$ rpki-client -vvf rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.mft File: 9y59Xhu0VCq3_3dzZYg8FgEDTek.mft (raw, json) Hash identifier: Vx0Owl3N26H0zHYUOLaRb12KJlAl4Khg4XwyDEOxvDM= Subject key identifier: 40:0E:BB:62:F7:43:E2:D6:C1:2B:6F:FD:E5:A6:20:A5:E1:FA:E0:F2 Authority key identifier: F7:2E:7D:5E:1B:B4:54:2A:B7:FF:77:73:65:88:3C:16:01:03:4D:E9 Certificate issuer: /CN=A919631C/serialNumber=F72E7D5E1BB4542AB7FF777365883C1601034DE9 Certificate serial: 0EA9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y59Xhu0VCq3_3dzZYg8FgEDTek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.mft Manifest number: 0E9C Signing time: Mon 28 Apr 2025 17:55:08 +0000 Manifest this update: Mon 28 Apr 2025 17:55:07 +0000 Manifest next update: Mon 05 May 2025 17:55:07 +0000 Files and hashes: 1: 9y59Xhu0VCq3_3dzZYg8FgEDTek.crl (hash: 9gbfQ+ifxucvDJbw/JrkKe4TgtLVUFdGcbFCK33QYkg=) 2: DCB2531AC75911EF979D593BC4F9AE02.roa (hash: az5u8maauMT/Sx2+Phgo1Z/ovh8gwvsYIRukSLKNLEQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.crl rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y59Xhu0VCq3_3dzZYg8FgEDTek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 17:55:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3753 (0xea9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919631C, serialNumber=F72E7D5E1BB4542AB7FF777365883C1601034DE9 Validity Not Before: Apr 28 17:55:07 2025 GMT Not After : May 5 17:55:07 2025 GMT Subject: CN=680fc0fc-2d99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a8:58:3c:89:cb:e4:74:d5:0a:de:de:23:cb: 5e:77:33:48:3a:44:4e:eb:02:ee:b0:46:05:61:f5: c8:5e:d6:59:d8:ce:80:4d:14:47:e3:8d:ac:20:ee: c5:ce:80:ae:28:ba:63:0a:39:dc:50:78:ed:f2:ad: d0:65:67:a8:1d:69:8a:7a:5e:4f:84:dc:f6:c1:ae: 9e:70:eb:1f:9d:a9:e3:e3:cf:37:77:24:67:c0:71: 2c:f0:52:d8:ee:b3:12:3f:aa:2a:48:8c:d9:14:f4: a6:61:9c:28:e4:63:be:a4:96:0d:0e:c1:20:be:31: 77:90:42:b3:69:80:2f:19:8f:57:f5:24:d2:02:f1: d3:75:65:b4:c8:5e:d3:31:e2:c4:26:87:23:3a:7f: bb:69:67:fa:0a:3c:a4:aa:2b:c2:94:41:96:bc:0a: f5:22:38:2a:e3:44:fa:0e:f5:e7:09:03:58:a2:cc: bc:03:77:8e:8b:c0:95:76:3e:8a:67:55:f3:50:6c: 42:55:d4:a7:61:bd:7b:3c:1c:5e:fc:87:4c:db:18: 2a:57:2f:13:80:f4:b4:ef:9b:c1:42:aa:35:47:c0: 36:bb:85:0f:43:e9:6a:40:6b:cb:44:45:27:80:7b: 8d:c4:7d:01:8f:ac:39:48:30:b4:82:bc:e7:58:8d: cb:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:0E:BB:62:F7:43:E2:D6:C1:2B:6F:FD:E5:A6:20:A5:E1:FA:E0:F2 X509v3 Authority Key Identifier: