$ rpki-client -vvf rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft File: iA5rTc1s7FPI0D10DIjpdzsEexk.mft (raw, json) Hash identifier: 144qmEuDTuGQAehYVLRg3NtEpxtIzrTwNnlYDCNFvHg= Subject key identifier: E7:0C:AA:B4:74:7C:C3:D1:69:31:8D:4C:72:9E:23:53:D5:A3:B0:BE Authority key identifier: 88:0E:6B:4D:CD:6C:EC:53:C8:D0:3D:74:0C:88:E9:77:3B:04:7B:19 Certificate issuer: /CN=A9187465/serialNumber=880E6B4DCD6CEC53C8D03D740C88E9773B047B19 Certificate serial: 1661 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft Manifest number: 164D Signing time: Mon 28 Apr 2025 16:55:27 +0000 Manifest this update: Mon 28 Apr 2025 16:55:26 +0000 Manifest next update: Mon 05 May 2025 16:55:26 +0000 Files and hashes: 1: iA5rTc1s7FPI0D10DIjpdzsEexk.crl (hash: /nhBoyiiY+NbVxBFPlSyStRQlx/KQf7I7viY9EiGtHY=) 2: E1ADA4BC062B11F08449516EC4F9AE02.roa (hash: irCyzZt8lLVT2O/nBYFOPs0nEEY6FDn9ohpC+rSN6lg=) 3: E259315C57CA11EA8D931284C4F9AE02.roa (hash: UF4UGi4YvKSRTlKCNcjEh8f4bqwvLQuk9xLcKAJKTWQ=) 4: 7D2EA194B20711EA8B74F445C4F9AE02.roa (hash: slzLXwHdalwSZSG2cdS37Tf6mGAWnLHG4M+IywxJpUk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.crl rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 16:55:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5729 (0x1661) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187465, serialNumber=880E6B4DCD6CEC53C8D03D740C88E9773B047B19 Validity Not Before: Apr 28 16:55:26 2025 GMT Not After : May 5 16:55:26 2025 GMT Subject: CN=680fb2ff-6f8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:87:84:39:57:45:42:c2:ab:af:a8:91:5a:eb: b5:2e:c0:01:4e:cb:0a:b4:92:36:22:ca:a0:05:50: 62:79:61:09:94:4b:26:66:4f:32:ae:78:da:9a:a0: 1b:37:d1:e1:5d:ac:db:b9:ac:5e:a1:5a:40:d2:01: 57:60:65:b8:80:b3:75:7a:91:f0:e2:b7:7d:cc:2f: 3f:be:34:28:9d:09:75:0c:6b:d9:f6:87:e1:db:a2: f7:6a:a4:4d:32:c2:ba:61:14:d4:46:c4:7e:64:b6: a7:51:99:6f:b7:78:8c:92:9a:62:4d:03:fe:7b:f4: a0:10:78:e3:99:a4:81:dc:90:97:d9:48:9f:77:ee: 87:f5:4b:8d:d8:54:e2:dd:a2:9c:30:cc:bd:3f:7a: db:96:97:4e:21:ee:2a:ab:c6:7b:01:77:6d:9e:58: 9f:3a:63:7a:c3:c3:a4:91:5c:7a:72:c8:78:47:f0: 99:f2:21:3f:96:d7:a9:e0:2d:58:ca:21:ec:af:11: a3:e3:99:cc:31:9e:47:e1:a6:fa:3d:24:f5:2a:40: 5b:54:4d:35:6a:18:d7:a3:84:35:b9:ee:e5:c5:b7: 04:dc:53:25:d8:08:40:65:c4:67:54:d0:c2:d9:d6: 47:37:ff:ed:c9:6d:57:06:a7:60:45:60:55:17:5c: b2:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:0C:AA:B4:74:7C:C3:D1:69:31:8D:4C:72:9E:23:53:D5:A3:B0:BE X509v3 Authority Key Identifier: