$ rpki-client -vvf rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft File: KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft (raw, json) Hash identifier: MhhepJOqaokiBva5ze4kkEWlrq8Lo6VrYBNqk1VpZWk= Subject key identifier: ED:BF:B0:2B:9B:18:85:A7:37:F9:18:B0:CA:83:BF:29:CA:EB:73:92 Authority key identifier: 2A:90:07:34:C5:E3:B9:3A:CA:94:70:E3:F5:AD:DA:DC:2F:21:5B:31 Certificate issuer: /CN=A9190960/serialNumber=2A900734C5E3B93ACA9470E3F5ADDADC2F215B31 Certificate serial: 06AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpAHNMXjuTrKlHDj9a3a3C8hWzE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft Manifest number: 06A1 Signing time: Thu 24 Apr 2025 22:00:08 +0000 Manifest this update: Thu 24 Apr 2025 22:00:08 +0000 Manifest next update: Thu 01 May 2025 22:00:08 +0000 Files and hashes: 1: KpAHNMXjuTrKlHDj9a3a3C8hWzE.crl (hash: 8ZXV69LQplJc6bkOiyw/OZ2TxU4rZox0iOPLQoTeBqQ=) 2: ED534930C8B511ED9A1D817EC4F9AE02.roa (hash: cWc+J1TIBwheicFkr/uWy0LuYQxsGfxktq1Xam8BBXI=) 3: 9398F508619611EBA485B448C4F9AE02.roa (hash: Nd8Cn8Kc0/NAG96VlpahXIFBzBlttK0FrKVnW80S2cI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.crl rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpAHNMXjuTrKlHDj9a3a3C8hWzE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1706 (0x6aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190960, serialNumber=2A900734C5E3B93ACA9470E3F5ADDADC2F215B31 Validity Not Before: Apr 24 22:00:08 2025 GMT Not After : May 1 22:00:08 2025 GMT Subject: CN=680ab468-e1fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:58:3e:ac:e3:d7:72:87:58:f0:0e:c6:87:ab: e2:8c:c8:71:13:b5:ff:ff:d1:dc:e6:8c:00:b8:72: b5:46:da:0b:c4:b7:33:7e:a5:49:70:7a:5e:5c:ac: 0d:5b:6f:7d:75:54:35:31:ba:bb:7a:c7:46:66:7b: d0:ad:2e:10:90:61:fd:6d:e5:b7:5e:6a:92:20:f0: a8:51:8b:4b:cb:5e:f4:fd:16:1d:4a:06:0a:44:8d: 5c:d4:47:85:b8:2c:84:83:3a:11:7a:61:5f:9a:59: a2:b6:05:bc:dd:77:5a:7e:61:ed:f3:fa:72:24:5e: 33:1a:b9:48:ff:5f:76:ec:d3:3f:fc:3f:18:e3:86: 6d:8e:49:fd:98:c2:e0:e6:70:bb:1c:a3:26:ef:b4: 43:30:fd:6d:f6:d2:e1:81:3c:09:3e:c9:5d:19:1d: 78:03:08:a6:97:15:8c:47:54:e2:e5:6d:bf:de:fd: 57:3d:fa:73:4d:be:81:97:dd:d4:69:56:55:46:26: 14:56:6e:06:2f:93:b1:82:50:69:96:04:bb:be:59: 79:a0:12:d3:05:69:1d:e5:fb:60:9a:05:d3:f1:8b: 85:8d:f7:6a:ad:e1:87:3e:77:d0:9c:9f:d4:20:2f: 16:5d:d0:70:d0:dc:01:2e:59:e1:85:7f:50:d0:6e: f3:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:BF:B0:2B:9B:18:85:A7:37:F9:18:B0:CA:83:BF:29:CA:EB:73:92 X509v3 Authority Key Identifier: keyid:2A:90:07:34:C5:E3:B9:3A:CA:94:70:E3:F5:AD:DA:DC:2F:21:5B:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpAHNMXjuTrKlHDj9a3a3C8hWzE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:3f:9c:dd:f5:b2:3c:ef:a2:63:88:4b:e5:20:ed:47:42:59: ef:34:23:0c:b4:4c:21:df:0d:b8:ea:14:6b:36:10:ad:3d:b7: 6f:0f:4e:ee:05:64:27:8d:bf:4c:48:53:3b:68:1f:cd:12:9d: df:d9:54:33:19:fd:ba:26:8e:e0:2f:b4:f7:15:77:c1:45:3d: 38:cf:bb:08:86:a6:fe:00:c8:fe:70:03:fa:73:81:e6:d7:5d: 3c:29:6f:34:cf:20:f6:6b:da:7c:47:43:48:bb:b1:46:39:3a: 87:7c:4f:b5:2b:c2:de:05:da:de:6c:0c:70:56:0c:73:74:94: 1a:a8:70:52:62:cd:12:50:de:48:6d:2a:5b:fe:fb:26:15:d9: be:58:67:1a:b9:ec:8b:5f:1c:4f:49:ca:77:10:cb:85:87:44: 8e:86:04:36:07:7d:e7:4d:53:7a:a3:bb:cd:3b:de:14:cb:9a: a9:ca:77:61:63:d1:40:8d:e4:91:bc:ae:fd:67:a2:b8:63:07: be:b7:c0:22:ce:6a:4f:a5:68:45:29:be:4d:e4:bd:1c:d1:e1: 15:c5:bf:d6:cc:94:8a:88:1a:65:ed:57:01:d7:10:d5:1d:f4: b5:1d:5a:99:91:95:63:b8:68:1d:2a:1d:f0:4e:47:7f:48:62: 81:42:49:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTA5NjAxMTAvBgNVBAUTKDJBOTAwNzM0QzVFM0I5M0FDQTk0NzBFM0Y1QUREQURD MkYyMTVCMzEwHhcNMjUwNDI0MjIwMDA4WhcNMjUwNTAxMjIwMDA4WjAYMRYwFAYD VQQDEw02ODBhYjQ2OC1lMWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqlg+rOPXcodY8A7Gh6vijMhxE7X//9Hc5owAuHK1RtoLxLczfqVJcHpeXKwN W299dVQ1Mbq7esdGZnvQrS4QkGH9beW3XmqSIPCoUYtLy170/RYdSgYKRI1c1EeF uCyEgzoRemFfmlmitgW83XdafmHt8/pyJF4zGrlI/1927NM//D8Y44Ztjkn9mMLg 5nC7HKMm77RDMP1t9tLhgTwJPsldGR14AwimlxWMR1Ti5W2/3v1XPfpzTb6Bl93U aVZVRiYUVm4GL5OxglBplgS7vll5oBLTBWkd5ftgmgXT8YuFjfdqreGHPnfQnJ/U IC8WXdBw0NwBLlnhhX9Q0G7zFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO2/sCub GIWnN/kYsMqDvynK63OSMB8GA1UdIwQYMBaAFCqQBzTF47k6ypRw4/Wt2twvIVsx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDk2MC85QzZGN0JFQTYx OTQxMUVCQkZEMkFBMkFDNEY5QUUwMi9LcEFITk1YanVUcktsSERqOWEzYTNDOGhX ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0twQUhOTVhqdVRyS2xIRGo5YTNhM0M4aFd6RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDk2MC85QzZGN0JFQTYxOTQxMUVCQkZEMkFBMkFDNEY5QUUwMi9LcEFITk1YanVU cktsSERqOWEzYTNDOGhXekUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjP5zd9bI876JjiEvlIO1HQlnvNCMMtEwh3w246hRrNhCtPbdvD07u BWQnjb9MSFM7aB/NEp3f2VQzGf26Jo7gL7T3FXfBRT04z7sIhqb+AMj+cAP6c4Hm 1108KW80zyD2a9p8R0NIu7FGOTqHfE+1K8LeBdrebAxwVgxzdJQaqHBSYs0SUN5I bSpb/vsmFdm+WGcaueyLXxxPScp3EMuFh0SOhgQ2B33nTVN6o7vNO94Uy5qpyndh Y9FAjeSRvK79Z6K4Ywe+t8AizmpPpWhFKb5N5L0c0eEVxb/WzJSKiBpl7VcB1xDV HfS1HVqZkZVjuGgdKh3wTkd/SGKBQkkS -----END CERTIFICATE-----Generated at Fri Apr 25 08:24:49 2025 by rpki-client on console.sobornost.net