$ rpki-client -vvf rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft File: mPTtHqVu_jfKE0-HapZfKsb6N0g.mft (raw, json) Hash identifier: HBdbo6n0XWzdULwnRtRN5XUPrqy3jlA1pWbGqe3rAqg= Subject key identifier: B9:D0:77:9D:93:7A:CE:E6:7C:D6:5B:89:05:49:F4:C9:D4:55:A8:8D Authority key identifier: 98:F4:ED:1E:A5:6E:FE:37:CA:13:4F:87:6A:96:5F:2A:C6:FA:37:48 Certificate issuer: /CN=A9190EF5/serialNumber=98F4ED1EA56EFE37CA134F876A965F2AC6FA3748 Certificate serial: 012E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPTtHqVu_jfKE0-HapZfKsb6N0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft Manifest number: 012C Signing time: Sun 27 Apr 2025 03:29:50 +0000 Manifest this update: Sun 27 Apr 2025 03:29:49 +0000 Manifest next update: Sun 04 May 2025 03:29:49 +0000 Files and hashes: 1: mPTtHqVu_jfKE0-HapZfKsb6N0g.crl (hash: XidMVYRXz3U5xpbYwizb/ItuWIMBlAfHWZq/UZe5s8w=) 2: 688DBA84577911EE8A10F47BC4F9AE02.roa (hash: Fm4uHiAUi3X+9CLHzcIf57OhsNaBKsN/1TP2wSaWGkE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.crl rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPTtHqVu_jfKE0-HapZfKsb6N0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 302 (0x12e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190EF5, serialNumber=98F4ED1EA56EFE37CA134F876A965F2AC6FA3748 Validity Not Before: Apr 27 03:29:49 2025 GMT Not After : May 4 03:29:49 2025 GMT Subject: CN=680da4ae-9662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2b:9b:78:ec:38:1a:6a:40:0d:b4:62:1b:7a: b9:55:ca:2d:f5:b2:b9:ab:2c:6c:81:4c:44:6b:f2: d2:3a:04:1d:78:63:ea:32:76:ab:78:7a:1a:2f:94: 09:e9:0c:9d:32:83:96:b2:96:87:25:96:ee:6e:c5: ef:de:b4:cc:3d:fc:d2:12:05:d2:64:2b:03:23:2e: 6d:93:87:57:67:68:70:11:a0:28:69:4f:fe:cc:4d: ec:8b:e3:7f:30:e9:18:f0:e6:82:6b:a2:95:63:d4: f3:34:01:b7:08:be:7d:dd:bb:d4:e2:87:94:7f:b3: 7f:05:33:13:44:26:bd:1a:dc:e5:b3:1f:85:d8:28: ed:70:af:44:06:80:22:30:14:e0:da:fe:bb:a1:6e: 13:b9:18:79:3e:49:e2:51:b5:84:5f:68:13:71:ea: 8d:98:50:6b:f6:51:d9:a1:32:9a:d4:ac:b1:b8:4a: fd:68:5b:bf:05:68:5d:5e:fa:be:c5:56:7d:a7:c5: a7:ef:a2:a7:e3:a5:c0:9b:13:46:0b:fa:ec:7d:03: b2:64:e9:dc:7a:0f:d2:cf:d6:0b:de:6f:34:75:a6: ec:75:e3:8a:22:13:a1:90:4c:6a:38:24:5f:a3:d8: 3d:22:43:db:27:59:bd:60:57:70:ba:97:02:0d:8a: cb:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:D0:77:9D:93:7A:CE:E6:7C:D6:5B:89:05:49:F4:C9:D4:55:A8:8D X509v3 Authority Key Identifier: keyid:98:F4:ED:1E:A5:6E:FE:37:CA:13:4F:87:6A:96:5F:2A:C6:FA:37:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPTtHqVu_jfKE0-HapZfKsb6N0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:30:03:0b:c0:44:e1:9b:71:50:7d:8b:ff:67:1c:42:04:8a: 48:d3:ea:59:f6:39:71:ac:57:98:39:38:b8:b7:7d:be:99:52: 15:15:7d:b1:17:66:c8:78:4a:d6:8d:83:97:03:9a:e6:86:c4: a8:54:2b:c0:7e:f5:7a:a7:46:47:11:1c:10:f4:3d:65:5c:a7: 1a:a2:73:69:50:e5:db:46:b1:b9:46:27:ea:c7:9d:ca:e2:27: 16:a9:8c:6a:05:d9:00:55:ae:30:25:cf:67:cf:54:33:11:a4: ce:ce:79:78:04:ac:d8:0f:ae:ed:c6:42:13:dc:e3:32:3c:0c: bd:4e:b5:04:e3:4f:c7:70:0f:14:f0:23:db:93:25:6a:85:24: 3f:e0:bf:94:9e:19:a1:06:82:40:53:b1:b6:56:9e:98:3d:3f: 6b:67:83:1a:9e:e1:8b:a9:ec:8b:f8:9a:26:1b:81:4d:a2:ae: 34:f4:d7:68:18:a1:63:5b:ae:64:16:c8:4c:a3:f2:8b:e3:e3: a0:34:4c:c1:c1:cd:20:0e:56:68:c8:1a:be:7c:36:55:b0:65: bb:58:32:53:41:0e:94:17:1a:02:39:d6:b8:61:08:4f:41:3f: 94:df:62:01:93:b0:26:bf:f9:cc:76:8e:65:41:84:78:00:59: 4a:c3:0e:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBFRjUxMTAvBgNVBAUTKDk4RjRFRDFFQTU2RUZFMzdDQTEzNEY4NzZBOTY1RjJB QzZGQTM3NDgwHhcNMjUwNDI3MDMyOTQ5WhcNMjUwNTA0MDMyOTQ5WjAYMRYwFAYD VQQDEw02ODBkYTRhZS05NjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoiubeOw4GmpADbRiG3q5Vcot9bK5qyxsgUxEa/LSOgQdeGPqMnareHoaL5QJ 6QydMoOWspaHJZbubsXv3rTMPfzSEgXSZCsDIy5tk4dXZ2hwEaAoaU/+zE3si+N/ MOkY8OaCa6KVY9TzNAG3CL593bvU4oeUf7N/BTMTRCa9Gtzlsx+F2CjtcK9EBoAi MBTg2v67oW4TuRh5PkniUbWEX2gTceqNmFBr9lHZoTKa1KyxuEr9aFu/BWhdXvq+ xVZ9p8Wn76Kn46XAmxNGC/rsfQOyZOnceg/Sz9YL3m80dabsdeOKIhOhkExqOCRf o9g9IkPbJ1m9YFdwupcCDYrLKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLnQd52T es7mfNZbiQVJ9MnUVaiNMB8GA1UdIwQYMBaAFJj07R6lbv43yhNPh2qWXyrG+jdI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEVGNS85NDA2NjI4RTU3 NzgxMUVFOENERjg1N0FDNEY5QUUwMi9tUFR0SHFWdV9qZktFMC1IYXBaZktzYjZO MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21QVHRIcVZ1X2pmS0UwLUhhcFpmS3NiNk4wZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEVGNS85NDA2NjI4RTU3NzgxMUVFOENERjg1N0FDNEY5QUUwMi9tUFR0SHFWdV9q ZktFMC1IYXBaZktzYjZOMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+MAMLwEThm3FQfYv/ZxxCBIpI0+pZ9jlxrFeYOTi4t32+mVIVFX2x F2bIeErWjYOXA5rmhsSoVCvAfvV6p0ZHERwQ9D1lXKcaonNpUOXbRrG5Rifqx53K 4icWqYxqBdkAVa4wJc9nz1QzEaTOznl4BKzYD67txkIT3OMyPAy9TrUE40/HcA8U 8CPbkyVqhSQ/4L+UnhmhBoJAU7G2Vp6YPT9rZ4ManuGLqeyL+JomG4FNoq409Ndo GKFjW65kFshMo/KL4+OgNEzBwc0gDlZoyBq+fDZVsGW7WDJTQQ6UFxoCOda4YQhP QT+U32IBk7Amv/nMdo5lQYR4AFlKww4o -----END CERTIFICATE-----Generated at Sun Apr 27 05:42:59 2025 by rpki-client on console.sobornost.net