$ rpki-client -vvf rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft File: M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft (raw, json) Hash identifier: QTDMcKGISRVgsGUm1Zv8k6Dv99pOJlR4PC0KKAgd34w= Subject key identifier: 73:45:60:45:5C:5E:76:76:00:9E:E7:DA:92:E5:DC:FA:52:FD:C6:61 Authority key identifier: 33:B6:95:32:95:80:10:38:F0:17:FA:65:D4:70:78:1A:5C:C7:72:C0 Certificate issuer: /CN=A9191E08/serialNumber=33B6953295801038F017FA65D470781A5CC772C0 Certificate serial: 032E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft Manifest number: 0324 Signing time: Sun 27 Apr 2025 00:48:32 +0000 Manifest this update: Sun 27 Apr 2025 00:48:32 +0000 Manifest next update: Sun 04 May 2025 00:48:32 +0000 Files and hashes: 1: M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl (hash: udHSgzh6IL6fB5d6k6TGTLWTDDcwrAaDNk6qWcmqH+4=) 2: 48DBC234F4DB11EFAC0A7D1AC4F9AE02.roa (hash: MMIkwa2VF05y1vJp43/649+EQByZjCMwwH+3GumiKxU=) 3: EF789834F4DA11EFB3FF6B19C4F9AE02.roa (hash: x6KLXmxialEvQm9chZWjV+m4aGyDo45aTYp7F93yY6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 00:48:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 814 (0x32e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191E08, serialNumber=33B6953295801038F017FA65D470781A5CC772C0 Validity Not Before: Apr 27 00:48:32 2025 GMT Not After : May 4 00:48:32 2025 GMT Subject: CN=680d7ee0-7a8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:93:c1:48:05:fc:e4:82:12:06:79:7b:1b:1e: 53:14:10:1e:31:3a:84:03:28:7e:5f:23:5e:f2:9b: 9a:15:e8:44:cc:8f:2e:92:c5:cb:5c:dc:0b:2f:ca: d9:5e:b0:ef:6d:a4:2b:c6:40:0d:bd:1f:cd:19:60: a0:0c:48:55:7d:9c:11:94:99:96:0e:71:7c:13:4f: 0b:5e:18:69:03:fa:e6:a1:d9:6c:00:e3:42:a5:68: 84:f2:1a:fe:b9:9f:4e:71:bc:05:87:5c:a8:fd:da: 39:c3:60:5f:e7:c5:4d:80:85:b3:59:f4:40:2e:ff: ee:17:7f:51:85:b3:8f:a8:32:47:38:52:48:00:8b: e8:87:3a:0a:a1:3b:58:c9:44:58:f4:d6:ac:dc:7c: 6b:f2:30:a2:b7:df:eb:c0:f3:38:8f:61:ee:5c:55: 4c:cd:8f:83:b1:80:c7:89:99:9a:25:4b:f8:56:55: 10:4c:c8:ac:fe:36:bb:b6:d1:43:26:5f:33:21:66: dc:e5:12:fb:f1:80:f5:d8:53:65:22:17:e2:d4:8c: 10:6d:3b:6a:85:8b:72:56:94:7f:22:8d:7b:94:c3: 94:f0:32:c5:df:de:a3:6f:18:2a:6a:16:bc:87:5b: bf:56:07:82:05:6a:04:90:e9:6a:d8:c7:a5:7d:78: c8:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:45:60:45:5C:5E:76:76:00:9E:E7:DA:92:E5:DC:FA:52:FD:C6:61 X509v3 Authority Key Identifier: keyid:33:B6:95:32:95:80:10:38:F0:17:FA:65:D4:70:78:1A:5C:C7:72:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:27:3a:5f:ff:48:f1:6c:e2:fd:aa:22:55:77:38:4e:aa:fa: 