$ rpki-client -vvf rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.mft File: KoE65dYVKWBF2z4sQsuPzaxq0gw.mft (raw, json) Hash identifier: hZ5KfyKqv0BlOt5SZjtX4DTVIrr/vs+T5+rSqVnYtqI= Subject key identifier: 9F:91:5D:AE:7B:15:81:A0:BB:81:65:1D:B5:57:CD:8F:70:43:FB:A6 Authority key identifier: 2A:81:3A:E5:D6:15:29:60:45:DB:3E:2C:42:CB:8F:CD:AC:6A:D2:0C Certificate issuer: /CN=A9193BF8/serialNumber=2A813AE5D615296045DB3E2C42CB8FCDAC6AD20C Certificate serial: 017F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KoE65dYVKWBF2z4sQsuPzaxq0gw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.mft Manifest number: 017C Signing time: Sun 27 Apr 2025 02:42:39 +0000 Manifest this update: Sun 27 Apr 2025 02:42:38 +0000 Manifest next update: Sun 04 May 2025 02:42:38 +0000 Files and hashes: 1: KoE65dYVKWBF2z4sQsuPzaxq0gw.crl (hash: XMvUYychg2rlBjtoTwCF4yw3BXEgiCsL/rfEg34MnNc=) 2: B8F3C5B4E01811ED8385DA62C4F9AE02.roa (hash: XP8lLbicS7mB1IqZ6ApZEYlo1iErgLT+WwIjnSaqxSY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.crl rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KoE65dYVKWBF2z4sQsuPzaxq0gw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:42:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 383 (0x17f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193BF8, serialNumber=2A813AE5D615296045DB3E2C42CB8FCDAC6AD20C Validity Not Before: Apr 27 02:42:38 2025 GMT Not After : May 4 02:42:38 2025 GMT Subject: CN=680d999f-9dd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5d:df:c7:b1:ce:97:a2:b8:c1:37:9e:df:2f: 62:db:4c:90:55:91:cc:13:64:9b:38:fd:ee:6c:1c: ae:be:52:4c:40:87:e0:46:df:e2:4a:47:d4:e0:03: 3a:ec:cd:dc:65:b1:ca:f9:1a:66:ac:85:1b:d7:c3: bd:44:cc:54:75:f9:7c:e4:96:58:e0:9d:a2:ec:2f: 1c:f5:17:0d:a0:23:1b:4a:df:81:97:c2:37:bf:1b: 75:fc:83:3c:4d:cd:65:ff:93:a1:84:e0:c8:fb:60: 66:52:30:d8:17:1b:82:a6:81:82:8b:2f:fc:6e:f4: 9d:f2:ab:f3:13:a5:7d:16:bb:2c:1e:45:c6:5f:eb: c7:d3:75:43:4b:3f:cb:e9:e7:6f:33:67:13:c4:2c: 10:49:9c:58:f4:14:49:9a:b7:c3:88:03:77:e7:92: 2f:40:31:47:09:2d:d1:b8:a1:7f:0f:b9:13:0a:c1: 1b:01:74:15:15:4c:50:16:48:42:fe:f0:ed:a5:b3: 62:0f:23:3f:a8:95:d3:d8:b3:8a:6b:11:36:37:74: 98:86:3a:13:e6:b9:12:56:0b:f1:76:fb:94:55:bf: 77:ea:c6:82:31:b2:89:7c:37:38:d0:d3:df:4a:c4: 52:ca:63:ea:6e:67:43:b5:2f:57:67:f3:e8:85:2a: 90:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:91:5D:AE:7B:15:81:A0:BB:81:65:1D:B5:57:CD:8F:70:43:FB:A6 X509v3 Authority Key Identifier: keyid:2A:81:3A:E5:D6:15:29:60:45:DB:3E:2C:42:CB:8F:CD:AC:6A:D2:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KoE65dYVKWBF2z4sQsuPzaxq0gw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:8c:6d:48:d2:4d:eb:f6:52:ce:43:65:25:cf:e2:a6:d1:52: 29:24:f2:7f:ba:ba:91:82:78:fc:46:00:1e:30:05:b2:8d:79: d8:a8:79:0c:7a:c6:69:6d:5d:68:bf:93:8f:76:b5:bb:ee:16: 05:e2:98:d5:e1:98:af:c6:23:3d:92:f3:6a:ae:a4:a8:6b:85: b7:d0:35:89:e1:5a:a3:ab:0f:ac:c5:3f:79:b7:48:4f:b9:8c: c0:30:f4:9d:04:37:e4:b3:35:d9:e3:b2:16:33:9b:2f:ed:fb: 7a:62:60:9e:db:79:2c:9a:ab:16:f9:88:35:1b:31:77:2b:38: e9:30:67:bc:15:66:f7:9d:a0:49:e0:11:30:59:85:ba:bf:3a: 4e:7d:45:83:b5:d4:2a:8f:0c:2e:7f:e3:2b:8d:0a:1d:16:e3: 32:5c:34:03:88:21:78:5f:8d:be:db:b8:e6:77:48:36:c8:24: 81:99:60:c9:4a:cd:83:82:0d:7d:be:c7:66:6c:28:05:41:2f: 28:fd:a0:9d:c7:e9:b3:ab:db:1b:2c:db:61:7b:47:d2:f4:0f: 73:4b:43:03:d3:39:81:71:56:eb:f3:6c:12:aa:69:34:59:62: 51:1b:9b:83:d1:60:15:47:95:0a:ba:41:48:e0:54:8b:fe:5d: 85:7a:91:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTNCRjgxMTAvBgNVBAUTKDJBODEzQUU1RDYxNTI5NjA0NURCM0UyQzQyQ0I4RkNE QUM2QUQyMEMwHhcNMjUwNDI3MDI0MjM4WhcNMjUwNTA0MDI0MjM4WjAYMRYwFAYD VQQDEw02ODBkOTk5Zi05ZGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArl3fx7HOl6K4wTee3y9i20yQVZHME2SbOP3ubByuvlJMQIfgRt/iSkfU4AM6 7M3cZbHK+RpmrIUb18O9RMxUdfl85JZY4J2i7C8c9RcNoCMbSt+Bl8I3vxt1/IM8 Tc1l/5OhhODI+2BmUjDYFxuCpoGCiy/8bvSd8qvzE6V9FrssHkXGX+vH03VDSz/L 6edvM2cTxCwQSZxY9BRJmrfDiAN355IvQDFHCS3RuKF/D7kTCsEbAXQVFUxQFkhC /vDtpbNiDyM/qJXT2LOKaxE2N3SYhjoT5rkSVgvxdvuUVb936saCMbKJfDc40NPf SsRSymPqbmdDtS9XZ/PohSqQXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ+RXa57 FYGgu4FlHbVXzY9wQ/umMB8GA1UdIwQYMBaAFCqBOuXWFSlgRds+LELLj82satIM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0JGOC9BMjJCRDE1OEUw MTUxMUVEQjE2NjY5NjFDNEY5QUUwMi9Lb0U2NWRZVktXQkYyejRzUXN1UHpheHEw Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0tvRTY1ZFlWS1dCRjJ6NHNRc3VQemF4cTBndy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 M0JGOC9BMjJCRDE1OEUwMTUxMUVEQjE2NjY5NjFDNEY5QUUwMi9Lb0U2NWRZVktX QkYyejRzUXN1UHpheHEwZ3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhjG1I0k3r9lLOQ2Ulz+Km0VIpJPJ/urqRgnj8RgAeMAWyjXnYqHkM esZpbV1ov5OPdrW77hYF4pjV4ZivxiM9kvNqrqSoa4W30DWJ4Vqjqw+sxT95t0hP uYzAMPSdBDfkszXZ47IWM5sv7ft6YmCe23ksmqsW+Yg1GzF3KzjpMGe8FWb3naBJ 4BEwWYW6vzpOfUWDtdQqjwwuf+MrjQodFuMyXDQDiCF4X42+27jmd0g2yCSBmWDJ Ss2Dgg19vsdmbCgFQS8o/aCdx+mzq9sbLNthe0fS9A9zS0MD0zmBcVbr82wSqmk0 WWJRG5uD0WAVR5UKukFI4FSL/l2FepEk -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:00 2025 by rpki-client on console.sobornost.net