$ rpki-client -vvf rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.mft File: T0X6adnl9VCE3ckiiVJ2pkAjnBw.mft (raw, json) Hash identifier: sR/bhNpaBzVBnnydvQjItGrJ9rs3i3sDFiuDLoO5YOg= Subject key identifier: 63:78:44:B4:74:EF:2D:CE:2E:7E:1E:A0:22:C5:47:C0:59:AA:C8:9B Authority key identifier: 4F:45:FA:69:D9:E5:F5:50:84:DD:C9:22:89:52:76:A6:40:23:9C:1C Certificate issuer: /CN=A9190818/serialNumber=4F45FA69D9E5F55084DDC922895276A640239C1C Certificate serial: 65 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T0X6adnl9VCE3ckiiVJ2pkAjnBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.mft Manifest number: 63 Signing time: Sun 27 Apr 2025 05:52:30 +0000 Manifest this update: Sun 27 Apr 2025 05:52:30 +0000 Manifest next update: Sun 04 May 2025 05:52:30 +0000 Files and hashes: 1: T0X6adnl9VCE3ckiiVJ2pkAjnBw.crl (hash: OkwBy88vPs/0w+ljvnI+kcPRGwfwp8Ffw/Hd5W7GzOU=) 2: DE3EC424979411EF875EE369C4F9AE02.roa (hash: 5QE8zDybdgUA94Tpp6+guNsFhK7KXTxJ0yxg/2zsqZo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.crl rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T0X6adnl9VCE3ckiiVJ2pkAjnBw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 101 (0x65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190818, serialNumber=4F45FA69D9E5F55084DDC922895276A640239C1C Validity Not Before: Apr 27 05:52:30 2025 GMT Not After : May 4 05:52:30 2025 GMT Subject: CN=680dc61e-763d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:30:4c:d5:5d:20:a5:bc:23:33:12:e7:5e:53: c0:0a:c7:09:43:54:4e:dc:71:03:2c:f6:62:11:42: ae:4f:da:91:aa:78:12:8e:43:f5:e8:85:7e:5a:b5: 50:eb:f4:89:eb:67:0d:82:26:f7:34:1d:94:b2:8b: 44:ad:75:6c:a2:b3:52:cc:c3:1f:dd:e1:93:2a:a3: 9b:81:d7:77:de:07:80:48:99:4c:1c:01:b7:96:89: 0d:68:74:76:73:6c:49:bf:49:14:c2:89:41:f5:25: f0:84:0c:31:08:d5:5d:86:49:b4:16:f0:3e:31:d4: 4e:53:76:90:db:66:79:72:36:f7:09:4e:8a:8d:14: a1:1b:c7:e4:e1:19:3a:cb:29:50:79:e1:ee:33:7a: b4:ba:ff:96:d0:04:b7:2e:53:b4:4b:d2:56:ab:6b: 92:8a:0f:5f:27:57:06:21:63:b9:01:9b:1d:54:d2: 86:ec:7e:e8:f4:6f:0c:66:5e:8d:3e:1d:f8:1f:94: f8:c2:34:fb:6f:e3:f8:74:95:34:06:f1:49:76:e4: b3:bb:97:73:5e:dc:da:35:7f:bd:d1:44:e6:52:10: 8c:72:a5:82:a0:7c:a6:34:18:82:de:91:8e:85:32: 9b:01:8c:53:07:84:4d:48:94:74:90:6c:4b:c6:0c: a9:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:78:44:B4:74:EF:2D:CE:2E:7E:1E:A0:22:C5:47:C0:59:AA:C8:9B X509v3 Authority Key Identifier: keyid:4F:45:FA:69:D9:E5:F5:50:84:DD:C9:22:89:52:76:A6:40:23:9C:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T0X6adnl9VCE3ckiiVJ2pkAjnBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:ea:a2:57:7a:98:8f:5f:6e:b9:8c:00:69:49:fd:98:0a:a3: d8:78:57:e7:bd:35:dc:8f:68:2b:6d:aa:b3:8f:32:49:c5:1d: 4a:db:17:2b:88:59:a2:34:b8:21:71:4e:3c:b1:b9:a0:1f:d0: e1:f1:ec:f3:9b:5a:9e:49:de:b2:df:b4:a0:d3:56:de:f0:94: 05:a0:ac:4d:6e:ea:a3:e6:87:8b:cf:4b:76:e3:cb:13:93:29: 25:c0:45:38:56:54:1d:eb:ac:88:6e:df:9d:19:17:85:ce:c8: f4:3b:5e:8b:51:4d:a0:86:d2:cb:64:74:63:40:88:f0:6c:fe: 47:5e:f9:05:72:77:10:84:0d:de:2a:ae:c2:a5:ee:38:e3:4f: 9d:38:e4:d6:63:3c:26:87:90:04:1c:88:86:4e:f8:79:03:ac: 16:3c:45:a4:62:ed:5c:f8:71:ec:6f:9a:92:b9:9c:fd:be:d2: f3:af:d4:6d:25:37:69:6b:88:8a:ad:a8:f0:c2:2d:91:37:6b: 34:b3:d2:dd:d3:56:d4:91:fa:f6:63:51:0d:67:df:9a:45:89: 03:be:00:72:60:e2:83:ad:65:c6:cf:52:af:1a:d9:f4:58:9c: 47:f6:bf:2b:64:e0:e9:b3:96:c0:c9:e3:fd:76:ea:fd:27:0f: 30:98:39:1c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MDgxODExMC8GA1UEBRMoNEY0NUZBNjlEOUU1RjU1MDg0RERDOTIyODk1Mjc2QTY0 MDIzOUMxQzAeFw0yNTA0MjcwNTUyMzBaFw0yNTA1MDQwNTUyMzBaMBgxFjAUBgNV BAMTDTY4MGRjNjFlLTc2M2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpMEzVXSClvCMzEudeU8AKxwlDVE7ccQMs9mIRQq5P2pGqeBKOQ/XohX5atVDr 9InrZw2CJvc0HZSyi0StdWyis1LMwx/d4ZMqo5uB13feB4BImUwcAbeWiQ1odHZz bEm/SRTCiUH1JfCEDDEI1V2GSbQW8D4x1E5TdpDbZnlyNvcJToqNFKEbx+ThGTrL KVB54e4zerS6/5bQBLcuU7RL0lara5KKD18nVwYhY7kBmx1U0obsfuj0bwxmXo0+ HfgflPjCNPtv4/h0lTQG8Ul25LO7l3Ne3No1f73RROZSEIxypYKgfKY0GILekY6F MpsBjFMHhE1IlHSQbEvGDKkBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUY3hEtHTv Lc4ufh6gIsVHwFmqyJswHwYDVR0jBBgwFoAUT0X6adnl9VCE3ckiiVJ2pkAjnBww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkwODE4Lzc1M0MzMDE4OTA5 RDExRUY5NzE3RjY1MEM0RjlBRTAyL1QwWDZhZG5sOVZDRTNja2lpVkoycGtBam5C dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVDBYNmFkbmw5VkNFM2NraWlWSjJwa0FqbkJ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkw ODE4Lzc1M0MzMDE4OTA5RDExRUY5NzE3RjY1MEM0RjlBRTAyL1QwWDZhZG5sOVZD RTNja2lpVkoycGtBam5Cdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAzqold6mI9fbrmMAGlJ/ZgKo9h4V+e9NdyPaCttqrOPMknFHUrbFyuI WaI0uCFxTjyxuaAf0OHx7PObWp5J3rLftKDTVt7wlAWgrE1u6qPmh4vPS3bjyxOT KSXARThWVB3rrIhu350ZF4XOyPQ7XotRTaCG0stkdGNAiPBs/kde+QVydxCEDd4q rsKl7jjjT5045NZjPCaHkAQciIZO+HkDrBY8RaRi7Vz4cexvmpK5nP2+0vOv1G0l N2lriIqtqPDCLZE3azSz0t3TVtSR+vZjUQ1n35pFiQO+AHJg4oOtZcbPUq8a2fRY nEf2vytk4OmzlsDJ4/126v0nDzCYORw= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:51 2025 by rpki-client on console.sobornost.net