$ rpki-client -vvf rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft File: hF2I4KIVFF82fZMEvz9xrujrTC0.mft (raw, json) Hash identifier: agl2zfLoN488RuIskU/LVB9pr2mB5hwUYLqg2EuhQvI= Subject key identifier: 5D:4F:82:D6:E7:A9:64:05:B2:BC:8C:8E:98:A7:3B:50:4F:8F:29:E5 Authority key identifier: 84:5D:88:E0:A2:15:14:5F:36:7D:93:04:BF:3F:71:AE:E8:EB:4C:2D Certificate issuer: /CN=A9194AE2/serialNumber=845D88E0A215145F367D9304BF3F71AEE8EB4C2D Certificate serial: A0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hF2I4KIVFF82fZMEvz9xrujrTC0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft Manifest number: 9C Signing time: Sun 27 Apr 2025 05:10:10 +0000 Manifest this update: Sun 27 Apr 2025 05:10:09 +0000 Manifest next update: Sun 04 May 2025 05:10:09 +0000 Files and hashes: 1: hF2I4KIVFF82fZMEvz9xrujrTC0.crl (hash: B6/SPbaUgALvamKY9L3x7JGk7Qpr9x/I//qet36o74Y=) 2: CB6840EE3BAC11EF9C334410C4F9AE02.roa (hash: q+bs+pmU+B7fJo6iymx9EUit+9N40A02etOl0mkXvRg=) 3: 2042987C6C4411EF9B263275C4F9AE02.roa (hash: bKtFSMRmBEl0oKGrwWVZYxuAEvHDipNsFv7Plkp3FeU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.crl rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hF2I4KIVFF82fZMEvz9xrujrTC0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160 (0xa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194AE2, serialNumber=845D88E0A215145F367D9304BF3F71AEE8EB4C2D Validity Not Before: Apr 27 05:10:09 2025 GMT Not After : May 4 05:10:09 2025 GMT Subject: CN=680dbc31-27c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:c1:70:0b:ea:7d:b7:73:4d:78:a8:69:3f:f9: c2:8c:74:b0:61:54:b2:1d:03:0e:f0:bf:05:c0:99: 0f:3c:36:86:24:d5:d5:12:11:5a:0c:84:2b:0f:03: 0e:bb:be:ca:eb:6c:db:e7:d0:49:b9:4f:1b:21:17: a2:4f:7c:ab:eb:f8:f4:81:f4:82:8e:39:4a:1b:e4: ce:e7:f5:5b:da:a4:0b:10:f4:5d:93:55:f0:06:d6: 5e:38:17:a8:0e:ed:94:14:97:90:a2:2c:70:a1:c2: 66:98:f4:f2:c3:18:24:f3:5a:98:61:c5:4e:ec:c3: 9b:a9:54:a6:8b:60:ad:97:5f:45:d3:d4:e1:30:18: dc:9b:71:a5:70:dd:9e:43:4e:4a:87:bb:29:04:e3: 90:83:95:4d:f3:9f:58:fa:52:a8:c9:18:15:35:59: 5e:d6:6a:87:38:90:55:0c:59:46:e5:04:5e:60:84: e6:26:08:48:ad:17:2e:7a:bb:d0:71:51:ff:ae:cb: ea:f2:a3:dc:83:8e:c0:13:21:0b:50:43:6b:53:84: ac:5f:29:26:74:19:a4:97:be:71:d6:61:0e:e6:85: 33:66:1e:76:36:5d:8d:10:fa:37:9b:77:85:3a:e4: 9a:98:fe:c7:96:b2:51:3e:f9:ee:af:db:ec:cd:8e: ea:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:4F:82:D6:E7:A9:64:05:B2:BC:8C:8E:98:A7:3B:50:4F:8F:29:E5 X509v3 Authority Key Identifier: keyid:84:5D:88:E0:A2:15:14:5F:36:7D:93:04:BF:3F:71:AE:E8:EB:4C:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hF2I4KIVFF82fZMEvz9xrujrTC0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:85:5f:70:7f:76:9f:1f:96:d8:91:bf:b6:08:1b:2a:f9:9d: 4a:74:a2:8f:fc:42:3e:a7:4b:dd:1a:ec:cc:7b:a5:6a:8d:cb: 89:dc:af:c8:87:c4:8a:4c:37:df:83:ba:04:4a:3f:ae:a3:9d: 88:24:91:21:8b:37:4d:e0:41:8b:30:89:0e:5f:41:f9:9a:d4: 9a:fd:36:de:eb:60:01:71:83:2a:cd:90:8d:a3:c2:ee:79:33: f4:53:63:ec:1d:f0:f9:0a:4a:0b:fb:17:e1:89:1f:26:b3:6e: 01:b6:29:26:d3:89:67:b4:b0:0b:05:fd:0a:fa:65:51:b5:9d: f2:a8:f9:3f:78:8e:c3:d0:41:23:04:4b:14:c6:82:b8:00:22: da:a4:0b:71:43:a4:0c:db:54:d2:5a:f1:b4:e1:25:69:54:6e: d3:7b:8f:49:4a:cf:79:43:86:19:91:e6:75:18:96:0d:d4:16: 52:cf:fe:21:49:74:4c:ad:f6:71:ff:80:21:b9:0c:a9:98:98: d9:bb:c9:88:a7:21:05:9f:4a:17:77:e6:70:72:17:20:eb:c9: 40:d1:ac:ab:4c:60:3b:0a:b8:4d:d2:d2:cd:ff:2f:89:16:1b: d4:56:f7:35:26:10:79:98:2f:40:13:96:09:48:11:23:ce:f3: bc:53:d6:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRBRTIxMTAvBgNVBAUTKDg0NUQ4OEUwQTIxNTE0NUYzNjdEOTMwNEJGM0Y3MUFF RThFQjRDMkQwHhcNMjUwNDI3MDUxMDA5WhcNMjUwNTA0MDUxMDA5WjAYMRYwFAYD VQQDEw02ODBkYmMzMS0yN2MzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA58FwC+p9t3NNeKhpP/nCjHSwYVSyHQMO8L8FwJkPPDaGJNXVEhFaDIQrDwMO u77K62zb59BJuU8bIReiT3yr6/j0gfSCjjlKG+TO5/Vb2qQLEPRdk1XwBtZeOBeo Du2UFJeQoixwocJmmPTywxgk81qYYcVO7MObqVSmi2Ctl19F09ThMBjcm3GlcN2e Q05Kh7spBOOQg5VN859Y+lKoyRgVNVle1mqHOJBVDFlG5QReYITmJghIrRcuervQ cVH/rsvq8qPcg47AEyELUENrU4SsXykmdBmkl75x1mEO5oUzZh52Nl2NEPo3m3eF OuSamP7HlrJRPvnur9vszY7qLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF1Pgtbn qWQFsryMjpinO1BPjynlMB8GA1UdIwQYMBaAFIRdiOCiFRRfNn2TBL8/ca7o60wt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEFFMi8yNkE2RjQ0QzNC QUMxMUVGOUQ3RUE4NzFDNEY5QUUwMi9oRjJJNEtJVkZGODJmWk1Fdno5eHJ1anJU QzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2hGMkk0S0lWRkY4MmZaTUV2ejl4cnVqclRDMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEFFMi8yNkE2RjQ0QzNCQUMxMUVGOUQ3RUE4NzFDNEY5QUUwMi9oRjJJNEtJVkZG ODJmWk1Fdno5eHJ1anJUQzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbhV9wf3afH5bYkb+2CBsq+Z1KdKKP/EI+p0vdGuzMe6VqjcuJ3K/I h8SKTDffg7oESj+uo52IJJEhizdN4EGLMIkOX0H5mtSa/Tbe62ABcYMqzZCNo8Lu eTP0U2PsHfD5CkoL+xfhiR8ms24Btikm04lntLALBf0K+mVRtZ3yqPk/eI7D0EEj BEsUxoK4ACLapAtxQ6QM21TSWvG04SVpVG7Te49JSs95Q4YZkeZ1GJYN1BZSz/4h SXRMrfZx/4AhuQypmJjZu8mIpyEFn0oXd+Zwchcg68lA0ayrTGA7CrhN0tLN/y+J FhvUVvc1JhB5mC9AE5YJSBEjzvO8U9ZJ -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:51 2025 by rpki-client on console.sobornost.net