$ rpki-client -vvf rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.mft File: Klc5bc5w61bAc94adgtipyKwR44.mft (raw, json) Hash identifier: Y9RSus3qMdssPv/r5nO+cnPhJ8+57ASaTxH/Jx0a5D8= Subject key identifier: CD:80:7C:88:8C:24:EC:3F:9A:6C:BC:4B:1D:4E:64:FD:87:4C:7C:22 Authority key identifier: 2A:57:39:6D:CE:70:EB:56:C0:73:DE:1A:76:0B:62:A7:22:B0:47:8E Certificate issuer: /CN=A9193B94/serialNumber=2A57396DCE70EB56C073DE1A760B62A722B0478E Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klc5bc5w61bAc94adgtipyKwR44.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.mft Manifest number: 44 Signing time: Fri 25 Apr 2025 06:25:50 +0000 Manifest this update: Fri 25 Apr 2025 06:25:50 +0000 Manifest next update: Fri 02 May 2025 06:25:50 +0000 Files and hashes: 1: Klc5bc5w61bAc94adgtipyKwR44.crl (hash: Yt6ZPxUxkmmB9zQ8YydpBX3+BR+C94XjViPI5qR830c=) 2: 329C17E6BCDA11EFA2D81814C4F9AE02.roa (hash: oBdfX7J4SfTWAha0J5te4TT+MMNp1UK2JxnYA8w+Btw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.crl rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klc5bc5w61bAc94adgtipyKwR44.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193B94, serialNumber=2A57396DCE70EB56C073DE1A760B62A722B0478E Validity Not Before: Apr 25 06:25:50 2025 GMT Not After : May 2 06:25:50 2025 GMT Subject: CN=680b2aee-6e15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:e5:90:f9:47:c0:b9:be:6b:e4:de:40:2d:d1: f5:20:5c:75:62:7c:19:8c:2b:af:53:28:50:da:8a: 9e:81:f3:c6:cb:33:6f:97:c6:fe:f6:e1:bb:86:ef: 4b:c3:3a:1a:f7:10:40:aa:87:9d:62:af:17:1e:d6: a3:76:ce:cb:4b:24:05:d7:45:a3:f6:d3:0a:90:80: d3:a4:a6:12:cb:e9:67:97:cc:f2:71:8c:91:68:c6: a4:63:4a:cf:04:f5:8c:f2:af:a7:4c:b9:b6:76:b4: 0c:88:54:8f:ec:e4:8f:22:61:cf:88:f3:f6:fb:dc: 2e:19:f4:fc:0d:e7:b4:3a:0b:90:97:50:00:3f:a6: fe:a5:6c:19:fb:91:d1:d4:1f:8b:01:37:8c:d3:1a: cf:34:ef:23:d3:ba:0a:01:cf:73:d9:f5:72:af:bd: 4f:8f:52:9d:bb:2f:3e:04:82:d5:85:74:e1:0b:1e: 98:87:35:b9:74:85:03:69:4a:1c:06:67:d8:f6:b2: 08:ce:2d:a3:e2:f2:e4:90:dd:3c:bd:75:18:c2:b9: 3b:be:0b:1b:48:98:cc:8f:c8:30:55:26:cf:4d:aa: 38:9e:70:bd:9c:07:09:a0:af:16:80:ec:42:9c:9d: 4b:2d:c5:c0:5c:a7:aa:25:79:70:17:78:bc:15:46: 55:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:80:7C:88:8C:24:EC:3F:9A:6C:BC:4B:1D:4E:64:FD:87:4C:7C:22 X509v3 Authority Key Identifier: keyid:2A:57:39:6D:CE:70:EB:56:C0:73:DE:1A:76:0B:62:A7:22:B0:47:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klc5bc5w61bAc94adgtipyKwR44.