$ rpki-client -vvf rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft File: l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft (raw, json) Hash identifier: mndUevWSlJ5ngI3LuzHsfiYKR4KhnUJw3ypUBQbyH4I= Subject key identifier: 62:95:1F:6C:4B:13:54:C6:88:7C:C3:3F:E1:B0:28:71:93:A2:95:0C Authority key identifier: 97:D1:1A:E2:12:CB:21:3D:F9:65:2F:5B:B6:24:8E:40:CE:0C:29:FA Certificate issuer: /CN=A9194AF5/serialNumber=97D11AE212CB213DF9652F5BB6248E40CE0C29FA Certificate serial: FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft Manifest number: F7 Signing time: Sun 27 Apr 2025 04:05:44 +0000 Manifest this update: Sun 27 Apr 2025 04:05:44 +0000 Manifest next update: Sun 04 May 2025 04:05:44 +0000 Files and hashes: 1: l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl (hash: m3xLwxyH+j6ZQT6fz0VLAPkloIMegvybSYewJNX4wkE=) 2: 6534CB6AA60711EFA9497E10C4F9AE02.roa (hash: avXsfjELw9kpDvws2JPtdoH0HM/yAF3dKj0UAvRbtj0=) 3: BC87CB52AB5711EEBC6EBB3FC4F9AE02.roa (hash: EikgtLBFZ+GcMX0vibVaRvnZCJfkspVWoQB1eoPQJJA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 250 (0xfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194AF5, serialNumber=97D11AE212CB213DF9652F5BB6248E40CE0C29FA Validity Not Before: Apr 27 04:05:44 2025 GMT Not After : May 4 04:05:44 2025 GMT Subject: CN=680dad18-46de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:5f:63:5a:fc:41:87:ec:bb:d1:36:45:71:b1: 07:cc:17:f7:13:4d:3d:a7:89:84:fc:5d:c5:34:14: 72:61:b8:ce:22:03:18:e4:59:63:af:d4:d8:76:11: dc:8b:d0:5e:2e:c0:a5:56:ed:7d:67:e0:cf:9a:67: ac:2e:03:2c:3a:69:d8:e9:e7:d8:c3:e7:75:e8:57: 8d:8f:3f:24:47:13:17:e8:92:1a:c7:e6:26:5f:83: d3:5c:21:22:1d:28:ab:f7:da:65:25:77:15:31:0c: 64:89:5f:8d:cd:6d:b9:d6:2a:98:97:47:e9:c1:20: 0b:bb:b9:bb:94:ef:0e:32:24:be:23:dd:e6:12:53: 5c:53:35:3a:26:54:1f:dc:3e:99:d8:ea:93:12:a1: ca:84:1c:35:ab:83:f4:d1:85:8a:51:93:a1:08:89: 2f:70:5b:91:05:ff:11:5b:f6:35:22:e2:2c:f7:7b: 45:c0:db:da:06:52:a8:92:c3:3c:dc:b5:e7:a1:dd: 1f:17:cf:5c:2d:5b:e9:2b:8f:fc:a7:c8:72:02:9e: 3a:14:08:6b:fd:f2:36:f3:5e:8a:13:b1:76:a5:b7: 82:40:42:b3:36:e1:63:7d:db:b9:0e:a8:68:d3:37: d8:0a:9d:4a:cb:b6:0a:9f:4d:36:f0:ef:6c:a1:f4: bd:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:95:1F:6C:4B:13:54:C6:88:7C:C3:3F:E1:B0:28:71:93:A2:95:0C X509v3 Authority Key Identifier: keyid:97:D1:1A:E2:12:CB:21:3D:F9:65:2F:5B:B6:24:8E:40:CE:0C:29:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:ea:45:93:3b:39:59:b7:51:ee:fa:94:a0:85:e8:a4:52:57: 