$ rpki-client -vvf rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.mft File: oTW4FOHrHifJWX7tLoIoVJMNP88.mft (raw, json) Hash identifier: N/eVuR5TdZeZ7mZYlDG/0XCBawjmhfdnHqfgRZ11fOg= Subject key identifier: AC:71:12:9B:61:FD:7A:7F:18:DD:B9:CB:DC:33:D5:F9:8F:17:9F:09 Authority key identifier: A1:35:B8:14:E1:EB:1E:27:C9:59:7E:ED:2E:82:28:54:93:0D:3F:CF Certificate issuer: /CN=A9197390/serialNumber=A135B814E1EB1E27C9597EED2E822854930D3FCF Certificate serial: 0185 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oTW4FOHrHifJWX7tLoIoVJMNP88.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.mft Manifest number: 0165 Signing time: Sun 27 Apr 2025 03:18:16 +0000 Manifest this update: Sun 27 Apr 2025 03:18:15 +0000 Manifest next update: Sun 04 May 2025 03:18:15 +0000 Files and hashes: 1: oTW4FOHrHifJWX7tLoIoVJMNP88.crl (hash: zgKmII7ZUhj2Wr7dNzxeNmsoPBi/239cJDo4McZRan8=) 2: CD168A226C2111EFB0ACC153C4F9AE02.roa (hash: F8BQEsLxz2XO34zN3GNH3AuMPZU87rOGItPVHiqWabQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.crl rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oTW4FOHrHifJWX7tLoIoVJMNP88.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 389 (0x185) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197390, serialNumber=A135B814E1EB1E27C9597EED2E822854930D3FCF Validity Not Before: Apr 27 03:18:15 2025 GMT Not After : May 4 03:18:15 2025 GMT Subject: CN=680da1f7-440b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7b:cf:90:c3:bc:6d:cf:a6:e1:5d:59:47:37: 4e:06:ed:3d:67:38:e2:05:92:38:14:84:6d:92:77: 17:61:37:33:64:17:e2:e5:ec:46:7c:c3:00:ef:7c: fd:58:4c:29:cb:02:53:62:b6:35:22:98:b0:4a:56: 44:1c:44:3b:8d:e9:04:42:03:8a:e9:96:26:52:be: 25:df:0f:3e:f0:f2:fa:73:e1:46:47:bf:19:0a:c6: 93:76:77:0d:ef:73:e8:a6:ba:a2:90:24:0d:2c:7f: 75:2a:ad:ff:7f:f2:93:70:3e:13:b5:e7:65:0b:8f: 47:8a:ec:22:0d:5c:c1:01:38:8b:f3:b2:13:dc:f6: 80:39:cc:c4:0c:07:c2:4c:d4:59:1c:15:27:ab:15: ee:f6:aa:de:ea:ca:af:6d:8b:a3:2b:f2:7e:7b:95: 5b:a9:64:6f:85:75:6f:11:0b:54:60:8b:f1:8a:65: be:d9:93:f9:bc:a4:7a:b5:11:bf:8a:ad:8a:f8:3e: eb:2b:81:d0:71:29:78:9c:f2:9d:3f:43:7a:06:54: 9e:a6:de:60:d7:85:16:bf:4e:76:88:12:50:90:a3: a5:a8:65:72:57:f8:74:ce:46:36:9e:2d:4b:3d:92: 19:d9:2d:b1:15:62:33:8e:d3:91:0e:f7:82:a6:c6: 82:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:71:12:9B:61:FD:7A:7F:18:DD:B9:CB:DC:33:D5:F9:8F:17:9F:09 X509v3 Authority Key Identifier: keyid:A1:35:B8:14:E1:EB:1E:27:C9:59:7E:ED:2E:82:28:54:93:0D:3F:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oTW4FOHrHifJWX7tLoIoVJMNP88.