$ rpki-client -vvf rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft File: 2DkrDZFbmsH00jv5hBlxQG-2GsY.mft (raw, json) Hash identifier: gvxJtaq/qaOMjVz/TXUX2FWMNcoY0jmwrDQqyyRhoGA= Subject key identifier: A4:76:05:00:F6:BF:16:C2:D6:7A:4F:BF:7B:59:85:54:3B:64:FD:9C Authority key identifier: D8:39:2B:0D:91:5B:9A:C1:F4:D2:3B:F9:84:19:71:40:6F:B6:1A:C6 Certificate issuer: /CN=A9196DE5/serialNumber=D8392B0D915B9AC1F4D23BF9841971406FB61AC6 Certificate serial: 096D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft Manifest number: 095F Signing time: Mon 28 Apr 2025 20:38:52 +0000 Manifest this update: Mon 28 Apr 2025 20:38:51 +0000 Manifest next update: Mon 05 May 2025 20:38:51 +0000 Files and hashes: 1: 2DkrDZFbmsH00jv5hBlxQG-2GsY.crl (hash: 7Y7XyOIJsTeGoYp1oGTQ71jcD46CQfBkzbbhjToMpYM=) 2: 9738F1BAD46611ECA1A27035C4F9AE02.roa (hash: WTrtE83EIPIFAQBP1Rd+6bCGyCXh3/D0h/wvCesMWrU=) 3: 6CEF4F06697C11EEBAF2E544C4F9AE02.roa (hash: Zf62lP/wVBucTVDv//7CsthHyoB46FPVyR5yKdn9a8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.crl rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:38:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2413 (0x96d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196DE5, serialNumber=D8392B0D915B9AC1F4D23BF9841971406FB61AC6 Validity Not Before: Apr 28 20:38:51 2025 GMT Not After : May 5 20:38:51 2025 GMT Subject: CN=680fe75b-b12e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c1:5b:fe:a1:08:42:22:9d:b2:5c:90:2b:29: 54:b3:4b:5f:63:9b:ad:2a:b8:6d:fb:8c:3d:4b:2e: 9d:d3:75:66:b7:39:6c:45:47:7b:1d:c4:e1:a7:e0: b4:2f:09:4c:01:19:fc:45:10:dc:e7:64:cd:a4:f9: 9b:cc:ec:41:c6:1d:5b:67:eb:06:44:3b:ea:a1:4c: 91:f1:7f:39:e5:1c:76:d4:26:10:0a:7b:4b:59:90: b0:e4:c1:cd:85:5e:de:47:44:88:f3:af:7f:a1:ac: c6:da:ad:38:f4:43:4e:50:03:5c:fe:1b:db:42:11: 87:c8:ab:05:75:36:32:dd:f1:02:12:36:b9:2d:fd: af:e4:8f:03:5d:28:b4:9d:4c:f4:76:18:8d:32:3e: e9:3d:ab:d1:03:8a:af:3c:26:f8:eb:95:a9:55:99: c6:d8:78:d6:38:ec:fe:12:83:1f:d0:f6:59:35:ba: d5:ba:54:76:8c:5e:7c:1e:3e:23:27:88:f0:ba:b1: fc:6f:9f:c5:4a:b5:d1:3c:52:37:5b:9b:28:89:14: 54:49:31:c6:3d:8a:20:db:98:5d:e2:38:08:0c:e7: 3c:00:00:bd:8a:1e:29:a7:22:bb:3e:3a:4a:e5:86: 25:17:ba:2e:5d:00:a6:73:95:07:af:dc:54:12:dc: 8d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:76:05:00:F6:BF:16:C2:D6:7A:4F:BF:7B:59:85:54:3B:64:FD:9C X509v3 Authority Key Identifier: