$ rpki-client -vvf rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.mft File: _tgXL4qVo1IC1RxvdfqUfehE9M0.mft (raw, json) Hash identifier: nCGRfGKkT+ZGebz3/OhanaICecHFwRNoB4UrJVJ84b8= Subject key identifier: AB:01:19:15:90:28:BA:77:86:42:AF:92:27:10:59:54:35:4C:CB:68 Authority key identifier: FE:D8:17:2F:8A:95:A3:52:02:D5:1C:6F:75:FA:94:7D:E8:44:F4:CD Certificate issuer: /CN=A9198D95/serialNumber=FED8172F8A95A35202D51C6F75FA947DE844F4CD Certificate serial: D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_tgXL4qVo1IC1RxvdfqUfehE9M0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.mft Manifest number: D3 Signing time: Sun 27 Apr 2025 04:30:00 +0000 Manifest this update: Sun 27 Apr 2025 04:30:00 +0000 Manifest next update: Sun 04 May 2025 04:30:00 +0000 Files and hashes: 1: _tgXL4qVo1IC1RxvdfqUfehE9M0.crl (hash: urvZKTRDPzCYnCKIMu+gDVq/NqOesaXy5hVauwax46s=) 2: 994A883AE06511EEA8CEC61EC4F9AE02.roa (hash: LjsOflVWx2ASLq3Z//t4WARlGyPly5HO69O4zsWdHy0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.crl rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_tgXL4qVo1IC1RxvdfqUfehE9M0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198D95, serialNumber=FED8172F8A95A35202D51C6F75FA947DE844F4CD Validity Not Before: Apr 27 04:30:00 2025 GMT Not After : May 4 04:30:00 2025 GMT Subject: CN=680db2c8-38cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:47:c9:94:90:04:79:1e:47:aa:82:34:d5:39: e9:de:69:a7:85:92:88:9d:f1:f6:d9:d0:f0:27:74: 8c:9a:45:5f:70:87:9c:a0:ca:54:3f:cf:77:d6:93: d3:9d:2f:92:f8:74:52:f9:5f:63:62:a7:21:39:3b: 45:5f:a9:aa:8b:ec:74:71:ea:2e:ae:fe:9e:56:af: 0b:cd:ac:3a:14:85:9e:db:ec:53:fe:1e:a5:a6:bf: 04:6b:a2:28:63:ec:c5:ff:bd:cd:49:36:df:09:f3: d4:9e:bf:50:62:69:0a:bc:94:39:b9:23:3b:c1:dd: 52:e1:e4:d2:5d:80:a3:c7:ee:b7:40:2b:ef:5c:f5: 64:47:4a:5d:e6:c9:98:ed:56:58:43:bb:2a:6c:d6: 31:07:8b:e6:83:a3:a4:3b:dd:b8:51:d9:be:67:15: 9b:c6:5b:79:c9:4d:5c:16:f0:d5:ab:ca:ae:a6:da: 2b:66:ac:24:26:ee:e6:9c:0d:94:92:d7:f5:d6:a6: 9b:ad:77:06:dd:9c:ed:3d:d6:17:a1:ce:7a:16:83: 05:a4:eb:e7:38:ff:46:43:5f:ec:93:f9:f3:d0:80: 7f:6e:a5:1a:2e:22:09:35:f9:3b:54:97:12:98:d2: 8a:3d:ee:08:ee:01:5b:88:6b:87:63:b4:b6:cd:d7: 97:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:01:19:15:90:28:BA:77:86:42:AF:92:27:10:59:54:35:4C:CB:68 X509v3 Authority Key Identifier: keyid:FE:D8:17:2F:8A:95:A3:52:02:D5:1C:6F:75:FA:94:7D:E8:44:F4:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_tgXL4qVo1IC1RxvdfqUfehE9M0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:dd:1b:f0:50:f0:89:76:ca:ad:00:a0:46:24:33:01:44:f8: 