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:29:43:3b:db:a6:70:d4:2d:20:bb:51:e0:d9:cc:d2:48:f9: 9d:3c:d3:23:b4:5f:e0:f7:3b:29:48:1c:da:9a:6f:a1:db:97: d5:9f:aa:a6:cd:a4:55:3e:88:1a:86:e9:c7:e1:bb:88:ab:c5: a2:3d:5f:0c:cc:5f:aa:77:11:13:8d:a1:41:ab:b3:16:83:76: b8:36:22:fd:89:0d:33:63:14:6f:43:c9:bd:52:ac:d9:73:a5: 1b:4e:50:ab:34:d7:aa:b4:5a:e8:9e:e6:72:e8:76:87:1b:7f: 2a:bf:8d:27:44:58:20:23:6a:64:3a:b4:26:ab:f0:a5:07:81: cb:bf:0d:28:54:5c:40:01:35:91:18:d8:33:5a:21:1f:d9:7c: cf:84:ce:45:51:ee:dd:62:f0:1e:a1:fc:e6:8b:ae:e1:d1:e4: c6:d5:88:51:c5:8b:14:8e:3c:9d:d0:cf:40:e5:10:4a:97:8c: 65:d5:40:da:1f:e5:e8:3b:4d:8a:22:0b:5a:ea:1e:84:51:16: 06:fe:14:6f:7d:bf:e2:21:39:2b:95:f4:6f:71:92:b5:28:66: 2f:f8:04:b3:a1:3c:fc:ae:98:8b:1b:d7:18:c2:4c:c7:34:7c: f3:d9:7d:50:fc:54:63:8d:74:22:89:b7:c8:1f:93:1d:0a:62: d7:00:f6:9c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 M0I5NDExMC8GA1UEBRMoMkE1NzM5NkRDRTcwRUI1NkMwNzNERTFBNzYwQjYyQTcy MkIwNDc4RTAeFw0yNTA0MjUwNjI1NTBaFw0yNTA1MDIwNjI1NTBaMBgxFjAUBgNV BAMTDTY4MGIyYWVlLTZlMTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDp5ZD5R8C5vmvk3kAt0fUgXHVifBmMK69TKFDaip6B88bLM2+Xxv724buG70vD Ohr3EECqh51irxce1qN2zstLJAXXRaP20wqQgNOkphLL6WeXzPJxjJFoxqRjSs8E 9Yzyr6dMubZ2tAyIVI/s5I8iYc+I8/b73C4Z9PwN57Q6C5CXUAA/pv6lbBn7kdHU H4sBN4zTGs807yPTugoBz3PZ9XKvvU+PUp27Lz4EgtWFdOELHpiHNbl0hQNpShwG Z9j2sgjOLaPi8uSQ3Ty9dRjCuTu+CxtImMyPyDBVJs9NqjiecL2cBwmgrxaA7EKc nUstxcBcp6oleXAXeLwVRlV1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzYB8iIwk 7D+abLxLHU5k/YdMfCIwHwYDVR0jBBgwFoAUKlc5bc5w61bAc94adgtipyKwR44w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkzQjk0L0FGNDFCRDEwQkNE OTExRUY5MkFCMzMxM0M0RjlBRTAyL0tsYzViYzV3NjFiQWM5NGFkZ3RpcHlLd1I0 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvS2xjNWJjNXc2MWJBYzk0YWRndGlweUt3UjQ0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkz Qjk0L0FGNDFCRDEwQkNEOTExRUY5MkFCMzMxM0M0RjlBRTAyL0tsYzViYzV3NjFi QWM5NGFkZ3RpcHlLd1I0NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACYpQzvbpnDULSC7UeDZzNJI+Z080yO0X+D3OylIHNqab6Hbl9WfqqbN pFU+iBqG6cfhu4irxaI9XwzMX6p3ERONoUGrsxaDdrg2Iv2JDTNjFG9Dyb1SrNlz pRtOUKs016q0Wuie5nLodocbfyq/jSdEWCAjamQ6tCar8KUHgcu/DShUXEABNZEY 2DNaIR/ZfM+EzkVR7t1i8B6h/OaLruHR5MbViFHFixSOPJ3Qz0DlEEqXjGXVQNof 5eg7TYoiC1rqHoRRFgb+FG99v+IhOSuV9G9xkrUoZi/4BLOhPPyumIsb1xjCTMc0 fPPZfVD8VGONdCKJt8gfkx0KYtcA9pw= -----END CERTIFICATE-----Generated at Fri Apr 25 08:24:50 2025 by rpki-client on console.sobornost.net