$ rpki-client -vvf rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.mft File: ips7kjmTluj8a4YwntVzMMlOEX0.mft (raw, json) Hash identifier: TXDvApvSueNPnrWuENakd8s2m8yFRZKOfsrKPmcUHHE= Subject key identifier: 70:E1:0F:39:E8:9F:D4:45:BC:A8:3D:61:C5:09:C2:BA:32:48:B9:47 Authority key identifier: 8A:9B:3B:92:39:93:96:E8:FC:6B:86:30:9E:D5:73:30:C9:4E:11:7D Certificate issuer: /CN=A919A3CA/serialNumber=8A9B3B92399396E8FC6B86309ED57330C94E117D Certificate serial: 097B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ips7kjmTluj8a4YwntVzMMlOEX0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.mft Manifest number: 0972 Signing time: Mon 28 Apr 2025 20:35:33 +0000 Manifest this update: Mon 28 Apr 2025 20:35:32 +0000 Manifest next update: Mon 05 May 2025 20:35:32 +0000 Files and hashes: 1: ips7kjmTluj8a4YwntVzMMlOEX0.crl (hash: lYFxeyrfUlxFWok0vm+mSAElyO49mFqNSKenkWmitiM=) 2: B972C58C8FA611EAB095C928C4F9AE02.roa (hash: pd0z6Py0ljyQXcBSw2555Qfaeo+rQ0qMyZ2LLvuE2Pc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.crl rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ips7kjmTluj8a4YwntVzMMlOEX0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:35:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2427 (0x97b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A3CA, serialNumber=8A9B3B92399396E8FC6B86309ED57330C94E117D Validity Not Before: Apr 28 20:35:32 2025 GMT Not After : May 5 20:35:32 2025 GMT Subject: CN=680fe695-5209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:54:36:b4:7b:98:98:06:cf:05:05:3f:ab:f5: 06:fc:3e:8b:78:f6:71:cf:81:61:19:05:cb:dc:a9: a4:57:29:9c:75:f1:57:42:e8:d5:7e:fc:27:a6:0d: af:f9:71:23:98:4e:8c:43:fe:74:7a:ad:72:9d:bf: ad:f9:a1:93:65:85:e2:ae:78:13:a5:47:c9:d7:95: 3f:4a:33:d9:40:cd:d2:b4:09:23:de:7c:0b:7d:db: e8:2d:77:a6:94:0a:6b:0a:38:1d:74:28:14:f3:ee: ab:9c:17:14:8c:19:ac:06:9c:dd:c1:0d:3e:09:ab: 6a:56:f5:4c:3f:1f:02:f8:4b:81:9f:c2:7e:4e:3e: ec:b6:78:a7:d8:44:b0:b0:ff:cf:2e:89:fd:d3:57: ac:7c:4a:e6:66:32:ed:03:53:dd:4f:55:ee:52:49: 4a:12:f2:a3:9d:d8:92:90:de:86:89:61:4a:b8:f4: 86:23:59:a0:ed:65:d5:b1:1c:1b:5d:4c:84:6f:e2: dd:4c:45:31:4b:20:b8:e4:f2:13:9e:68:c4:27:7a: a4:dd:5c:b7:12:e5:5c:f8:9a:b7:4a:d6:ca:53:5b: ee:c7:89:0c:c6:a2:cd:84:db:ed:2b:0e:01:c6:7f: f6:25:c8:2c:2c:a1:02:f3:ec:26:af:1c:e3:d3:1c: af:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:E1:0F:39:E8:9F:D4:45:BC:A8:3D:61:C5:09:C2:BA:32:48:B9:47 X509v3 Authority Key Identifier: keyid:8A:9B:3B:92:39:93:96:E8:FC:6B:86:30:9E:D5:73:30:C9:4E:11:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ips7kjmTluj8a4YwntVzMMlOEX0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:85:f5:2f:52:fb:15:d4:41:25:58:74:49:e9:26:3c:a7:b4: 0a:69:74:56:75:3d:ef:9a:c3:4d:04:a1:4b:3d:82:b9:d4:50: 68:51:06:b8:1d:9e:1c:ae:4f:20:8a:f9:b1:b7:c4:65:82:39: 9b:87:6d:c7:c1:d8:01:5a:e2:6e:dd:c4:8f:a8:15:18:33:c8: 7a:ea:e8:92:cf:12:6f:d6:a7:5b:4d:c0:9e:06:6e:94:c4:32: db:6b:08:95:16:e9:61:e2:18:12:92:79:2d:5f:d3:65:27:43: 17:f5:d6:43:47:0a:cd:e7:1a:4e:be:ce:fe:e3:c7:8a:0e:16: aa:71:d9:89:29:79:b2:3e:a1:2a:25:a2:5a:cd:af:af:c8:2e: 67:0a:d7:58:54:e7:c0:d0:63:e1:a2:8d:e6:ab:24:94:af:80: bf:76:61:b5:bc:fb:71:d1:08:4f:a0:fb:43:33:c1:a1:81:c8: cd:ff:23:1a:0d:44:3b:48:2a:0f:86:ae:97:fc:6e:25:96:83: b9:49:25:e6:a6:e4:1c:94:9e:4e:37:51:27:d3:3f:c5:fb:96: 3c:5f:9d:e5:0b:0b:de:7b:5e:d2:28:53:a9:d5:fa:e6:35:b5: 06:97:9f:cf:19:22:59:5c:5f:c9:da:0d:eb:10:35:c5:6b:6b: 5e:61:ea:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUEzQ0ExMTAvBgNVBAUTKDhBOUIzQjkyMzk5Mzk2RThGQzZCODYzMDlFRDU3MzMw Qzk0RTExN0QwHhcNMjUwNDI4MjAzNTMyWhcNMjUwNTA1MjAzNTMyWjAYMRYwFAYD VQQDEw02ODBmZTY5NS01MjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy1Q2tHuYmAbPBQU/q/UG/D6LePZxz4FhGQXL3KmkVymcdfFXQujVfvwnpg2v +XEjmE6MQ/50eq1ynb+t+aGTZYXirngTpUfJ15U/SjPZQM3StAkj3nwLfdvoLXem lAprCjgddCgU8+6rnBcUjBmsBpzdwQ0+CatqVvVMPx8C+EuBn8J+Tj7stnin2ESw sP/PLon901esfErmZjLtA1PdT1XuUklKEvKjndiSkN6GiWFKuPSGI1mg7WXVsRwb XUyEb+LdTEUxSyC45PITnmjEJ3qk3Vy3EuVc+Jq3StbKU1vux4kMxqLNhNvtKw4B xn/2JcgsLKEC8+wmrxzj0xyv0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHDhDzno n9RFvKg9YcUJwroySLlHMB8GA1UdIwQYMBaAFIqbO5I5k5bo/GuGMJ7VczDJThF9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTNDQS81N0QyMzgwMjhG QTIxMUVBOEVDMDZFMUNDNEY5QUUwMi9pcHM3a2ptVGx1ajhhNFl3bnRWek1NbE9F WDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lwczdram1UbHVqOGE0WXdudFZ6TU1sT0VYMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTNDQS81N0QyMzgwMjhGQTIxMUVBOEVDMDZFMUNDNEY5QUUwMi9pcHM3a2ptVGx1 ajhhNFl3bnRWek1NbE9FWDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVhfUvUvsV1EElWHRJ6SY8p7QKaXRWdT3vmsNNBKFLPYK51FBoUQa4 HZ4crk8givmxt8Rlgjmbh23HwdgBWuJu3cSPqBUYM8h66uiSzxJv1qdbTcCeBm6U xDLbawiVFulh4hgSknktX9NlJ0MX9dZDRwrN5xpOvs7+48eKDhaqcdmJKXmyPqEq JaJaza+vyC5nCtdYVOfA0GPhoo3mqySUr4C/dmG1vPtx0QhPoPtDM8GhgcjN/yMa DUQ7SCoPhq6X/G4lloO5SSXmpuQclJ5ON1En0z/F+5Y8X53lCwvee17SKFOp1frm NbUGl5/PGSJZXF/J2g3rEDXFa2teYeog -----END CERTIFICATE-----Generated at Mon Apr 28 23:05:40 2025 by rpki-client on console.sobornost.net