$ rpki-client -vvf rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/3GIgCKihrUK-KiVJQ0ka-qhFSaU.mft File: 3GIgCKihrUK-KiVJQ0ka-qhFSaU.mft (raw, json) Hash identifier: yze/ECVgykftGGelW08X5chePkyezWve61xrjrD02Pg= Subject key identifier: 56:5C:F6:5D:71:C2:EB:EB:6E:75:E0:58:C9:E0:4E:F9:9E:35:E7:70 Authority key identifier: DC:62:20:08:A8:A1:AD:42:BE:2A:25:49:43:49:1A:FA:A8:45:49:A5 Certificate issuer: /CN=A911035A/serialNumber=DC622008A8A1AD42BE2A254943491AFAA84549A5 Certificate serial: 09E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GIgCKihrUK-KiVJQ0ka-qhFSaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/3GIgCKihrUK-KiVJQ0ka-qhFSaU.mft Manifest number: 09D7 Signing time: Mon 28 Apr 2025 20:22:13 +0000 Manifest this update: Mon 28 Apr 2025 20:22:13 +0000 Manifest next update: Mon 05 May 2025 20:22:13 +0000 Files and hashes: 1: 3GIgCKihrUK-KiVJQ0ka-qhFSaU.crl (hash: K6QfB5dqs5ebZ8IxvmMm1DSRpHMLlV7itv8xgiNimz8=) 2: 5B57754A026F11EDBE22EF64C4F9AE02.roa (hash: 8mDSez92eEkaglLsJMbn0fbrJK3EOKwOEODNJChdaCg=) 3: 5A472FBA026F11EDBE22EF64C4F9AE02.roa (hash: NFs1EDcO1yAz73VGI456tOjnaAawML/lh68ilrawz+Y=) 4: C1B3DE082BBE11EF809E1831C4F9AE02.roa (hash: tW1tMolm5x3GeEA1HyFZqPW/WUluhI939ppCe/JxxEw=) 5: E1935B7A36DD11EFB1E53717C4F9AE02.roa (hash: YrfvW4rspoah4qHdMhFX6/ILs8ePWmGD5xqevIlkW/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/3GIgCKihrUK-KiVJQ0ka-qhFSaU.crl rsync://rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/3GIgCKihrUK-KiVJQ0ka-qhFSaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GIgCKihrUK-KiVJQ0ka-qhFSaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:22:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2532 (0x9e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911035A, serialNumber=DC622008A8A1AD42BE2A254943491AFAA84549A5 Validity Not Before: Apr 28 20:22:13 2025 GMT Not After : May 5 20:22:13 2025 GMT Subject: CN=680fe375-feac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c0:ff:ab:51:53:a8:23:69:85:2a:75:4e:03: b9:bd:9b:81:a1:46:3f:b4:da:90:4c:c5:a9:bf:90: d8:d6:4e:89:f7:ce:bd:4b:c6:e6:7e:64:cf:92:7d: be:7f:a6:21:3d:17:a1:57:00:4a:b6:f1:93:53:b5: 4c:05:7d:d5:a6:12:99:ac:5c:42:c6:ea:36:9f:18: 19:b5:20:34:bd:78:67:44:6a:02:96:a8:08:65:00: 9d:03:cd:17:84:4b:c5:77:aa:fb:1a:ef:36:3e:ef: 94:22:08:b9:5f:ae:71:94:71:7e:03:41:91:02:89: be:32:fa:9f:63:7d:b7:ac:a6:c8:f8:dc:37:49:84: 69:5a:e0:a5:f9:9b:20:ff:8d:87:23:d6:b4:c6:fd: be:48:1e:3d:e0:b0:67:3c:8c:38:7d:8a:96:a9:b5: d5:ba:f6:df:65:70:4e:16:5b:b1:9a:04:72:ef:1f: 8a:82:e1:38:07:47:b8:59:cc:88:79:4c:b5:98:d3: 09:00:1a:1e:89:73:23:93:67:21:15:83:79:4f:68: 5d:75:5d:38:97:c6:65:84:a1:47:e0:ea:aa:47:9d: 72:5f:87:1e:dc:13:0c:3d:66:36:c1:ea:21:e3:17: 19:51:1d:7c:7d:a4:c3:8c:ba:25:99:d0:40:9b:71: f1:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:5C:F6:5D:71:C2:EB:EB:6E:75:E0:58:C9:E0:4E:F9:9E:35:E7:70 