$ rpki-client -vvf rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft File: S9mZS8XP-ey2aDyU3G7s1e7uDng.mft (raw, json) Hash identifier: oEWFlRhmaqfamsuI2KV6J8StUWxYGflhaAtkM1EuRSc= Subject key identifier: 71:0D:D2:3C:59:7C:06:5D:BF:8E:99:EB:CF:C8:83:F3:2E:18:85:49 Authority key identifier: 4B:D9:99:4B:C5:CF:F9:EC:B6:68:3C:94:DC:6E:EC:D5:EE:EE:0E:78 Certificate issuer: /CN=A91E00FC/serialNumber=4BD9994BC5CFF9ECB6683C94DC6EECD5EEEE0E78 Certificate serial: 09DC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S9mZS8XP-ey2aDyU3G7s1e7uDng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft Manifest number: 09D0 Signing time: Thu 24 Apr 2025 19:51:45 +0000 Manifest this update: Thu 24 Apr 2025 19:51:44 +0000 Manifest next update: Thu 01 May 2025 19:51:44 +0000 Files and hashes: 1: S9mZS8XP-ey2aDyU3G7s1e7uDng.crl (hash: EzcnChDbFhimdr7W4o9CWL5PjHFDM2PFyvOL7icv4Tk=) 2: CD26CAC0431611EE80B53A75C4F9AE02.roa (hash: PN8KDNG+lfB8OMD8c5W9WAaHU3MIVkDLw5J7GhvF+L4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.crl rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S9mZS8XP-ey2aDyU3G7s1e7uDng.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:06:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2524 (0x9dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E00FC, serialNumber=4BD9994BC5CFF9ECB6683C94DC6EECD5EEEE0E78 Validity Not Before: Apr 24 19:51:44 2025 GMT Not After : May 1 19:51:44 2025 GMT Subject: CN=680a9650-0422 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c9:16:19:9f:96:4e:ec:0c:71:c3:95:4c:ba: 4e:c1:18:35:3c:df:9b:7b:97:ee:eb:cc:3e:24:2b: 20:9d:76:2e:d4:9e:3e:6c:64:76:5d:fa:18:50:6c: 9b:93:13:d6:c1:59:ce:ee:b9:5c:71:45:46:b5:a8: c9:23:21:e4:a7:84:31:ad:d2:d3:d2:d4:ea:6a:06: 9c:5a:a8:b4:14:d9:ce:21:87:b4:97:d7:ff:bf:ad: 92:c2:8b:95:53:b2:d4:ac:d8:bb:49:2e:fb:9c:3c: 04:bf:6e:8c:fa:d7:3e:75:dd:33:c9:1e:f7:2a:7d: 30:e7:68:83:a2:4a:3b:57:cc:db:8a:ce:0d:d1:ca: 7b:61:43:49:48:d9:dd:39:01:cd:e8:a6:54:cd:40: a1:11:39:14:22:9f:b7:da:26:c4:2f:93:21:24:81: c5:e1:30:43:66:f9:45:58:99:d2:6c:4b:ad:18:ca: 40:99:13:80:c3:2e:d7:7d:08:7d:fc:c3:25:18:86: a9:3f:c0:28:7e:41:24:49:1b:58:39:69:6d:58:d9: 34:83:74:6a:c5:a9:00:fc:f2:91:a1:c4:00:3c:4c: 1c:8d:02:1a:6b:3e:f1:8e:fd:87:ea:fb:6c:63:53: ca:fe:4c:4f:40:05:60:9c:4b:82:b8:aa:15:eb:cf: c7:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:0D:D2:3C:59:7C:06:5D:BF:8E:99:EB:CF:C8:83:F3:2E:18:85:49 X509v3 Authority Key Identifier: keyid:4B:D9:99:4B:C5:CF:F9:EC:B6:68:3C:94:DC:6E:EC:D5:EE:EE:0E:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S9mZS8XP-ey2aDyU3G7s1e7uDng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:83:c3:d7:fa:85:82:0a:07:d3:6a:f1:61:be:9f:f1:fc:a8: 90:b4:c8:81:eb:01:f5:69:50:e8:f1:1d:16:71:a7:13:33:dc: e9:19:95:2c:c4:d9:62:3d:0e:6e:28:05:46:68:ac:25:8a:0a: e7:0f:63:22:28:7e:b6:8c:57:e7:31:31:7d:10:07:d5:61:53: b4:35:4d:41:cc:5a:ad:50:34:0f:96:45:c1:1a:fe:7b:3c:b1: 41:ab:66:d1:b8:ee:41:17:99:97:b9:28:76:25:ab:9e:0a:8f: 0a:be:c1:cb:37:43:fe:10:d6:31:f6:56:03:87:50:90:52:55: 40:14:f2:ed:53:15:08:b9:ba:91:d1:6b:db:75:1d:e5:c6:f6: 9d:15:fe:ea:1e:89:77:d8:15:9e:6f:96:9e:d7:b5:3e:3f:bd: ed:8a:6f:54:e6:67:46:0a:14:ea:63:21:fb:8e:64:45:12:0b: a5:d7:9a:f1:a6:93:4c:61:57:52:7e:bf:62:57:39:49:af:79: e2:04:4c:58:2d:e0:3b:21:a5:90:4a:0c:cf:1b:ee:51:40:ec: a5:53:92:a7:75:2d:98:1c:35:d3:d4:31:51:ef:fd:d0:13:93: 8d:85:a1:2c:d2:b9:9a:44:83:58:8d:dd:5a:81:11:6e:95:68: 32:48:11:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAwRkMxMTAvBgNVBAUTKDRCRDk5OTRCQzVDRkY5RUNCNjY4M0M5NERDNkVFQ0Q1 RUVFRTBFNzgwHhcNMjUwNDI0MTk1MTQ0WhcNMjUwNTAxMTk1MTQ0WjAYMRYwFAYD VQQDEw02ODBhOTY1MC0wNDIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsMkWGZ+WTuwMccOVTLpOwRg1PN+be5fu68w+JCsgnXYu1J4+bGR2XfoYUGyb kxPWwVnO7rlccUVGtajJIyHkp4QxrdLT0tTqagacWqi0FNnOIYe0l9f/v62SwouV U7LUrNi7SS77nDwEv26M+tc+dd0zyR73Kn0w52iDoko7V8zbis4N0cp7YUNJSNnd OQHN6KZUzUChETkUIp+32ibEL5MhJIHF4TBDZvlFWJnSbEutGMpAmROAwy7XfQh9 /MMlGIapP8AofkEkSRtYOWltWNk0g3RqxakA/PKRocQAPEwcjQIaaz7xjv2H6vts Y1PK/kxPQAVgnEuCuKoV68/HywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHEN0jxZ fAZdv46Z68/Ig/MuGIVJMB8GA1UdIwQYMBaAFEvZmUvFz/nstmg8lNxu7NXu7g54 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDBGQy81NUYyQzRDNjdG MkYxMUVBQURGNEJGNkFDNEY5QUUwMi9TOW1aUzhYUC1leTJhRHlVM0c3czFlN3VE bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1M5bVpTOFhQLWV5MmFEeVUzRzdzMWU3dURuZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDBGQy81NUYyQzRDNjdGMkYxMUVBQURGNEJGNkFDNEY5QUUwMi9TOW1aUzhYUC1l eTJhRHlVM0c3czFlN3VEbmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsg8PX+oWCCgfTavFhvp/x/KiQtMiB6wH1aVDo8R0WcacTM9zpGZUs xNliPQ5uKAVGaKwligrnD2MiKH62jFfnMTF9EAfVYVO0NU1BzFqtUDQPlkXBGv57 PLFBq2bRuO5BF5mXuSh2JaueCo8KvsHLN0P+ENYx9lYDh1CQUlVAFPLtUxUIubqR 0WvbdR3lxvadFf7qHol32BWeb5ae17U+P73tim9U5mdGChTqYyH7jmRFEgul15rx ppNMYVdSfr9iVzlJr3niBExYLeA7IaWQSgzPG+5RQOylU5KndS2YHDXT1DFR7/3Q E5ONhaEs0rmaRINYjd1agRFulWgySBHZ -----END CERTIFICATE-----Generated at Fri Apr 25 00:08:33 2025 by rpki-client on console.sobornost.net