keyid:F7:2E:7D:5E:1B:B4:54:2A:B7:FF:77:73:65:88:3C:16:01:03:4D:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y59Xhu0VCq3_3dzZYg8FgEDTek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:7c:61:7e:d0:fb:14:94:a7:c2:d9:b9:ee:ef:42:72:97:e0: aa:27:e8:af:bf:10:70:7a:8a:bd:38:1d:80:33:cb:89:c4:92: 32:3c:01:ef:15:89:8c:17:bd:29:b1:03:74:8f:2e:ec:5d:a9: f1:cc:e4:7f:8b:f6:12:c5:4c:8e:38:87:18:e9:a1:d4:be:53: 05:47:4c:8c:29:bc:1d:4d:c6:91:1a:bf:f8:cb:e9:bd:2d:1f: fe:63:ef:aa:1b:91:d1:ae:3e:6f:6f:bf:5a:63:bd:bd:24:d8: bf:8b:c1:d3:79:22:d0:b5:8e:1e:5e:38:a3:7a:b4:11:87:fa: 3b:de:ed:41:75:6d:20:f9:16:5f:72:8f:ba:3f:a9:14:b7:78: ff:d2:17:f9:fe:51:c4:a4:81:1d:bb:a4:26:3c:74:3d:c6:d2: 6e:0e:7a:45:13:17:ac:3d:10:43:55:43:0d:c7:cf:7d:5a:13: e8:39:8d:c7:e3:7f:8a:bc:45:8e:08:d8:df:7d:6e:ab:ac:92: a5:22:05:0d:69:5a:cc:50:3b:d7:a9:93:83:6f:32:61:14:89: 35:53:e7:a7:e3:78:c0:97:64:11:41:4c:ba:fb:12:f7:02:52: b3:df:9e:6f:53:cb:54:8e:ad:8a:09:f4:b0:ca:c7:77:e7:b3: 71:ae:e6:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTYzMUMxMTAvBgNVBAUTKEY3MkU3RDVFMUJCNDU0MkFCN0ZGNzc3MzY1ODgzQzE2 MDEwMzRERTkwHhcNMjUwNDI4MTc1NTA3WhcNMjUwNTA1MTc1NTA3WjAYMRYwFAYD VQQDEw02ODBmYzBmYy0yZDk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvahYPInL5HTVCt7eI8tedzNIOkRO6wLusEYFYfXIXtZZ2M6ATRRH442sIO7F zoCuKLpjCjncUHjt8q3QZWeoHWmKel5PhNz2wa6ecOsfnanj4883dyRnwHEs8FLY 7rMSP6oqSIzZFPSmYZwo5GO+pJYNDsEgvjF3kEKzaYAvGY9X9STSAvHTdWW0yF7T MeLEJocjOn+7aWf6CjykqivClEGWvAr1Ijgq40T6DvXnCQNYosy8A3eOi8CVdj6K Z1XzUGxCVdSnYb17PBxe/IdM2xgqVy8TgPS075vBQqo1R8A2u4UPQ+lqQGvLREUn gHuNxH0Bj6w5SDC0grznWI3LBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEAOu2L3 Q+LWwStv/eWmIKXh+uDyMB8GA1UdIwQYMBaAFPcufV4btFQqt/93c2WIPBYBA03p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjMxQy9BOUMzMTcwNDhD MjMxMUU5OUY4NDVENzJDNEY5QUUwMi85eTU5WGh1MFZDcTNfM2R6WllnOEZnRURU ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzl5NTlYaHUwVkNxM18zZHpaWWc4RmdFRFRlay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NjMxQy9BOUMzMTcwNDhDMjMxMUU5OUY4NDVENzJDNEY5QUUwMi85eTU5WGh1MFZD cTNfM2R6WllnOEZnRURUZWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMfGF+0PsUlKfC2bnu70Jyl+CqJ+ivvxBweoq9OB2AM8uJxJIyPAHv FYmMF70psQN0jy7sXanxzOR/i/YSxUyOOIcY6aHUvlMFR0yMKbwdTcaRGr/4y+m9 LR/+Y++qG5HRrj5vb79aY729JNi/i8HTeSLQtY4eXjijerQRh/o73u1BdW0g+RZf co+6P6kUt3j/0hf5/lHEpIEdu6QmPHQ9xtJuDnpFExesPRBDVUMNx899WhPoOY3H 43+KvEWOCNjffW6rrJKlIgUNaVrMUDvXqZODbzJhFIk1U+en43jAl2QRQUy6+xL3 AlKz355vU8tUjq2KCfSwysd357Nxruab -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:49 2025 by rpki-client on console.sobornost.net