$ rpki-client -vvf rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.mft File: os0QpH7XI-HEi19Q1oDPT2f8sdM.mft (raw, json) Hash identifier: +2gNd9BPLfOZrnz3HGkxHJSYffwBtfCAOekheoe9Xko= Subject key identifier: 09:F6:41:49:13:B7:2B:3B:48:7F:6D:40:2E:31:CD:AA:5F:2B:C4:0D Authority key identifier: A2:CD:10:A4:7E:D7:23:E1:C4:8B:5F:50:D6:80:CF:4F:67:FC:B1:D3 Certificate issuer: /CN=A9194C0D/serialNumber=A2CD10A47ED723E1C48B5F50D680CF4F67FCB1D3 Certificate serial: 0136 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/os0QpH7XI-HEi19Q1oDPT2f8sdM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.mft Manifest number: 0132 Signing time: Sun 27 Apr 2025 03:29:26 +0000 Manifest this update: Sun 27 Apr 2025 03:29:26 +0000 Manifest next update: Sun 04 May 2025 03:29:26 +0000 Files and hashes: 1: os0QpH7XI-HEi19Q1oDPT2f8sdM.crl (hash: YK8ml7kHkNFYTH++wAYo1PTfUtonus3cYwl7DkGXdds=) 2: 9D5E6AF8600F11EE98AFFB11C4F9AE02.roa (hash: S579X7Eg58aEG3SPKUs0UURwjN76vzCVTAQS2DSPcNI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.crl rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/os0QpH7XI-HEi19Q1oDPT2f8sdM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 310 (0x136) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194C0D, serialNumber=A2CD10A47ED723E1C48B5F50D680CF4F67FCB1D3 Validity Not Before: Apr 27 03:29:26 2025 GMT Not After : May 4 03:29:26 2025 GMT Subject: CN=680da496-1915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2d:ab:8b:6e:61:4b:03:1f:b3:c6:6e:59:cc: 14:4c:e8:43:5c:27:c6:11:8c:fb:fd:2c:82:98:04: ae:5c:3e:1c:70:40:f6:0a:4d:f5:1c:a8:ad:76:3e: b4:66:4a:3b:e5:33:e4:bd:5e:ab:23:aa:b7:4a:e5: 38:3e:35:95:8b:52:fc:b8:54:8c:86:6d:15:7a:00: b5:9f:b8:25:5a:91:06:d9:ef:90:06:a3:50:c5:46: f7:bc:0c:27:71:4b:b8:71:e8:f1:7c:09:6e:0d:96: 23:f7:7d:21:79:d6:d1:2d:db:f8:2a:e3:9c:43:30: 90:38:48:bc:33:c6:42:04:90:a8:51:56:6a:14:f5: 81:e7:ea:4b:b1:06:8f:e9:24:e3:dd:c2:a2:27:a3: 38:31:d3:f9:24:8a:67:45:fe:7f:f8:30:0c:43:81: f6:0c:0f:7c:df:0b:2e:c7:ab:53:48:5f:26:33:38: 94:a5:5d:07:56:de:b7:44:aa:47:07:bf:eb:cf:d4: 45:bd:f3:78:ba:ea:4f:d9:77:77:f3:25:4b:34:d2: 0c:f3:90:8e:44:17:f2:42:dc:c1:72:fb:a1:ad:24: 64:92:02:07:d6:ad:71:7f:3f:21:2b:51:e1:bd:5a: 16:b0:85:03:41:2b:ad:3b:0b:f9:c8:b8:c9:ea:0d: 67:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:F6:41:49:13:B7:2B:3B:48:7F:6D:40:2E:31:CD:AA:5F:2B:C4:0D X509v3 Authority Key Identifier: