$ rpki-client -vvf rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft File: h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft (raw, json) Hash identifier: crp3WxqsZtptkQ7gckxX8Ru3trjBKCmYkqzfvpOUhhg= Subject key identifier: 22:DC:7F:1A:C0:DD:A7:D8:46:30:DC:B6:88:1C:B7:DC:FB:70:B3:32 Authority key identifier: 87:DA:44:A4:CF:83:9C:38:81:C6:BC:38:68:3C:CD:C3:08:CA:7C:E9 Certificate issuer: /CN=A919D180/serialNumber=87DA44A4CF839C3881C6BC38683CCDC308CA7CE9 Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9pEpM-DnDiBxrw4aDzNwwjKfOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft Manifest number: 42 Signing time: Sun 27 Apr 2025 06:26:11 +0000 Manifest this update: Sun 27 Apr 2025 06:26:10 +0000 Manifest next update: Sun 04 May 2025 06:26:10 +0000 Files and hashes: 1: h9pEpM-DnDiBxrw4aDzNwwjKfOk.crl (hash: N4KoLgSTg18hIH55ZdUSG0MTeTz6ZYXde7GSiKtkdLs=) 2: C8D5160AE75E11EF97E59E40C4F9AE02.roa (hash: usgzG5l4Fc/vVVRb6d9DCRrnc0s/zMN8s4ksanz/FtM=) 3: 8A991E5AD6DC11EF9E9B2B15C4F9AE02.roa (hash: FHrz83TvBf0PQed/UPRQj7z6Reuifr4TTzu0H0Cz+Nc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.crl rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9pEpM-DnDiBxrw4aDzNwwjKfOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D180, serialNumber=87DA44A4CF839C3881C6BC38683CCDC308CA7CE9 Validity Not Before: Apr 27 06:26:10 2025 GMT Not After : May 4 06:26:10 2025 GMT Subject: CN=680dce02-b71d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:35:15:a6:b2:95:c1:53:91:9a:e7:8c:4a:1b: d0:c9:82:c3:08:b2:8d:a3:c5:77:11:de:db:41:0d: 13:f9:ab:e8:7c:0f:59:f1:46:fd:57:7e:91:41:5d: af:c7:3d:71:ef:54:c0:46:95:d8:fe:b0:a2:ac:f8: 5f:31:47:97:26:6d:14:44:1d:7f:19:3b:25:c8:20: 6d:8e:0b:d8:93:33:48:ad:6e:e3:0c:1b:7d:4d:30: 21:86:79:c2:a2:79:a5:36:50:54:e0:f4:1f:aa:a8: 54:4e:80:1e:54:8a:fe:ac:aa:47:42:99:ff:2e:6b: 82:54:78:72:1c:83:f5:c8:3c:29:0a:0d:10:b3:63: a4:56:3b:36:3b:32:0c:ab:97:31:f3:00:d7:4f:78: 96:8d:2d:1b:d9:2a:d8:d2:2f:cf:23:f0:62:c9:20: 9d:fe:e0:51:d9:47:fc:eb:7b:67:29:2d:6a:03:5d: 02:b4:05:c2:62:2d:00:9c:a3:1b:4f:29:38:e9:82: 12:c7:77:67:ac:eb:8d:43:94:4d:66:28:ee:37:a8: 09:90:9b:3f:1f:fc:d6:ff:ac:a3:a6:27:01:a7:e1: f0:cb:ca:d9:ff:c3:40:c8:3d:c1:8e:9e:df:7d:6d: d6:cf:47:47:88:6e:8e:5d:8e:c9:3d:a0:ec:8f:d3: 36:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:DC:7F:1A:C0:DD:A7:D8:46:30:DC:B6:88:1C:B7:DC:FB:70:B3:32 X509v3 Authority Key Identifier: keyid:87:DA:44:A4:CF:83:9C:38:81:C6:BC:38:68:3C:CD:C3:08:CA:7C:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9pEpM-DnDiBxrw4aDzNwwjKfOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:2c:e4:86:d8:8e:84:df:9a:3e:eb:1f:d1:d5:95:24:06:65: bd:07:b7:6e:a8:a0:8c:c5:8d:70:14:13:ff:b7:1c:85:0e:9c: 81:ac:83:af:49:6b:4a:eb:c5:6b:ad:d1:e7:6a:cc:b9:09:77: dc:ef:b9:4a:0a:e5:5b:11:5c:37:cc:1e:72:d6:7c:c2:98:bb: 81:b9:b8:7c:a4:88:91:c9:30:5f:c1:5b:f7:53:95:67:0a:5e: 8c:6b:e2:86:ed:0f:c7:9a:84:ec:45:9d:3e:63:7e:70:cf:8f: 3d:b6:91:ca:39:07:bd:43:1c:93:f5:13:c1:b0:95:01:5e:f8: 66:f5:a5:34:91:6c:53:14:5b:5f:fd:4c:44:1f:be:1a:9c:32: 54:02:29:4e:bf:36:12:01:3c:d8:2c:d2:71:9d:d0:4d:95:f2: 29:af:2e:83:13:71:59:c0:20:99:40:38:5d:ae:c5:0f:0c:98: df:d6:90:22:69:92:68:42:71:95:38:1f:24:2d:55:c8:87:d2: 3a:8a:60:46:dc:9e:22:e2:2b:a0:85:2c:10:9b:13:c1:ee:45: 5a:e9:82:bc:2e:5e:c1:39:ee:97:68:29:1b:89:af:45:c5:dc: a9:a1:01:6c:b7:42:fa:6b:50:51:0d:b2:27:ed:0d:53:ea:f7: 66:fa:f4:3c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RDE4MDExMC8GA1UEBRMoODdEQTQ0QTRDRjgzOUMzODgxQzZCQzM4NjgzQ0NEQzMw OENBN0NFOTAeFw0yNTA0MjcwNjI2MTBaFw0yNTA1MDQwNjI2MTBaMBgxFjAUBgNV BAMTDTY4MGRjZTAyLWI3MWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGNRWmspXBU5Ga54xKG9DJgsMIso2jxXcR3ttBDRP5q+h8D1nxRv1XfpFBXa/H PXHvVMBGldj+sKKs+F8xR5cmbRREHX8ZOyXIIG2OC9iTM0itbuMMG31NMCGGecKi eaU2UFTg9B+qqFROgB5Uiv6sqkdCmf8ua4JUeHIcg/XIPCkKDRCzY6RWOzY7Mgyr lzHzANdPeJaNLRvZKtjSL88j8GLJIJ3+4FHZR/zre2cpLWoDXQK0BcJiLQCcoxtP KTjpghLHd2es641DlE1mKO43qAmQmz8f/Nb/rKOmJwGn4fDLytn/w0DIPcGOnt99 bdbPR0eIbo5djsk9oOyP0zbhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUItx/GsDd p9hGMNy2iBy33PtwszIwHwYDVR0jBBgwFoAUh9pEpM+DnDiBxrw4aDzNwwjKfOkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlEMTgwLzc3NDI4N0YyRDZD NzExRUZBM0UxRDgxQ0M0RjlBRTAyL2g5cEVwTS1EbkRpQnhydzRhRHpOd3dqS2ZP ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaDlwRXBNLURuRGlCeHJ3NGFEek53d2pLZk9rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlE MTgwLzc3NDI4N0YyRDZDNzExRUZBM0UxRDgxQ0M0RjlBRTAyL2g5cEVwTS1EbkRp QnhydzRhRHpOd3dqS2ZPay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHws5IbYjoTfmj7rH9HVlSQGZb0Ht26ooIzFjXAUE/+3HIUOnIGsg69J a0rrxWut0edqzLkJd9zvuUoK5VsRXDfMHnLWfMKYu4G5uHykiJHJMF/BW/dTlWcK Xoxr4obtD8eahOxFnT5jfnDPjz22kco5B71DHJP1E8GwlQFe+Gb1pTSRbFMUW1/9 TEQfvhqcMlQCKU6/NhIBPNgs0nGd0E2V8imvLoMTcVnAIJlAOF2uxQ8MmN/WkCJp kmhCcZU4HyQtVciH0jqKYEbcniLiK6CFLBCbE8HuRVrpgrwuXsE57pdoKRuJr0XF 3KmhAWy3QvprUFENsiftDVPq92b69Dw= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:52 2025 by rpki-client on console.sobornost.net