$ rpki-client -vvf rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.mft File: DAcR2ALXqTRuZMQ1u46dwn9tn4c.mft (raw, json) Hash identifier: wY4NxYB3bCH15A2FIs84EJjEeo/oB89w8gutwyBrch0= Subject key identifier: BA:1F:AC:69:CA:B1:91:DC:89:B4:10:13:15:C7:D0:7F:31:3A:B9:92 Authority key identifier: 0C:07:11:D8:02:D7:A9:34:6E:64:C4:35:BB:8E:9D:C2:7F:6D:9F:87 Certificate issuer: /CN=A9199990/serialNumber=0C0711D802D7A9346E64C435BB8E9DC27F6D9F87 Certificate serial: 3482 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.mft Manifest number: 347B Signing time: Mon 28 Apr 2025 14:53:53 +0000 Manifest this update: Mon 28 Apr 2025 14:53:52 +0000 Manifest next update: Mon 05 May 2025 14:53:52 +0000 Files and hashes: 1: DAcR2ALXqTRuZMQ1u46dwn9tn4c.crl (hash: VBhj/qiOFiA4orVqLYDSDpj49nJkbJeKfpKR4k5zr/E=) 2: 06CCBE4AED9A11EA9D06C66BC4F9AE02.roa (hash: r3JWgar+Qi2GIwJz7gdsqO3bZMMx2m4iwFJF3cbd3+Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.crl rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 14:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13442 (0x3482) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199990, serialNumber=0C0711D802D7A9346E64C435BB8E9DC27F6D9F87 Validity Not Before: Apr 28 14:53:52 2025 GMT Not After : May 5 14:53:52 2025 GMT Subject: CN=680f9680-5836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:13:2a:d3:99:d7:1d:63:27:41:f7:5e:23:91: 64:30:27:0b:37:f5:7a:fa:6a:84:14:b6:ad:d8:c0: 05:72:7f:b8:67:88:a7:cd:51:f3:43:ee:ce:b5:72: c1:77:fc:78:78:31:af:00:72:32:f7:79:0b:e0:24: 27:df:c4:21:a5:d3:82:d0:df:fe:5b:82:08:32:0d: 0d:b0:2e:bb:53:5d:6a:6f:f2:33:84:49:82:32:6a: 76:ea:b0:f4:a0:02:1e:05:35:fd:f7:96:b9:70:61: a0:73:5c:0d:88:f8:3b:7f:e5:f0:a9:43:74:a0:c9: 45:06:49:69:00:b8:1c:06:8f:f2:6a:c5:a9:c6:05: 66:74:36:c3:f9:27:98:11:53:5d:89:6c:55:25:38: 50:ec:54:f2:d2:1e:48:ff:5e:4a:c3:d6:26:b4:8c: 1f:54:93:ee:29:be:f4:0e:f0:06:93:56:8d:24:64: b7:61:52:11:82:10:1b:db:0a:8a:43:d9:62:ac:0e: 85:88:df:64:62:58:64:37:7c:db:b3:a2:67:d5:7e: 40:af:cc:57:f8:9f:69:23:96:10:37:c6:89:2c:e0: 79:9f:c0:93:40:66:c6:b5:f0:ba:e7:0e:2e:b7:ba: d7:06:dd:2c:be:c6:ed:94:a8:e0:04:91:f4:36:d6: e7:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:1F:AC:69:CA:B1:91:DC:89:B4:10:13:15:C7:D0:7F:31:3A:B9:92 X509v3 Authority Key Identifier: keyid:0C:07:11:D8:02:D7:A9:34:6E:64:C4:35:BB:8E:9D:C2:7F:6D:9F:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:a1:fa:0f:4c:9b:56:ac:f0:f9:7d:1e:e3:b5:ef:75:1d:97: 