$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.mft File: 8iz473at_fLPnv7b7BITSIY1b00.mft (raw, json) Hash identifier: cbF7HM0sKkL5uVuAff4rsdwHvsa4TU2AKu6XvyJz5xE= Subject key identifier: 9B:3A:04:6D:82:61:68:B2:F6:1C:11:46:96:EB:58:7C:3A:1F:4C:60 Authority key identifier: F2:2C:F8:EF:76:AD:FD:F2:CF:9E:FE:DB:EC:12:13:48:86:35:6F:4D Certificate issuer: /CN=A91E1604/serialNumber=F22CF8EF76ADFDF2CF9EFEDBEC12134886356F4D Certificate serial: 9C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8iz473at_fLPnv7b7BITSIY1b00.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.mft Manifest number: 9A Signing time: Sun 27 Apr 2025 05:10:21 +0000 Manifest this update: Sun 27 Apr 2025 05:10:20 +0000 Manifest next update: Sun 04 May 2025 05:10:20 +0000 Files and hashes: 1: 8iz473at_fLPnv7b7BITSIY1b00.crl (hash: 8H1l7FLiWMI+GrPze+Un/kpEOsBQlinK/b0t4IcW0Bc=) 2: E36214403D0011EFAD623342C4F9AE02.roa (hash: 420VAJueRLeEIyuOExcHcsg4aUQyw3PTMA6zp5xTQ8U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.crl rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8iz473at_fLPnv7b7BITSIY1b00.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 156 (0x9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1604, serialNumber=F22CF8EF76ADFDF2CF9EFEDBEC12134886356F4D Validity Not Before: Apr 27 05:10:20 2025 GMT Not After : May 4 05:10:20 2025 GMT Subject: CN=680dbc3c-d0d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b3:a3:e5:0e:17:1a:34:c3:90:e1:40:a1:2b: c1:3c:66:3a:30:45:f5:0f:86:77:4d:22:52:c3:29: a2:d4:6c:fc:ec:f7:50:cf:2f:4b:53:cd:af:73:e1: c4:72:eb:bc:8d:9d:0f:cb:8a:4d:a6:88:44:62:6e: cc:08:99:1a:e5:0d:99:b0:c9:9f:39:54:97:34:ff: 71:b7:9b:f0:db:06:40:0e:44:e2:0c:19:bb:8a:46: e2:8a:26:9a:14:b3:79:ab:6d:27:f9:95:73:d7:c2: fd:e8:1d:6b:8d:f1:e7:4c:09:3f:83:1f:e9:e7:24: 15:ad:df:5c:d1:62:94:af:25:0e:15:4c:75:f2:22: 1c:bd:30:aa:7f:24:85:ca:84:b2:96:a0:29:b6:e7: b9:dc:d8:65:c2:03:78:05:70:03:a8:e4:0d:06:95: 96:b6:fb:ea:a7:62:cf:01:79:71:df:9a:cc:b5:db: 96:f7:6b:64:06:6a:84:ee:f7:ef:ac:62:eb:cf:0d: 76:be:bb:bb:77:39:1a:ce:bd:c2:bc:75:ea:91:b8: 47:6e:69:1a:a9:21:f6:9f:45:2f:c6:fe:22:fa:07: 34:3a:22:c3:90:67:ea:97:73:5a:be:a2:82:2c:7c: 9e:08:ab:6a:e4:03:b3:23:8b:90:0d:46:ee:11:ef: 95:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:3A:04:6D:82:61:68:B2:F6:1C:11:46:96:EB:58:7C:3A:1F:4C:60 X509v3 Authority Key Identifier: keyid:F2:2C:F8:EF:76:AD:FD:F2:CF:9E:FE:DB:EC:12:13:48:86:35:6F:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8iz473at_fLPnv7b7BITSIY1b00.