keyid:88:0E:6B:4D:CD:6C:EC:53:C8:D0:3D:74:0C:88:E9:77:3B:04:7B:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:5c:45:24:41:c2:f7:d0:cf:9f:fa:01:13:db:25:f1:7e:a9: c7:b9:86:c4:f9:6e:5b:87:32:7d:58:41:b6:ad:07:a6:6c:f8: 43:a6:9a:b9:24:7a:ab:a1:68:33:57:5b:98:e8:62:7c:f3:8b: 05:1b:24:6d:b0:99:6c:7e:21:84:b5:40:e4:25:44:a0:07:32: 3c:20:8e:da:31:d9:52:06:f4:1f:20:af:49:95:26:fc:97:ac: 22:c5:5d:38:7a:fe:08:09:e8:2f:45:84:13:47:07:61:cd:70: b6:ea:9c:52:e8:87:c8:48:86:39:3c:7c:7e:2a:6d:41:e7:74: 90:38:4b:69:f6:05:f4:dc:f0:8c:29:cb:8a:d2:a6:c7:0e:ba: 2e:b5:fe:97:52:35:58:2b:84:72:f4:21:3f:19:c2:ce:80:fa: f4:93:2b:1f:d8:30:cd:87:ae:75:a8:10:b0:be:01:38:03:17: 4f:d3:90:02:78:37:85:28:53:03:2f:56:11:e3:75:01:bc:9e: 7b:4f:72:c4:66:ec:48:1b:0e:5c:88:b1:ea:c9:27:92:18:8b: a3:44:06:31:5e:a1:31:5d:2a:fd:5c:9d:5c:5f:d6:f8:da:c8: 6c:ac:92:79:26:f3:3b:2c:c5:64:18:ee:72:38:fe:05:12:7c: 12:e7:da:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc0NjUxMTAvBgNVBAUTKDg4MEU2QjREQ0Q2Q0VDNTNDOEQwM0Q3NDBDODhFOTc3 M0IwNDdCMTkwHhcNMjUwNDI4MTY1NTI2WhcNMjUwNTA1MTY1NTI2WjAYMRYwFAYD VQQDEw02ODBmYjJmZi02ZjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAooeEOVdFQsKrr6iRWuu1LsABTssKtJI2IsqgBVBieWEJlEsmZk8yrnjamqAb N9HhXazbuaxeoVpA0gFXYGW4gLN1epHw4rd9zC8/vjQonQl1DGvZ9ofh26L3aqRN MsK6YRTURsR+ZLanUZlvt3iMkppiTQP+e/SgEHjjmaSB3JCX2Uifd+6H9UuN2FTi 3aKcMMy9P3rblpdOIe4qq8Z7AXdtnlifOmN6w8OkkVx6csh4R/CZ8iE/ltep4C1Y yiHsrxGj45nMMZ5H4ab6PST1KkBbVE01ahjXo4Q1ue7lxbcE3FMl2AhAZcRnVNDC 2dZHN//tyW1XBqdgRWBVF1yy4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOcMqrR0 fMPRaTGNTHKeI1PVo7C+MB8GA1UdIwQYMBaAFIgOa03NbOxTyNA9dAyI6Xc7BHsZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzQ2NS9CMUFGQjZGQTBB NTMxMUU4QUM3QkVFMkVDNEY5QUUwMi9pQTVyVGMxczdGUEkwRDEwRElqcGR6c0Vl eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lBNXJUYzFzN0ZQSTBEMTBESWpwZHpzRWV4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzQ2NS9CMUFGQjZGQTBBNTMxMUU4QUM3QkVFMkVDNEY5QUUwMi9pQTVyVGMxczdG UEkwRDEwRElqcGR6c0VleGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8XEUkQcL30M+f+gET2yXxfqnHuYbE+W5bhzJ9WEG2rQembPhDppq5 JHqroWgzV1uY6GJ884sFGyRtsJlsfiGEtUDkJUSgBzI8II7aMdlSBvQfIK9JlSb8 l6wixV04ev4ICegvRYQTRwdhzXC26pxS6IfISIY5PHx+Km1B53SQOEtp9gX03PCM KcuK0qbHDroutf6XUjVYK4Ry9CE/GcLOgPr0kysf2DDNh651qBCwvgE4AxdP05AC eDeFKFMDL1YR43UBvJ57T3LEZuxIGw5ciLHqySeSGIujRAYxXqExXSr9XJ1cX9b4 2shsrJJ5JvM7LMVkGO5yOP4FEnwS59rR -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:46 2025 by rpki-client on console.sobornost.net