$ rpki-client -vvf rpki.apnic.net/member_repository/A9197FDB/657E4074DA3611EB84E6A349C4F9AE02/4AJb-TLnFuGh-K-QECEcQRCE_J0.mft File: 4AJb-TLnFuGh-K-QECEcQRCE_J0.mft (raw, json) Hash identifier: jKhxPCvkrJxJRk4tYxQVNWrXY8tR+w2yr3ZmT5h+9AE= Subject key identifier: 9A:CF:F9:AE:18:BB:0E:1F:F1:47:2E:FC:08:4C:F4:CD:37:D1:5F:21 Authority key identifier: E0:02:5B:F9:32:E7:16:E1:A1:F8:AF:90:10:21:1C:41:10:84:FC:9D Certificate issuer: /CN=A9197FDB/serialNumber=E0025BF932E716E1A1F8AF9010211C411084FC9D Certificate serial: 057E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4AJb-TLnFuGh-K-QECEcQRCE_J0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197FDB/657E4074DA3611EB84E6A349C4F9AE02/4AJb-TLnFuGh-K-QECEcQRCE_J0.mft Manifest number: 0577 Signing time: Sat 26 Apr 2025 22:59:47 +0000 Manifest this update: Sat 26 Apr 2025 22:59:47 +0000 Manifest next update: Sat 03 May 2025 22:59:47 +0000 Files and hashes: 1: 4AJb-TLnFuGh-K-QECEcQRCE_J0.crl (hash: HckxyRHkh1yf5OvW0FTblJiK+pjuJOKFOykd2DnUQRg=) 2: 0A1FAC405BB211EEAD06B243C4F9AE02.roa (hash: +Nf3CbeJiQCKoMqVOr8fCtBhRD9vFNzRUGK/YqqHHSM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197FDB/657E4074DA3611EB84E6A349C4F9AE02/4AJb-TLnFuGh-K-QECEcQRCE_J0.crl rsync://rpki.apnic.net/member_repository/A9197FDB/657E4074DA3611EB84E6A349C4F9AE02/4AJb-TLnFuGh-K-QECEcQRCE_J0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4AJb-TLnFuGh-K-QECEcQRCE_J0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 22:59:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1406 (0x57e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197FDB, serialNumber=E0025BF932E716E1A1F8AF9010211C411084FC9D Validity Not Before: Apr 26 22:59:47 2025 GMT Not After : May 3 22:59:47 2025 GMT Subject: CN=680d6563-6093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9e:09:1b:37:42:34:a7:43:39:f8:08:b0:1e: f8:3c:20:ce:b2:47:23:6d:d9:62:77:67:73:2c:64: 6b:e2:ce:53:44:e7:33:7f:d5:71:76:bf:2c:60:5b: 7d:85:82:9e:4d:48:ff:38:90:d5:2c:82:d5:a9:db: 61:fb:23:97:24:e3:a6:ca:7c:fa:1e:ad:eb:b1:65: 95:1c:4a:02:69:15:58:b4:71:4f:00:fa:84:a3:45: 90:ec:57:2a:f2:95:88:76:4d:00:71:eb:2a:14:1d: 19:4c:96:c7:8f:e6:07:d8:f7:3d:04:7a:96:6b:76: 0b:bb:13:e8:0a:ee:f8:19:ed:fc:bc:15:a2:24:4e: 08:04:24:96:08:93:9b:6c:1b:0d:15:ad:be:a8:b8: 7d:6f:ac:3a:9a:21:05:37:3b:eb:de:51:c4:d9:98: 9c:4c:04:2d:39:e1:0f:cc:11:4a:b3:6a:69:31:57: c1:90:36:55:d8:f6:de:a9:10:c3:c0:57:b0:a5:40: ea:0d:21:34:e6:25:58:5f:c8:4c:97:70:84:92:50: c1:01:e2:44:a4:73:5f:5d:b1:48:b9:c9:b7:b9:41: 1a:11:7b:4d:9d:7d:9a:26:d8:d7:0e:4f:35:ea:2b: a0:c3:52:18:e3:b0:b3:ad:fc:06:a5:5a:1f:a5:b6: b2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:CF:F9:AE:18:BB:0E:1F:F1:47:2E:FC:08:4C:F4:CD:37:D1:5F:21 X509v3 Authority Key Identifier: keyid:E0:02:5B:F9:32:E7:16:E1:A1:F8:AF:90:10:21:1C:41:10:84:FC:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197FDB/657E4074DA3611EB84E6A349C4F9AE02/4AJb-TLnFuGh-K-QECEcQRCE_J0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4AJb-TLnFuGh-K-QECEcQRCE_J0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197FDB/657E4074DA3611EB84E6A349C4F9AE02/4AJb-TLnFuGh-K-QECEcQRCE_J0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:a9:12:fb:42:a9:d5:f5:ae:8a:d3:cf:e6:bb:88:18:30:95: e0:ee:51:31:c0:11:97:0d:68:91:c6:94:f2:b8:61:71:25:3a: e8:2b:82:93:92:cb:f2:b0:a2:37:d4:13:df:36:14:9e:d7:3c: ed:59:29:f4:c4:28:b9:59:9e:de:ec:40:67:bf:a7:41:03:4d: 64:fe:24:96:1e:c4:1f:3a:d0:f4:92:bb:4f:e5:18:ed:bf:c5: a6:ab:81:d8:0a:ce:14:cb:0b:bb:b9:87:35:03:af:fb:45:33: 12:12:b4:b0:03:3c:bb:48:e4:17:4a:1c:66:5a:c3:04:9b:b4: aa:5f:ad:7c:f7:0a:d2:bb:a5:97:7b:f0:57:32:a2:2c:fd:3c: 2e:ea:fd:77:dd:33:d0:ce:de:8d:77:a0:1f:62:5c:29:b0:6d: 7e:d6:9c:b7:b9:8a:08:05:8a:4a:91:8f:a0:cd:86:bd:d7:76: 2f:5f:6d:95:30:13:a2:70:f5:78:ac:11:e6:ec:44:ba:73:dc: 1a:84:fa:1a:cc:8b:2a:42:c1:f4:1b:e5:72:cb:f8:57:c8:52: 09:3f:74:6c:d7:23:5c:8d:dc:39:08:3f:82:0d:57:15:86:7d: b4:81:a8:1e:bf:59:d7:f9:2a:29:c5:92:3f:ca:cf:46:63:73: 42:bd:95:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdGREIxMTAvBgNVBAUTKEUwMDI1QkY5MzJFNzE2RTFBMUY4QUY5MDEwMjExQzQx MTA4NEZDOUQwHhcNMjUwNDI2MjI1OTQ3WhcNMjUwNTAzMjI1OTQ3WjAYMRYwFAYD VQQDEw02ODBkNjU2My02MDkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsZ4JGzdCNKdDOfgIsB74PCDOskcjbdlid2dzLGRr4s5TROczf9Vxdr8sYFt9 hYKeTUj/OJDVLILVqdth+yOXJOOmynz6Hq3rsWWVHEoCaRVYtHFPAPqEo0WQ7Fcq 8pWIdk0AcesqFB0ZTJbHj+YH2Pc9BHqWa3YLuxPoCu74Ge38vBWiJE4IBCSWCJOb bBsNFa2+qLh9b6w6miEFNzvr3lHE2ZicTAQtOeEPzBFKs2ppMVfBkDZV2PbeqRDD wFewpUDqDSE05iVYX8hMl3CEklDBAeJEpHNfXbFIucm3uUEaEXtNnX2aJtjXDk81 6iugw1IY47CzrfwGpVofpbayvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJrP+a4Y uw4f8Ucu/AhM9M030V8hMB8GA1UdIwQYMBaAFOACW/ky5xbhofivkBAhHEEQhPyd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0ZEQi82NTdFNDA3NERB MzYxMUVCODRFNkEzNDlDNEY5QUUwMi80QUpiLVRMbkZ1R2gtSy1RRUNFY1FSQ0Vf SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRBSmItVExuRnVHaC1LLVFFQ0VjUVJDRV9KMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0ZEQi82NTdFNDA3NERBMzYxMUVCODRFNkEzNDlDNEY5QUUwMi80QUpiLVRMbkZ1 R2gtSy1RRUNFY1FSQ0VfSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATqRL7QqnV9a6K08/mu4gYMJXg7lExwBGXDWiRxpTyuGFxJTroK4KT ksvysKI31BPfNhSe1zztWSn0xCi5WZ7e7EBnv6dBA01k/iSWHsQfOtD0krtP5Rjt v8Wmq4HYCs4Uywu7uYc1A6/7RTMSErSwAzy7SOQXShxmWsMEm7SqX6189wrSu6WX e/BXMqIs/Twu6v133TPQzt6Nd6AfYlwpsG1+1py3uYoIBYpKkY+gzYa913YvX22V MBOicPV4rBHm7ES6c9wahPoazIsqQsH0G+Vyy/hXyFIJP3Rs1yNcjdw5CD+CDVcV hn20gagev1nX+SopxZI/ys9GY3NCvZW5 -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:00 2025 by rpki-client on console.sobornost.net