25:63:66:ba:95:54:2d:6c:7f:20:9d:81:c4:fd:59:6d:28:fa: dc:eb:95:63:77:ad:66:dd:4b:56:b3:09:bf:d3:34:b5:5f:20: 2f:63:2a:f3:0b:7c:6d:9a:ee:c0:04:17:f9:ab:1c:2d:f2:bc: 27:a2:f2:df:01:80:9b:7a:8c:0a:36:7d:61:71:e9:6f:68:80: e4:90:a0:3f:0c:fa:5b:bb:0d:bd:0d:cc:77:2e:fc:7d:3a:c3: cf:98:48:4d:b7:03:b2:de:23:ff:ea:8b:e2:cb:29:f0:65:73: bf:d3:cf:74:de:26:fc:ff:07:5c:56:64:48:12:72:24:31:d8: 54:b4:ac:c8:1b:3a:0a:2b:08:72:4a:cd:55:62:92:67:c2:2a: be:01:0b:92:41:cf:10:65:74:b7:92:75:f5:37:a4:6d:54:27: cd:a6:75:bf:c9:dd:87:f4:8b:50:53:1f:fc:9d:78:54:bc:4f: 1d:7c:e0:80:20:ef:25:3f:19:db:42:42:5a:2a:f4:b7:b2:a6: 36:8b:b9:42:00:a9:6c:c4:7e:b0:db:6a:fc:cd:70:17:e9:ca: 1c:b7:d5:c1:78:8b:ad:79:9a:d2:ba:8f:08:56:68:74:4d:4d: 99:b0:16:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAy4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFFMDgxMTAvBgNVBAUTKDMzQjY5NTMyOTU4MDEwMzhGMDE3RkE2NUQ0NzA3ODFB NUNDNzcyQzAwHhcNMjUwNDI3MDA0ODMyWhcNMjUwNTA0MDA0ODMyWjAYMRYwFAYD VQQDEw02ODBkN2VlMC03YThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzpPBSAX85IISBnl7Gx5TFBAeMTqEAyh+XyNe8puaFehEzI8uksXLXNwLL8rZ XrDvbaQrxkANvR/NGWCgDEhVfZwRlJmWDnF8E08LXhhpA/rmodlsAONCpWiE8hr+ uZ9OcbwFh1yo/do5w2Bf58VNgIWzWfRALv/uF39RhbOPqDJHOFJIAIvohzoKoTtY yURY9Nas3Hxr8jCit9/rwPM4j2HuXFVMzY+DsYDHiZmaJUv4VlUQTMis/ja7ttFD Jl8zIWbc5RL78YD12FNlIhfi1IwQbTtqhYtyVpR/Io17lMOU8DLF396jbxgqaha8 h1u/VgeCBWoEkOlq2MelfXjIgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHNFYEVc XnZ2AJ7n2pLl3PpS/cZhMB8GA1UdIwQYMBaAFDO2lTKVgBA48Bf6ZdRweBpcx3LA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUUwOC85RUM2MzFFQ0M2 MDkxMUVDQjQ2MEVDNTdDNEY5QUUwMi9NN2FWTXBXQUVEandGX3BsMUhCNEdsekhj c0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL003YVZNcFdBRURqd0ZfcGwxSEI0R2x6SGNzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUUwOC85RUM2MzFFQ0M2MDkxMUVDQjQ2MEVDNTdDNEY5QUUwMi9NN2FWTXBXQUVE andGX3BsMUhCNEdsekhjc0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsJzpf/0jxbOL9qiJVdzhOqvolY2a6lVQtbH8gnYHE/VltKPrc65Vj d61m3UtWswm/0zS1XyAvYyrzC3xtmu7ABBf5qxwt8rwnovLfAYCbeowKNn1hcelv aIDkkKA/DPpbuw29Dcx3Lvx9OsPPmEhNtwOy3iP/6oviyynwZXO/08903ib8/wdc VmRIEnIkMdhUtKzIGzoKKwhySs1VYpJnwiq+AQuSQc8QZXS3knX1N6RtVCfNpnW/ yd2H9ItQUx/8nXhUvE8dfOCAIO8lPxnbQkJaKvS3sqY2i7lCAKlsxH6w22r8zXAX 6coct9XBeIuteZrSuo8IVmh0TU2ZsBZn -----END CERTIFICATE-----Generated at Sun Apr 27 05:42:59 2025 by rpki-client on console.sobornost.net