keyid:D8:39:2B:0D:91:5B:9A:C1:F4:D2:3B:F9:84:19:71:40:6F:B6:1A:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:47:9a:dd:92:65:b2:57:b7:da:83:3a:c7:95:15:35:3d:e1: 3f:5c:b4:da:de:0d:3d:47:94:7a:a9:d3:7b:49:72:37:7d:fb: eb:f4:11:6b:dd:e5:0d:55:cf:94:4e:58:47:3a:c5:98:52:f4: c8:51:52:0e:40:2e:25:d1:61:08:77:40:05:ea:f0:89:84:ec: 8d:89:95:05:8d:dc:3c:57:63:bb:fb:77:f8:b6:15:fd:56:d4: f9:e9:70:de:74:ad:6e:86:07:5c:cd:f5:ec:ab:89:e8:65:c1: e3:9c:89:67:58:a4:21:0a:41:bf:a6:0b:6d:d4:a1:48:5f:c1: 46:a4:40:bc:dc:d3:10:69:6c:35:72:23:38:a2:a2:26:2c:02: a2:50:73:8c:f1:0c:23:92:9c:a0:7e:ff:eb:5d:40:1e:7f:85: 96:b5:1c:7a:38:97:7c:fe:cb:f4:1a:0d:b5:81:4d:52:28:8e: 4e:6a:cb:e8:6d:b3:d8:2c:38:e5:1f:fc:bf:a7:0c:25:69:81: f0:e8:16:5f:e6:9c:e6:42:59:19:f2:64:6b:51:06:74:2d:1e: 4d:80:52:f9:dd:e3:3c:fc:9c:b3:cc:81:81:d9:bc:9f:7f:b3: af:f4:d4:83:62:9c:be:2a:63:60:c6:6f:a3:52:97:f1:18:73: 7b:02:f4:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZERTUxMTAvBgNVBAUTKEQ4MzkyQjBEOTE1QjlBQzFGNEQyM0JGOTg0MTk3MTQw NkZCNjFBQzYwHhcNMjUwNDI4MjAzODUxWhcNMjUwNTA1MjAzODUxWjAYMRYwFAYD VQQDEw02ODBmZTc1Yi1iMTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3sFb/qEIQiKdslyQKylUs0tfY5utKrht+4w9Sy6d03VmtzlsRUd7HcThp+C0 LwlMARn8RRDc52TNpPmbzOxBxh1bZ+sGRDvqoUyR8X855Rx21CYQCntLWZCw5MHN hV7eR0SI869/oazG2q049ENOUANc/hvbQhGHyKsFdTYy3fECEja5Lf2v5I8DXSi0 nUz0dhiNMj7pPavRA4qvPCb465WpVZnG2HjWOOz+EoMf0PZZNbrVulR2jF58Hj4j J4jwurH8b5/FSrXRPFI3W5soiRRUSTHGPYog25hd4jgIDOc8AAC9ih4ppyK7PjpK 5YYlF7ouXQCmc5UHr9xUEtyNKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKR2BQD2 vxbC1npPv3tZhVQ7ZP2cMB8GA1UdIwQYMBaAFNg5Kw2RW5rB9NI7+YQZcUBvthrG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkRFNS83MkM1QTlDQzk0 MzAxMUVBQkQ3NUY5ODNDNEY5QUUwMi8yRGtyRFpGYm1zSDAwanY1aEJseFFHLTJH c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJEa3JEWkZibXNIMDBqdjVoQmx4UUctMkdzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkRFNS83MkM1QTlDQzk0MzAxMUVBQkQ3NUY5ODNDNEY5QUUwMi8yRGtyRFpGYm1z SDAwanY1aEJseFFHLTJHc1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnR5rdkmWyV7fagzrHlRU1PeE/XLTa3g09R5R6qdN7SXI3ffvr9BFr 3eUNVc+UTlhHOsWYUvTIUVIOQC4l0WEId0AF6vCJhOyNiZUFjdw8V2O7+3f4thX9 VtT56XDedK1uhgdczfXsq4noZcHjnIlnWKQhCkG/pgtt1KFIX8FGpEC83NMQaWw1 ciM4oqImLAKiUHOM8Qwjkpygfv/rXUAef4WWtRx6OJd8/sv0Gg21gU1SKI5Oasvo bbPYLDjlH/y/pwwlaYHw6BZf5pzmQlkZ8mRrUQZ0LR5NgFL53eM8/JyzzIGB2byf f7Ov9NSDYpy+KmNgxm+jUpfxGHN7AvQu -----END CERTIFICATE-----Generated at Mon Apr 28 23:05:40 2025 by rpki-client on console.sobornost.net