19:df:08:77:5b:1c:d6:92:8c:d6:75:ea:80:1d:7d:ca:4c:bf: e8:2f:79:d3:0f:fe:4d:41:77:22:05:0d:bf:54:37:b7:f1:ff: b6:bb:1d:f7:98:f9:1f:0c:f6:4d:eb:61:24:cb:28:bc:a2:2a: 7b:9b:fa:0c:e9:55:a7:9e:49:c8:91:e7:d2:b9:2b:54:44:72: f0:77:1e:7f:9f:d1:a0:7c:63:13:51:fa:14:27:38:0f:e8:c0: 65:dc:cc:e2:e3:31:ed:b6:92:7a:b6:11:cb:81:e1:e8:41:53: 42:b4:a2:0d:d0:c9:e1:18:f9:84:0d:f7:d0:45:6c:5d:06:1f: f6:79:0c:7a:00:e6:46:d3:07:9f:31:0f:8a:e1:23:4d:a6:5b: 13:46:d3:b6:09:5b:2c:35:b4:b9:2e:0e:1d:18:f0:20:bc:f9: ff:9e:53:7b:58:73:b7:66:af:20:5b:53:31:6f:1e:e2:e4:55: cb:15:b1:78:5f:c8:73:db:82:44:07:59:b4:a8:c6:66:0c:52: cf:8e:5b:5c:91:81:cf:05:87:ea:9d:99:c6:85:d9:6b:23:7e: 59:fb:75:f1:66:fc:4b:53:4c:e2:4b:b3:67:30:fe:6b:f2:61: 95:fe:21:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OThEOTUxMTAvBgNVBAUTKEZFRDgxNzJGOEE5NUEzNTIwMkQ1MUM2Rjc1RkE5NDdE RTg0NEY0Q0QwHhcNMjUwNDI3MDQzMDAwWhcNMjUwNTA0MDQzMDAwWjAYMRYwFAYD VQQDEw02ODBkYjJjOC0zOGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqkfJlJAEeR5HqoI01Tnp3mmnhZKInfH22dDwJ3SMmkVfcIecoMpUP8931pPT nS+S+HRS+V9jYqchOTtFX6mqi+x0ceourv6eVq8Lzaw6FIWe2+xT/h6lpr8Ea6Io Y+zF/73NSTbfCfPUnr9QYmkKvJQ5uSM7wd1S4eTSXYCjx+63QCvvXPVkR0pd5smY 7VZYQ7sqbNYxB4vmg6OkO924Udm+ZxWbxlt5yU1cFvDVq8quptorZqwkJu7mnA2U ktf11qabrXcG3ZztPdYXoc56FoMFpOvnOP9GQ1/sk/nz0IB/bqUaLiIJNfk7VJcS mNKKPe4I7gFbiGuHY7S2zdeX5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKsBGRWQ KLp3hkKvkicQWVQ1TMtoMB8GA1UdIwQYMBaAFP7YFy+KlaNSAtUcb3X6lH3oRPTN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OEQ5NS80OEVEMjk2QUUw NjUxMUVFQjM1RjQyMUVDNEY5QUUwMi9fdGdYTDRxVm8xSUMxUnh2ZGZxVWZlaEU5 TTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL190Z1hMNHFWbzFJQzFSeHZkZnFVZmVoRTlNMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OEQ5NS80OEVEMjk2QUUwNjUxMUVFQjM1RjQyMUVDNEY5QUUwMi9fdGdYTDRxVm8x SUMxUnh2ZGZxVWZlaEU5TTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAT3RvwUPCJdsqtAKBGJDMBRPgZ3wh3WxzWkozWdeqAHX3KTL/oL3nT D/5NQXciBQ2/VDe38f+2ux33mPkfDPZN62Ekyyi8oip7m/oM6VWnnknIkefSuStU RHLwdx5/n9GgfGMTUfoUJzgP6MBl3Mzi4zHttpJ6thHLgeHoQVNCtKIN0MnhGPmE DffQRWxdBh/2eQx6AOZG0wefMQ+K4SNNplsTRtO2CVssNbS5Lg4dGPAgvPn/nlN7 WHO3Zq8gW1Mxbx7i5FXLFbF4X8hz24JEB1m0qMZmDFLPjltckYHPBYfqnZnGhdlr I35Z+3XxZvxLU0ziS7NnMP5r8mGV/iHj -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:52 2025 by rpki-client on console.sobornost.net