$ rpki-client -vvf rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft File: -XyNrMJ-n8zTOuuFNQsmpIFfELc.mft (raw, json) Hash identifier: gIgnANRPBbrylk1H+nC497BkcT1XZQr2BZMZAY/QQno= Subject key identifier: 00:68:C2:D3:C4:EB:67:CF:FD:90:B1:8F:48:0B:BE:2A:3C:93:C9:93 Authority key identifier: F9:7C:8D:AC:C2:7E:9F:CC:D3:3A:EB:85:35:0B:26:A4:81:5F:10:B7 Certificate issuer: /CN=A9196BD8/serialNumber=F97C8DACC27E9FCCD33AEB85350B26A4815F10B7 Certificate serial: 2346 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XyNrMJ-n8zTOuuFNQsmpIFfELc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft Manifest number: 232C Signing time: Mon 28 Apr 2025 15:57:21 +0000 Manifest this update: Mon 28 Apr 2025 15:57:20 +0000 Manifest next update: Mon 05 May 2025 15:57:20 +0000 Files and hashes: 1: -XyNrMJ-n8zTOuuFNQsmpIFfELc.crl (hash: YUTG1xoPajqgscjF6+02HV6CRfS5SkfY4ot+eN9OZDI=) 2: A768E6B6FB0811ED860A5143C4F9AE02.roa (hash: SVFtlSzgsbl94LKJE/MqOpvXoyEaSOVfShQjoppkD5M=) 3: C73BE8A654F311E7AC64ED3AC4F9AE02.roa (hash: SmF6p3k95KsM+SMEI2F1sl2qA3ioWO3N9renwiZgrBM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.crl rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XyNrMJ-n8zTOuuFNQsmpIFfELc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 15:55:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9030 (0x2346) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196BD8, serialNumber=F97C8DACC27E9FCCD33AEB85350B26A4815F10B7 Validity Not Before: Apr 28 15:57:20 2025 GMT Not After : May 5 15:57:20 2025 GMT Subject: CN=680fa561-7952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:6f:63:d5:ca:5d:e0:61:a9:55:8a:1d:41:90: a3:82:5a:50:ff:8b:0a:d8:44:46:e6:01:d1:33:dd: 86:08:dc:7b:58:48:7c:8e:68:5e:97:9c:6f:91:88: 27:70:70:c9:16:8d:fe:17:6a:72:d0:b6:47:6f:bf: b7:ca:8b:0f:df:17:74:4f:f2:6f:a0:36:41:24:ba: 9c:3a:32:cb:6b:6d:e0:30:62:ae:f1:56:01:c8:5d: 27:18:89:df:13:bc:ea:5c:cb:d3:f5:25:9c:34:89: 6e:56:80:59:05:f5:39:bd:1f:6d:62:e1:05:67:6c: d7:27:83:86:6d:7f:d5:9d:82:86:51:0c:39:33:36: d2:8c:b0:f9:1a:d8:2a:1c:8a:42:48:de:f6:b2:9a: 46:81:e8:29:be:07:38:6c:93:05:05:36:23:06:ac: df:1f:63:4c:8f:b3:f1:23:f1:f6:a1:ad:ce:16:81: 45:de:10:42:74:5e:25:ed:06:09:ba:e3:2b:bd:53: 9e:4a:2a:2a:66:0d:5b:f9:4d:74:c9:73:ff:e2:23: 72:59:74:eb:2f:77:4a:df:d1:ea:74:a1:b0:d0:b7: b7:c3:9b:a0:46:55:30:fe:af:a7:80:00:4b:8d:5d: d0:ea:14:d4:6e:f0:78:6b:d0:83:d3:7c:5d:0b:ac: 8e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:68:C2:D3:C4:EB:67:CF:FD:90:B1:8F:48:0B:BE:2A:3C:93:C9:93 X509v3 Authority Key Identifier: keyid:F9:7C:8D:AC:C2:7E:9F:CC:D3:3A:EB:85:35:0B:26:A4:81:5F:10:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XyNrMJ-n8zTOuuFNQsmpIFfELc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:dc:35:11:9d:60:ae:69:06:11:73:8f:1a:76:69:1e:28:5e: 28:72:db:e3:d3:fd:ef:7b:0b:d0:c0:19:6b:36:f1:d4:86:83: 2e:80:92:a1:59:9f:6d:b4:8f:54:03:d1:0c:6d:0c:5b:b3:0a: ba:c5:31:e7:f2:e1:c9:ca:9f:d0:3b:7f:9c:32:82:30:2a:be: 4a:8e:53:7b:9f:5d:37:a6:5e:e9:78:22:a2:b7:9b:c9:6c:5e: ba:0b:cb:30:11:ec:31:db:be:a7:98:ba:0d:bb:0d:96:d3:b4: 5e:5b:00:b9:f5:a8:75:b8:19:69:dc:a8:38:a7:f4:2f:80:54: 4b:38:4a:66:80:31:03:91:1a:38:41:7e:e1:7b:58:87:a2:0d: 77:af:3e:dd:d3:f5:32:58:fd:5b:52:9e:31:af:21:c4:ad:22: e3:1e:cf:5c:25:e7:18:19:aa:55:ce:57:b1:14:55:86:d0:6e: 39:8d:71:90:f9:95:b3:a1:fd:a8:f7:db:6b:f0:41:c7:4c:31: 88:55:d5:66:1c:f8:82:1e:a4:a0:51:60:47:9a:c4:3b:80:04: 53:53:49:ce:d6:71:26:f2:4b:48:1c:1b:4d:1b:ef:4f:8c:6f: a9:4d:b4:12:8d:e9:46:63:0a:52:eb:bd:8a:a9:7a:48:d2:4a: ff:3b:11:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI0YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZCRDgxMTAvBgNVBAUTKEY5N0M4REFDQzI3RTlGQ0NEMzNBRUI4NTM1MEIyNkE0 ODE1RjEwQjcwHhcNMjUwNDI4MTU1NzIwWhcNMjUwNTA1MTU1NzIwWjAYMRYwFAYD VQQDEw02ODBmYTU2MS03OTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA129j1cpd4GGpVYodQZCjglpQ/4sK2ERG5gHRM92GCNx7WEh8jmhel5xvkYgn cHDJFo3+F2py0LZHb7+3yosP3xd0T/JvoDZBJLqcOjLLa23gMGKu8VYByF0nGInf E7zqXMvT9SWcNIluVoBZBfU5vR9tYuEFZ2zXJ4OGbX/VnYKGUQw5MzbSjLD5Gtgq HIpCSN72sppGgegpvgc4bJMFBTYjBqzfH2NMj7PxI/H2oa3OFoFF3hBCdF4l7QYJ uuMrvVOeSioqZg1b+U10yXP/4iNyWXTrL3dK39HqdKGw0Le3w5ugRlUw/q+ngABL jV3Q6hTUbvB4a9CD03xdC6yOkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFABowtPE 62fP/ZCxj0gLvio8k8mTMB8GA1UdIwQYMBaAFPl8jazCfp/M0zrrhTULJqSBXxC3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkJEOC9DNTgzRDIzMjg3 QTIxMUU1OUU1MUYyNTFDNEY5QUUwMi8tWHlOck1KLW44elRPdXVGTlFzbXBJRmZF TGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YeU5yTUotbjh6VE91dUZOUXNtcElGZkVMYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkJEOC9DNTgzRDIzMjg3QTIxMUU1OUU1MUYyNTFDNEY5QUUwMi8tWHlOck1KLW44 elRPdXVGTlFzbXBJRmZFTGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBE3DURnWCuaQYRc48admkeKF4octvj0/3vewvQwBlrNvHUhoMugJKh WZ9ttI9UA9EMbQxbswq6xTHn8uHJyp/QO3+cMoIwKr5KjlN7n103pl7peCKit5vJ bF66C8swEewx276nmLoNuw2W07ReWwC59ah1uBlp3Kg4p/QvgFRLOEpmgDEDkRo4 QX7he1iHog13rz7d0/UyWP1bUp4xryHErSLjHs9cJecYGapVzlexFFWG0G45jXGQ +ZWzof2o99tr8EHHTDGIVdVmHPiCHqSgUWBHmsQ7gARTU0nO1nEm8ktIHBtNG+9P jG+pTbQSjelGYwpS672KqXpI0kr/OxFm -----END CERTIFICATE-----Generated at Mon Apr 28 17:45:59 2025 by rpki-client on console.sobornost.net