keyid:A2:CD:10:A4:7E:D7:23:E1:C4:8B:5F:50:D6:80:CF:4F:67:FC:B1:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/os0QpH7XI-HEi19Q1oDPT2f8sdM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:71:f1:47:11:b7:45:51:28:46:81:6f:68:06:79:93:3a:2c: a1:36:7f:3b:ef:72:ca:fe:88:49:32:c9:eb:0a:d0:c8:f8:22: 97:e5:f7:ab:cc:07:54:5a:cc:af:82:cf:10:b5:9c:a0:40:a9: b5:a4:fd:76:24:cf:92:f9:50:12:20:d1:bc:b4:98:ec:8a:af: 40:cb:11:df:d9:ce:97:b9:ec:62:13:88:e2:5e:ef:25:3a:57: 50:2f:fe:37:3b:6c:67:ad:f0:53:da:60:25:12:e0:1d:92:77: 58:ce:8f:68:d5:91:f2:95:90:1b:62:f0:1f:9d:47:84:e5:d0: 5a:01:75:f6:92:09:8e:be:30:0d:a5:86:5d:17:49:91:d0:69: df:8e:5d:d0:51:08:a8:a1:db:82:cc:c7:8f:20:66:8d:26:39: bb:97:10:60:0c:80:20:84:6f:fa:14:0a:97:14:af:60:93:21: 63:56:75:c3:7a:3a:69:e6:1d:4c:8b:1b:b8:c1:1e:51:44:b6: 17:e1:79:fd:a6:b8:59:7a:9d:1e:43:29:0b:37:8b:2c:5f:14: 73:86:26:3d:af:3d:ac:61:47:3d:03:0d:d6:c0:41:78:2b:68: c1:33:65:ce:a7:1a:6c:8d:ec:12:17:79:b5:48:57:8b:76:5b: a0:61:cc:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRDMEQxMTAvBgNVBAUTKEEyQ0QxMEE0N0VENzIzRTFDNDhCNUY1MEQ2ODBDRjRG NjdGQ0IxRDMwHhcNMjUwNDI3MDMyOTI2WhcNMjUwNTA0MDMyOTI2WjAYMRYwFAYD VQQDEw02ODBkYTQ5Ni0xOTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAui2ri25hSwMfs8ZuWcwUTOhDXCfGEYz7/SyCmASuXD4ccED2Ck31HKitdj60 Zko75TPkvV6rI6q3SuU4PjWVi1L8uFSMhm0VegC1n7glWpEG2e+QBqNQxUb3vAwn cUu4cejxfAluDZYj930hedbRLdv4KuOcQzCQOEi8M8ZCBJCoUVZqFPWB5+pLsQaP 6STj3cKiJ6M4MdP5JIpnRf5/+DAMQ4H2DA983wsux6tTSF8mMziUpV0HVt63RKpH B7/rz9RFvfN4uupP2Xd38yVLNNIM85CORBfyQtzBcvuhrSRkkgIH1q1xfz8hK1Hh vVoWsIUDQSutOwv5yLjJ6g1nQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAn2QUkT tys7SH9tQC4xzapfK8QNMB8GA1UdIwQYMBaAFKLNEKR+1yPhxItfUNaAz09n/LHT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEMwRC9BNDcwNzg1RTU3 NTQxMUVFOTQwQ0Q5NTRDNEY5QUUwMi9vczBRcEg3WEktSEVpMTlRMW9EUFQyZjhz ZE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL29zMFFwSDdYSS1IRWkxOVExb0RQVDJmOHNkTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEMwRC9BNDcwNzg1RTU3NTQxMUVFOTQwQ0Q5NTRDNEY5QUUwMi9vczBRcEg3WEkt SEVpMTlRMW9EUFQyZjhzZE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdcfFHEbdFUShGgW9oBnmTOiyhNn8773LK/ohJMsnrCtDI+CKX5fer zAdUWsyvgs8QtZygQKm1pP12JM+S+VASING8tJjsiq9AyxHf2c6XuexiE4jiXu8l OldQL/43O2xnrfBT2mAlEuAdkndYzo9o1ZHylZAbYvAfnUeE5dBaAXX2kgmOvjAN pYZdF0mR0Gnfjl3QUQiooduCzMePIGaNJjm7lxBgDIAghG/6FAqXFK9gkyFjVnXD ejpp5h1Mixu4wR5RRLYX4Xn9prhZep0eQykLN4ssXxRzhiY9rz2sYUc9Aw3WwEF4 K2jBM2XOpxpsjewSF3m1SFeLdlugYczQ -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:00 2025 by rpki-client on console.sobornost.net