$ rpki-client -vvf rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft File: 9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft (raw, json) Hash identifier: Cuz+7hhheagQpURyRnuIjp/wpcwIuyrrmGDKQttQbCA= Subject key identifier: 75:96:01:88:70:0B:35:EB:DA:C1:62:5A:C0:2E:0D:17:8E:FF:19:CB Authority key identifier: F5:39:83:B7:AB:83:86:C6:99:58:78:4F:FA:F0:E6:97:26:24:57:A7 Certificate issuer: /CN=A919EAAD/serialNumber=F53983B7AB8386C69958784FFAF0E697262457A7 Certificate serial: 0C32 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9TmDt6uDhsaZWHhP-vDmlyYkV6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft Manifest number: 0C25 Signing time: Mon 28 Apr 2025 18:52:35 +0000 Manifest this update: Mon 28 Apr 2025 18:52:34 +0000 Manifest next update: Mon 05 May 2025 18:52:34 +0000 Files and hashes: 1: 9TmDt6uDhsaZWHhP-vDmlyYkV6c.crl (hash: JMuN81qHhrYfqPkgVMTCdmH26tPRafMDyvCeS7oH44E=) 2: 97DC58040B5B11EAB69DC64FC4F9AE02.roa (hash: Y+cj8aPzkN19TGx3f4b/9SfnrM0Zcz/vz+dPbozawXQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.crl rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9TmDt6uDhsaZWHhP-vDmlyYkV6c.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 14:50:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3122 (0xc32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EAAD, serialNumber=F53983B7AB8386C69958784FFAF0E697262457A7 Validity Not Before: Apr 28 18:52:34 2025 GMT Not After : May 5 18:52:34 2025 GMT Subject: CN=680fce72-67e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:30:94:61:ee:c5:5f:e3:4a:7f:3f:9d:49:05: f6:6d:b9:6e:7f:24:b5:3a:50:6d:35:ea:c0:2a:1b: fc:66:4c:ee:bb:28:59:d9:49:6a:e5:7c:dc:26:8b: 2e:f2:92:bf:21:ae:ab:02:0c:65:95:fd:89:2e:94: cd:56:92:c1:d8:0f:9a:7f:c2:5c:3b:44:42:c0:e1: 1f:87:9e:9a:18:78:b3:ad:25:c5:29:b2:ed:52:e2: 21:5a:04:45:a7:ac:64:b6:4b:9e:64:b8:48:5e:e4: a5:b0:aa:9e:1c:25:45:35:e8:c7:31:96:27:8e:08: 57:66:3d:13:52:b2:8c:bb:a6:99:83:35:a7:49:e2: 4f:5d:03:00:d4:b7:86:c6:f3:8c:d4:0a:b2:52:b0: 59:5a:94:c6:28:dc:d3:38:74:38:20:78:9f:88:bb: 6c:4f:bb:ed:b3:61:4c:fc:36:f0:f5:4a:4f:cf:f7: 3d:b2:30:31:1e:60:36:f8:ce:a0:11:44:4e:67:24: ca:5c:5e:c6:08:09:70:06:22:48:91:20:ce:3b:c8: 04:0a:0f:ab:09:75:b5:17:b4:7f:de:76:d6:9b:98: 8b:da:e3:45:6d:35:9b:1e:17:f9:14:5e:c4:d2:81: bc:46:be:fd:3b:56:8a:92:d4:48:dd:75:a2:4d:32: be:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:96:01:88:70:0B:35:EB:DA:C1:62:5A:C0:2E:0D:17:8E:FF:19:CB X509v3 Authority Key Identifier: keyid:F5:39:83:B7:AB:83:86:C6:99:58:78:4F:FA:F0:E6:97:26:24:57:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9TmDt6uDhsaZWHhP-vDmlyYkV6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:a7:5c:63:d9:7f:ad:78:e7:78:9b:05:eb:65:70:3a:aa:5e: 17:f7:f0:90:2a:17:97:57:26:f5:e2:3c:4e:b9:ce:79:9d:3a: 24:20:70:ca:21:60:02:ab:13:44:f6:2c:78:17:ec:da:80:fb: dd:64:65:5f:1b:94:e5:27:36:25:7a:09:27:c2:56:ac:41:88: 34:16:c5:be:a7:f4:fe:65:52:9c:be:ad:81:fa:1e:f6:76:32: e8:fc:bd:07:cb:35:ae:42:f8:6d:e4:7c:73:13:63:a4:5c:ed: bb:10:d3:b8:99:1e:ef:96:47:0d:3d:ab:f9:f4:f3:c8:86:d7: 3a:e8:0f:cb:42:8f:2d:2d:b7:82:32:36:9e:98:c4:1e:d6:1a: 96:b3:88:99:1e:fe:95:d8:74:ca:e2:5a:0c:b0:f1:f1:ee:23: 3e:98:b8:84:87:d4:d6:83:53:53:03:7c:ee:a2:65:f9:6f:85: e5:49:9b:41:ad:de:c9:dd:c2:ff:be:00:5b:13:d3:2f:e1:81: ea:0d:8a:5a:ce:43:04:86:e7:03:24:b9:56:76:4c:d4:27:9e: 4f:4c:ed:c1:09:13:f0:67:b1:3c:23:4f:08:97:08:0a:96:9d: 61:cc:bd:c8:fa:dd:4d:58:de:7b:6b:80:1f:3b:0b:ae:cd:46: df:81:b9:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVBQUQxMTAvBgNVBAUTKEY1Mzk4M0I3QUI4Mzg2QzY5OTU4Nzg0RkZBRjBFNjk3 MjYyNDU3QTcwHhcNMjUwNDI4MTg1MjM0WhcNMjUwNTA1MTg1MjM0WjAYMRYwFAYD VQQDEw02ODBmY2U3Mi02N2U0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvzCUYe7FX+NKfz+dSQX2bblufyS1OlBtNerAKhv8ZkzuuyhZ2Ulq5XzcJosu 8pK/Ia6rAgxllf2JLpTNVpLB2A+af8JcO0RCwOEfh56aGHizrSXFKbLtUuIhWgRF p6xktkueZLhIXuSlsKqeHCVFNejHMZYnjghXZj0TUrKMu6aZgzWnSeJPXQMA1LeG xvOM1AqyUrBZWpTGKNzTOHQ4IHifiLtsT7vts2FM/Dbw9UpPz/c9sjAxHmA2+M6g EUROZyTKXF7GCAlwBiJIkSDOO8gECg+rCXW1F7R/3nbWm5iL2uNFbTWbHhf5FF7E 0oG8Rr79O1aKktRI3XWiTTK+RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHWWAYhw CzXr2sFiWsAuDReO/xnLMB8GA1UdIwQYMBaAFPU5g7erg4bGmVh4T/rw5pcmJFen MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUFBRC84N0MzMTY4ODA5 RDUxMUVBQjc2QzczMTdDNEY5QUUwMi85VG1EdDZ1RGhzYVpXSGhQLXZEbWx5WWtW NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzlUbUR0NnVEaHNhWldIaFAtdkRtbHlZa1Y2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUFBRC84N0MzMTY4ODA5RDUxMUVBQjc2QzczMTdDNEY5QUUwMi85VG1EdDZ1RGhz YVpXSGhQLXZEbWx5WWtWNmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmp1xj2X+teOd4mwXrZXA6ql4X9/CQKheXVyb14jxOuc55nTokIHDK IWACqxNE9ix4F+zagPvdZGVfG5TlJzYlegknwlasQYg0FsW+p/T+ZVKcvq2B+h72 djLo/L0HyzWuQvht5HxzE2OkXO27ENO4mR7vlkcNPav59PPIhtc66A/LQo8tLbeC MjaemMQe1hqWs4iZHv6V2HTK4loMsPHx7iM+mLiEh9TWg1NTA3zuomX5b4XlSZtB rd7J3cL/vgBbE9Mv4YHqDYpazkMEhucDJLlWdkzUJ55PTO3BCRPwZ7E8I08IlwgK lp1hzL3I+t1NWN57a4AfOwuuzUbfgbmu -----END CERTIFICATE-----Generated at Mon Apr 28 23:05:41 2025 by rpki-client on console.sobornost.net