$ rpki-client -vvf rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft File: f32FZbsEGDw68czSI-nEYR8VCAY.mft (raw, json) Hash identifier: Wm6EbsOZ4ETB2RCthup88tz6n/jA8Lym9i8bXooFD/M= Subject key identifier: 8E:FD:B1:AB:93:24:0F:72:E4:4A:86:E9:B4:36:C3:05:DA:A7:E2:A1 Authority key identifier: 7F:7D:85:65:BB:04:18:3C:3A:F1:CC:D2:23:E9:C4:61:1F:15:08:06 Certificate issuer: /CN=A9194004/serialNumber=7F7D8565BB04183C3AF1CCD223E9C4611F150806 Certificate serial: 0147 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f32FZbsEGDw68czSI-nEYR8VCAY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft Manifest number: 0145 Signing time: Sun 27 Apr 2025 03:12:36 +0000 Manifest this update: Sun 27 Apr 2025 03:12:35 +0000 Manifest next update: Sun 04 May 2025 03:12:35 +0000 Files and hashes: 1: f32FZbsEGDw68czSI-nEYR8VCAY.crl (hash: 1YKlJ41cKx2rWcNQyHn/zaNz4TuOCh+o2ToaRtG4GP8=) 2: 4A6E97AC311E11EE85C30E3BC4F9AE02.roa (hash: NO+YNugcxTXyb9dCZOOdJ51ziCc/jYCa92qXpmRaYW0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.crl rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f32FZbsEGDw68czSI-nEYR8VCAY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 327 (0x147) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194004, serialNumber=7F7D8565BB04183C3AF1CCD223E9C4611F150806 Validity Not Before: Apr 27 03:12:35 2025 GMT Not After : May 4 03:12:35 2025 GMT Subject: CN=680da0a4-7258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5c:6c:1a:4f:3c:4b:44:b0:86:99:1f:2b:f6: cb:b0:be:d3:b4:af:38:ca:fc:79:17:be:89:77:23: 72:60:95:eb:15:ef:f4:1d:d7:ac:1d:c4:f6:ef:ac: 15:ce:37:78:12:9f:57:34:a8:e6:15:75:22:70:11: b2:3c:f2:d0:60:37:d9:a3:63:fb:50:0e:75:d5:e5: 08:83:35:56:0e:b7:e4:68:72:e8:16:30:46:34:0c: d9:5b:26:7f:79:3c:28:f8:41:0d:e5:59:70:a0:c5: f7:64:bf:15:24:3e:44:5f:ed:2e:f4:6d:f4:85:79: 35:03:7c:0d:2e:cb:ff:0e:0c:da:20:c0:5b:68:a5: f0:2e:f7:d1:8b:d6:62:51:e0:8a:52:af:f3:43:39: f4:f6:3d:f6:5c:b0:31:83:f0:8a:ed:67:4a:07:c0: b6:5c:67:4a:f8:91:e1:b1:6f:78:e0:ef:ce:71:ef: 75:20:5f:55:45:05:80:a9:e5:dd:07:e1:7a:f6:e8: fb:a0:d1:b8:31:30:dd:50:a9:c6:f7:99:cd:9d:06: 6a:30:47:ac:fc:45:ca:da:9d:5b:12:b0:f2:c6:8a: 32:81:5d:5c:65:2e:8a:38:28:27:98:5c:cb:02:19: 64:aa:ec:e1:5a:76:1d:43:c5:bc:5a:63:b0:91:26: df:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:FD:B1:AB:93:24:0F:72:E4:4A:86:E9:B4:36:C3:05:DA:A7:E2:A1 X509v3 Authority Key Identifier: keyid:7F:7D:85:65:BB:04:18:3C:3A:F1:CC:D2:23:E9:C4:61:1F:15:08:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f32FZbsEGDw68czSI-nEYR8VCAY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:0d:28:cb:ec:c9:03:a0:4a:90:20:91:a2:16:6c:5a:94:7f: e6:aa:60:91:b3:21:05:5b:dd:50:60:6f:dc:3f:8a:00:61:dc: 53:0c:e8:b5:17:23:3a:f3:07:e1:1c:54:e0:1c:0c:16:f0:3a: 3a:42:c8:d0:d2:0e:52:2d:94:41:45:4c:ba:4b:49:48:3f:47: ad:11:a1:66:53:2f:3e:6c:0d:e6:0b:0c:00:0e:67:ef:3b:c5: d2:95:7f:8b:d5:b0:e9:18:35:54:7e:bc:cb:03:9a:53:8e:7f: 8e:a4:14:1b:82:f4:38:07:d3:b6:5e:9c:bc:24:30:16:a9:23: 22:48:91:0e:a6:f1:8e:33:cd:81:e0:dc:d0:71:e1:df:08:44: 0b:c1:16:9f:85:e1:b8:c1:06:e6:6b:89:36:38:0f:b3:6b:bb: 68:48:bd:ed:6a:cf:9a:13:03:3d:8e:34:ed:14:ce:5d:9d:4f: d5:34:3c:c1:c2:63:05:bb:1b:55:47:a4:af:f0:2d:05:f6:7c: d4:36:c4:c0:db:73:15:13:02:a5:35:7c:d8:c2:c9:f3:55:61: c7:e9:2f:90:88:52:f3:ad:15:df:46:56:33:ea:6a:db:52:c9: 78:bc:e8:2f:f7:64:06:b0:0e:db:bc:af:9f:b4:c1:cd:54:d3: ac:e6:26:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQwMDQxMTAvBgNVBAUTKDdGN0Q4NTY1QkIwNDE4M0MzQUYxQ0NEMjIzRTlDNDYx MUYxNTA4MDYwHhcNMjUwNDI3MDMxMjM1WhcNMjUwNTA0MDMxMjM1WjAYMRYwFAYD VQQDEw02ODBkYTBhNC03MjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz1xsGk88S0SwhpkfK/bLsL7TtK84yvx5F76JdyNyYJXrFe/0HdesHcT276wV zjd4Ep9XNKjmFXUicBGyPPLQYDfZo2P7UA511eUIgzVWDrfkaHLoFjBGNAzZWyZ/ eTwo+EEN5VlwoMX3ZL8VJD5EX+0u9G30hXk1A3wNLsv/DgzaIMBbaKXwLvfRi9Zi UeCKUq/zQzn09j32XLAxg/CK7WdKB8C2XGdK+JHhsW944O/Oce91IF9VRQWAqeXd B+F69uj7oNG4MTDdUKnG95nNnQZqMEes/EXK2p1bErDyxooygV1cZS6KOCgnmFzL AhlkquzhWnYdQ8W8WmOwkSbf0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI79sauT JA9y5EqG6bQ2wwXap+KhMB8GA1UdIwQYMBaAFH99hWW7BBg8OvHM0iPpxGEfFQgG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDAwNC8wNDk1NDZDRTMw MkMxMUVFQkEzRUEwMTNDNEY5QUUwMi9mMzJGWmJzRUdEdzY4Y3pTSS1uRVlSOFZD QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YzMkZaYnNFR0R3NjhjelNJLW5FWVI4VkNBWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDAwNC8wNDk1NDZDRTMwMkMxMUVFQkEzRUEwMTNDNEY5QUUwMi9mMzJGWmJzRUdE dzY4Y3pTSS1uRVlSOFZDQVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGDSjL7MkDoEqQIJGiFmxalH/mqmCRsyEFW91QYG/cP4oAYdxTDOi1 FyM68wfhHFTgHAwW8Do6QsjQ0g5SLZRBRUy6S0lIP0etEaFmUy8+bA3mCwwADmfv O8XSlX+L1bDpGDVUfrzLA5pTjn+OpBQbgvQ4B9O2Xpy8JDAWqSMiSJEOpvGOM82B 4NzQceHfCEQLwRafheG4wQbma4k2OA+za7toSL3tas+aEwM9jjTtFM5dnU/VNDzB wmMFuxtVR6Sv8C0F9nzUNsTA23MVEwKlNXzYwsnzVWHH6S+QiFLzrRXfRlYz6mrb Usl4vOgv92QGsA7bvK+ftMHNVNOs5iaA -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:00 2025 by rpki-client on console.sobornost.net