$ rpki-client -vvf rpki.apnic.net/member_repository/A9188811/E03CC654E82611EE95BE714EC4F9AE02/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.mft File: G6BR2hk8ATG2Ggp4gG4vN4bO0ME.mft (raw, json) Hash identifier: sIyfrP2WJkgU3+zK6sFBjigM6MH/a1OmRHA+wWIU/v0= Subject key identifier: E3:98:3E:1D:43:50:A2:1E:66:68:89:DC:79:0B:50:19:42:0E:F8:6C Authority key identifier: 1B:A0:51:DA:19:3C:01:31:B6:1A:0A:78:80:6E:2F:37:86:CE:D0:C1 Certificate issuer: /CN=A9188811/serialNumber=1BA051DA193C0131B61A0A78806E2F3786CED0C1 Certificate serial: D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188811/E03CC654E82611EE95BE714EC4F9AE02/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.mft Manifest number: D2 Signing time: Sun 27 Apr 2025 04:35:08 +0000 Manifest this update: Sun 27 Apr 2025 04:35:08 +0000 Manifest next update: Sun 04 May 2025 04:35:08 +0000 Files and hashes: 1: G6BR2hk8ATG2Ggp4gG4vN4bO0ME.crl (hash: pZ+Ugl/vBfcJQ2YGER+MqEewGhgHiGy9oQ++1Odg1bk=) 2: B51FD00AE82711EEB8A9D24FC4F9AE02.roa (hash: VsEm8vkeUxVmjFaDf2wLiIOtj6XxGobBBThvNJ5OEPw=) 3: 9E132FF6E82711EEA7DD994FC4F9AE02.roa (hash: pBY1RBpmPShywgSF0cFV/FNZ8xmqm9DQJLZjg8FKxQs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188811/E03CC654E82611EE95BE714EC4F9AE02/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.crl rsync://rpki.apnic.net/member_repository/A9188811/E03CC654E82611EE95BE714EC4F9AE02/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 216 (0xd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188811, serialNumber=1BA051DA193C0131B61A0A78806E2F3786CED0C1 Validity Not Before: Apr 27 04:35:08 2025 GMT Not After : May 4 04:35:08 2025 GMT Subject: CN=680db3fc-ede1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a7:bd:d6:a3:97:5f:71:1a:62:13:02:54:2d: 8f:38:fb:f3:d7:80:a0:a8:d1:38:ef:8d:03:21:e5: e0:12:52:d7:03:74:dd:60:76:ee:37:d8:fc:b9:f7: ae:22:b9:78:bc:da:2e:8a:30:c1:31:63:ef:c8:5f: 3e:80:4d:9c:ac:e1:8d:b3:66:7b:89:1e:26:80:4b: 2e:5b:27:9a:68:11:e4:49:81:a1:f0:80:33:46:e8: 64:62:7a:cc:d8:c8:3e:d1:8f:c0:57:12:fb:b2:15: 60:94:2c:13:a0:c1:16:c7:6a:87:a1:fe:18:4b:e3: fb:19:ea:be:cb:2b:e3:72:c6:de:13:77:06:84:0f: ea:38:f2:e0:d8:ea:3e:01:d3:4b:60:8c:23:67:b5: 52:f0:ad:31:36:ed:1e:86:33:2b:b3:d1:8f:fd:81: ce:e9:47:ac:e7:5c:60:e4:be:5e:2d:49:38:1c:df: 5c:c1:2d:a1:fc:ac:1c:03:30:61:a9:72:5c:ee:9b: ac:98:4d:9a:97:40:87:2e:25:c2:04:76:c6:5b:e6: a4:88:53:cb:88:4b:22:fa:fb:31:1e:51:fa:db:c0: eb:9f:22:7f:21:1e:c3:87:e0:4b:5b:dd:63:16:dc: 29:59:2e:b1:99:cc:d5:b2:9e:11:ec:4f:0e:b7:64: 51:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:98:3E:1D:43:50:A2:1E:66:68:89:DC:79:0B:50:19:42:0E:F8:6C X509v3 Authority Key Identifier: keyid:1B:A0:51:DA:19:3C:01:31:B6:1A:0A:78:80:6E:2F:37:86:CE:D0:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188811/E03CC654E82611EE95BE714EC4F9AE02/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188811/E03CC654E82611EE95BE714EC4F9AE02/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:72:2a:e4:de:fe:a2:c7:51:d0:b0:86:ef:97:8d:dd:ed:55: c8:f9:60:8c:09:f5:15:fb:a0:8d:50:31:d2:ea:d1:4c:e8:d3: f2:b8:d1:90:82:a9:2c:10:c9:78:cf:46:88:b1:09:ca:9c:50: 65:59:49:2f:8e:99:2e:a4:65:3a:7d:c9:36:24:c6:2b:ca:91: d2:b7:af:ae:cc:df:ec:cc:90:b5:b5:2b:37:9b:e1:db:51:74: 44:c7:7b:7a:9c:8c:8e:b6:e8:2c:33:ee:e3:c8:aa:1a:06:b1: 0a:bc:f2:67:76:86:a2:74:aa:b6:16:74:de:b3:8d:ce:1a:1d: f5:e7:fe:24:62:d6:b6:6d:35:a9:ed:ab:a6:a3:0b:92:b7:4f: 44:fc:c2:4c:c8:42:84:4a:d1:56:9c:5a:da:78:28:aa:a1:1d: d2:61:40:c8:f3:04:6c:22:c9:5b:70:c5:03:a7:03:d8:91:f4: 81:9e:27:21:0e:00:d5:28:54:5e:03:26:b8:8b:d5:7f:66:3b: c4:1a:35:86:77:25:18:1d:a7:0b:cc:d1:af:83:b4:25:82:44: 74:30:e1:e6:a2:ae:2a:1f:30:b8:49:30:4b:78:bf:dc:64:4a: 2a:ea:99:dd:93:53:13:78:d6:03:29:32:4e:67:db:dd:32:27: e7:d1:47:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg4MTExMTAvBgNVBAUTKDFCQTA1MURBMTkzQzAxMzFCNjFBMEE3ODgwNkUyRjM3 ODZDRUQwQzEwHhcNMjUwNDI3MDQzNTA4WhcNMjUwNTA0MDQzNTA4WjAYMRYwFAYD VQQDEw02ODBkYjNmYy1lZGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqKe91qOXX3EaYhMCVC2POPvz14CgqNE4740DIeXgElLXA3TdYHbuN9j8ufeu Irl4vNouijDBMWPvyF8+gE2crOGNs2Z7iR4mgEsuWyeaaBHkSYGh8IAzRuhkYnrM 2Mg+0Y/AVxL7shVglCwToMEWx2qHof4YS+P7Geq+yyvjcsbeE3cGhA/qOPLg2Oo+ AdNLYIwjZ7VS8K0xNu0ehjMrs9GP/YHO6Ues51xg5L5eLUk4HN9cwS2h/KwcAzBh qXJc7pusmE2al0CHLiXCBHbGW+akiFPLiEsi+vsxHlH628DrnyJ/IR7Dh+BLW91j FtwpWS6xmczVsp4R7E8Ot2RRfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOOYPh1D UKIeZmiJ3HkLUBlCDvhsMB8GA1UdIwQYMBaAFBugUdoZPAExthoKeIBuLzeGztDB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODgxMS9FMDNDQzY1NEU4 MjYxMUVFOTVCRTcxNEVDNEY5QUUwMi9HNkJSMmhrOEFURzJHZ3A0Z0c0dk40Yk8w TUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c2QlIyaGs4QVRHMkdncDRnRzR2TjRiTzBNRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODgxMS9FMDNDQzY1NEU4MjYxMUVFOTVCRTcxNEVDNEY5QUUwMi9HNkJSMmhrOEFU RzJHZ3A0Z0c0dk40Yk8wTUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+cirk3v6ix1HQsIbvl43d7VXI+WCMCfUV+6CNUDHS6tFM6NPyuNGQ gqksEMl4z0aIsQnKnFBlWUkvjpkupGU6fck2JMYrypHSt6+uzN/szJC1tSs3m+Hb UXREx3t6nIyOtugsM+7jyKoaBrEKvPJndoaidKq2FnTes43OGh315/4kYta2bTWp 7aumowuSt09E/MJMyEKEStFWnFraeCiqoR3SYUDI8wRsIslbcMUDpwPYkfSBnich DgDVKFReAya4i9V/ZjvEGjWGdyUYHacLzNGvg7QlgkR0MOHmoq4qHzC4STBLeL/c ZEoq6pndk1MTeNYDKTJOZ9vdMifn0UeA -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:51 2025 by rpki-client on console.sobornost.net