$ rpki-client -vvf rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft File: 1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft (raw, json) Hash identifier: /cPbWWF6ppaxstU3apvGZXhpnxsKy7RomlbyzhBI0hw= Subject key identifier: 0B:06:2A:6D:13:C5:6C:01:99:AA:B8:82:A2:2D:5A:AE:7E:55:D8:48 Authority key identifier: D4:A1:C7:1D:35:73:A6:E4:46:13:89:41:D7:F7:EF:EC:E3:97:AF:B5 Certificate issuer: /CN=A9192920/serialNumber=D4A1C71D3573A6E446138941D7F7EFECE397AFB5 Certificate serial: 0747 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KHHHTVzpuRGE4lB1_fv7OOXr7U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft Manifest number: 073E Signing time: Sat 26 Apr 2025 21:23:59 +0000 Manifest this update: Sat 26 Apr 2025 21:23:58 +0000 Manifest next update: Sat 03 May 2025 21:23:58 +0000 Files and hashes: 1: 1KHHHTVzpuRGE4lB1_fv7OOXr7U.crl (hash: laLuXTA7MpRDW4IEihi/19ts1U70rIi9g95tQadvaNk=) 2: 213D6260B68511EC81F0D430C4F9AE02.roa (hash: 1GNNxU4cZHFHnGQGEpAVPZfliXXhk8CqSgKLDVtEJBw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.crl rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KHHHTVzpuRGE4lB1_fv7OOXr7U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1863 (0x747) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192920, serialNumber=D4A1C71D3573A6E446138941D7F7EFECE397AFB5 Validity Not Before: Apr 26 21:23:58 2025 GMT Not After : May 3 21:23:58 2025 GMT Subject: CN=680d4eef-478d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ff:95:12:4d:e2:74:a9:fa:a2:bd:ef:63:13: b0:1a:2e:03:40:77:ea:54:7c:d9:72:06:da:e1:25: 75:92:ee:06:22:d3:e5:be:dc:b9:89:66:21:f7:11: 60:9f:31:21:07:e3:56:39:50:9c:82:52:46:32:93: 0a:bc:91:3f:be:60:bf:2c:f8:ab:30:71:ea:3a:32: 87:ce:52:a2:fd:75:06:cc:fd:16:99:16:3f:10:12: 49:ac:a9:fa:c5:f1:a2:d7:11:90:3d:47:ad:2d:34: 7f:54:ac:68:25:2a:51:47:a9:5e:87:af:4e:d4:56: 6f:26:13:12:7a:2f:ed:81:08:a2:72:8b:52:76:bc: d7:95:97:a8:63:57:0e:53:d0:a0:78:0a:ea:17:22: 4d:7c:a0:eb:1b:dd:f5:60:ef:38:fc:d2:b7:38:40: 97:4c:2d:0a:76:ba:88:79:60:29:da:c8:70:27:35: 06:4f:6e:e9:f4:9e:b5:51:ae:b5:3d:3c:be:d8:bc: 75:b2:2b:39:4e:1c:f9:11:8a:17:36:d2:64:50:ea: 1d:e1:04:d3:0f:42:69:38:2a:6c:8a:71:02:52:e7: 02:5c:5b:12:b1:1b:61:84:a6:2a:88:a0:37:c5:33: 65:6c:9e:ad:33:b8:12:97:b5:90:1d:9b:a5:80:26: 24:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:06:2A:6D:13:C5:6C:01:99:AA:B8:82:A2:2D:5A:AE:7E:55:D8:48 X509v3 Authority Key Identifier: