$ rpki-client -vvf rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.mft File: k8C6F5rKocB50zxmk_RGcBBPzZg.mft (raw, json) Hash identifier: lq4eM5msUCAsNXq+qMMlb2vSQzNr4bxnoC4znABTMF8= Subject key identifier: 50:61:84:7E:3B:45:A6:1F:F5:7D:52:67:95:BB:4E:04:33:40:B3:93 Authority key identifier: 93:C0:BA:17:9A:CA:A1:C0:79:D3:3C:66:93:F4:46:70:10:4F:CD:98 Certificate issuer: /CN=A9111788/serialNumber=93C0BA179ACAA1C079D33C6693F44670104FCD98 Certificate serial: 01D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8C6F5rKocB50zxmk_RGcBBPzZg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.mft Manifest number: 01D4 Signing time: Sun 27 Apr 2025 01:51:34 +0000 Manifest this update: Sun 27 Apr 2025 01:51:33 +0000 Manifest next update: Sun 04 May 2025 01:51:33 +0000 Files and hashes: 1: k8C6F5rKocB50zxmk_RGcBBPzZg.crl (hash: MQRM8fVoZf1CTBxnGj2BQ/0QLq025vg7fVQ2L1y7N1M=) 2: 6F57F77659AF11EDB5683587C4F9AE02.roa (hash: Hz4MNEz2iKlBVZUTwXmU+LHuAvQlzMxEja9uy8vjPy4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.crl rsync://rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8C6F5rKocB50zxmk_RGcBBPzZg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 01:51:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 472 (0x1d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111788, serialNumber=93C0BA179ACAA1C079D33C6693F44670104FCD98 Validity Not Before: Apr 27 01:51:33 2025 GMT Not After : May 4 01:51:33 2025 GMT Subject: CN=680d8da6-4c7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:6f:93:f1:dc:16:af:b8:f9:66:0d:2c:88:ab: 8f:46:cf:24:e7:fc:0c:20:08:bb:06:f6:8f:3a:3a: c1:c4:b3:78:3f:b3:a2:88:7c:a6:ae:da:19:d8:92: ed:a1:51:b9:83:3b:93:e0:72:68:c8:2c:a2:27:97: 55:13:ad:80:58:0d:78:5c:b7:60:54:07:60:61:5e: e2:b2:3d:b3:ba:f4:68:20:61:bd:52:ad:d7:bb:8b: 21:17:d5:bc:4d:e6:32:90:64:86:d2:6e:94:8f:15: 98:ba:38:c4:e0:60:c6:e3:d7:bc:a4:c8:fa:12:4e: 77:8e:ce:6e:95:25:bc:db:84:2e:6d:04:58:b8:de: 37:5e:a4:0b:e8:0f:9b:86:6c:7a:7a:75:0c:d8:15: 28:5f:d0:db:9b:a1:20:72:e2:ac:88:22:1f:88:dc: f9:08:6c:1b:db:a8:48:85:2b:e2:39:5a:62:5a:80: e9:c8:6b:31:cf:cd:c9:de:0a:71:c9:0a:87:08:e4: dc:24:c3:3e:75:0a:c6:85:3e:16:bf:ac:54:f9:6b: 71:f0:82:05:31:46:3e:6c:d9:98:31:f1:c2:09:6c: 69:6c:08:39:1d:ae:f8:52:ba:24:60:af:2c:d4:41: 45:42:14:68:59:97:cb:09:e4:e6:44:ad:d8:cd:1f: 38:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:61:84:7E:3B:45:A6:1F:F5:7D:52:67:95:BB:4E:04:33:40:B3:93 X509v3 Authority Key Identifier: keyid:93:C0:BA:17:9A:CA:A1:C0:79:D3:3C:66:93:F4:46:70:10:4F:CD:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8C6F5rKocB50zxmk_RGcBBPzZg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:ae:6e:a1:73:b5:b9:c5:5f:7c:3e:a8:b4:36:9d:f5:da:ae: df:61:dc:e1:44:41:32:a2:c8:87:23:13:a4:4f:55:d6:85:74: 54:92:f3:7a:36:10:78:3b:54:3f:79:ea:58:df:33:e0:e5:b3: 48:6b:15:48:23:ae:48:9d:e6:8e:fe:73:6c:47:71:a1:d2:59: f0:0a:6a:a1:42:3f:76:95:77:4f:ed:04:30:b2:b6:18:be:8f: 17:97:f0:7a:73:19:29:b4:95:7b:a4:9c:bc:ae:a0:b1:ae:c8: 57:d6:26:32:da:73:e7:14:a4:5f:45:00:54:13:27:3a:6a:3d: d2:fc:4b:fc:8b:d4:39:37:f8:b0:33:c0:b6:17:99:6e:40:9d: 4e:88:dc:bd:65:68:4b:ea:ee:f5:35:1c:17:4f:51:87:e4:cb: 54:b0:3b:d7:60:b4:2e:61:ad:c5:58:28:6e:31:5a:87:3b:19: 3c:03:c9:a3:0b:ed:19:0d:2a:51:9b:d9:b6:5b:b1:04:cf:f1: 41:ca:3f:c3:3c:29:86:02:48:20:e6:24:32:84:e4:0c:9c:5c: 4e:d2:c7:a5:79:08:7a:dc:e4:1b:83:92:5c:bb:ab:a9:8b:dd: aa:48:a9:3e:a4:e4:8c:58:9f:09:b4:1b:55:68:98:63:aa:34: b1:27:dd:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTE3ODgxMTAvBgNVBAUTKDkzQzBCQTE3OUFDQUExQzA3OUQzM0M2NjkzRjQ0Njcw MTA0RkNEOTgwHhcNMjUwNDI3MDE1MTMzWhcNMjUwNTA0MDE1MTMzWjAYMRYwFAYD VQQDEw02ODBkOGRhNi00YzdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzm+T8dwWr7j5Zg0siKuPRs8k5/wMIAi7BvaPOjrBxLN4P7OiiHymrtoZ2JLt oVG5gzuT4HJoyCyiJ5dVE62AWA14XLdgVAdgYV7isj2zuvRoIGG9Uq3Xu4shF9W8 TeYykGSG0m6UjxWYujjE4GDG49e8pMj6Ek53js5ulSW824QubQRYuN43XqQL6A+b hmx6enUM2BUoX9Dbm6EgcuKsiCIfiNz5CGwb26hIhSviOVpiWoDpyGsxz83J3gpx yQqHCOTcJMM+dQrGhT4Wv6xU+Wtx8IIFMUY+bNmYMfHCCWxpbAg5Ha74UrokYK8s 1EFFQhRoWZfLCeTmRK3YzR845QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFBhhH47 RaYf9X1SZ5W7TgQzQLOTMB8GA1UdIwQYMBaAFJPAuheayqHAedM8ZpP0RnAQT82Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTc4OC8zRDA1MTVBMDU5 QUIxMUVEOEVFQkE0NTZDNEY5QUUwMi9rOEM2RjVyS29jQjUwenhta19SR2NCQlB6 WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s4QzZGNXJLb2NCNTB6eG1rX1JHY0JCUHpaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTc4OC8zRDA1MTVBMDU5QUIxMUVEOEVFQkE0NTZDNEY5QUUwMi9rOEM2RjVyS29j QjUwenhta19SR2NCQlB6WmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABrm6hc7W5xV98Pqi0Np312q7fYdzhREEyosiHIxOkT1XWhXRUkvN6 NhB4O1Q/eepY3zPg5bNIaxVII65IneaO/nNsR3Gh0lnwCmqhQj92lXdP7QQwsrYY vo8Xl/B6cxkptJV7pJy8rqCxrshX1iYy2nPnFKRfRQBUEyc6aj3S/Ev8i9Q5N/iw M8C2F5luQJ1OiNy9ZWhL6u71NRwXT1GH5MtUsDvXYLQuYa3FWChuMVqHOxk8A8mj C+0ZDSpRm9m2W7EEz/FByj/DPCmGAkgg5iQyhOQMnFxO0seleQh63OQbg5Jcu6up i92qSKk+pOSMWJ8JtBtVaJhjqjSxJ929 -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:14 2025 by rpki-client on console.sobornost.net