9e:51:e7:8f: 3d:01:91:5b:06:da:4b:40:02:ce:59:21:68:63:53:0b:2a:6b: 2b:d9:2c:99:ef:1b:4e:60:10:cc:47:2b:5d:a0:53:4b:75:00: 60:02:d8:8e:28:0d:18:8d:f1:d9:63:4f:1c:4f:4e:a0:d5:1b: 1d:cd:1d:41:ca:19:ef:4d:22:df:f7:62:87:65:82:30:25:e6: 55:2f:11:13 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NUQ0RTExMC8GA1UEBRMoRjdDNEY1QzcyOEQwQzA0NzZDNTMyRUFDMThDMjkyN0Mx RDVCODMzQjAeFw0yNTA0MjcwNTQyNDBaFw0yNTA1MDQwNTQyNDBaMBgxFjAUBgNV BAMTDTY4MGRjM2QwLWY5ZDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnWhxLPwx7wFYKJZj29tvoP8pxg/7xjotYs8Qw1noQT5hpTueaiowUV4INJnux TtAWqOJRBNpZ5+ZNccIGM9+HvhFJ8B3CARTBRGmA52no4T19i/xVoD+vQlVTETus s0unHFHwVIQjrBaGGP2FFPzjvHsoV47lIjPhvsVCwcNfsjcf1wIH/q22SsyRZgEH tPYDJ6M6OndLilrWU7QkOI3BIMwIokcnYMr+XxNaoKqcQdw6XCgf2jlfAeP78MiJ KViewI0+5pES+EEvTFnCGRz9Ci8gGYkfVwR1qBaVO5cwHsReldg9SSq6HS+/OIYf dMNUtvzz9le6dSxRBwDacri/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHz6vRfVi zhxiP+OuFYxF8MniOZEwHwYDVR0jBBgwFoAU98T1xyjQwEdsUy6sGMKSfB1bgzsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg1RDRFLzVCODQ0MjAyN0ZG MjExRUY5MEUxNEY2MEM0RjlBRTAyLzk4VDF4eWpRd0Vkc1V5NnNHTUtTZkIxYmd6 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvOThUMXh5alF3RWRzVXk2c0dNS1NmQjFiZ3pzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg1 RDRFLzVCODQ0MjAyN0ZGMjExRUY5MEUxNEY2MEM0RjlBRTAyLzk4VDF4eWpRd0Vk c1V5NnNHTUtTZkIxYmd6cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADwb3+ClyHYHUh0IVSYFj41zr1EufjX/unK7PRNcdjebTNdY8zvBynl5 eaJ/aPWxSSVrcL5PsCfEr/+wRCjtens9C0IRzrLketlJ2t+G9tGMwWUzRB1LCXVZ OBapFU6+yP5IrIFN51grOyhIjncIJpzb5rKrrQH5XCSZmZVo+UF3VVPwLLnhQZU1 W+Sz01+x7KbxrPCfTYBkb4BUt7+cC2+94tnWwziJMZ3DrIlunRl5nlHnjz0BkVsG 2ktAAs5ZIWhjUwsqayvZLJnvG05gEMxHK12gU0t1AGAC2I4oDRiN8dljTxxPTqDV Gx3NHUHKGe9NIt/3YodlgjAl5lUvERM= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:50 2025 by rpki-client on console.sobornost.net