keyid:D4:A1:C7:1D:35:73:A6:E4:46:13:89:41:D7:F7:EF:EC:E3:97:AF:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KHHHTVzpuRGE4lB1_fv7OOXr7U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:c7:c3:d0:f2:9a:68:b3:c0:5e:5d:86:dc:78:7f:07:82:c4: f5:5e:0e:7d:f7:64:36:91:47:de:6f:e9:3c:a3:4c:29:b8:d1: a8:7f:dc:d0:0b:e1:31:cd:8b:df:dc:45:e0:3b:5d:45:ef:6d: e7:02:2f:72:72:6a:16:4f:cd:50:23:ad:98:83:88:f4:32:28: 19:e6:1d:61:9f:79:87:09:0e:5e:c6:5c:69:f0:f1:b0:3f:fa: 90:53:33:73:fc:8c:3e:34:43:b3:75:33:59:f6:71:72:a1:99: ae:19:ce:e1:18:3f:7b:bc:cd:d6:1d:3d:42:fa:fe:f7:fd:c0: 67:3b:96:85:bd:14:94:38:e4:f8:0f:13:2d:a2:5e:fe:e6:ec: fa:77:43:0b:d3:fe:88:5e:2b:81:0c:22:80:fc:42:db:0f:ec: b0:17:04:da:9e:e7:81:b2:60:b4:aa:20:fe:f9:b0:ac:f8:83: c0:b5:f2:aa:cc:a3:36:90:d1:db:57:4c:b5:0a:1b:ef:56:b2: 64:0d:2a:a5:5a:68:c2:73:54:16:8e:85:01:6f:3f:75:e0:ef: 16:41:3e:c4:0a:84:27:30:7f:af:4d:8e:5f:5e:fd:04:0b:08: 1a:76:18:e8:8d:3a:54:90:f5:de:b0:69:e0:10:80:78:f5:a8: 07:d3:21:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTI5MjAxMTAvBgNVBAUTKEQ0QTFDNzFEMzU3M0E2RTQ0NjEzODk0MUQ3RjdFRkVD RTM5N0FGQjUwHhcNMjUwNDI2MjEyMzU4WhcNMjUwNTAzMjEyMzU4WjAYMRYwFAYD VQQDEw02ODBkNGVlZi00NzhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu/+VEk3idKn6or3vYxOwGi4DQHfqVHzZcgba4SV1ku4GItPlvty5iWYh9xFg nzEhB+NWOVCcglJGMpMKvJE/vmC/LPirMHHqOjKHzlKi/XUGzP0WmRY/EBJJrKn6 xfGi1xGQPUetLTR/VKxoJSpRR6leh69O1FZvJhMSei/tgQiicotSdrzXlZeoY1cO U9CgeArqFyJNfKDrG931YO84/NK3OECXTC0KdrqIeWAp2shwJzUGT27p9J61Ua61 PTy+2Lx1sis5Thz5EYoXNtJkUOod4QTTD0JpOCpsinECUucCXFsSsRthhKYqiKA3 xTNlbJ6tM7gSl7WQHZulgCYkawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAsGKm0T xWwBmaq4gqItWq5+VdhIMB8GA1UdIwQYMBaAFNShxx01c6bkRhOJQdf37+zjl6+1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjkyMC83MEMwNDQyNjI3 RUIxMUVCODJGMjcwNDdDNEY5QUUwMi8xS0hISFRWenB1UkdFNGxCMV9mdjdPT1hy N1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFLSEhIVFZ6cHVSR0U0bEIxX2Z2N09PWHI3VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjkyMC83MEMwNDQyNjI3RUIxMUVCODJGMjcwNDdDNEY5QUUwMi8xS0hISFRWenB1 UkdFNGxCMV9mdjdPT1hyN1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsx8PQ8ppos8BeXYbceH8HgsT1Xg5992Q2kUfeb+k8o0wpuNGof9zQ C+ExzYvf3EXgO11F723nAi9ycmoWT81QI62Yg4j0MigZ5h1hn3mHCQ5exlxp8PGw P/qQUzNz/Iw+NEOzdTNZ9nFyoZmuGc7hGD97vM3WHT1C+v73/cBnO5aFvRSUOOT4 DxMtol7+5uz6d0ML0/6IXiuBDCKA/ELbD+ywFwTanueBsmC0qiD++bCs+IPAtfKq zKM2kNHbV0y1ChvvVrJkDSqlWmjCc1QWjoUBbz914O8WQT7ECoQnMH+vTY5fXv0E CwgadhjojTpUkPXesGngEIB49agH0yH3 -----END CERTIFICATE-----Generated at Sun Apr 27 00:14:06 2025 by rpki-client on console.sobornost.net