1d:7e:98:67:58:73:04:3f:7f:c3:1f:c6:ac:4e:8c:0e:61:17: e2:62:88:cd:d6:5c:76:d2:9b:46:53:29:85:81:36:b9:3b:47: e4:91:93:de:13:12:53:04:34:0c:7f:ca:af:9a:20:0d:6e:31: 08:71:af:15:65:5c:03:01:3f:47:ea:fd:df:c9:71:93:0a:36: 44:23:dc:ec:33:25:17:a6:f5:f8:2b:78:b6:db:77:2d:cb:3c: 1f:d7:bc:c9:2e:01:b9:6a:92:8b:4d:ae:51:42:76:4f:0d:5f: c9:af:53:ed:d9:cf:0b:ed:5d:b4:ee:f4:7e:cc:b5:a6:9a:a5: 92:42:b7:70:3a:96:a9:77:80:06:a9:36:eb:6c:a4:6d:eb:33: 25:58:11:3c:e6:d5:b8:0d:77:ec:0d:64:ac:fd:2a:c2:08:83: dc:56:2d:9d:91:e1:f2:bb:83:12:22:84:42:05:5d:df:a1:6c: b0:63:9e:10:00:09:66:27:94:d7:26:eb:82:16:53:c3:da:15: ed:6e:79:d2:1b:6b:e1:23:a1:27:85:2f:3f:ab:f1:8a:92:4c: c3:e2:62:a0:b0:0a:c3:be:ae:81:8e:ca:7d:ad:17:5d:9d:e8: 15:8f:7c:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRBRjUxMTAvBgNVBAUTKDk3RDExQUUyMTJDQjIxM0RGOTY1MkY1QkI2MjQ4RTQw Q0UwQzI5RkEwHhcNMjUwNDI3MDQwNTQ0WhcNMjUwNTA0MDQwNTQ0WjAYMRYwFAYD VQQDEw02ODBkYWQxOC00NmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA719jWvxBh+y70TZFcbEHzBf3E009p4mE/F3FNBRyYbjOIgMY5Fljr9TYdhHc i9BeLsClVu19Z+DPmmesLgMsOmnY6efYw+d16FeNjz8kRxMX6JIax+YmX4PTXCEi HSir99plJXcVMQxkiV+NzW251iqYl0fpwSALu7m7lO8OMiS+I93mElNcUzU6JlQf 3D6Z2OqTEqHKhBw1q4P00YWKUZOhCIkvcFuRBf8RW/Y1IuIs93tFwNvaBlKoksM8 3LXnod0fF89cLVvpK4/8p8hyAp46FAhr/fI2816KE7F2pbeCQEKzNuFjfdu5Dqho 0zfYCp1Ky7YKn0028O9sofS92wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGKVH2xL E1TGiHzDP+GwKHGTopUMMB8GA1UdIwQYMBaAFJfRGuISyyE9+WUvW7YkjkDODCn6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEFGNS8xQjFDMjQ2NkFC NTcxMUVFODE4QTI4M0VDNEY5QUUwMi9sOUVhNGhMTElUMzVaUzlidGlTT1FNNE1L Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w5RWE0aExMSVQzNVpTOWJ0aVNPUU00TUtmby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEFGNS8xQjFDMjQ2NkFCNTcxMUVFODE4QTI4M0VDNEY5QUUwMi9sOUVhNGhMTElU MzVaUzlidGlTT1FNNE1LZm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC56kWTOzlZt1Hu+pSgheikUlcdfphnWHMEP3/DH8asTowOYRfiYojN 1lx20ptGUymFgTa5O0fkkZPeExJTBDQMf8qvmiANbjEIca8VZVwDAT9H6v3fyXGT CjZEI9zsMyUXpvX4K3i223ctyzwf17zJLgG5apKLTa5RQnZPDV/Jr1Pt2c8L7V20 7vR+zLWmmqWSQrdwOpapd4AGqTbrbKRt6zMlWBE85tW4DXfsDWSs/SrCCIPcVi2d keHyu4MSIoRCBV3foWywY54QAAlmJ5TXJuuCFlPD2hXtbnnSG2vhI6EnhS8/q/GK kkzD4mKgsArDvq6Bjsp9rRddnegVj3z1 -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:51 2025 by rpki-client on console.sobornost.net