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:e2:54:69:00:54:cd:68:7a:05:3f:42:c8:a3:16:e8:61:9c: 86:51:6e:a7:0f:f0:dc:5c:17:47:0c:78:22:fa:f5:1d:d0:ff: 19:ea:46:f3:9f:10:87:be:03:78:a8:56:b0:9c:14:5e:65:69: f8:03:6f:df:c8:72:2a:4d:55:83:c6:ce:b4:34:bd:4b:43:1d: aa:a3:95:a6:8a:e3:bc:b0:c5:5f:f8:c6:c4:87:2b:1d:47:64: a9:fc:99:f1:f0:11:0c:81:a4:7b:a5:2d:d6:45:f1:b5:cd:d0: 0a:cd:00:7e:b7:d1:c7:1c:cd:ef:96:c0:46:d6:18:b5:43:25: 85:83:af:83:a7:81:c7:8c:87:2c:8c:ce:89:68:3d:65:f3:ba: cf:0b:2d:de:39:c2:a2:80:74:28:10:33:c4:2a:f3:a1:9e:df: b3:7a:2e:1b:aa:e0:b6:8d:5f:5a:25:22:5d:5d:26:84:66:04: 9d:21:a1:c9:34:04:05:b5:70:2c:cb:ad:cf:3a:97:3c:1e:27: f6:d1:c2:58:9e:6f:c8:89:0d:d2:86:16:e3:40:2a:26:42:d0: 5c:70:17:fa:76:f8:c5:25:87:c0:ab:bd:57:0a:97:51:b1:1b: 94:85:7d:4f:f2:ba:27:db:53:49:d9:f1:70:82:fc:40:5c:c3: 73:aa:ce:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE2MDQxMTAvBgNVBAUTKEYyMkNGOEVGNzZBREZERjJDRjlFRkVEQkVDMTIxMzQ4 ODYzNTZGNEQwHhcNMjUwNDI3MDUxMDIwWhcNMjUwNTA0MDUxMDIwWjAYMRYwFAYD VQQDEw02ODBkYmMzYy1kMGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvLOj5Q4XGjTDkOFAoSvBPGY6MEX1D4Z3TSJSwymi1Gz87PdQzy9LU82vc+HE cuu8jZ0Py4pNpohEYm7MCJka5Q2ZsMmfOVSXNP9xt5vw2wZADkTiDBm7ikbiiiaa FLN5q20n+ZVz18L96B1rjfHnTAk/gx/p5yQVrd9c0WKUryUOFUx18iIcvTCqfySF yoSylqAptue53NhlwgN4BXADqOQNBpWWtvvqp2LPAXlx35rMtduW92tkBmqE7vfv rGLrzw12vru7dzkazr3CvHXqkbhHbmkaqSH2n0Uvxv4i+gc0OiLDkGfql3NavqKC LHyeCKtq5AOzI4uQDUbuEe+V8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJs6BG2C YWiy9hwRRpbrWHw6H0xgMB8GA1UdIwQYMBaAFPIs+O92rf3yz57+2+wSE0iGNW9N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTYwNC8wOUExMTIzNDND RUIxMUVGOTRFMjRGNTlDNEY5QUUwMi84aXo0NzNhdF9mTFBudjdiN0JJVFNJWTFi MDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzhpejQ3M2F0X2ZMUG52N2I3QklUU0lZMWIwMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTYwNC8wOUExMTIzNDNDRUIxMUVGOTRFMjRGNTlDNEY5QUUwMi84aXo0NzNhdF9m TFBudjdiN0JJVFNJWTFiMDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAR4lRpAFTNaHoFP0LIoxboYZyGUW6nD/DcXBdHDHgi+vUd0P8Z6kbz nxCHvgN4qFawnBReZWn4A2/fyHIqTVWDxs60NL1LQx2qo5WmiuO8sMVf+MbEhysd R2Sp/Jnx8BEMgaR7pS3WRfG1zdAKzQB+t9HHHM3vlsBG1hi1QyWFg6+Dp4HHjIcs jM6JaD1l87rPCy3eOcKigHQoEDPEKvOhnt+zei4bquC2jV9aJSJdXSaEZgSdIaHJ NAQFtXAsy63POpc8Hif20cJYnm/IiQ3ShhbjQComQtBccBf6dvjFJYfAq71XCpdR sRuUhX1P8ron21NJ2fFwgvxAXMNzqs74 -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:57 2025 by rpki-client on console.sobornost.net