X509v3 Authority Key Identifier: keyid:DC:62:20:08:A8:A1:AD:42:BE:2A:25:49:43:49:1A:FA:A8:45:49:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/3GIgCKihrUK-KiVJQ0ka-qhFSaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GIgCKihrUK-KiVJQ0ka-qhFSaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/3GIgCKihrUK-KiVJQ0ka-qhFSaU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:a6:fa:ea:4c:f4:db:08:ce:e5:72:f6:7c:46:4d:5b:e6:f4: a4:23:14:6f:61:94:46:fb:17:5d:31:26:39:1c:36:d7:d5:45: fa:02:7b:67:56:87:5b:1a:93:3e:b6:4f:41:33:76:cd:3e:5a: 70:f0:fb:a7:a7:16:35:3d:04:5c:26:21:53:34:8c:2b:3e:f4: 43:4d:98:35:4e:08:08:f7:77:a2:c0:70:eb:a2:66:24:de:72: 68:7d:2b:a8:66:67:6b:26:51:eb:76:cc:47:07:f5:fb:86:70: 6f:9f:35:97:89:54:be:dc:8b:d3:f6:0f:ca:72:8a:85:ec:ac: ba:cc:fe:d8:06:cc:90:5b:37:32:95:56:d4:89:be:c3:a8:58: 48:f8:1c:ff:91:25:2e:8d:7b:63:0e:a0:d7:28:e6:44:09:8d: 05:37:cd:38:7d:fc:d1:e1:ab:69:2c:4c:e2:64:12:15:19:a8: 88:d5:76:f3:0a:05:c8:1f:8e:89:b4:fc:48:bc:2d:56:05:92: f1:a8:5f:e9:06:6c:e7:6c:5a:01:32:b8:21:a4:2f:7b:9f:5f: 6a:f5:f3:8a:94:94:69:19:c1:83:1e:dc:c2:c2:ee:ac:eb:34: ff:38:9e:c4:ab:6a:55:aa:2d:69:f2:b9:7c:89:0c:7d:dc:a7: f3:51:33:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTAzNUExMTAvBgNVBAUTKERDNjIyMDA4QThBMUFENDJCRTJBMjU0OTQzNDkxQUZB QTg0NTQ5QTUwHhcNMjUwNDI4MjAyMjEzWhcNMjUwNTA1MjAyMjEzWjAYMRYwFAYD VQQDEw02ODBmZTM3NS1mZWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu8D/q1FTqCNphSp1TgO5vZuBoUY/tNqQTMWpv5DY1k6J9869S8bmfmTPkn2+ f6YhPRehVwBKtvGTU7VMBX3VphKZrFxCxuo2nxgZtSA0vXhnRGoClqgIZQCdA80X hEvFd6r7Gu82Pu+UIgi5X65xlHF+A0GRAom+MvqfY323rKbI+Nw3SYRpWuCl+Zsg /42HI9a0xv2+SB494LBnPIw4fYqWqbXVuvbfZXBOFluxmgRy7x+KguE4B0e4WcyI eUy1mNMJABoeiXMjk2chFYN5T2hddV04l8ZlhKFH4OqqR51yX4ce3BMMPWY2weoh 4xcZUR18faTDjLolmdBAm3Hx6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFZc9l1x wuvrbnXgWMngTvmeNedwMB8GA1UdIwQYMBaAFNxiIAiooa1CviolSUNJGvqoRUml MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDM1QS8zQzYwOUI0NDdD NjYxMUVBODA4OUYzNTFDNEY5QUUwMi8zR0lnQ0tpaHJVSy1LaVZKUTBrYS1xaEZT YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNHSWdDS2loclVLLUtpVkpRMGthLXFoRlNhVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDM1QS8zQzYwOUI0NDdDNjYxMUVBODA4OUYzNTFDNEY5QUUwMi8zR0lnQ0tpaHJV Sy1LaVZKUTBrYS1xaEZTYVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIpvrqTPTbCM7lcvZ8Rk1b5vSkIxRvYZRG+xddMSY5HDbX1UX6Antn VodbGpM+tk9BM3bNPlpw8PunpxY1PQRcJiFTNIwrPvRDTZg1TggI93eiwHDromYk 3nJofSuoZmdrJlHrdsxHB/X7hnBvnzWXiVS+3IvT9g/KcoqF7Ky6zP7YBsyQWzcy lVbUib7DqFhI+Bz/kSUujXtjDqDXKOZECY0FN804ffzR4atpLEziZBIVGaiI1Xbz CgXIH46JtPxIvC1WBZLxqF/pBmznbFoBMrghpC97n19q9fOKlJRpGcGDHtzCwu6s 6zT/OJ7Eq2pVqi1p8rl8iQx93KfzUTP7 -----END CERTIFICATE-----Generated at Mon Apr 28 23:04:45 2025 by rpki-client on console.sobornost.net