$ rpki-client -vvf rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.mft File: iaMdROlPHMJ4ULusFsAsIKqznOU.mft (raw, json) Hash identifier: 1V0eT/KuZBN9VMt/pMFpURru1fn6e9fJFEguOwIqEkk= Subject key identifier: CA:1E:56:92:CE:16:66:82:3A:00:CE:CD:86:E4:6F:A4:86:1C:77:03 Authority key identifier: 89:A3:1D:44:E9:4F:1C:C2:78:50:BB:AC:16:C0:2C:20:AA:B3:9C:E5 Certificate issuer: /CN=A9196F73/serialNumber=89A31D44E94F1CC27850BBAC16C02C20AAB39CE5 Certificate serial: 0AB2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaMdROlPHMJ4ULusFsAsIKqznOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.mft Manifest number: 0AA2 Signing time: Sat 26 Apr 2025 19:21:09 +0000 Manifest this update: Sat 26 Apr 2025 19:21:09 +0000 Manifest next update: Sat 03 May 2025 19:21:09 +0000 Files and hashes: 1: iaMdROlPHMJ4ULusFsAsIKqznOU.crl (hash: ZEdmwydBkIxoc5h9fdwo75dvGtxmZJNJ5UWOBPAWRBY=) 2: 9AE4F7EC53A211EA8D26BD0CC4F9AE02.roa (hash: jqqBqCZOKu2qIALXNmkWZIy2E6GEnPXSik4fgBrMrDA=) 3: F392CF9E53A311EAB1641213C4F9AE02.roa (hash: lxeOojn+XYimi3V1BZ9O9tBljDRntCvGVjoxX3VG+x8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.crl rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaMdROlPHMJ4ULusFsAsIKqznOU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2738 (0xab2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196F73, serialNumber=89A31D44E94F1CC27850BBAC16C02C20AAB39CE5 Validity Not Before: Apr 26 19:21:09 2025 GMT Not After : May 3 19:21:09 2025 GMT Subject: CN=680d3225-ca1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7c:96:2f:4f:91:03:b5:d1:e0:45:31:28:e7: 3a:3a:15:17:68:fc:a2:3c:f8:e5:fb:ee:79:bf:6d: 6f:3c:e6:ac:c6:92:63:42:a3:d0:5b:02:3d:cc:0f: 3d:52:28:b2:55:38:80:db:7a:64:49:7b:89:5e:c4: 77:b7:2e:e1:50:8c:a5:28:ee:81:44:a7:01:2d:85: 49:9b:9b:9a:d6:e5:56:52:50:da:fd:9a:f5:35:1a: ae:63:5e:9a:97:22:e3:2b:e3:5c:e6:c2:43:74:f8: 2c:4c:d3:4b:5b:bf:92:6a:81:1b:15:18:9e:73:a1: 22:c5:d3:d8:ee:17:ea:c4:ec:d4:cc:6f:73:50:77: 30:8b:f8:fa:c7:dc:4a:5d:29:0c:8e:f4:fd:61:97: 66:27:ef:34:e9:c9:3d:d9:9e:18:ce:15:3c:7f:23: 0f:24:2b:18:47:3d:20:bc:66:2d:46:cc:6e:20:96: 5c:5e:5d:cb:c6:8d:e0:36:b5:06:76:ee:d9:f1:71: 03:d0:09:6d:06:01:ee:95:c0:aa:31:bd:c4:96:39: 71:04:d0:b6:e1:d5:74:b9:58:9d:39:6f:00:63:b2: d2:92:a4:1d:a0:c4:a8:a3:70:c2:f0:5b:73:d6:d1: 3e:4d:1c:3a:4b:e9:23:23:f0:30:06:20:8d:54:44: 3d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:1E:56:92:CE:16:66:82:3A:00:CE:CD:86:E4:6F:A4:86:1C:77:03 X509v3 Authority Key Identifier: keyid:89:A3:1D:44:E9:4F:1C:C2:78:50:BB:AC:16:C0:2C:20:AA:B3:9C:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaMdROlPHMJ4ULusFsAsIKqznOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:62:b2:33:4f:01:47:4f:9e:79:b5:b4:e5:b4:65:17:bb:04: ad:3b:0a:0b:95:83:52:c4:c8:42:b0:5a:1a:7f:bb:56:e5:11: 5c:a4:2e:05:a5:ea:cf:2a:4e:84:b4:b6:09:c8:c0:e7:b5:98: 03:f8:de:84:bd:6d:61:eb:b6:5d:3c:4b:96:86:7c:17:40:07: 7c:7b:42:dc:79:1d:9f:de:9d:15:3c:82:98:1d:1e:dd:43:44: c1:8a:60:64:9d:0b:49:b7:5c:72:d5:95:53:1c:6f:90:a4:be: 62:7f:7c:8c:2b:56:9e:14:1e:e2:c9:9a:0a:92:b0:a6:fe:51: b5:ec:7b:cc:c8:39:ff:cf:7f:1b:8f:af:ce:b6:6c:95:32:a2: d9:78:e5:72:d6:1a:53:bf:33:95:a9:a1:bc:ae:83:b5:b0:4a: 14:ea:a3:8a:bc:63:f6:7d:9b:46:96:05:49:14:37:66:94:02: 38:36:61:cf:5d:34:12:92:f1:5a:9d:f8:f1:63:02:4c:f3:49: 56:d2:e6:72:75:4e:ed:e4:1b:e6:8a:38:68:d5:49:8b:c0:4f: 9f:5d:19:7c:c9:35:07:99:8c:c8:48:8e:3f:6f:89:5c:07:8f: 56:34:d1:63:3d:b5:82:e8:8a:64:fe:d0:7c:85:3c:eb:8a:2b: ce:5c:2a:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCrIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZGNzMxMTAvBgNVBAUTKDg5QTMxRDQ0RTk0RjFDQzI3ODUwQkJBQzE2QzAyQzIw QUFCMzlDRTUwHhcNMjUwNDI2MTkyMTA5WhcNMjUwNTAzMTkyMTA5WjAYMRYwFAYD VQQDEw02ODBkMzIyNS1jYTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx3yWL0+RA7XR4EUxKOc6OhUXaPyiPPjl++55v21vPOasxpJjQqPQWwI9zA89 UiiyVTiA23pkSXuJXsR3ty7hUIylKO6BRKcBLYVJm5ua1uVWUlDa/Zr1NRquY16a lyLjK+Nc5sJDdPgsTNNLW7+SaoEbFRiec6EixdPY7hfqxOzUzG9zUHcwi/j6x9xK XSkMjvT9YZdmJ+806ck92Z4YzhU8fyMPJCsYRz0gvGYtRsxuIJZcXl3Lxo3gNrUG du7Z8XED0AltBgHulcCqMb3EljlxBNC24dV0uVidOW8AY7LSkqQdoMSoo3DC8Ftz 1tE+TRw6S+kjI/AwBiCNVEQ9CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMoeVpLO FmaCOgDOzYbkb6SGHHcDMB8GA1UdIwQYMBaAFImjHUTpTxzCeFC7rBbALCCqs5zl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkY3My9BMjk3MDdGNjUz QTExMUVBQUVFRUJFMEJDNEY5QUUwMi9pYU1kUk9sUEhNSjRVTHVzRnNBc0lLcXpu T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lhTWRST2xQSE1KNFVMdXNGc0FzSUtxem5PVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkY3My9BMjk3MDdGNjUzQTExMUVBQUVFRUJFMEJDNEY5QUUwMi9pYU1kUk9sUEhN SjRVTHVzRnNBc0lLcXpuT1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaYrIzTwFHT555tbTltGUXuwStOwoLlYNSxMhCsFoaf7tW5RFcpC4F perPKk6EtLYJyMDntZgD+N6EvW1h67ZdPEuWhnwXQAd8e0LceR2f3p0VPIKYHR7d Q0TBimBknQtJt1xy1ZVTHG+QpL5if3yMK1aeFB7iyZoKkrCm/lG17HvMyDn/z38b j6/OtmyVMqLZeOVy1hpTvzOVqaG8roO1sEoU6qOKvGP2fZtGlgVJFDdmlAI4NmHP XTQSkvFanfjxYwJM80lW0uZydU7t5Bvmijho1UmLwE+fXRl8yTUHmYzISI4/b4lc B49WNNFjPbWC6Ipk/tB8hTzriivOXCre -----END CERTIFICATE-----Generated at Sun Apr 27 00:14:07 2025 by rpki-client on console.sobornost.net