$ rpki-client -vvf rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.mft File: rTu2A7FO-ybXFWgvsEE1Hsj502c.mft (raw, json) Hash identifier: IKLRkrHH5jIHEv8fGxRckd4kz4HX3CqCa5aP3GNu150= Subject key identifier: 87:6E:DE:4A:24:7E:02:A2:A5:C9:3E:DC:FC:65:0F:E7:AF:68:83:DA Authority key identifier: AD:3B:B6:03:B1:4E:FB:26:D7:15:68:2F:B0:41:35:1E:C8:F9:D3:67 Certificate issuer: /CN=A9191436/serialNumber=AD3BB603B14EFB26D715682FB041351EC8F9D367 Certificate serial: 12B6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.mft Manifest number: 1296 Signing time: Sat 26 Apr 2025 17:02:12 +0000 Manifest this update: Sat 26 Apr 2025 17:02:12 +0000 Manifest next update: Sat 03 May 2025 17:02:12 +0000 Files and hashes: 1: rTu2A7FO-ybXFWgvsEE1Hsj502c.crl (hash: qh+5f6IMCXCjn6a0h8QToLTMvzKQu18KKWLghUzkT8s=) 2: C31D6D082BA611EF82D8BF21C4F9AE02.roa (hash: cuFQqVlbEJ/udXRPZ56LOiAFU4p5XZPUOiRAjCCaxGQ=) 3: 403398AA233111EEAF768F66C4F9AE02.roa (hash: LFrmkrzanddJe0x2nUkwJLw/OhE7SJ+J+T3fYrc0q4I=) 4: E4AFD636233211EE8737EE2AC4F9AE02.roa (hash: mehZcMjFb7HT3F1ePo3UBF+1EGoPOvu0R4233be/rFs=) 5: 4426B244F6A011EC8E197883C4F9AE02.roa (hash: tPqGcusMyqiuDoF3oCEh1MkgveCq5i4UTPc8YjbijQA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.crl rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 14:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4790 (0x12b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191436, serialNumber=AD3BB603B14EFB26D715682FB041351EC8F9D367 Validity Not Before: Apr 26 17:02:12 2025 GMT Not After : May 3 17:02:12 2025 GMT Subject: CN=680d1194-2126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f9:7b:44:7b:9e:bc:f0:2e:25:ec:a5:d4:a2: de:c4:5c:cb:12:e1:a0:e8:26:6c:5e:ee:d6:79:0a: d7:b2:e8:8c:23:48:e0:08:5b:7b:ad:9e:a8:4f:ca: 41:03:ef:ff:f5:c5:2b:a4:14:2e:ea:2f:0c:f9:d7: 08:39:52:e3:95:ca:ef:c4:d6:a1:45:00:40:89:a0: 49:48:62:3d:0e:04:6a:16:4f:09:1a:47:04:16:f1: df:cb:08:66:e5:71:8a:97:a2:5d:ee:27:2f:c2:ee: 6f:ca:23:3e:c5:5a:e8:96:f3:1f:a1:59:44:18:c3: 6e:61:30:50:90:1c:d6:57:4d:16:b3:e9:70:de:c4: 48:41:83:29:02:b1:71:98:f8:9f:55:56:5d:b3:e7: cf:2c:13:e0:26:5b:6b:3d:b6:3e:9c:51:2e:31:fc: 02:c3:87:a2:fb:d6:6d:29:76:18:30:92:e8:54:d2: 0d:ae:ac:89:de:7a:86:d3:9d:c4:8b:01:1c:c1:21: 23:cc:75:bd:39:2e:ad:e2:d6:8c:dc:74:5e:f4:37: e2:dc:fb:91:27:2e:7b:89:c1:2e:06:ea:05:41:b8: 60:dc:82:04:b5:08:c2:6d:e5:19:8a:17:4d:35:29: e7:94:a5:5a:d9:62:b3:82:18:b9:3c:9d:fd:dd:82: f4:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:6E:DE:4A:24:7E:02:A2:A5:C9:3E:DC:FC:65:0F:E7:AF:68:83:DA X509v3 Authority Key Identifier: keyid:AD:3B:B6:03:B1:4E:FB:26:D7:15:68:2F:B0:41:35:1E:C8:F9:D3:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:62:b9:2c:86:65:1f:0a:9a:6a:37:4b:a8:cd:36:a9:a2:7f: fa:cf:0f:9d:c1:05:e5:29:fb:9b:8b:c9:96:55:88:1d:01:e0: 7f:a0:31:00:09:33:83:2a:8a:1d:57:c6:d4:c3:b3:3e:04:0d: d3:46:7e:4d:71:91:d0:b7:4d:69:16:35:8b:c3:e6:90:5b:75: ba:80:88:0d:c9:ed:b8:41:12:f4:e6:25:c2:82:b0:1c:4d:8a: 6d:c7:47:3b:bf:ff:42:4f:bf:12:11:89:e4:0e:9f:43:47:77: cd:aa:85:a8:b6:58:c4:05:fb:50:20:e9:f7:9b:dd:52:f0:74: e6:fb:33:35:ab:aa:96:1b:e7:fd:5f:56:c4:5e:f2:ab:34:ba: 8e:25:2a:19:c2:12:e1:bd:01:2f:3e:16:4e:52:ba:ef:39:37: 5b:b6:d6:74:44:64:5b:05:b8:f8:89:17:88:16:0e:40:b3:1c: 40:0e:33:2a:84:b2:75:b4:c9:4c:07:27:4f:35:ec:8d:16:0d: db:c4:40:a0:2f:fd:9a:df:05:93:fd:25:1e:f7:de:c9:ac:44: a8:e4:31:7c:3e:30:e8:cb:9c:36:1f:6d:a3:a1:0b:03:59:9c: 0d:a4:9d:36:49:6e:41:49:ea:6a:e7:71:fe:71:37:ce:1b:23: f4:65:42:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICErYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTE0MzYxMTAvBgNVBAUTKEFEM0JCNjAzQjE0RUZCMjZENzE1NjgyRkIwNDEzNTFF QzhGOUQzNjcwHhcNMjUwNDI2MTcwMjEyWhcNMjUwNTAzMTcwMjEyWjAYMRYwFAYD VQQDEw02ODBkMTE5NC0yMTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1/l7RHuevPAuJeyl1KLexFzLEuGg6CZsXu7WeQrXsuiMI0jgCFt7rZ6oT8pB A+//9cUrpBQu6i8M+dcIOVLjlcrvxNahRQBAiaBJSGI9DgRqFk8JGkcEFvHfywhm 5XGKl6Jd7icvwu5vyiM+xVrolvMfoVlEGMNuYTBQkBzWV00Ws+lw3sRIQYMpArFx mPifVVZds+fPLBPgJltrPbY+nFEuMfwCw4ei+9ZtKXYYMJLoVNINrqyJ3nqG053E iwEcwSEjzHW9OS6t4taM3HRe9Dfi3PuRJy57icEuBuoFQbhg3IIEtQjCbeUZihdN NSnnlKVa2WKzghi5PJ393YL00wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIdu3kok fgKipck+3PxlD+evaIPaMB8GA1UdIwQYMBaAFK07tgOxTvsm1xVoL7BBNR7I+dNn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTQzNi9BMzBCNUE0QUM3 OEMxMUU4QTc2Q0Q5MTRDNEY5QUUwMi9yVHUyQTdGTy15YlhGV2d2c0VFMUhzajUw MmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3JUdTJBN0ZPLXliWEZXZ3ZzRUUxSHNqNTAyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTQzNi9BMzBCNUE0QUM3OEMxMUU4QTc2Q0Q5MTRDNEY5QUUwMi9yVHUyQTdGTy15 YlhGV2d2c0VFMUhzajUwMmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzYrkshmUfCppqN0uozTapon/6zw+dwQXlKfubi8mWVYgdAeB/oDEA CTODKoodV8bUw7M+BA3TRn5NcZHQt01pFjWLw+aQW3W6gIgNye24QRL05iXCgrAc TYptx0c7v/9CT78SEYnkDp9DR3fNqoWotljEBftQIOn3m91S8HTm+zM1q6qWG+f9 X1bEXvKrNLqOJSoZwhLhvQEvPhZOUrrvOTdbttZ0RGRbBbj4iReIFg5AsxxADjMq hLJ1tMlMBydPNeyNFg3bxECgL/2a3wWT/SUe997JrESo5DF8PjDoy5w2H22joQsD WZwNpJ02SW5BSepq53H+cTfOGyP0ZUJ7 -----END CERTIFICATE-----Generated at Sat Apr 26 21:01:57 2025 by rpki-client on console.sobornost.net