1c:bb:dc:3b:1f:cd:d9:b9:5e:ee:3b:c3:10:83:69:46:22:81: 1c:ad:f2:ac:2f:d6:08:14:95:9f:ff:8d:fa:36:69:c0:e6:3b: 54:4e:2b:81:a9:13:5d:fb:3e:50:95:55:39:6c:9e:a8:d6:1f: 74:32:df:fd:ce:5b:60:58:41:b9:31:ef:01:17:3e:f3:ef:b2: 88:91:6d:8f:b4:58:6d:1b:ce:c0:e6:49:26:e4:7e:88:df:51: e3:28:d8:28:83:fc:b8:8e:43:9b:dd:c5:1b:de:0d:a2:a6:ba: 10:9a:4f:a1:9f:8c:9b:91:1c:23:38:98:b8:b5:ff:dd:42:f9: f0:a7:24:69:81:8d:1e:86:88:48:41:63:a2:4a:2a:f1:29:93: f4:51:c8:ef:53:f9:69:dd:c1:44:c6:92:af:26:a6:c2:25:8e: 0d:c1:6a:83:fb:59:a5:44:de:0e:e0:4f:2f:c4:b2:b1:f6:65: ea:55:eb:58:7d:37:1f:4e:61:1f:b2:1d:e6:1a:4c:8a:c8:95: 6e:18:da:33:a6:8e:d0:c4:36:8d:3f:7a:b1:65:fd:9c:1b:5b: 49:5d:77:37:35:5d:2a:5b:e3:20:9a:7f:4e:ec:ac:3f:70:64: ed:88:76:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk5OTAxMTAvBgNVBAUTKDBDMDcxMUQ4MDJEN0E5MzQ2RTY0QzQzNUJCOEU5REMy N0Y2RDlGODcwHhcNMjUwNDI4MTQ1MzUyWhcNMjUwNTA1MTQ1MzUyWjAYMRYwFAYD VQQDEw02ODBmOTY4MC01ODM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvxMq05nXHWMnQfdeI5FkMCcLN/V6+mqEFLat2MAFcn+4Z4inzVHzQ+7OtXLB d/x4eDGvAHIy93kL4CQn38QhpdOC0N/+W4IIMg0NsC67U11qb/IzhEmCMmp26rD0 oAIeBTX995a5cGGgc1wNiPg7f+XwqUN0oMlFBklpALgcBo/yasWpxgVmdDbD+SeY EVNdiWxVJThQ7FTy0h5I/15Kw9YmtIwfVJPuKb70DvAGk1aNJGS3YVIRghAb2wqK Q9lirA6FiN9kYlhkN3zbs6Jn1X5Ar8xX+J9pI5YQN8aJLOB5n8CTQGbGtfC65w4u t7rXBt0svsbtlKjgBJH0NtbnFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLofrGnK sZHcibQQExXH0H8xOrmSMB8GA1UdIwQYMBaAFAwHEdgC16k0bmTENbuOncJ/bZ+H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTk5MC81ODYwRjM4NjFE OTQxMUUyQkU3RTdCRjgwOEIwMkNEMi9EQWNSMkFMWHFUUnVaTVExdTQ2ZHduOXRu NGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RBY1IyQUxYcVRSdVpNUTF1NDZkd245dG40Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTk5MC81ODYwRjM4NjFEOTQxMUUyQkU3RTdCRjgwOEIwMkNEMi9EQWNSMkFMWHFU UnVaTVExdTQ2ZHduOXRuNGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0ofoPTJtWrPD5fR7jte91HZccu9w7H83ZuV7uO8MQg2lGIoEcrfKs L9YIFJWf/436NmnA5jtUTiuBqRNd+z5QlVU5bJ6o1h90Mt/9zltgWEG5Me8BFz7z 77KIkW2PtFhtG87A5kkm5H6I31HjKNgog/y4jkOb3cUb3g2iproQmk+hn4ybkRwj OJi4tf/dQvnwpyRpgY0ehohIQWOiSirxKZP0UcjvU/lp3cFExpKvJqbCJY4NwWqD +1mlRN4O4E8vxLKx9mXqVetYfTcfTmEfsh3mGkyKyJVuGNozpo7QxDaNP3qxZf2c G1tJXXc3NV0qW+Mgmn9O7Kw/cGTtiHZZ -----END CERTIFICATE-----Generated at Mon Apr 28 17:45:59 2025 by rpki-client on console.sobornost.net