$ rpki-client -vvf rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.mft File: rPLI0Nz7p0UWszzr4mrhT4sGfIA.mft (raw, json) Hash identifier: yUa3ZXe2B4op8MDipil/02bIcs79W2S6KFCQ1K5nkqE= Subject key identifier: 27:FF:8B:6E:E2:6B:AE:82:6A:35:FD:4A:C5:91:7B:A7:3A:18:82:72 Authority key identifier: AC:F2:C8:D0:DC:FB:A7:45:16:B3:3C:EB:E2:6A:E1:4F:8B:06:7C:80 Certificate issuer: /CN=A9191A09/serialNumber=ACF2C8D0DCFBA74516B33CEBE26AE14F8B067C80 Certificate serial: 350E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.mft Manifest number: 34C9 Signing time: Mon 28 Apr 2025 14:48:18 +0000 Manifest this update: Mon 28 Apr 2025 14:48:17 +0000 Manifest next update: Mon 05 May 2025 14:48:17 +0000 Files and hashes: 1: rPLI0Nz7p0UWszzr4mrhT4sGfIA.crl (hash: Iusiw3QfwsXrD0o5vm9rElEZLq36AYlxj2NNN7cuz1o=) 2: FF64D6AAD4BB11ECBE4E9E71C4F9AE02.roa (hash: h9F1tXbUdsyNYFPUVJCB1ist/+nNZLk15lU+6OKai0c=) 3: 0537EDD4E37C11EA8C217816C4F9AE02.roa (hash: SqzEVckRy0F20kGZ/i2KdXyFceQ+W0O7xzAWCq702q0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.crl rsync://rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 14:48:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13582 (0x350e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191A09, serialNumber=ACF2C8D0DCFBA74516B33CEBE26AE14F8B067C80 Validity Not Before: Apr 28 14:48:17 2025 GMT Not After : May 5 14:48:17 2025 GMT Subject: CN=680f9532-c215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bc:39:79:20:43:9f:40:b6:23:c2:03:46:0a: af:bd:14:aa:ec:16:65:b2:d1:47:fd:5b:0d:35:de: 70:5d:ff:9d:ad:1f:2c:66:2c:a4:d0:c8:e9:ce:59: e7:2a:ea:fb:91:38:c4:e5:00:05:e7:93:9a:72:5c: db:69:b6:1d:af:29:1e:a0:55:93:83:95:06:cd:09: 32:b9:86:80:e7:0c:a8:2f:fd:76:05:ea:d6:32:53: 87:42:ef:f6:3a:e4:17:e8:36:37:04:f5:c9:58:0f: 03:fd:b0:e0:83:c3:f6:ce:92:4d:b2:3e:1c:6a:15: 31:1e:c4:6a:08:58:94:b6:e0:37:9b:e4:ee:58:8a: b5:c5:74:eb:1c:9c:f2:6d:7e:f3:54:99:1b:de:cc: 20:e4:d8:14:43:57:55:d5:57:8a:c9:37:03:00:05: 18:31:11:1a:22:52:e8:91:1c:c4:db:88:4b:b6:96: 15:b1:b5:88:68:1d:78:58:50:db:9e:63:bb:d8:0b: 7e:3d:63:73:c0:61:ab:27:28:a8:77:be:b1:e1:b3: 26:be:f6:d9:54:3d:9d:ff:9b:5a:ca:c2:2f:e9:83: fb:46:9b:a9:0d:eb:58:64:a0:25:93:4f:98:c7:4c: 95:0d:cf:c9:be:05:29:72:30:03:51:4e:e4:fd:e0: a6:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:FF:8B:6E:E2:6B:AE:82:6A:35:FD:4A:C5:91:7B:A7:3A:18:82:72 X509v3 Authority Key Identifier: keyid:AC:F2:C8:D0:DC:FB:A7:45:16:B3:3C:EB:E2:6A:E1:4F:8B:06:7C:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:90:43:9e:b9:3b:c4:37:26:64:95:58:b2:f9:08:32:4b:60: e3:89:9f:f6:a2:e0:75:2e:46:76:9d:e4:96:c7:e1:fd:10:33: 78:ed:65:58:c5:02:dc:fe:50:c2:7b:5a:2f:38:f8:48:f5:e4: 04:cc:e3:37:82:a2:4c:e9:79:ef:32:2a:d1:31:5e:46:13:8a: ed:f7:81:7a:87:11:34:30:14:0d:77:77:4d:cc:66:36:00:8c: 98:11:61:52:6b:61:e0:3c:68:8d:a1:94:0e:a2:c9:14:dd:fa: fd:e5:51:99:7f:97:89:c9:c4:21:64:be:2a:26:51:1c:a8:68: 0b:81:1a:f2:c6:8f:f4:ca:b6:6c:a2:57:c9:f2:77:3e:3f:29: 58:96:ba:46:9d:b5:ed:0f:8e:21:0d:0a:98:e5:67:28:d8:c9: 28:ed:71:23:c1:0b:54:19:1c:4c:79:91:55:10:b3:78:fd:01: c9:31:68:33:c7:63:cd:8e:49:a1:21:a8:96:73:1d:d9:07:4c: f5:b4:98:71:58:01:5f:aa:c2:6a:a7:91:39:7f:8b:12:d3:3b: 7d:2e:28:ef:7d:bb:97:14:27:f3:b2:d3:64:bf:73:ca:b2:05: 87:6c:86:36:bf:f2:51:ef:68:cf:91:5f:ca:76:b5:03:b2:41: f8:bf:97:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFBMDkxMTAvBgNVBAUTKEFDRjJDOEQwRENGQkE3NDUxNkIzM0NFQkUyNkFFMTRG OEIwNjdDODAwHhcNMjUwNDI4MTQ0ODE3WhcNMjUwNTA1MTQ0ODE3WjAYMRYwFAYD VQQDEw02ODBmOTUzMi1jMjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvrw5eSBDn0C2I8IDRgqvvRSq7BZlstFH/VsNNd5wXf+drR8sZiyk0Mjpzlnn Kur7kTjE5QAF55OaclzbabYdrykeoFWTg5UGzQkyuYaA5wyoL/12BerWMlOHQu/2 OuQX6DY3BPXJWA8D/bDgg8P2zpJNsj4cahUxHsRqCFiUtuA3m+TuWIq1xXTrHJzy bX7zVJkb3swg5NgUQ1dV1VeKyTcDAAUYMREaIlLokRzE24hLtpYVsbWIaB14WFDb nmO72At+PWNzwGGrJyiod76x4bMmvvbZVD2d/5taysIv6YP7RpupDetYZKAlk0+Y x0yVDc/JvgUpcjADUU7k/eCmmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCf/i27i a66CajX9SsWRe6c6GIJyMB8GA1UdIwQYMBaAFKzyyNDc+6dFFrM86+Jq4U+LBnyA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUEwOS80QUNGRjM2MDFE OTAxMUUyQjg3Q0YyRUYwOEIwMkNEMi9yUExJME56N3AwVVdzenpyNG1yaFQ0c0dm SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JQTEkwTno3cDBVV3N6enI0bXJoVDRzR2ZJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUEwOS80QUNGRjM2MDFEOTAxMUUyQjg3Q0YyRUYwOEIwMkNEMi9yUExJME56N3Aw VVdzenpyNG1yaFQ0c0dmSUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtkEOeuTvENyZklViy+QgyS2DjiZ/2ouB1LkZ2neSWx+H9EDN47WVY xQLc/lDCe1ovOPhI9eQEzOM3gqJM6XnvMirRMV5GE4rt94F6hxE0MBQNd3dNzGY2 AIyYEWFSa2HgPGiNoZQOoskU3fr95VGZf5eJycQhZL4qJlEcqGgLgRryxo/0yrZs olfJ8nc+PylYlrpGnbXtD44hDQqY5Wco2Mko7XEjwQtUGRxMeZFVELN4/QHJMWgz x2PNjkmhIaiWcx3ZB0z1tJhxWAFfqsJqp5E5f4sS0zt9LijvfbuXFCfzstNkv3PK sgWHbIY2v/JR72jPkV/KdrUDskH4v5dS -----END CERTIFICATE-----Generated at Mon Apr 28 17:45:59 2025 by rpki-client on console.sobornost.net