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:3b:14:42:98:de:b1:d7:8a:c4:b7:c4:83:e3:0e:7a:33:81: f0:e3:d2:e6:45:d1:d0:e0:26:8f:8d:d4:8c:90:5d:87:02:80: 85:52:8d:3e:a1:80:9b:6a:84:26:0d:79:b1:70:ae:55:89:c8: fe:70:38:7b:a3:07:2b:bb:43:57:23:72:d9:f5:33:62:66:dc: 23:5c:6f:10:01:7f:94:d9:b0:ce:60:cc:8e:5e:b0:a0:7c:31: 69:c3:38:f8:83:40:c2:f4:f9:f3:08:9d:8c:da:c0:a1:bc:ce: be:b3:46:4c:a9:0c:97:de:1e:a5:d6:44:a9:1c:35:80:0d:1a: bd:b4:96:73:10:01:5f:4c:cb:84:ec:ef:eb:ac:03:42:f3:af: 48:87:da:13:68:85:c2:d8:b3:c2:cb:2a:f0:e3:3e:18:cb:b1: 4b:a1:26:69:37:3e:29:cc:24:4d:33:7e:cb:37:1e:aa:b2:e4: 0c:4e:bc:07:95:15:58:6e:0a:ac:38:d0:23:d7:02:04:c6:2e: f4:42:d9:7a:3e:00:4b:4a:10:6c:9a:17:76:47:c1:f8:7b:31: 2c:0a:d3:85:be:55:a0:59:21:b7:6f:42:1d:27:88:1f:a3:65: de:21:ca:0a:22:03:db:f5:18:22:d0:82:90:f7:37:9f:6a:39: 31:1d:eb:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTczOTAxMTAvBgNVBAUTKEExMzVCODE0RTFFQjFFMjdDOTU5N0VFRDJFODIyODU0 OTMwRDNGQ0YwHhcNMjUwNDI3MDMxODE1WhcNMjUwNTA0MDMxODE1WjAYMRYwFAYD VQQDEw02ODBkYTFmNy00NDBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvXvPkMO8bc+m4V1ZRzdOBu09ZzjiBZI4FIRtkncXYTczZBfi5exGfMMA73z9 WEwpywJTYrY1IpiwSlZEHEQ7jekEQgOK6ZYmUr4l3w8+8PL6c+FGR78ZCsaTdncN 73PoprqikCQNLH91Kq3/f/KTcD4TtedlC49HiuwiDVzBATiL87IT3PaAOczEDAfC TNRZHBUnqxXu9qre6sqvbYujK/J+e5VbqWRvhXVvEQtUYIvximW+2ZP5vKR6tRG/ iq2K+D7rK4HQcSl4nPKdP0N6BlSept5g14UWv052iBJQkKOlqGVyV/h0zkY2ni1L PZIZ2S2xFWIzjtORDveCpsaCkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKxxEpth /Xp/GN25y9wz1fmPF58JMB8GA1UdIwQYMBaAFKE1uBTh6x4nyVl+7S6CKFSTDT/P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzM5MC9EMkM3RTcxNjNF N0ExMUVFQTk3N0Q2MjBDNEY5QUUwMi9vVFc0Rk9IckhpZkpXWDd0TG9Jb1ZKTU5Q ODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29UVzRGT0hySGlmSldYN3RMb0lvVkpNTlA4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzM5MC9EMkM3RTcxNjNFN0ExMUVFQTk3N0Q2MjBDNEY5QUUwMi9vVFc0Rk9Ickhp ZkpXWDd0TG9Jb1ZKTU5QODgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQOxRCmN6x14rEt8SD4w56M4Hw49LmRdHQ4CaPjdSMkF2HAoCFUo0+ oYCbaoQmDXmxcK5Vicj+cDh7owcru0NXI3LZ9TNiZtwjXG8QAX+U2bDOYMyOXrCg fDFpwzj4g0DC9PnzCJ2M2sChvM6+s0ZMqQyX3h6l1kSpHDWADRq9tJZzEAFfTMuE 7O/rrANC869Ih9oTaIXC2LPCyyrw4z4Yy7FLoSZpNz4pzCRNM37LNx6qsuQMTrwH lRVYbgqsONAj1wIExi70Qtl6PgBLShBsmhd2R8H4ezEsCtOFvlWgWSG3b0IdJ4gf o2XeIcoKIgPb9Rgi0IKQ9zefajkxHesA -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:00 2025 by rpki-client on console.sobornost.net